New issue
Advanced search Search tips

Issue 789694 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: Nov 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Ill in v8::Shell::ExecuteString

Project Member Reported by ClusterFuzz, Nov 29 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=4554175466962944

Fuzzer: mbarbella_js_mutation
Job Type: linux_msan_d8
Platform Id: linux

Crash Type: Ill
Crash Address: 0x7f45a29d4903
Crash State:
  v8::Shell::ExecuteString
  v8::Worker::ExecuteInThread
  v8::base::ThreadEntry
  
Sanitizer: memory (MSAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_msan_d8&range=49716:49717

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4554175466962944

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
 
Project Member

Comment 1 by ClusterFuzz, Nov 29 2017

Labels: Test-Predator-Auto-Owner
Owner: mythria@chromium.org
Status: Assigned (was: Untriaged)
Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/v8/v8/+/5d4a090377978b881215c8575b063250a69dc406 (Add support to produce code cache after execute.).

If this is incorrect, please remove the owner and apply the Test-Predator-Wrong-CLs label.
Project Member

Comment 2 by ClusterFuzz, Nov 30 2017

ClusterFuzz has detected this issue as fixed in range 49721:49722.

Detailed report: https://clusterfuzz.com/testcase?key=4554175466962944

Fuzzer: mbarbella_js_mutation
Job Type: linux_msan_d8
Platform Id: linux

Crash Type: Ill
Crash Address: 0x7f45a29d4903
Crash State:
  v8::Shell::ExecuteString
  v8::Worker::ExecuteInThread
  v8::base::ThreadEntry
  
Sanitizer: memory (MSAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_msan_d8&range=49716:49717
Fixed: https://clusterfuzz.com/revisions?job=linux_msan_d8&range=49721:49722

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4554175466962944

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 3 by ClusterFuzz, Nov 30 2017

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 4554175466962944 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
Project Member

Comment 4 by bugdroid1@chromium.org, Dec 1 2017

The following revision refers to this bug:
  https://chromium.googlesource.com/v8/v8.git/+/dae20b0df641d7c6c3b5bbca3755c69bde236275

commit dae20b0df641d7c6c3b5bbca3755c69bde236275
Author: Mythri <mythria@chromium.org>
Date: Fri Dec 01 14:02:47 2017

Reland "Add support to produce code cache after execute"

Adds new API function to request code cache. Earlier code cache was
produced along with compile requests. This new API allows us to request
code cache after executing. Also adds support in the code serializer to
serialize after executing the script.

Bug: chromium:783124, chromium:789694 
Cq-Include-Trybots: master.tryserver.chromium.linux:linux_chromium_rel_ng
Change-Id: Id4e6a967e176e3e979dc4ccb9a37a353c70c3890
Reviewed-on: https://chromium-review.googlesource.com/797036
Reviewed-by: Yang Guo <yangguo@chromium.org>
Commit-Queue: Mythri Alle <mythria@chromium.org>
Cr-Commit-Position: refs/heads/master@{#49793}
[modify] https://crrev.com/dae20b0df641d7c6c3b5bbca3755c69bde236275/include/v8.h
[modify] https://crrev.com/dae20b0df641d7c6c3b5bbca3755c69bde236275/src/api.cc
[modify] https://crrev.com/dae20b0df641d7c6c3b5bbca3755c69bde236275/src/compiler.cc
[modify] https://crrev.com/dae20b0df641d7c6c3b5bbca3755c69bde236275/src/d8.cc
[modify] https://crrev.com/dae20b0df641d7c6c3b5bbca3755c69bde236275/src/d8.h
[modify] https://crrev.com/dae20b0df641d7c6c3b5bbca3755c69bde236275/src/objects.cc
[modify] https://crrev.com/dae20b0df641d7c6c3b5bbca3755c69bde236275/src/objects/code-inl.h
[modify] https://crrev.com/dae20b0df641d7c6c3b5bbca3755c69bde236275/src/objects/code.h
[modify] https://crrev.com/dae20b0df641d7c6c3b5bbca3755c69bde236275/src/objects/script.h
[modify] https://crrev.com/dae20b0df641d7c6c3b5bbca3755c69bde236275/src/snapshot/code-serializer.cc
[modify] https://crrev.com/dae20b0df641d7c6c3b5bbca3755c69bde236275/src/snapshot/deserializer.cc
[modify] https://crrev.com/dae20b0df641d7c6c3b5bbca3755c69bde236275/test/cctest/test-serialize.cc
[add] https://crrev.com/dae20b0df641d7c6c3b5bbca3755c69bde236275/test/mjsunit/serialize-after-execute.js

Sign in to add a comment