New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.
Starred by 3 users

Issue metadata

Status: Fixed
Last visit 16 days ago
Closed: Dec 14
HW: All
NextAction: ----
OS: All
Priority: 1
Type: Bug

Sign in to add a comment

Issue 7773: Hard Crash: Check Failure in Runtime_InternalSetPrototype

Reported by, May 21 2018

Issue description

Version: 6.6.346.32
OS: Ubuntu 16.04.3 LTS
Architecture: x64

What steps will reproduce the problem?
1. run a poc.js

What is the expected output?
maybe throws stringify(?) result.

What do you see instead?
Check Failure

$ ~/v8/ poc.js
# Fatal error in , line 0
# Check failed: *function_map == function->map().
#FailureMessage Object: 0x7ffe2d5cdbc0
==== C stack trace ===============================

    /v8/ [0x55b0b27693a3]
    /v8/ [0x55b0b276896b]
    /v8/ [0x55b0b2764998]
    /v8/ [0x55b0b257db90]
Received signal 4 ILL_ILLOPN 55b0b2766c52
33 bytes View Download

Comment 1 by, May 22 2018

Components: Runtime
Labels: HW-All OS-All Priority-1
Status: Assigned (was: Untriaged)
I can repro on Chrome 68. Assigning to cbruni@ to take a look.

Comment 2 by, May 24 2018

Adding Igor too, since he wrote the check. The check seems to assert that calling setting the function name doesn't change the map.

Comment 3 by, May 24 2018

Status: Started (was: Assigned)

Comment 4 by, Jul 21 2018

 Issue 7967  has been merged into this issue.

Comment 5 by, Dec 7

Not security critical since this is a hard release crash.

Comment 6 by, Dec 14

Project Member
The following revision refers to this bug:

commit fb434f1c6cefce932542343ff096719e10d4e8ed
Author: Camillo Bruni <>
Date: Fri Dec 14 12:06:04 2018

[runtime] Fix Runtime_InternalSetPrototype

Do not set the name property on any function or classes. This is not
required as per spec #sec-__proto__-property-names-in-object-initializers.

Bug:  v8:7773 
Change-Id: Iade96573690e5b14b60434c37683f782cf9cb2cb
Reviewed-by: Igor Sheludko <>
Commit-Queue: Camillo Bruni <>
Cr-Commit-Position: refs/heads/master@{#58239}

Comment 7 by, Dec 14

Status: Fixed (was: Started)

Sign in to add a comment