{"action":"created","issue":{"url":"https://api.github.com/repos/Microsoft/ChakraCore/issues/470","repository_url":"https://api.github.com/repos/Microsoft/ChakraCore","labels_url":"https://api.github.com/repos/Microsoft/ChakraCore/issues/470/labels{/name}","comments_url":"https://api.github.com/repos/Microsoft/ChakraCore/issues/470/comments","events_url":"https://api.github.com/repos/Microsoft/ChakraCore/issues/470/events","html_url":"https://github.com/Microsoft/ChakraCore/issues/470","id":138741713,"number":470,"title":"Access violation -- Js::DebugManager::Close+0xf","user":{"login":"bendono","id":846533,"avatar_url":"https://avatars.githubusercontent.com/u/846533?v=3","gravatar_id":"","url":"https://api.github.com/users/bendono","html_url":"https://github.com/bendono","followers_url":"https://api.github.com/users/bendono/followers","following_url":"https://api.github.com/users/bendono/following{/other_user}","gists_url":"https://api.github.com/users/bendono/gists{/gist_id}","starred_url":"https://api.github.com/users/bendono/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bendono/subscriptions","organizations_url":"https://api.github.com/users/bendono/orgs","repos_url":"https://api.github.com/users/bendono/repos","events_url":"https://api.github.com/users/bendono/events{/privacy}","received_events_url":"https://api.github.com/users/bendono/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/Microsoft/ChakraCore/labels/Bug","name":"Bug","color":"fc2929"}],"state":"closed","locked":false,"assignee":{"login":"agarwal-sandeep","id":12059066,"avatar_url":"https://avatars.githubusercontent.com/u/12059066?v=3","gravatar_id":"","url":"https://api.github.com/users/agarwal-sandeep","html_url":"https://github.com/agarwal-sandeep","followers_url":"https://api.github.com/users/agarwal-sandeep/followers","following_url":"https://api.github.com/users/agarwal-sandeep/following{/other_user}","gists_url":"https://api.github.com/users/agarwal-sandeep/gists{/gist_id}","starred_url":"https://api.github.com/users/agarwal-sandeep/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/agarwal-sandeep/subscriptions","organizations_url":"https://api.github.com/users/agarwal-sandeep/orgs","repos_url":"https://api.github.com/users/agarwal-sandeep/repos","events_url":"https://api.github.com/users/agarwal-sandeep/events{/privacy}","received_events_url":"https://api.github.com/users/agarwal-sandeep/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/Microsoft/ChakraCore/milestones/1","html_url":"https://github.com/Microsoft/ChakraCore/milestones/1.2","labels_url":"https://api.github.com/repos/Microsoft/ChakraCore/milestones/1/labels","id":1637777,"number":1,"title":"1.2","description":"ChakraCore 1.2","creator":{"login":"abchatra","id":6107272,"avatar_url":"https://avatars.githubusercontent.com/u/6107272?v=3","gravatar_id":"","url":"https://api.github.com/users/abchatra","html_url":"https://github.com/abchatra","followers_url":"https://api.github.com/users/abchatra/followers","following_url":"https://api.github.com/users/abchatra/following{/other_user}","gists_url":"https://api.github.com/users/abchatra/gists{/gist_id}","starred_url":"https://api.github.com/users/abchatra/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/abchatra/subscriptions","organizations_url":"https://api.github.com/users/abchatra/orgs","repos_url":"https://api.github.com/users/abchatra/repos","events_url":"https://api.github.com/users/abchatra/events{/privacy}","received_events_url":"https://api.github.com/users/abchatra/received_events","type":"User","site_admin":false},"open_issues":17,"closed_issues":1,"state":"open","created_at":"2016-03-10T22:02:13Z","updated_at":"2016-03-10T22:20:25Z","due_on":"2016-04-15T07:00:00Z","closed_at":null},"comments":5,"created_at":"2016-03-06T01:21:43Z","updated_at":"2016-03-10T22:20:26Z","closed_at":"2016-03-10T22:20:25Z","body":"I have ProcDump set to create full minidumps whenever a process crashes.\r\nYesterday my girlfriend was using Edge and told me that there was a problem.\r\nI do not know the problematic URL or reproduction steps.\r\nBut I checked dumps folder and sure enough one of the tabs had crashed.\r\nI can provide the dump itself, but it is 119 MB when 7Ziped.\r\n\r\nBelow is a brief analysis of the dump.\r\nLet me know if you need more details from me.\r\n\r\nEnvironment:\r\n-Windows 10 Pro\r\n-Version: 1511\r\n-OS Build: 10586.122\r\n-User account language: Japanese\r\n\r\nCheck what exception caused the crash.\r\n\r\n0:035> .lastevent\r\nLast event: 6128.5054: Access violation - code c0000005 (first/second chance not available)\r\n  debugger time: Sun Mar  6 09:49:12.504 2016 (UTC + 9:00)\r\n\r\nCheck stack.\r\n  \r\n0:035> k\r\n # Child-SP          RetAddr           Call Site\r\n00 000000a5`9ffddc28 00007ffe`f7fc3b2f ntdll!NtWaitForMultipleObjects+0x14\r\n01 000000a5`9ffddc30 00007ffe`f7fc3a2e KERNELBASE!WaitForMultipleObjectsEx+0xef\r\n02 000000a5`9ffddf30 00007ffe`f83f278f KERNELBASE!WaitForMultipleObjects+0xe\r\n03 000000a5`9ffddf70 00007ffe`f83f22a2 kernel32!WerpReportFaultInternal+0x4ab\r\n04 000000a5`9ffde520 00007ffe`f8047ef7 kernel32!WerpReportFault+0x52\r\n05 000000a5`9ffde550 00007ffe`fc28d958 KERNELBASE!UnhandledExceptionFilter+0x277\r\n06 000000a5`9ffde650 00007ffe`fc275ac6 ntdll!RtlUserThreadStart$filt$0+0x3e\r\n07 000000a5`9ffde690 00007ffe`fc289a9d ntdll!_C_specific_handler+0x96\r\n08 000000a5`9ffde700 00007ffe`fc214f29 ntdll!RtlpExecuteHandlerForException+0xd\r\n09 000000a5`9ffde730 00007ffe`fc288baa ntdll!RtlDispatchException+0x3a9\r\n0a 000000a5`9ffdee40 00007ffe`d48ff757 ntdll!KiUserExceptionDispatch+0x3a\r\n0b 000000a5`9ffdf400 00007ffe`d48b0cbd Chakra!Js::DebugManager::Close+0xf\r\n0c 000000a5`9ffdf430 00007ffe`d48b09c0 Chakra!Js::ScriptContext::InternalClose+0x2b1\r\n0d 000000a5`9ffdf480 00007ffe`d48e5243 Chakra!Js::ScriptContext::Close+0x4c\r\n0e 000000a5`9ffdf4c0 00007ffe`d48e51b7 Chakra!Js::JavascriptLibraryBase::Dispose+0x43\r\n0f 000000a5`9ffdf4f0 00007ffe`d48e4e3c Chakra!Memory::SmallHeapBlockT<MediumAllocationBlockAttributes>::ForEachAllocatedObject<<lambda_007bd2f9810c254939b0a31a694096bb> >+0xe7\r\n10 000000a5`9ffdf570 00007ffe`d487c586 Chakra!Memory::SmallFinalizableHeapBlockT<MediumAllocationBlockAttributes>::FinalizeAllObjects+0x48\r\n11 000000a5`9ffdf5b0 00007ffe`d487cd6d Chakra!Memory::SmallFinalizableHeapBucketBaseT<Memory::SmallFinalizableHeapBlockT<MediumAllocationBlockAttributes> >::FinalizeAllObjects+0x9e\r\n12 000000a5`9ffdf5e0 00007ffe`d48807df Chakra!Memory::HeapInfo::~HeapInfo+0x69\r\n13 000000a5`9ffdf630 00007ffe`d4902164 Chakra!Memory::Recycler::~Recycler+0x14b\r\n14 000000a5`9ffdf670 00007ffe`d48b5c8d Chakra!Memory::DeleteObject<Memory::HeapAllocator,Memory::Recycler>+0x18\r\n15 000000a5`9ffdf6a0 00007ffe`d48a97bc Chakra!ThreadContext::~ThreadContext+0x169\r\n16 000000a5`9ffdf710 00007ffe`d4b4f35b Chakra!Memory::DeleteObject<Memory::HeapAllocator,ThreadContext>+0x18\r\n17 000000a5`9ffdf740 00007ffe`d4a422f2 Chakra!ThreadBoundThreadContextManager::DestroyContextAndEntryForCurrentThread+0x10cfe7\r\n18 000000a5`9ffdf780 00007ffe`d4aed356 Chakra!ChakraDllMain+0x72\r\n19 000000a5`9ffdf7b0 00007ffe`ccd48a1b Chakra!__DllMainCRTStartup+0x102\r\n1a 000000a5`9ffdf920 00007ffe`ccd48ae3 eShims!CShimBindings::DllMainHook+0x11b\r\n1b 000000a5`9ffdf990 00007ffe`fc1f5208 eShims!CShimBindings::s_DllMainHook+0x73\r\n1c 000000a5`9ffdf9e0 00007ffe`fc1f2b31 ntdll!LdrpCallInitRoutine+0x4c\r\n1d 000000a5`9ffdfa40 00007ffe`fc23c5ee ntdll!LdrShutdownThread+0x151\r\n1e 000000a5`9ffdfb40 00007ffe`f840810a ntdll!RtlExitUserThread+0x3e\r\n1f 000000a5`9ffdfb80 00007ffe`fc23c574 kernel32!BaseThreadInitThunk+0x2a\r\n20 000000a5`9ffdfbb0 00000000`00000000 ntdll!RtlUserThreadStart+0x34\r\n\r\nRewind context to time of exception.\r\n\r\n0:035> .ecxr\r\nrax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000\r\nrdx=000002a4fd9381a0 rsi=000002a4fd9381a0 rdi=000002a4fd937950\r\nrip=00007ffed48ff757 rsp=000000a59ffdf400 rbp=0000029c974da0e8\r\n r8=0000029c94bfe044  r9=0000000000000000 r10=0000029cd2570110\r\nr11=000000a59ffdf370 r12=0000000000006000 r13=000000a59ffdf590\r\nr14=0000000000000000 r15=0000000000000180\r\niopl=0         nv up ei pl nz na po nc\r\ncs=0033  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00010206\r\nChakra!Js::DebugManager::Close+0xf:\r\n00007ffe`d48ff757 48837b1800      cmp     qword ptr [rbx+18h],0 ds:00000000`00000018=????????????????\r\n\r\nCheck stack again.\r\n\r\n0:035> k\r\n  *** Stack trace for last set context - .thread/.cxr resets it\r\n # Child-SP          RetAddr           Call Site\r\n00 000000a5`9ffdf400 00007ffe`d48b0cbd Chakra!Js::DebugManager::Close+0xf\r\n01 000000a5`9ffdf430 00007ffe`d48b09c0 Chakra!Js::ScriptContext::InternalClose+0x2b1\r\n02 000000a5`9ffdf480 00007ffe`d48e5243 Chakra!Js::ScriptContext::Close+0x4c\r\n03 000000a5`9ffdf4c0 00007ffe`d48e51b7 Chakra!Js::JavascriptLibraryBase::Dispose+0x43\r\n04 000000a5`9ffdf4f0 00007ffe`d48e4e3c Chakra!Memory::SmallHeapBlockT<MediumAllocationBlockAttributes>::ForEachAllocatedObject<<lambda_007bd2f9810c254939b0a31a694096bb> >+0xe7\r\n05 000000a5`9ffdf570 00007ffe`d487c586 Chakra!Memory::SmallFinalizableHeapBlockT<MediumAllocationBlockAttributes>::FinalizeAllObjects+0x48\r\n06 000000a5`9ffdf5b0 00007ffe`d487cd6d Chakra!Memory::SmallFinalizableHeapBucketBaseT<Memory::SmallFinalizableHeapBlockT<MediumAllocationBlockAttributes> >::FinalizeAllObjects+0x9e\r\n07 000000a5`9ffdf5e0 00007ffe`d48807df Chakra!Memory::HeapInfo::~HeapInfo+0x69\r\n08 000000a5`9ffdf630 00007ffe`d4902164 Chakra!Memory::Recycler::~Recycler+0x14b\r\n09 000000a5`9ffdf670 00007ffe`d48b5c8d Chakra!Memory::DeleteObject<Memory::HeapAllocator,Memory::Recycler>+0x18\r\n0a 000000a5`9ffdf6a0 00007ffe`d48a97bc Chakra!ThreadContext::~ThreadContext+0x169\r\n0b 000000a5`9ffdf710 00007ffe`d4b4f35b Chakra!Memory::DeleteObject<Memory::HeapAllocator,ThreadContext>+0x18\r\n0c 000000a5`9ffdf740 00007ffe`d4a422f2 Chakra!ThreadBoundThreadContextManager::DestroyContextAndEntryForCurrentThread+0x10cfe7\r\n0d 000000a5`9ffdf780 00007ffe`d4aed356 Chakra!ChakraDllMain+0x72\r\n0e 000000a5`9ffdf7b0 00007ffe`ccd48a1b Chakra!__DllMainCRTStartup+0x102\r\n0f 000000a5`9ffdf920 00007ffe`ccd48ae3 eShims!CShimBindings::DllMainHook+0x11b\r\n10 000000a5`9ffdf990 00007ffe`fc1f5208 eShims!CShimBindings::s_DllMainHook+0x73\r\n11 000000a5`9ffdf9e0 00007ffe`fc1f2b31 ntdll!LdrpCallInitRoutine+0x4c\r\n12 000000a5`9ffdfa40 00007ffe`fc23c5ee ntdll!LdrShutdownThread+0x151\r\n13 000000a5`9ffdfb40 00007ffe`f840810a ntdll!RtlExitUserThread+0x3e\r\n14 000000a5`9ffdfb80 00007ffe`fc23c574 kernel32!BaseThreadInitThunk+0x2a\r\n15 000000a5`9ffdfbb0 00000000`00000000 ntdll!RtlUserThreadStart+0x34\r\n\r\nThere was an access violation in Chakra!Js::DebugManager::Close+0xf.\r\nCheck version of Chakra.\r\n\r\n0:035> lm v m Chakra\r\nBrowse full module list\r\nstart             end                 module name\r\n00007ffe`d4870000 00007ffe`d4ff4000   Chakra     (pdb symbols)          c:\\symbols\\cache\\ch\\chakra.pdb\\E97A87B535714A1CA79B7D73129BF5001\\chakra.pdb\r\n    Loaded symbol image file: Chakra.dll\r\n    Image path: C:\\Windows\\System32\\Chakra.dll\r\n    Image name: Chakra.dll\r\n    Browse all global symbols  functions  data\r\n    Timestamp:        Wed Jan 27 13:38:06 2016 (56A849AE)\r\n    CheckSum:         0077EE94\r\n    ImageSize:        00784000\r\n    File version:     11.0.10586.103\r\n    Product version:  11.0.10586.103\r\n    File flags:       0 (Mask 3F)\r\n    File OS:          40004 NT Win32\r\n    File type:        2.0 Dll\r\n    File date:        00000000.00000000\r\n    Translations:     0409.04b0\r\n    CompanyName:      Microsoft Corporation\r\n    ProductName:      Internet Explorer\r\n    InternalName:     chakra.dll\r\n    OriginalFilename: chakra.dll\r\n    ProductVersion:   11.00.10586.103\r\n    FileVersion:      11.00.10586.103 (th2_release.160126-1819)\r\n    FileDescription:  Microsoft ® JScript\r\n    LegalCopyright:   © Microsoft Corporation. All rights reserved.\r\n\r\nUnscramble Chakra!Js::DebugManager::Close\r\n\r\n0:035> uf Chakra!Js::DebugManager::Close\r\nChakra!Js::DebugManager::Close:\r\n00007ffe`d48ff748 48894c2408      mov     qword ptr [rsp+8],rcx\r\n00007ffe`d48ff74d 53              push    rbx\r\n00007ffe`d48ff74e 4883ec20        sub     rsp,20h\r\n00007ffe`d48ff752 488b5c2430      mov     rbx,qword ptr [rsp+30h]\r\n00007ffe`d48ff757 48837b1800      cmp     qword ptr [rbx+18h],0\r\n00007ffe`d48ff75c c683a400000001  mov     byte ptr [rbx+0A4h],1\r\n00007ffe`d48ff763 0f857f4f2600    jne     Chakra!Js::DebugManager::Close+0x264fa0 (00007ffe`d4b646e8)  Branch\r\n\r\nChakra!Js::DebugManager::Close+0x21:\r\n00007ffe`d48ff769 4883632000      and     qword ptr [rbx+20h],0\r\n00007ffe`d48ff76e 4883c420        add     rsp,20h\r\n00007ffe`d48ff772 5b              pop     rbx\r\n00007ffe`d48ff773 c3              ret\r\n\r\nChakra!Js::DebugManager::Close+0x264fa0:\r\n00007ffe`d4b646e8 488b4b20        mov     rcx,qword ptr [rbx+20h]\r\n00007ffe`d4b646ec 4533c0          xor     r8d,r8d\r\n00007ffe`d4b646ef 488b5318        mov     rdx,qword ptr [rbx+18h]\r\n00007ffe`d4b646f3 488b89b0060000  mov     rcx,qword ptr [rcx+6B0h]\r\n00007ffe`d4b646fa e891caf1ff      call    Chakra!Memory::Recycler::RootRelease (00007ffe`d4a81190)\r\n00007ffe`d4b646ff 4883631800      and     qword ptr [rbx+18h],0\r\n00007ffe`d4b64704 e960b0d9ff      jmp     Chakra!Js::DebugManager::Close+0x21 (00007ffe`d48ff769)  Branch\r\n\r\nCheck instruction pointer.\r\n\r\n0:035> r @rip\r\nLast set context:\r\nrip=00007ffed48ff757\r\n\r\nAccess violation occurred at here:\r\n00007ffe`d48ff757 48837b1800      cmp     qword ptr [rbx+18h],0\r\n\r\nCheck RBX.\r\n\r\n0:035> r @rbx\r\nLast set context:\r\nrbx=0000000000000000\r\n\r\nSure enough, it is null, so it is trying to dereference a null pointer.\r\nI don't know anything about the Chakra project, but a quick look at the code for DebugManager::Close suggests that [this->diagnosticPageAllocator](https://github.com/Microsoft/ChakraCore/blob/8567cfe6c1861a93af8ea0c67308d2ffe1a1f5f9/lib/Runtime/Debug/DebugManager.cpp#L35) may be null.\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/Microsoft/ChakraCore/issues/comments/195076987","html_url":"https://github.com/Microsoft/ChakraCore/issues/470#issuecomment-195076987","issue_url":"https://api.github.com/repos/Microsoft/ChakraCore/issues/470","id":195076987,"user":{"login":"agarwal-sandeep","id":12059066,"avatar_url":"https://avatars.githubusercontent.com/u/12059066?v=3","gravatar_id":"","url":"https://api.github.com/users/agarwal-sandeep","html_url":"https://github.com/agarwal-sandeep","followers_url":"https://api.github.com/users/agarwal-sandeep/followers","following_url":"https://api.github.com/users/agarwal-sandeep/following{/other_user}","gists_url":"https://api.github.com/users/agarwal-sandeep/gists{/gist_id}","starred_url":"https://api.github.com/users/agarwal-sandeep/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/agarwal-sandeep/subscriptions","organizations_url":"https://api.github.com/users/agarwal-sandeep/orgs","repos_url":"https://api.github.com/users/agarwal-sandeep/repos","events_url":"https://api.github.com/users/agarwal-sandeep/events{/privacy}","received_events_url":"https://api.github.com/users/agarwal-sandeep/received_events","type":"User","site_admin":false},"created_at":"2016-03-10T22:20:25Z","updated_at":"2016-03-10T22:20:25Z","body":"Closing issue as fixed by commit 1da8b0b8d62f9820ffbc88de759b401a0f572b5f"}}