René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Crash in V8 GC on v24.x and earlier","articleBody":"### Version\n\n24.10.0\n\n### Platform\n\n```text\nDarwin HQX-LGM9L426J5 25.2.0 Darwin Kernel Version 25.2.0: Tue Nov 18 21:09:40 PST 2025; root:xnu-12377.61.12~1/RELEASE_ARM64_T6000 arm64\n```\n\n### Subsystem\n\nGC, from the looks of it, maybe vm\n\n### What steps will reproduce the bug?\n\nIt's unfortunately not trivially reproducible. We see this ~1/10 times running our un-cached build runner, primarily while executing tests (which use a combination of worker threads and the vm module)\n\n### How often does it reproduce? Is there a required condition?\n\nAs stated above, something like 1/10 times.\n\n### What is the expected behavior? Why is that the expected behavior?\n\nNo segfault.\n\n### What do you see instead?\n\n```\nPID 22412 received SIGSEGV for address: 0xe\n0   segfault-handler.node               0x0000000109630ee4 _ZL16segfault_handleriP9__siginfoPv + 288\n1   libsystem_platform.dylib            0x0000000181a67744 _sigtramp + 56\n2   node                                0x00000001029e0280 _ZN2v88internal35ClearStaleLeftTrimmedPointerVisitor17VisitRootPointersENS0_4RootEPKcNS0_14FullObjectSlotES5_ + 80\n3   node                                0x00000001029278e4 _ZNK2v88internal13InternalFrame7IterateEPNS0_11RootVisitorE + 240\n4   node                                0x000000010292cbf8 _ZN2v88internal7Isolate7IterateEPNS0_11RootVisitorEPNS0_14ThreadLocalTopE + 364\n5   node                                0x00000001029e04ac _ZN2v88internal4Heap12IterateRootsEPNS0_11RootVisitorENS_4base7EnumSetINS0_8SkipRootEiEENS1_16IterateRootsModeE + 460\n6   node                                0x00000001029fefe4 _ZN2v88internal20MarkCompactCollector9MarkRootsEPNS0_11RootVisitorE + 56\n7   node                                0x00000001029fa96c _ZN2v88internal20MarkCompactCollector15MarkLiveObjectsEv + 968\n8   node                                0x00000001029fa514 _ZN2v88internal20MarkCompactCollector14CollectGarbageEv + 128\n9   node                                0x00000001029d94e8 _ZN2v88internal4Heap11MarkCompactEv + 420\n10  node                                0x00000001029d8e50 _ZN2v88internal4Heap24PerformGarbageCollectionENS0_16GarbageCollectorENS0_23GarbageCollectionReasonEPKc + 824\n11  node                                0x00000001029eb8c4 _ZZN2v88internal4Heap14CollectGarbageENS0_15AllocationSpaceENS0_23GarbageCollectionReasonENS_15GCCallbackFlagsEENK3$_1clEv + 1188\n12  node                                0x00000001029eb408 _ZN4heap4base5Stack24SetMarkerAndCallbackImplIZN2v88internal4Heap14CollectGarbageENS4_15AllocationSpaceENS4_23GarbageCollectionReasonENS3_15GCCallbackFlagsEE3$_1EEvPS1_PvPKv + 40\n13  node                                0x00000001033a09e4 PushAllRegistersAndIterateStack + 40\n14  node                                0x00000001029d5248 _ZN2v88internal4Heap14CollectGarbageENS0_15AllocationSpaceENS0_23GarbageCollectionReasonENS_15GCCallbackFlagsE + 748\n15  node                                0x000000010294d124 _ZN2v88internal10StackGuard16HandleInterruptsENS1_14InterruptLevelE + 504\n16  node                                0x0000000102e3a19c _ZN2v88internal25Runtime_StackGuardWithGapEiPmPNS0_7IsolateE + 312\n17  node                                0x0000000103491f74 Builtins_CEntry_Return1_ArgvOnStack_NoBuiltinExit + 84\n18  node                                0x00000001033f5934 Builtins_BaselineOutOfLinePrologue + 116\n19  ???                                 0x00000003205419b8 0x0 + 13427284408\n20  ???                                 0x0000000320541bc0 0x0 + 13427284928\n21  ???                                 0x00000003206e4504 0x0 + 13428999428\n22  node                                0x00000001033f4bec Builtins_InterpreterEntryTrampoline + 268\n23  ???                                 0x000000032048b6f0 0x0 + 13426538224\n24  ???                                 0x000000032048c9e4 0x0 + 13426543076\n25  ???                                 0x000000032048d328 0x0 + 13426545448\n26  ???                                 0x0000000320433be8 0x0 + 13426179048\n27  ???                                 0x00000003201fddf8 0x0 + 13423861240\n28  ???                                 0x00000003201fe22c 0x0 + 13423862316\n29  ???                                 0x00000003201fe474 0x0 + 13423862900\n30  ???                                 0x00000003204e32c0 0x0 + 13426897600\n31  ???                                 0x00000003204e7dec 0x0 + 13426916844\n```\n\n### Additional information\n\nI'm not using native extensions other than the segfault handler installed specifically to capture this trace—the segfault was occuring prior to that.","author":{"url":"https://github.com/marcusdarmstrong","@type":"Person","name":"marcusdarmstrong"},"datePublished":"2026-03-22T13:31:15Z","url":"https://github.com/nodejs/node/issues/62393"}