GDB JIT Compilation Interface integration

GDB JIT Compilation Interface integration allows V8 to provide GDB with the symbol and debugging information for native code emitted from the V8 runtime.

When GDB JIT Compilation Interface is disabled a typical backtrace in GDB contains frames marked with ??. These frames correspond to dynamically generated code:

#8  0x08281674 in v8::internal::Runtime_SetProperty (args=...) at src/runtime.cc:3758
#9  0xf5cae28e in ?? ()
#10 0xf5cc3a0a in ?? ()
#11 0xf5cc38f4 in ?? ()
#12 0xf5cbef19 in ?? ()
#13 0xf5cb09a2 in ?? ()
#14 0x0809e0a5 in v8::internal::Invoke (construct=false, func=..., receiver=..., argc=0, args=0x0,
    has_pending_exception=0xffffd46f) at src/execution.cc:97

However enabling GDB JIT Compilation Interface allows GDB to produce more informative stack trace:

#6  0x082857fc in v8::internal::Runtime_SetProperty (args=...) at src/runtime.cc:3758
#7  0xf5cae28e in ?? ()
#8  0xf5cc3a0a in loop () at test.js:6
#9  0xf5cc38f4 in test.js () at test.js:13
#10 0xf5cbef19 in ?? ()
#11 0xf5cb09a2 in ?? ()
#12 0x0809e1f9 in v8::internal::Invoke (construct=false, func=..., receiver=..., argc=0, args=0x0,
    has_pending_exception=0xffffd44f) at src/execution.cc:97

Frames still unknown to GDB correspond to native code without source information. See known limitations for more details.

GDB JIT Compilation Interface is specified in the GDB documentation: https://sourceware.org/gdb/current/onlinedocs/gdb/JIT-Interface.html

Prerequisites #

• V8 v3.0.9 or newer
• GDB 7.0 or newer
• Linux OS
• CPU with Intel-compatible architecture (ia32 or x64)

Enabling GDB JIT Compilation Interface #

GDB JIT Compilation Interface is currently excluded from the compilation by default and disabled in runtime. To enable it:

1. Build V8 library with ENABLE_GDB_JIT_INTERFACE defined. If you are using scons to build V8 run it with gdbjit=on.
2. Pass --gdbjit flag when starting V8.

To check that you have enabled GDB JIT integration correctly try setting a breakpoint on __jit_debug_register_code. This function is invoked to notify GDB about new code objects.

Known limitations #

• GDB side of JIT Interface currently (as of GDB 7.2) does not handle registration of code objects very effectively. Each next registration takes more time: with 500 registered objects each next registration takes more than 50ms, with 1000 registered code objects - more than 300 ms. This problem was reported to GDB developers but currently there is no solution available. To reduce pressure on GDB current implementation of GDB JIT integration operates in two modes: default and full (enabled by --gdbjit-full flag). In default mode V8 notifies GDB only about code objects that have source information attached (this usually includes all user scripts). In full - about all generated code objects (stubs, ICs, trampolines).

• On x64 GDB is unable to properly unwind stack without .eh_frame section (Issue 1053)

• GDB is not notified about code deserialized from the snapshot (Issue 1054)

• Only Linux OS on Intel-compatible CPUs is supported. For different OSes either a different ELF-header should be generated or a completely different object format should be used.

• Enabling GDB JIT interface disables compacting GC. This is done to reduce pressure on GDB as unregistering and registering each moved code object will incur considerable overhead.

• GDB JIT integration provides only approximate source information. It does not provide any information about local variables, function’s arguments, stack layout etc. It does not enable stepping through JavaScript code or setting breakpoint on the given line. However one can set a breakpoint on a function by its name.