Comment #24 on issue 17032 by christian.plesner.hansen: Crash - v8::internal::SetProperty(v8::internal::Handle<v8::internal::JSObject>,v8::internal::Handle<v8::internal::String>,v8::internal::Handle<v8::internal::Object>,PropertyAttributes) http://code.google.com/p/chromium/issues/detail?id=17032
Here are the heap stats from one of these crashes. They look really strange (what's going on with the zeroes?). Local var @ 0x2ee514 Type v8::internal::HeapStats +0x000 new_space_size : 251452321 +0x004 new_space_capacity : 0 +0x008 old_pointer_space_size : 3073464 +0x00c old_pointer_space_capacity : 3073372 +0x010 old_data_space_size : 0 +0x014 old_data_space_capacity : 251419721 +0x018 code_space_size : 19012369 +0x01c code_space_capacity : 3073281 +0x020 map_space_size : 0 +0x024 map_space_capacity : 1646596919 +0x028 cell_space_size : -1464054604 +0x02c cell_space_capacity : 251452321 +0x030 lo_space_size : 0 +0x034 global_handle_count : 1646598016 +0x038 weak_global_handle_count : 3073460 +0x03c pending_global_handle_count : 3073448 +0x040 near_death_global_handle_count : 0 +0x044 destroyed_global_handle_count : 3073420 If the numbers we get from the latest incarnation of this code, the one that uses local variables, also look strange we may want to consider adding some checksums etc. to check if these really are the values being stored. -- You received this message because you are listed in the owner or CC fields of this issue, or because you starred this issue. You may adjust your issue notification preferences at: http://code.google.com/hosting/settings -- Automated mail from issue updates at http://crbug.com/ Subscription options: http://groups.google.com/group/chromium-bugs