Skip to content

Instantly share code, notes, and snippets.

@papandreou

papandreou/Reproduced with --verify_heap

Created April 15, 2011 23:19
Show Gist options
  • Save papandreou/922639 to your computer and use it in GitHub Desktop.
Save papandreou/922639 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gdb --args node_g --verify_heap bundleAssetsSegFault-test.js
http://gofish.dk/nodecrash/core.12216
http://gofish.dk/nodecrash/node_g
#
# Fatal error in /home/nodev8bleeding/work/node/deps/v8/src/heap.h, line 1705
# CHECK(Page::FromAddress(addr)->IsRegionDirty(addr)) failed
#
==== Stack trace ============================================
Security context: 0xb57065dd <JS Object>#0#
1: map [/home/nodev8bleeding/.local/lib/node/.npm/underscore/1.1.6/package/underscore.js:~89] (this=0xb55ee47d <JS Function>#1#,obj=0xb558fae1 <an Object>>#2#,iterator=0xb6ffffbd <JS Function>#3#,context=0xb5f86051 <undefined>)
2: arguments adaptor frame: 2->3
3: queryObjToMatcherFunction [/home/nodev8bleeding/work/assetgraph/lib/query.js:~29] (this=0xb55db815 <an Object>>#4#,queryObj=0xb558fae1 <an Object>>#2#)
4: _findBaseAssetPathForRelation [/home/nodev8bleeding/work/assetgraph/lib/AssetGraph.js:~248] (this=0xb6fa8939 <an AssetGraph>>#5#,relation=0xb463c0ad <an HTMLScript>>#6#)
5: _registerBaseAssetPath [/home/nodev8bleeding/work/assetgraph/lib/AssetGraph.js:~350] (this=0xb6fa8939 <an AssetGraph>>#5#,relation=0xb463c0ad <an HTMLScript>>#6#)
6: addRelation [/home/nodev8bleeding/work/assetgraph/lib/AssetGraph.js:340] (this=0xb6fa8939 <an AssetGraph>>#5#,relation=0xb463c0ad <an HTMLScript>>#6#,position=0xb5fa0385 <String[4]: last>,adjacentRelation=0xb5f86051 <undefined>)
7: arguments adaptor frame: 1->3
8: /* anonymous */ [/home/nodev8bleeding/work/assetgraph/lib/AssetGraph.js:415] (this=0xb5706675 <JS Global Object>#7#,relation=0xb463c0ad <an HTMLScript>>#6#)
9: arguments adaptor frame: 3->1
10: forEach [native array.js:947] (this=0xb53d3ac5 <JS array[9500]>#8#,a=0xb6fbcf01 <JS Function>#9#,b=0xb5f86051 <undefined>)
11: arguments adaptor frame: 1->2
12: clone [/home/nodev8bleeding/work/assetgraph/lib/AssetGraph.js:~409] (this=0xb53d1e51 <an AssetGraph>>#10#)
13: findAssetRenameOrderBatches [/home/nodev8bleeding/work/assetgraph/lib/transforms/renameAssetsToMD5Prefix.js:14] (this=0xb5706675 <JS Global Object>#7#,assetGraph=0xb53d1e51 <an AssetGraph>>#10#,queryObj=0xb5f86051 <undefined>)
14: renameAssetsToMD5Prefix [/home/nodev8bleeding/work/assetgraph/lib/transforms/renameAssetsToMD5Prefix.js:98] (this=0xb5706675 <JS Global Object>#7#,err=0xb5f86021 <null>,assetGraph=0xb53d1e51 <an AssetGraph>>#10#,cb=0xb53d1e2d <JS Function proceed>#11#)
15: proceed [/home/nodev8bleeding/work/assetgraph/lib/AssetGraph.js:565] (this=0xb5706675 <JS Global Object>#7#,err=0xb5f86051 <undefined>)
16: arguments adaptor frame: 0->1
17: /* anonymous */ [/home/nodev8bleeding/work/assetgraph/lib/transforms/minifyAssets.js:18] (this=0xb6fa5c6d <JS Function>#12#)
18: arguments adaptor frame: 37->0
20: /* anonymous */ [/home/nodev8bleeding/.local/lib/node/.npm/seq/0.2.4/package/index.js:100] (this=0xb6fa5c6d <JS Function>#12#)
21: arguments adaptor frame: 37->0
23: action [/home/nodev8bleeding/.local/lib/node/.npm/seq/0.2.4/package/index.js:75] (this=0xb5706675 <JS Global Object>#7#,step=3,key=0xb5f86051 <undefined>,f=0xb6fa5be9 <JS Function>#13#,g=0xb6fa5c21 <JS Function>#14#)
24: seq [/home/nodev8bleeding/.local/lib/node/.npm/seq/0.2.4/package/index.js:92] (this=0xb6e5d6d1 <an Object>>#15#,key=0xb6f46a25 <JS Function>#16#,cb=0xb5f86051 <undefined>)
25: arguments adaptor frame: 1->2
27: next [/home/nodev8bleeding/.local/lib/node/.npm/chainsaw/0.0.6/package/index.js:52] (this=0xb6e5d701 <an EventEmitter>>#17#)
28: /* anonymous */ [/home/nodev8bleeding/.local/lib/node/.npm/seq/0.2.4/package/index.js:244] (this=0xb5706675 <JS Global Object>#7#)
29: arguments adaptor frame: 2->0
30: /* anonymous */ [/home/nodev8bleeding/.local/lib/node/.npm/seq/0.2.4/package/index.js:54] (this=0xb56f34d5 <JS array[37]>#18#,err=0xb5f86051 <undefined>)
31: arguments adaptor frame: 0->1
32: _tickCallback [node.js:126] (this=0xb56b08f9 <an EventEmitter>>#19#)
==== Details ================================================
[1]: map [/home/nodev8bleeding/.local/lib/node/.npm/underscore/1.1.6/package/underscore.js:~89] (this=0xb55ee47d <JS Function>#1#,obj=0xb558fae1 <an Object>>#2#,iterator=0xb6ffffbd <JS Function>#3#,context=0xb5f86051 <undefined>) {
// heap-allocated locals
var iterator = 0xb5fc17cd <JS Function indexOf>#20#
var context = 0xb559b1e9 <an Object>>#21#
var results = 0xb5f86051 <undefined>
// expression stack (top to bottom)
[03] : 0xb561b2d1 <JS Function>#22#
[02] : -536873636
[01] : 69141771
[00] : -536873642
--------- s o u r c e c o d e ---------
function (obj, iterator, context) {? var results = [];? if (obj == null) return results;? if (nativeMap && obj.map === nativeMap) return obj.map(iterator, context);? each(obj, function(value, index, list) {? results[results.length] = iterator.call(context, value, index, list);? });? re...
-----------------------------------------
}
[2]: arguments adaptor frame: 2->3 {
// actual arguments
[00] : 0xb558fae1 <an Object>>#2#
[01] : 0xb6ffffbd <JS Function>#3#
}
[3]: queryObjToMatcherFunction [/home/nodev8bleeding/work/assetgraph/lib/query.js:~29] (this=0xb55db815 <an Object>>#4#,queryObj=0xb558fae1 <an Object>>#2#) {
// heap-allocated locals
var matchers = 0xb5f86051 <undefined>
// expression stack (top to bottom)
[05] : 0xb6ffffbd <JS Function>#3#
[04] : 0xb558fae1 <an Object>>#2#
[03] : 0xb55ee47d <JS Function>#1#
[02] : 0xb558fae1 <an Object>>#2#
[01] : 0xb55ee47d <JS Function>#1#
[00] : 0xb6ffff9d <FixedArray[6]>#23#
--------- s o u r c e c o d e ---------
function (queryObj) {? if (typeof queryObj === 'function') {? return queryObj;? }? var matchers = _.map(queryObj || {}, function (value, key) {? var valueMatcher = query.createValueMatcher(value);? return function matchPropertyValue(obj) {? return obj && valueMatcher(...
-----------------------------------------
}
[4]: _findBaseAssetPathForRelation [/home/nodev8bleeding/work/assetgraph/lib/AssetGraph.js:~248] (this=0xb6fa8939 <an AssetGraph>>#5#,relation=0xb463c0ad <an HTMLScript>>#6#) {
Program received signal SIGABRT, Aborted.
0x0012e416 in __kernel_vsyscall ()
(gdb) gcore
Saved corefile core.12216
Raw
gistfile4.txt
I've run into a pretty nasty bug in either Node, V8, or one of the C-based modules I'm using. It's somewhat reproducible -- it occurs about 40% of the times I use my optimization framework AssetGraph with a large test case. Below are some of the crashes I've seen.
I've played around with node_g a little, but I need some advice on how to proceed from here.
#
# Fatal error in /home/node4/work/node/deps/v8/src/mark-compact.cc, line 512
# CHECK(Heap::Contains(obj)) failed
#
Aborted
Raw
gistfile5.txt
#
# Fatal error in /home/node4/work/node/deps/v8/src/heap-inl.h, line 391
# CHECK(InFromSpace(object)) failed
#
program terminated
debug>
Raw
gistfile6.txt
#
# Fatal error in /home/node4/work/node/deps/v8/src/objects-inl.h, line 1746
# CHECK(object->IsSmi()) failed
#
Attempt to print stack while printing stack (double fault)
If you are lucky you may find a partial stack dump on stdout.
==== Stack trace ============================================
Security context: 0xb4f4f8d1 <JS Object>#0#
1: errorToStringDetectCycle [native messages.js:1043] (this=0xb6bd6af9 <a TypeError>>#1#)
2: toString [native messages.js:1057] (this=0xb6bd6af9 <a TypeError>>#1#)
3: FormatStackTrace [native messages.js:903] (this=0xb580a449 <JS Object>#2#,a=0xb6bd6af9 <a TypeError>>#1#,b=0xb6bd7f2d <JS array[10]>#3#)
4: FormatRawStackTrace [native messages.js:~929] (this=0xb580a449 <JS Object>#2#,a=0xb6bd6af9 <a TypeError>>#1#,b=0xb6bd70dd <JS array[40]>#4#)
5: /* anonymous */ [native messages.js:1010] (this=0xb580a449 <JS Object>#2#,a=0xb6bd6af9 <a TypeError>>#1#)
6: /* anonymous */ [native messages.js:666] (this=0xb6bd6af9 <a TypeError>>#1#)
10: reportErrorAndTerminate [/home/node4/work/assetgraph/lib/transforms/reportErrorAndTerminate.js:4] (this=0xb4f4f969 <JS Global Object>#5#,err=0xb6bd6af9 <a TypeError>>#1#,assetGraph=0xb4d271d5 <an AssetGraph>>#6#,cb=0xb4d4e4dd <JS Function proceed>#7#)
11: proceed [/home/node4/work/assetgraph/lib/AssetGraph.js:~423] (this=0xb4f4f969 <JS Global Object>#5#,err=0xb6bd6af9 <a TypeError>>#1#)
12: proceed [/home/node4/work/assetgraph/lib/AssetGraph.js:~423] (this=0xb4f4f969 <JS Global Object>#5#,err=0xb6bd6af9 <a TypeError>>#1#)
13: proceed [/home/node4/work/assetgraph/lib/AssetGraph.js:~423] (this=0xb4f4b659 <JS array[1]>#8#,err=0xb57d004d <undefined>)
14: arguments adaptor frame: 0->1
15: _tickCallback [node.js:126] (this=0xb4eeda0d <an EventEmitter>>#9#)
==== Details ================================================
[1]: errorToStringDetectCycle [native messages.js:1043] (this=0xb6bd6af9 <a TypeError>>#1#) {
// stack-allocated locals
var c = 0xb57d004d <undefined>
var a = 0xb57d9279 <String[23]: invalid_in_operator_use>
var b = 0xb57d004d <undefined>
// expression stack (top to bottom)
[09] : 0xb57d6d89 <String[7]: message>
[08] : 0xb6bd6af9 <a TypeError>>#1#
[07] : 0xb57eb485 <String[2]: : >
--------- s o u r c e c o d e ---------
function errorToStringDetectCycle(){?if(!%PushIfAbsent(visited_errors,this))throw cyclic_error_marker;?try{?var a=this.type;?if(a&&!%_CallFunction(this,"message",ObjectHasOwnProperty)){?var b=FormatMessage(%NewMessageObject(a,this.arguments));?return this.name+": "+b;?}?var c=%_CallFunction(this,"message",ObjectHasOwnProperty)??(":...
-----------------------------------------
}
[2]: toString [native messages.js:1057] (this=0xb6bd6af9 <a TypeError>>#1#) {
// stack-allocated locals
var .catch-var = 0xb57d004d <undefined>
// heap-allocated locals
var .arguments = 0xb6bd8311 <an Arguments>>#10#
var isCyclicErrorMarker = 0xb6bd8325 <JS Function isCyclicErrorMarker>#11#
var arguments = 0xb6bd8311 <an Arguments>>#10#
// expression stack (top to bottom)
--------- s o u r c e c o d e ---------
function toString(){???function isCyclicErrorMarker(a){return a===cyclic_error_marker;}??try{?return %_CallFunction(this,errorToStringDetectCycle);?}catch(e){???if(isCyclicErrorMarker(e))return'';?else throw e;?}?}
-----------------------------------------
}
[3]: FormatStackTrace [native messages.js:903] (this=0xb580a449 <JS Object>#2#,a=0xb6bd6af9 <a TypeError>>#1#,b=0xb6bd7f2d <JS array[10]>#3#) {
// stack-allocated locals
var .catch-var = 0xb57d004d <undefined>
var .catch-var = 0xb57d004d <undefined>
var .catch-var = 0xb57d004d <undefined>
var .catch-var = 0xb57d004d <undefined>
// heap-allocated locals
var .arguments = 0xb6bd8295 <an Arguments>>#12#
var d = 0xb57d004d <undefined>
var c = 0xb6bd82c9 <JS array[0]>#13#
var h = 0xb57d004d <undefined>
var g = 0xb57d004d <undefined>
var arguments = 0xb6bd8295 <an Arguments>>#12#
// expression stack (top to bottom)
[08] : 0xb6bd82c9 <JS array[0]>#13#
--------- s o u r c e c o d e ---------
function FormatStackTrace(a,b){?var c=[];?try{?c.push(a.toString());?}catch(e){?try{?c.push("<error: "+e+">");?}catch(ee){?c.push("<error>");?}?}?for(var d=0;d<b.length;d++){?var g=b[d];?var h;?try{?h=FormatSourcePosition(g);?}catch(e){?try{?h="<error: "+e+">";?}catch(ee){??h="<error>";?}?}?c.push(" at "+h);?}?return c.j...
-----------------------------------------
}
[4]: FormatRawStackTrace [native messages.js:~929] (this=0xb580a449 <JS Object>#2#,a=0xb6bd6af9 <a TypeError>>#1#,b=0xb6bd70dd <JS array[40]>#4#) {
// stack-allocated locals
var i = 0x565921 <Code>#14#
var d = 40
var j = 433
var c = 0xb6bd7f2d <JS array[10]>#3#
var h = 0xb4bc8b85 <JS Function renameAssetsToMD5Prefix>#15#
var g = 0xb4f4f969 <JS Global Object>#5#
var k = 4247
--------- s o u r c e c o d e ---------
function FormatRawStackTrace(a,b){?var c=[];?for(var d=0;d<b.length;d+=4){?var g=b[d];?var h=b[d+1];?var i=b[d+2];?var j=b[d+3];?var k=%FunctionGetPositionFor
Offset(i,j);?c.push(new CallSite(g,h,k));?}?if((%_IsFunction($Error.prepareStackTrace))){?return $Error.prepareStackTrace(a,c);?}else{?return FormatStackTrace
(a,c);?}?}
-----------------------------------------
}
[5]: /* anonymous */ [native messages.js:1010] (this=0xb580a449 <JS Object>#2#,a=0xb6bd6af9 <a TypeError>>#1#) {
--------- s o u r c e c o d e ---------
function (a){?return FormatRawStackTrace(a,d);?}
-----------------------------------------
}
[6]: /* anonymous */ [native messages.js:666] (this=0xb6bd6af9 <a TypeError>>#1#) {
// expression stack (top to bottom)
[00] : 0xb6bd7195 <JS Function>#16#
--------- s o u r c e c o d e ---------
function (){?if(d){?return g;?}?d=true;?g=c(a);?return g;?}
-----------------------------------------
}
[10]: reportErrorAndTerminate [/home/node4/work/assetgraph/lib/transforms/reportErrorAndTerminate.js:4] (this=0xb4f4f969 <JS Global Object>#5#,err=0xb6bd6af9 <a TypeError>>#1#,assetGraph=0xb4d271d5 <an AssetGraph>>#6#,cb=0xb4d4e4dd <JS Function proceed>#7#) {
// expression stack (top to bottom)
[03] : 0xb57d6d75 <String[5]: stack>
[02] : 0xb6bd6af9 <a TypeError>>#1#
[01] : 0xb4f4b32d <an Object>>#17#
[00] : 0xb4bc8bcd <JS Function reportErrorAndTerminate>#18#
--------- s o u r c e c o d e ---------Aborted
Raw
gistfile7.txt
#
# Fatal error in /home/node4/work/node/deps/v8/src/mark-compact.cc, line 106
# CHECK(previous_marked_count_ == 0) failed
#
Aborted
Raw
gistfile8.txt
#
# Fatal error in /home/node4/work/node/deps/v8/src/heap.h, line 1793
# CHECK(object->IsHeapObject()) failed
#
Raw
Reproduced with --verify_heap
#
# Fatal error in /home/node4/work/node/deps/v8/src/heap.h, line 1557
# CHECK(Page::FromAddress(addr)->IsRegionDirty(addr)) failed
#
==== Stack trace ============================================
Security context: 0xb4fbebe9 <JS Object>#0#
1: _registerBaseAssetPath [/home/node4/work/assetgraph/lib/AssetGraph.js:~350] (this=0xb65bdc31 <an AssetGraph>>#1#,relation=0xb4db66d9 <an HTMLScript>>#2#)
2: addRelation [/home/node4/work/assetgraph/lib/AssetGraph.js:340] (this=0xb65bdc31 <an AssetGraph>>#1#,relation=0xb4db66d9 <an HTMLScript>>#2#,position=0xb585883d <String[4]: last>,adjacentRelation=0xb584004d <undefined>)
3: arguments adaptor frame: 1->3
4: /* anonymous */ [/home/node4/work/assetgraph/lib/AssetGraph.js:415] (this=0xb4fbec81 <JS Global Object>#3#,relation=0xb4db66d9 <an HTMLScript>>#2#)
5: arguments adaptor frame: 3->1
6: forEach [native array.js:945] (this=0xb4c8bab5 <JS array[9500]>#4#,a=0xb65d1985 <JS Function>#5#,b=0xb584004d <undefined>)
7: arguments adaptor frame: 1->2
8: clone [/home/node4/work/assetgraph/lib/AssetGraph.js:414] (this=0xb3e26511 <an AssetGraph>>#6#)
9: findAssetRenameOrderBatches [/home/node4/work/assetgraph/lib/transforms/renameAssetsToMD5Prefix.js:14] (this=0xb4fbec81 <JS Global Object>#3#,assetGraph=0xb3e26511 <an AssetGraph>>#6#,queryObj=0xb584004d <undefined>)
10: renameAssetsToMD5Prefix [/home/node4/work/assetgraph/lib/transforms/renameAssetsToMD5Prefix.js:98] (this=0xb4fbec81 <JS Global Object>#3#,err=0xb5840021 <null>,assetGraph=0xb3e26511 <an AssetGraph>>#6#,cb=0xb3e264ed <JS Function proceed>#7#)
11: proceed [/home/node4/work/assetgraph/lib/AssetGraph.js:565] (this=0xb4fbec81 <JS Global Object>#3#,err=0xb584004d <undefined>)
12: arguments adaptor frame: 0->1
13: /* anonymous */ [/home/node4/work/assetgraph/lib/transforms/minifyAssets.js:18] (this=0xb65bb35d <JS Function>#8#)
14: arguments adaptor frame: 37->0
16: /* anonymous */ [/home/node4/.local/lib/node/.npm/seq/0.2.3/package/index.js:97] (this=0xb65bb35d <JS Function>#8#)
17: arguments adaptor frame: 37->0
19: action [/home/node4/.local/lib/node/.npm/seq/0.2.3/package/index.js:72] (this=0xb4fbec81 <JS Global Object>#3#,step=3,key=0xb584004d <undefined>,f=0xb65bb2d9 <JS Function>#9#,g=0xb65bb311 <JS Function>#10#)
20: seq [/home/node4/.local/lib/node/.npm/seq/0.2.3/package/index.js:89] (this=0xb6492d91 <an Object>>#11#,key=0xb6564e91 <JS Function>#12#,cb=0xb584004d <undefined>)
21: arguments adaptor frame: 1->2
23: next [/home/node4/.local/lib/node/.npm/chainsaw/0.0.6/package/index.js:52] (this=0xb6492dc1 <an EventEmitter>>#13#)
24: /* anonymous */ [/home/node4/.local/lib/node/.npm/seq/0.2.3/package/index.js:241] (this=0xb4fbec81 <JS Global Object>#3#)
25: arguments adaptor frame: 2->0
26: /* anonymous */ [/home/node4/.local/lib/node/.npm/seq/0.2.3/package/index.js:54] (this=0xb4fb5dbd <JS array[37]>#14#,err=0xb584004d <undefined>)
27: arguments adaptor frame: 0->1
28: _tickCallback [node.js:126] (this=0xb4f535d5 <an EventEmitter>>#15#)
==== Details ================================================
[1]: _registerBaseAssetPath [/home/node4/work/assetgraph/lib/AssetGraph.js:~350] (this=0xb65bdc31 <an AssetGraph>>#1#,relation=0xb4db66d9 <an HTMLScript>>#2#) {
// stack-allocated locals
var baseAssetPath = 0xb67ffe0d <FixedArray[6]>#16#
// heap-allocated locals
var relation = 0xb4db66d9 <an HTMLScript>>#2#
[03] : 0xb2217ef5 <SharedFunctionInfo>#17#
[02] : 0xb67ffe0d <FixedArray[6]>#16#
[01] : 0xb67fffc5 <JS array[1]>#18#
--------- s o u r c e c o d e ---------
function (relation) {? var baseAssetPath = this._findBaseAssetPathForRelation(relation);? this._baseAssetPathForRelation[relation.id] = baseAssetPath;? if (baseAssetPath.length === 0) {? this._relationsWithNoBaseAsset.push(relation);? return false;? } else {?...
-----------------------------------------
}
[2]: addRelation [/home/node4/work/assetgraph/lib/AssetGraph.js:340] (this=0xb65bdc31 <an AssetGraph>>#1#,relation=0xb4db66d9 <an HTMLScript>>#2#,position=0xb585883d <String[4]: last>,adjacentRelation=0xb584004d <undefined>) {
// stack-allocated locals
var i = 0xb584004d <undefined>
--------- s o u r c e c o d e ---------
function (relation, position, adjacentRelation) { // position and adjacentRelation are optional? if (!relation || !relation.id || !relation.isRelation) {? throw new Error("AssetGraph.addRelation: " + relation + " is not a relation");? }? if (relation.id in this.idIndex) {? ...
-----------------------------------------
}
[3]: arguments adaptor frame: 1->3 {
// actual arguments
[00] : 0xb4db66d9 <an HTMLScript>>#2#
}
[4]: /* anonymous */ [/home/node4/work/assetgraph/lib/AssetGraph.js:415] (this=0xb4fbec81 <JS Global Object>#3#,relation=0xb4db66d9 <an HTMLScript>>#2#) {
--------- s o u r c e c o d e ---------
function (relation) {? clone.addRelation(relation);? }
-----------------------------------------
}
[5]: arguments adaptor frame: 3->1 {
// actual arguments
[00] : 0xb4db66d9 <an HTMLScript>>#2#
[01] : 2812 // not passed to callee
[02] : 0xb4c8bab5 <JS array[9500]>#4# // not passed to callee
}
[6]: forEach [native array.js:945] (this=0xb4c8bab5 <JS array[9500]>#4#,a=0xb65d1985 <JS Function>#5#,b=0xb584004d <undefined>) {
// stack-allocated locals
var d = 2812
var c = 9500
var g = 0xb4db66d9 <an HTMLScript>>#2#
--------- s o u r c e c o d e ---------
function forEach(a,b){?if(!(%_IsFunction(a))){?throw MakeTypeError('called_non_callable',[a]);?}???var c=(this.length>>>0);?for(var d=0;d<c;d++){?var g=this[d];?if(!(typeof(g)==='undefined')||d in this){?a.call(b,g,d,this);?}?}?}
-----------------------------------------
}
[7]: arguments adaptor frame: 1->2 {
// actual arguments
[00] : 0xb65d1985 <JS Function>#5#
}
[8]: clone [/home/node4/work/assetgraph/lib/AssetGraph.js:414] (this=0xb3e26511 <an AssetGraph>>#6#) {
// heap-allocated localsAborted
Raw
Seccond run with gdb --args node_g --verify_heap bundleAssetsSegFault-test.js
http://gofish.dk/nodecrash/core.11977
http://gofish.dk/nodecrash/node_g
#
# Fatal error in /home/nodev8bleeding/work/node/deps/v8/src/heap.h, line 1705
# CHECK(Page::FromAddress(addr)->IsRegionDirty(addr)) failed
#
Program received signal SIGSEGV, Segmentation fault.
0x08284c66 in v8::internal::HeapObject::map_word (this=0x1) at /home/nodev8bleeding/work/node/deps/v8/src/objects-inl.h:1186
1186 return MapWord(reinterpret_cast<uintptr_t>(READ_FIELD(this, kMapOffset)));
(gdb) gcore
Saved corefile core.11977
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment