My favorites | Sign in
v8
Project Home Downloads Wiki Issues Source Code Search
New issue   Search
for
  Advanced search   Search tips   Subscriptions
Issue 342: ASSERTION FAILED !map_.contains(obj) in bindings
4 people starred this issue and may be notified of changes. Back to list
Status:  Fixed
Owner:  skylined@chromium.org
Closed:  Mar 2013


Sign in to add a comment
 
Project Member Reported by skylined@chromium.org, May 13, 2009
What steps will reproduce the problem?
1. Open a page in Chromium with this content "<IFRAME></IFRAME>"
2. Open "JavaScript console" (Ctrl+Shift+J)
ASSERT FAILS
webkit\port\bindings\v8\dom_wrapper_map.h:
  virtual void set(KeyType* obj, v8::Persistent<ValueType> wrapper) {
****ASSERT(!map_.contains(obj));****
    wrapper.MakeWeak(obj, weak_reference_callback_);
    map_.set(obj, *wrapper);
  }

Seems to me it is related to the contentDocument property, given this 
(partial) stack:
02fde44c 63e11fad 
chrome_63c60000!WeakReferenceMap<WebCore::Node,v8::Object>::set+0x55 
[i:\trunk\src\webkit\port\bindings\v8\dom_wrapper_map.h @ 36]
02fde46c 63e1cea4 
chrome_63c60000!WebCore::V8Proxy::SetJSWrapperForDOMNode+0x7d 
[i:\trunk\src\webkit\port\bindings\v8\v8_proxy.cpp @ 823]
02fde508 64497a52 chrome_63c60000!WebCore::V8Proxy::NodeToV8Object+0x2f4 
[i:\trunk\src\webkit\port\bindings\v8\v8_proxy.cpp @ 2952]
02fde544 646a74a0 
chrome_63c60000!WebCore::HTMLIFrameElementInternal::contentDocumentAttrGett
er+0xa2 
[i:\trunk\src\chrome\debug\obj\webcore\bindings\v8htmliframeelement.cpp @ 
212]
02fde614 646a883d 
chrome_63c60000!v8::internal::Object::GetPropertyWithCallback+0x1c0 
[i:\trunk\src\v8\src\objects.cc @ 189]
02fde6a0 647a9957 chrome_63c60000!v8::internal::Object::GetProperty+0x2dd 
[i:\trunk\src\v8\src\objects.cc @ 463]
02fde73c 647ab58b chrome_63c60000!v8::internal::LoadIC::Load+0x5c7 
[i:\trunk\src\v8\src\ic.cc @ 572]
02fde780 0343018b chrome_63c60000!v8::internal::LoadIC_Miss+0x9b 
[i:\trunk\src\v8\src\ic.cc @ 1124]
Mar 28, 2013
Project Member #1 yangguo@chromium.org
Stale issue. Probably not relevant anymore.
Status: Fixed
Sign in to add a comment

Powered by Google Project Hosting