Skip to content

Assertion 'string_desc_p->refs > 0' failed in ecma_copy_or_ref_ecma_string #786

@renatahodovan

Description

@renatahodovan
Jerry version:
Checked revision: 2c3c952
Build: debug.linux
OS:
Ubuntu 15.10, x86_64
Test case:
try { RegExp.prototype.toString() } catch (err) {  }
try { Date.prototype.toTimeString() } catch (err) {  }
try { Boolean.prototype.toString() } catch (err) {  }
try { String.prototype.match(isNaN) } catch (err) {  }
try { Math.round(Math.atan) } catch (err) {  }
try { Date.prototype.getUTCDay() } catch (err) {  }
try { toLocaleString() } catch (err) {  }
try { Array.prototype.join(String.prototype.split) } catch (err) {  }
try { Date.prototype.getSeconds() } catch (err) {  }
try { isNaN.apply(Date.prototype.toISOString, String.prototype.split) } catch (err) {  }
try { Math.cos(Object) } catch (err) {  }
try { Math.floor(Date.prototype.getUTCSeconds) } catch (err) {  }
try { isNaN.apply(assert, JSON.stringify) } catch (err) {  }
try { Number.prototype.toLocaleString() } catch (err) {  }
try { Date.prototype.getTimezoneOffset() } catch (err) {  }
try { Date.prototype.setMinutes(Object.getOwnPropertyDescriptor,  Object.getOwnPropertyNames) } catch (err) {  }
try { Math.log(String.prototype.search) } catch (err) {  }
try { ReferenceError(Object.defineProperty) } catch (err) {  }
try { Array.prototype.filter(Number.prototype.toLocaleString) } catch (err) {  }
try { Array.prototype.forEach(Date.prototype.getDay) } catch (err) {  }
try { Object.defineProperty(SyntaxError.prototype, Date.prototype.setUTCMinutes, Math.max) } catch (err) {  }
try { Date.prototype.setMilliseconds(String.prototype.localeCompare) } catch (err) {  }
try { Math.asin(Date.prototype.getDay) } catch (err) {  }
try { Array.prototype.some(Date.prototype.getDay) } catch (err) {  }
try { String.prototype.charCodeAt(toString) } catch (err) {  }
try { isPrototypeOf(Math.tan) } catch (err) {  }
try { Object.isFrozen(print) } catch (err) {  }
try { RegExp.prototype.compile(RegExp.prototype) } catch (err) {  }
Backtrace:
ICE: Assertion 'string_desc_p->refs > 0' failed at jerryscript/jerry-core/ecma/base/ecma-helpers-string.cpp(ecma_copy_or_ref_ecma_string):724.
Error: ERR_FAILED_INTERNAL_ASSERTION

Program received signal SIGABRT, Aborted.
0x00000000004afcc5 in syscall_2_asm () at jerryscript/jerry-libc/target/linux/jerry-asm.S:32
32    SYSCALL_2
(gdb) bt
#0  0x00000000004afcc5 in syscall_2_asm () at jerryscript/jerry-libc/target/linux/jerry-asm.S:32
#1  0x00000000004003c2 in syscall_2 (syscall_no=62, arg1=7356, arg2=6)
    at jerryscript/jerry-libc/target/linux/jerry-libc-target.c:96
#2  0x0000000000400563 in abort () at jerryscript/jerry-libc/target/linux/jerry-libc-target.c:175
#3  0x0000000000437141 in jerry_fatal (code=ERR_FAILED_INTERNAL_ASSERTION) at jerryscript/jerry-core/jrt/jrt-fatals.cpp:67
#4  0x0000000000437190 in jerry_assert_fail (assertion=0x4c9691 "string_desc_p->refs > 0", 
    file=0x4c9390 "jerryscript/jerry-core/ecma/base/ecma-helpers-string.cpp", 
    function=0x4b54f0 <_ZZ28ecma_copy_or_ref_ecma_stringP13ecma_string_tE8__func__.lto_priv.712> "ecma_copy_or_ref_ecma_string", line=724)
    at jerryscript/jerry-core/jrt/jrt-fatals.cpp:99
#5  0x000000000045ad7a in ecma_copy_or_ref_ecma_string (string_desc_p=0x8e80a0 <mem_heap+3424>)
    at jerryscript/jerry-core/ecma/base/ecma-helpers-string.cpp:724
#6  0x0000000000454064 in ecma_copy_value (value=1714, do_ref_if_object=false)
    at jerryscript/jerry-core/ecma/base/ecma-helpers-value.cpp:386
#7  0x000000000045ee9c in ecma_named_data_property_assign_value (obj_p=0x8e8048 <mem_heap+3336>, prop_p=0x8e80a8 <mem_heap+3432>, value=1714)
    at jerryscript/jerry-core/ecma/base/ecma-helpers.cpp:1004
#8  0x00000000004578b5 in re_initialize_props (re_obj_p=0x8e8048 <mem_heap+3336>, source_p=0x8e80a0 <mem_heap+3424>, flags=0 '\000')
    at jerryscript/jerry-core/ecma/operations/ecma-regexp-object.cpp:149
#9  0x000000000041c6b1 in ecma_builtin_regexp_prototype_compile (this_arg=1671, pattern_arg=1671, flags_arg=4)
    at jerryscript/jerry-core/ecma/builtin-objects/ecma-builtin-regexp-prototype.cpp:143
#10 0x000000000041c2d1 in ecma_builtin_regexp_prototype_dispatch_routine (builtin_routine_id=201, this_arg_value=1671, 
    arguments_list=0x9266c0 <mem_heap+258944>, arguments_number=1)
    at jerryscript/jerry-core/ecma/builtin-objects/ecma-builtin-regexp-prototype.inc.h:90
#11 0x000000000049c691 in ecma_builtin_dispatch_routine (builtin_object_id=ECMA_BUILTIN_ID_REGEXP_PROTOTYPE, builtin_routine_id=201, this_arg_value=1671, 
    arguments_list=0x9266c0 <mem_heap+258944>, arguments_number=1)
    at jerryscript/jerry-core/ecma/builtin-objects/ecma-builtins.inc.h:163
#12 0x000000000049bd7d in ecma_builtin_dispatch_call (obj_p=0x8e8bb8 <mem_heap+6264>, this_arg_value=1671, arg_collection_p=0x8e8bd0 <mem_heap+6288>)
    at jerryscript/jerry-core/ecma/builtin-objects/ecma-builtins.cpp:555
#13 0x000000000044a4bd in ecma_op_function_call (func_obj_p=0x8e8bb8 <mem_heap+6264>, this_arg_value=1671, arg_collection_p=0x8e8bd0 <mem_heap+6288>)
    at jerryscript/jerry-core/ecma/operations/ecma-function-object.cpp:1049
#14 0x00000000004346d1 in opfunc_call_n (instr=..., frame_ctx_p=0x7fffffffcd80) at jerryscript/jerry-core/vm/opcodes.cpp:808
#15 0x00000000004a7f45 in vm_loop (frame_ctx_p=0x7fffffffcd80, run_scope_p=0x7fffffffccd0)
    at jerryscript/jerry-core/vm/vm.cpp:545
#16 0x00000000004a030f in opfunc_try_block (instr=..., frame_ctx_p=0x7fffffffcd80)
    at jerryscript/jerry-core/vm/opcodes-ecma-try-catch-finally.cpp:41
#17 0x00000000004a7f45 in vm_loop (frame_ctx_p=0x7fffffffcd80, run_scope_p=0x0) at jerryscript/jerry-core/vm/vm.cpp:545
#18 0x00000000004a81da in vm_run_from_pos (header_p=0x8e78c0 <mem_heap+1408>, start_pos=1, this_binding_value=523, lex_env_p=0x8e7760 <mem_heap+1056>, 
    is_strict=false, is_eval_code=false, arg_collection_p=0x0) at jerryscript/jerry-core/vm/vm.cpp:643
#19 0x00000000004a7c3e in vm_run_global () at jerryscript/jerry-core/vm/vm.cpp:415
#20 0x00000000004aaed9 in jerry_run () at jerryscript/jerry-core/jerry.cpp:1533
#21 0x00000000004a96b1 in main (argc=3, argv=0x7fffffffd3a8) at jerryscript/main-linux.cpp:459

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugUndesired behaviour

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions