New issue
Advanced search Search tips

Issue 751034 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 728979
Owner:
Closed: Dec 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 1
Type: Bug

Blocked on:
issue 729299



Sign in to add a comment

Stack-overflow in v8::internal::KeyedStoreIC::Store

Project Member Reported by ClusterFuzz, Aug 1 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5504673267318784

Fuzzer: v8_builtins_generator
Job Type: windows_asan_d8
Platform Id: windows

Crash Type: Stack-overflow
Crash Address: 0x07152000
Crash State:
  v8::internal::KeyedStoreIC::Store
  v8::internal::Runtime_KeyedStoreIC_Miss
  v8::internal::Invoke
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=windows_asan_d8&range=490630:490712

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5504673267318784


Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
 
Blockedon: 729299
Cc: clemensh@chromium.org
Owner: mstarzinger@chromium.org
Status: Assigned (was: Untriaged)
And another stack overflow on windows with ASan.
I see that some of the older issues on this are now fixed & verified, but I guess we still don't have a general solution?
Project Member

Comment 2 by ClusterFuzz, Oct 1 2017

Components: Blink>JavaScript>Runtime
Labels: Test-Predator-AutoComponents
Automatically applying components based on information from OWNERS files. If this seems incorrect, please apply the Test-Predator-Wrong-Components label.
Labels: -Test-Predator-AutoComponents Test-Predator-Auto-Components
Mergedinto: 728979
Status: Duplicate (was: Assigned)
Dunno why this is reported as "v8::internal::KeyedStoreIC::Store", looking at the CF report the top two stack trace entries are actually:

#0 0x31d7898 in _alloca_probe misc/i386/chkstk.asm:98
#1 0x145cb8f in v8::internal::compiler::CodeGenerator::AssembleInstruction(class v8::internal::compiler::Instruction *,class v8::internal::compiler::InstructionBlock const *) compiler/code-generator.cc:485:26

which makes this a dupe.
Project Member

Comment 5 by ClusterFuzz, Dec 3

Labels: -Reproducible Unreproducible
ClusterFuzz testcase 5504673267318784 appears to be flaky, updating reproducibility label.

Sign in to add a comment