New issue
Advanced search Search tips

Issue 806187 link

Starred by 1 user

Issue metadata

Status: Fixed
Owner:
Closed: Jan 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 1
Type: Bug

Blocking:
issue 805326



Sign in to add a comment

HTMLObjectElement.idl should have HTMLConstruct extend attribute

Project Member Reported by yosin@chromium.org, Jan 26 2018

Issue description

When adding [HTMLConstruct] to HTMLObjectElement.idl, we get following crash
with LayoutTests/external/wpt/custom-elements/builtin-coverage.html

#
# Fatal error in ../../v8\src/api.h, line 354
# Debug check failed: that == nullptr || (*reinterpret_cast<v8::internal::Object* const*>(that))->IsJSReceiver().
#
Backtrace:
        base::debug::StackTrace::StackTrace [0x100B8838+104] (C:\src\w\cr\src\base\debug\stack_trace_win.cc:286)
        base::debug::StackTrace::StackTrace [0x100B73F3+35] (C:\src\w\cr\src\base\debug\stack_trace.cc:199)
        gin::`anonymous namespace'::PrintStackTrace [0x093E61BF+31] (C:\src\w\cr\src\gin\v8_platform.cc:30)
        V8_Fatal [0x18BCAF8B+107] (C:\src\w\cr\src\v8\src\base\logging.cc:135)
        v8::base::`anonymous namespace'::DefaultDcheckHandler [0x18BCACF6+22]
        v8::Object::HasOwnProperty [0x094D6E16+342] (C:\src\w\cr\src\v8\src\api.cc:4857)
        blink::`anonymous namespace'::GetScriptableObjectProperty<blink::V8HTMLObjectElement> [0x0A9A766D+541] (C:\src\w\cr\src\third_party\WebKit\Source\bindings\core\v8\custom\V8HTMLPlugInElementCustom.cpp:68)
        blink::V8HTMLObjectElement::namedPropertyGetterCustom [0x0A9A7432+82] (C:\src\w\cr\src\third_party\WebKit\Source\bindings\core\v8\custom\V8HTMLPlugInElementCustom.cpp:133)
        blink::V8HTMLObjectElement::namedPropertyGetterCallback [0x0D4B95D8+216] (C:\src\w\cr\src\out\debug\gen\blink\bindings\core\v8\V8HTMLObjectElement.cpp:961)
        v8::internal::PropertyCallbackArguments::BasicCallNamedGetterCallback [0x09C93A18+392] (C:\src\w\cr\src\v8\src\api-arguments-inl.h:108)
        v8::internal::PropertyCallbackArguments::CallNamedGetter [0x09C936FD+237] (C:\src\w\cr\src\v8\src\api-arguments-inl.h:85)
        v8::internal::`anonymous namespace'::GetPropertyWithInterceptorInternal [0x09DAF0EE+366] (C:\src\w\cr\src\v8\src\objects.cc:1858)
        v8::internal::JSObject::GetPropertyWithInterceptor [0x09DA953C+60] (C:\src\w\cr\src\v8\src\objects.cc:15753)
        v8::internal::Object::GetProperty [0x09DA8EDE+78] (C:\src\w\cr\src\v8\src\objects.cc:1124)
        v8::internal::LoadIC::Load [0x09C7A193+723] (C:\src\w\cr\src\v8\src\ic\ic.cc:461)
        v8::internal::__RT_impl_Runtime_LoadIC_Miss [0x09C89FD1+321] (C:\src\w\cr\src\v8\src\ic\ic.cc:2083)
        v8::internal::Runtime_LoadIC_Miss [0x09C89BF7+199] (C:\src\w\cr\src\v8\src\ic\ic.cc:2066)
 

Comment 1 by yosin@chromium.org, Jan 26 2018

Blocking: 805326

Comment 2 by tkent@chromium.org, Jan 31 2018

Owner: tkent@chromium.org
Status: Started (was: Available)

Comment 4 by tkent@chromium.org, Jan 31 2018

Status: Fixed (was: Started)

Sign in to add a comment