Put more information to the stack when crbug/454297 happens.

src/heap/mark-compact.cc

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/v8.h"
 
 #include "src/base/atomicops.h"
 #include "src/base/bits.h"
 #include "src/code-stubs.h"
 #include "src/compilation-cache.h"
@@ skipping 2809 matching lines @@
   static void CheckLayoutDescriptorAndDie(Heap* heap, Object** slot);
 
   Heap* heap_;
 };
 
 
 #if V8_TARGET_ARCH_64_BIT
 // TODO(ishell): remove, once crbug/454297 is caught.
 void PointersUpdatingVisitor::CheckLayoutDescriptorAndDie(Heap* heap,
                                                           Object** slot) {
-  const int kDataBufferSize = 1280;
+  const int kDataBufferSize = 128;
   uintptr_t data[kDataBufferSize] = {0};
   int index = 0;
   data[index++] = 0x10aaaaaaaaUL;  // begin marker
+
+  data[index++] = reinterpret_cast<uintptr_t>(slot);
+  data[index++] = 0x15aaaaaaaaUL;
+
   Address slot_address = reinterpret_cast<Address>(slot);
 
   uintptr_t space_owner_id = 0xb001;
   if (heap->new_space()->ToSpaceContains(slot_address)) {
     space_owner_id = 1;
   } else if (heap->new_space()->FromSpaceContains(slot_address)) {
     space_owner_id = 2;
   } else if (heap->old_pointer_space()->ContainsSafe(slot_address)) {
     space_owner_id = 3;
   } else if (heap->old_data_space()->ContainsSafe(slot_address)) {
@@ skipping 11 matching lines @@
     space_owner_id = 9;
   }
   data[index++] = space_owner_id;
   data[index++] = 0x20aaaaaaaaUL;
 
   // Find map word lying near before the slot address (usually the map word is
   // at -3 words from the slot but just in case we look up further.
   Object** map_slot = slot;
   bool found = false;
   const int kMaxDistanceToMap = 64;
-  for (int i = 0; i < kMaxDistanceToMap; i++, map_slot -= kPointerSize) {
+  for (int i = 0; i < kMaxDistanceToMap; i++, map_slot--) {
     Address map_address = reinterpret_cast<Address>(*map_slot);
     if (heap->map_space()->ContainsSafe(map_address)) {
       found = true;
       break;
     }
   }
   data[index++] = found;
   data[index++] = 0x30aaaaaaaaUL;
+  data[index++] = reinterpret_cast<uintptr_t>(map_slot);
+  data[index++] = 0x35aaaaaaaaUL;
+
   if (found) {
     Address obj_address = reinterpret_cast<Address>(map_slot);
     Address end_of_page =
         reinterpret_cast<Address>(Page::FromAddress(obj_address)) +
         Page::kPageSize;
     Address end_address =
         Min(obj_address + kPointerSize * kMaxDistanceToMap, end_of_page);
     int size = static_cast<int>(end_address - obj_address);
     data[index++] = size / kPointerSize;
     data[index++] = 0x40aaaaaaaaUL;
@@ skipping 1534 matching lines @@
   SlotsBuffer* buffer = *buffer_address;
   while (buffer != NULL) {
     SlotsBuffer* next_buffer = buffer->next();
     DeallocateBuffer(buffer);
     buffer = next_buffer;
   }
   *buffer_address = NULL;
 }
 }
 }  // namespace v8::internal