Bug#597784: libv8-2.2.24: Segfault after errorious input using nodejs

2010-09-24 Thread Jérémy Lal
It seems it is a nodejs bug, see
http://groups.google.com/group/nodejs/browse_thread/thread/a7e5db68d4cd6356?hl=en

Reassigning.

Cheers,
Jérémy.



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#597784: libv8-2.2.24: Segfault after errorious input using nodejs

2010-09-24 Thread Jérémy Lal
An even simpler code snippet :
new process.binding('evals').Script("a");

then wait several seconds doing nothing : segfault.

The fact one has to wait might be a sign it's a gc bug,
or a nodejs bug.



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#597784: libv8-2.2.24: Segfault after errorious input using nodejs

2010-09-23 Thread Jérémy Lal
Confirmed,
i checked with latest v8 2.2.24.24 and, though it happens after many
more inputs, it reproduces too.
I'm going to check of this happens on the 2.3 branch.

Jérémy.



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#597784: libv8-2.2.24: Segfault after errorious input using nodejs

2010-09-22 Thread Carl Fürstenberg
Package: libv8-2.2.24
Version: 2.2.24-5
Severity: normal
Tags: upstream

I accidentally wrote a javascript snipped with an errorious content;
though what I noticed was that nodejs suddenly segfaulted.

I've broken down the code to a snipped, that when ran manually in
nodejs shell (segtest.js) a segfault occurs. (havn't been able to pin
down a fully runnable file that will segfault)
Sometimes the last line has to be repeated some times for
the segfault to occur.

A full backtrace is also attached.

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=sv_SE.UTF-8, LC_CTYPE=sv_SE.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to sv_SE.UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libv8-2.2.24 depends on:
ii  libc6 2.11.2-2   Embedded GNU C Library: Shared lib
ii  libgcc1   1:4.4.4-9  GCC support library
ii  libstdc++64.4.4-9The GNU Standard C++ Library v3

libv8-2.2.24 recommends no packages.

libv8-2.2.24 suggests no packages.

-- no debconf information

*** segtest.js
var fs = require('fs');
var source, sandbox, script, result, files;
source = "function f(){};";
sandbox = {};
script = new process.binding('evals').Script(source);
script = new process.binding('evals').Script(source);

*** backtrace
[New Thread 2931]
Core was generated by `nodejs'.
Program terminated with signal 11, Segmentation fault.
#0  v8::internal::Map::instance_type () at src/objects-inl.h:2135
in src/objects-inl.h

Thread 1 (Thread 2931):
#0  v8::internal::Map::instance_type () at src/objects-inl.h:2135
#1  v8::internal::HeapObject::SizeFromMap () at src/objects-inl.h:2095
#2  v8::internal::HeapObject::Size () at src/objects-inl.h:1079
#3  v8::internal::HeapObjectIterator::FromCurrentPage () at src/spaces.h:764
#4  v8::internal::HeapObjectIterator::next () at src/spaces.h:747
#5  v8::internal::Heap::FlushCode () at src/heap.cc:2502
#6  0xb733d6ad in v8::internal::Heap::PerformGarbageCollection 
(space=v8::internal::OLD_POINTER_SPACE, 
collector=v8::internal::MARK_COMPACTOR, tracer=0xbfdb2b70) at 
src/heap.cc:641
#7  0xb733d9dd in v8::internal::Heap::CollectGarbage (requested_size=0, 
space=v8::internal::OLD_POINTER_SPACE)
at src/heap.cc:416
#8  0xb733dfd6 in v8::internal::Heap::CollectAllGarbage 
(force_compaction=false) at src/heap.cc:384
#9  0xb733e1d1 in v8::internal::Heap::IdleNotification () at src/heap.cc:3470
#10 0xb74af594 in v8::internal::V8::IdleNotification () at src/v8.cc:200
#11 0xb72b8194 in v8::V8::IdleNotification () at src/api.cc:3190
#12 0x080563e7 in ?? ()
#13 0xb76e1934 in ev_invoke_pending () from /usr/lib/libev.so.3
#14 0xb76e6f34 in ev_loop () from /usr/lib/libev.so.3
#15 0x08056070 in ?? ()
#16 0xb72e444a in HandleApiCallHelper (args=...) at src/builtins.cc:972
#17 Builtin_HandleApiCall (args=...) at src/builtins.cc:989
#18 0xb4fa806e in ?? ()
#19 0xb4fc5aef in ?? ()
#20 0xb4fa8c1b in ?? ()
#21 0xb4fa82c2 in ?? ()
#22 0xb7305eb9 in Invoke (construct=, func=..., 
receiver=..., argc=1, args=0xbfdb5158, 
has_pending_exception=0xbfdb308f) at src/execution.cc:94
#23 0xb7306428 in v8::internal::Execution::Call (func=..., receiver=..., 
argc=1, args=0xbfdb5158, 
pending_exception=0xbfdb308f) at src/execution.cc:121
#24 0xb72cd5aa in v8::Function::Call (this=0x9549324, recv=..., argc=1, 
argv=0xbfdb5158) at src/api.cc:2778
#25 0x08057c85 in ?? ()
#26 0x0805824c in main ()



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org