<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>114129</bug_id>
          
          <creation_ts>2013-04-07 12:51:44 -0700</creation_ts>
          <short_desc>REGRESSION(r146669): Assertion hit in JSC::DFG::SpeculativeJIT::fillSpeculateCell() running webgl tests</short_desc>
          <delta_ts>2013-04-08 10:47:10 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Chris Dumez">cdumez</reporter>
          <assigned_to name="Filip Pizlo">fpizlo</assigned_to>
          <cc>fpizlo</cc>
    
    <cc>ggaren</cc>
    
    <cc>msaboff</cc>
    
    <cc>oliver</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>870510</commentid>
    <comment_count>0</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2013-04-07 12:51:44 -0700</bug_when>
    <thetext>The following test cases are hitting an assertion on the EFL build bots:
  webgl/conformance/textures/tex-image-with-format-and-type.html
  fast/canvas/webgl/tex-image-with-format-and-type.html

crash log for WebProcess (pid &lt;unknown&gt;):
STDOUT: &lt;empty&gt;
STDERR: ASSERTION FAILED: (edge.useKind() != KnownCellUse &amp;&amp; edge.useKind() != KnownStringUse) || !(value.m_type &amp; ~SpecCell)
STDERR: /home/buildslave-1/webkit-buildslave/efl-linux-64-debug-wk2/build/Source/JavaScriptCore/dfg/DFGSpeculativeJIT64.cpp(1128) : JSC::DFG::GPRReg JSC::DFG::SpeculativeJIT::fillSpeculateCell(JSC::DFG::Edge)
STDERR: 1   0x7f223d4a178c JSC::DFG::SpeculativeJIT::fillSpeculateCell(JSC::DFG::Edge)
STDERR: 2   0x7f223d48ef80 JSC::DFG::SpeculateCellOperand::gpr()
STDERR: 3   0x7f223d4b1a9c JSC::DFG::SpeculativeJIT::compile(JSC::DFG::Node*)
STDERR: 4   0x7f223d4789b7 JSC::DFG::SpeculativeJIT::compile(JSC::DFG::BasicBlock&amp;)
STDERR: 5   0x7f223d47911f JSC::DFG::SpeculativeJIT::compile()
STDERR: 6   0x7f223d445a4c JSC::DFG::JITCompiler::compileBody(JSC::DFG::SpeculativeJIT&amp;)
STDERR: 7   0x7f223d446c79 JSC::DFG::JITCompiler::compileFunction(JSC::JITCode&amp;, JSC::MacroAssemblerCodePtr&amp;)
STDERR: 8   0x7f223d433770 JSC::DFG::compile(JSC::DFG::CompileMode, JSC::ExecState*, JSC::CodeBlock*, JSC::JITCode&amp;, JSC::MacroAssemblerCodePtr*, unsigned int)
STDERR: 9   0x7f223d432ff4 JSC::DFG::tryCompileFunction(JSC::ExecState*, JSC::CodeBlock*, JSC::JITCode&amp;, JSC::MacroAssemblerCodePtr&amp;, unsigned int)
STDERR: 10  0x7f223d5f5baf JSC::jitCompileFunctionIfAppropriate(JSC::ExecState*, WTF::OwnPtr&lt;JSC::FunctionCodeBlock&gt;&amp;, JSC::JITCode&amp;, JSC::MacroAssemblerCodePtr&amp;, JSC::JITCode::JITType, unsigned int, JSC::JITCompilationEffort)
STDERR: 11  0x7f223d5f5ea4 JSC::prepareFunctionForExecution(JSC::ExecState*, WTF::OwnPtr&lt;JSC::FunctionCodeBlock&gt;&amp;, JSC::JITCode&amp;, JSC::MacroAssemblerCodePtr&amp;, JSC::JITCode::JITType, unsigned int, JSC::CodeSpecializationKind)
STDERR: 12  0x7f223d5f4354 JSC::FunctionExecutable::compileForConstructInternal(JSC::ExecState*, JSC::JSScope*, JSC::JITCode::JITType, unsigned int)
STDERR: 13  0x7f223d5f39ab JSC::FunctionExecutable::compileOptimizedForConstruct(JSC::ExecState*, JSC::JSScope*, unsigned int)
STDERR: 14  0x7f223d343da7 JSC::FunctionExecutable::compileOptimizedFor(JSC::ExecState*, JSC::JSScope*, unsigned int, JSC::CodeSpecializationKind)
STDERR: 15  0x7f223d33dcd2 JSC::FunctionCodeBlock::compileOptimized(JSC::ExecState*, JSC::JSScope*, unsigned int)
STDERR: 16  0x7f223d5486b9
STDERR: 17  0x7f223d5456c7
STDERR: 18  0x7f20e3bf0060</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>870526</commentid>
    <comment_count>1</comment_count>
    <who name="Geoffrey Garen">ggaren</who>
    <bug_when>2013-04-07 13:27:20 -0700</bug_when>
    <thetext>Christophe, do you know when this started?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>870536</commentid>
    <comment_count>2</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2013-04-07 13:46:05 -0700</bug_when>
    <thetext>Started between r146663 and r146670.

http://trac.webkit.org/changeset/146669 seems like the most likely culprit.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>870545</commentid>
    <comment_count>3</comment_count>
    <who name="Geoffrey Garen">ggaren</who>
    <bug_when>2013-04-07 14:12:44 -0700</bug_when>
    <thetext>&lt;rdar://problem/13594898&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>870814</commentid>
    <comment_count>4</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2013-04-08 09:44:00 -0700</bug_when>
    <thetext>(In reply to comment #0)
&gt; The following test cases are hitting an assertion on the EFL build bots:
&gt;   webgl/conformance/textures/tex-image-with-format-and-type.html
&gt;   fast/canvas/webgl/tex-image-with-format-and-type.html
&gt; 
&gt; crash log for WebProcess (pid &lt;unknown&gt;):
&gt; STDOUT: &lt;empty&gt;
&gt; STDERR: ASSERTION FAILED: (edge.useKind() != KnownCellUse &amp;&amp; edge.useKind() != KnownStringUse) || !(value.m_type &amp; ~SpecCell)
&gt; STDERR: /home/buildslave-1/webkit-buildslave/efl-linux-64-debug-wk2/build/Source/JavaScriptCore/dfg/DFGSpeculativeJIT64.cpp(1128) : JSC::DFG::GPRReg JSC::DFG::SpeculativeJIT::fillSpeculateCell(JSC::DFG::Edge)
&gt; STDERR: 1   0x7f223d4a178c JSC::DFG::SpeculativeJIT::fillSpeculateCell(JSC::DFG::Edge)
&gt; STDERR: 2   0x7f223d48ef80 JSC::DFG::SpeculateCellOperand::gpr()
&gt; STDERR: 3   0x7f223d4b1a9c JSC::DFG::SpeculativeJIT::compile(JSC::DFG::Node*)
&gt; STDERR: 4   0x7f223d4789b7 JSC::DFG::SpeculativeJIT::compile(JSC::DFG::BasicBlock&amp;)
&gt; STDERR: 5   0x7f223d47911f JSC::DFG::SpeculativeJIT::compile()
&gt; STDERR: 6   0x7f223d445a4c JSC::DFG::JITCompiler::compileBody(JSC::DFG::SpeculativeJIT&amp;)

Can you tell me what line you&apos;re at in this frame?

&gt; STDERR: 7   0x7f223d446c79 JSC::DFG::JITCompiler::compileFunction(JSC::JITCode&amp;, JSC::MacroAssemblerCodePtr&amp;)
&gt; STDERR: 8   0x7f223d433770 JSC::DFG::compile(JSC::DFG::CompileMode, JSC::ExecState*, JSC::CodeBlock*, JSC::JITCode&amp;, JSC::MacroAssemblerCodePtr*, unsigned int)
&gt; STDERR: 9   0x7f223d432ff4 JSC::DFG::tryCompileFunction(JSC::ExecState*, JSC::CodeBlock*, JSC::JITCode&amp;, JSC::MacroAssemblerCodePtr&amp;, unsigned int)
&gt; STDERR: 10  0x7f223d5f5baf JSC::jitCompileFunctionIfAppropriate(JSC::ExecState*, WTF::OwnPtr&lt;JSC::FunctionCodeBlock&gt;&amp;, JSC::JITCode&amp;, JSC::MacroAssemblerCodePtr&amp;, JSC::JITCode::JITType, unsigned int, JSC::JITCompilationEffort)
&gt; STDERR: 11  0x7f223d5f5ea4 JSC::prepareFunctionForExecution(JSC::ExecState*, WTF::OwnPtr&lt;JSC::FunctionCodeBlock&gt;&amp;, JSC::JITCode&amp;, JSC::MacroAssemblerCodePtr&amp;, JSC::JITCode::JITType, unsigned int, JSC::CodeSpecializationKind)
&gt; STDERR: 12  0x7f223d5f4354 JSC::FunctionExecutable::compileForConstructInternal(JSC::ExecState*, JSC::JSScope*, JSC::JITCode::JITType, unsigned int)
&gt; STDERR: 13  0x7f223d5f39ab JSC::FunctionExecutable::compileOptimizedForConstruct(JSC::ExecState*, JSC::JSScope*, unsigned int)
&gt; STDERR: 14  0x7f223d343da7 JSC::FunctionExecutable::compileOptimizedFor(JSC::ExecState*, JSC::JSScope*, unsigned int, JSC::CodeSpecializationKind)
&gt; STDERR: 15  0x7f223d33dcd2 JSC::FunctionCodeBlock::compileOptimized(JSC::ExecState*, JSC::JSScope*, unsigned int)
&gt; STDERR: 16  0x7f223d5486b9
&gt; STDERR: 17  0x7f223d5456c7
&gt; STDERR: 18  0x7f20e3bf0060</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>870825</commentid>
    <comment_count>5</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2013-04-08 09:58:54 -0700</bug_when>
    <thetext>(In reply to comment #4)
&gt; (In reply to comment #0)
&gt; &gt; The following test cases are hitting an assertion on the EFL build bots:
&gt; &gt;   webgl/conformance/textures/tex-image-with-format-and-type.html
&gt; &gt;   fast/canvas/webgl/tex-image-with-format-and-type.html
&gt; &gt; 
&gt; &gt; crash log for WebProcess (pid &lt;unknown&gt;):
&gt; &gt; STDOUT: &lt;empty&gt;
&gt; &gt; STDERR: ASSERTION FAILED: (edge.useKind() != KnownCellUse &amp;&amp; edge.useKind() != KnownStringUse) || !(value.m_type &amp; ~SpecCell)
&gt; &gt; STDERR: /home/buildslave-1/webkit-buildslave/efl-linux-64-debug-wk2/build/Source/JavaScriptCore/dfg/DFGSpeculativeJIT64.cpp(1128) : JSC::DFG::GPRReg JSC::DFG::SpeculativeJIT::fillSpeculateCell(JSC::DFG::Edge)
&gt; &gt; STDERR: 1   0x7f223d4a178c JSC::DFG::SpeculativeJIT::fillSpeculateCell(JSC::DFG::Edge)
&gt; &gt; STDERR: 2   0x7f223d48ef80 JSC::DFG::SpeculateCellOperand::gpr()
&gt; &gt; STDERR: 3   0x7f223d4b1a9c JSC::DFG::SpeculativeJIT::compile(JSC::DFG::Node*)
&gt; &gt; STDERR: 4   0x7f223d4789b7 JSC::DFG::SpeculativeJIT::compile(JSC::DFG::BasicBlock&amp;)
&gt; &gt; STDERR: 5   0x7f223d47911f JSC::DFG::SpeculativeJIT::compile()
&gt; &gt; STDERR: 6   0x7f223d445a4c JSC::DFG::JITCompiler::compileBody(JSC::DFG::SpeculativeJIT&amp;)
&gt; 
&gt; Can you tell me what line you&apos;re at in this frame?

Never mind, I can repro this!  Working on fix...

&gt; 
&gt; &gt; STDERR: 7   0x7f223d446c79 JSC::DFG::JITCompiler::compileFunction(JSC::JITCode&amp;, JSC::MacroAssemblerCodePtr&amp;)
&gt; &gt; STDERR: 8   0x7f223d433770 JSC::DFG::compile(JSC::DFG::CompileMode, JSC::ExecState*, JSC::CodeBlock*, JSC::JITCode&amp;, JSC::MacroAssemblerCodePtr*, unsigned int)
&gt; &gt; STDERR: 9   0x7f223d432ff4 JSC::DFG::tryCompileFunction(JSC::ExecState*, JSC::CodeBlock*, JSC::JITCode&amp;, JSC::MacroAssemblerCodePtr&amp;, unsigned int)
&gt; &gt; STDERR: 10  0x7f223d5f5baf JSC::jitCompileFunctionIfAppropriate(JSC::ExecState*, WTF::OwnPtr&lt;JSC::FunctionCodeBlock&gt;&amp;, JSC::JITCode&amp;, JSC::MacroAssemblerCodePtr&amp;, JSC::JITCode::JITType, unsigned int, JSC::JITCompilationEffort)
&gt; &gt; STDERR: 11  0x7f223d5f5ea4 JSC::prepareFunctionForExecution(JSC::ExecState*, WTF::OwnPtr&lt;JSC::FunctionCodeBlock&gt;&amp;, JSC::JITCode&amp;, JSC::MacroAssemblerCodePtr&amp;, JSC::JITCode::JITType, unsigned int, JSC::CodeSpecializationKind)
&gt; &gt; STDERR: 12  0x7f223d5f4354 JSC::FunctionExecutable::compileForConstructInternal(JSC::ExecState*, JSC::JSScope*, JSC::JITCode::JITType, unsigned int)
&gt; &gt; STDERR: 13  0x7f223d5f39ab JSC::FunctionExecutable::compileOptimizedForConstruct(JSC::ExecState*, JSC::JSScope*, unsigned int)
&gt; &gt; STDERR: 14  0x7f223d343da7 JSC::FunctionExecutable::compileOptimizedFor(JSC::ExecState*, JSC::JSScope*, unsigned int, JSC::CodeSpecializationKind)
&gt; &gt; STDERR: 15  0x7f223d33dcd2 JSC::FunctionCodeBlock::compileOptimized(JSC::ExecState*, JSC::JSScope*, unsigned int)
&gt; &gt; STDERR: 16  0x7f223d5486b9
&gt; &gt; STDERR: 17  0x7f223d5456c7
&gt; &gt; STDERR: 18  0x7f20e3bf0060</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>870833</commentid>
    <comment_count>6</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2013-04-08 10:15:12 -0700</bug_when>
    <thetext>Sadly those tests were skipped and so we missed this on Mac.  I will unskip because they are passing now.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>870836</commentid>
    <comment_count>7</comment_count>
      <attachid>196868</attachid>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2013-04-08 10:19:38 -0700</bug_when>
    <thetext>Created attachment 196868
the patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>870868</commentid>
    <comment_count>8</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2013-04-08 10:47:10 -0700</bug_when>
    <thetext>Landed in http://trac.webkit.org/changeset/147933</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>196868</attachid>
            <date>2013-04-08 10:19:38 -0700</date>
            <delta_ts>2013-04-08 10:20:23 -0700</delta_ts>
            <desc>the patch</desc>
            <filename>blah.patch</filename>
            <type>text/plain</type>
            <size>4795</size>
            <attacher name="Filip Pizlo">fpizlo</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291
cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkocmV2aXNpb24gMTQ3OTIzKQorKysgU291cmNl
L0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE4IEBA
CisyMDEzLTA0LTA4ICBGaWxpcCBQaXpsbyAgPGZwaXpsb0BhcHBsZS5jb20+CisKKyAgICAgICAg
UkVHUkVTU0lPTihyMTQ2NjY5KTogQXNzZXJ0aW9uIGhpdCBpbiBKU0M6OkRGRzo6U3BlY3VsYXRp
dmVKSVQ6OmZpbGxTcGVjdWxhdGVDZWxsKCkgcnVubmluZyB3ZWJnbCB0ZXN0cworICAgICAgICBo
dHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTE0MTI5CisgICAgICAgIDxy
ZGFyOi8vcHJvYmxlbS8xMzU5NDg5OD4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9P
UFMhKS4KKyAgICAgICAgCisgICAgICAgIFRoZSBjaGVjayB0byBzZWUgaWYgd2UgbmVlZCBhIGNl
bGwgY2hlY2sgd2hlbiBzaW1wbGlmeWluZyBhIEdldEJ5SWQgb3IgUHV0QnlJZCBuZWVkcyB0byBi
ZSBob2lzdGVkIHRvCisgICAgICAgIGFib3ZlIHdoZXJlIHdlIGFic3RyYWN0bHkgZXhlY3V0ZSB0
aGUgaW5zdHJ1Y3Rpb24sIHNpbmNlIGFmdGVyIHdlIGFic3RyYWN0aW5nIGV4ZWN1dGUgaXQsIGl0
IHdpbGwKKyAgICAgICAgc2VlbSBsaWtlIGl0IG5vIGxvbmdlciBuZWVkcyB0aGUgY2VsbCBjaGVj
ay4KKworICAgICAgICAqIGRmZy9ERkdDb25zdGFudEZvbGRpbmdQaGFzZS5jcHA6CisgICAgICAg
IChKU0M6OkRGRzo6Q29uc3RhbnRGb2xkaW5nUGhhc2U6OmZvbGRDb25zdGFudHMpOgorCiAyMDEz
LTA0LTA3ICBPbGl2ZXIgSHVudCAgPG9saXZlckBhcHBsZS5jb20+CiAKICAgICAgICAgQWRkIGJv
dW5kcyBjaGVja2luZyBmb3IgV1RGOjpWZWN0b3I6Om9wZXJhdG9yW10KSW5kZXg6IFNvdXJjZS9K
YXZhU2NyaXB0Q29yZS9kZmcvREZHQ29uc3RhbnRGb2xkaW5nUGhhc2UuY3BwCj09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0K
LS0tIFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9kZmcvREZHQ29uc3RhbnRGb2xkaW5nUGhhc2UuY3Bw
CShyZXZpc2lvbiAxNDc5MTkpCisrKyBTb3VyY2UvSmF2YVNjcmlwdENvcmUvZGZnL0RGR0NvbnN0
YW50Rm9sZGluZ1BoYXNlLmNwcAkod29ya2luZyBjb3B5KQpAQCAtMTUyLDYgKzE1Miw3IEBAIHBy
aXZhdGU6CiAgICAgICAgICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICAgICAgICAgIAogICAg
ICAgICAgICAgICAgIGJvb2wgbmVlZHNXYXRjaHBvaW50ID0gIW1fc3RhdGUuZm9yTm9kZShjaGls
ZCkubV9jdXJyZW50S25vd25TdHJ1Y3R1cmUuaGFzU2luZ2xldG9uKCk7CisgICAgICAgICAgICAg
ICAgYm9vbCBuZWVkc0NlbGxDaGVjayA9IG1fc3RhdGUuZm9yTm9kZShjaGlsZCkubV90eXBlICYg
flNwZWNDZWxsOwogICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgIEdldEJ5SWRTdGF0
dXMgc3RhdHVzID0gR2V0QnlJZFN0YXR1czo6Y29tcHV0ZUZvcigKICAgICAgICAgICAgICAgICAg
ICAgZ2xvYmFsRGF0YSgpLCBzdHJ1Y3R1cmUsIGNvZGVCbG9jaygpLT5pZGVudGlmaWVyKGlkZW50
aWZpZXJOdW1iZXIpKTsKQEAgLTE3Nyw3ICsxNzgsNyBAQCBwcml2YXRlOgogICAgICAgICAgICAg
ICAgICAgICBtX2luc2VydGlvblNldC5pbnNlcnROb2RlKAogICAgICAgICAgICAgICAgICAgICAg
ICAgaW5kZXhJbkJsb2NrLCBTcGVjTm9uZSwgU3RydWN0dXJlVHJhbnNpdGlvbldhdGNocG9pbnQs
IGNvZGVPcmlnaW4sCiAgICAgICAgICAgICAgICAgICAgICAgICBPcEluZm8oc3RydWN0dXJlKSwg
Y2hpbGRFZGdlKTsKLSAgICAgICAgICAgICAgICB9IGVsc2UgaWYgKG1fc3RhdGUuZm9yTm9kZShj
aGlsZCkubV90eXBlICYgflNwZWNDZWxsKSB7CisgICAgICAgICAgICAgICAgfSBlbHNlIGlmIChu
ZWVkc0NlbGxDaGVjaykgewogICAgICAgICAgICAgICAgICAgICBtX2luc2VydGlvblNldC5pbnNl
cnROb2RlKAogICAgICAgICAgICAgICAgICAgICAgICAgaW5kZXhJbkJsb2NrLCBTcGVjTm9uZSwg
UGhhbnRvbSwgY29kZU9yaWdpbiwgY2hpbGRFZGdlKTsKICAgICAgICAgICAgICAgICB9CkBAIC0y
MTYsNiArMjE3LDcgQEAgcHJpdmF0ZToKICAgICAgICAgICAgICAgICAgICAgYnJlYWs7CiAgICAg
ICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgYm9vbCBuZWVkc1dhdGNocG9pbnQgPSAhbV9z
dGF0ZS5mb3JOb2RlKGNoaWxkKS5tX2N1cnJlbnRLbm93blN0cnVjdHVyZS5oYXNTaW5nbGV0b24o
KTsKKyAgICAgICAgICAgICAgICBib29sIG5lZWRzQ2VsbENoZWNrID0gbV9zdGF0ZS5mb3JOb2Rl
KGNoaWxkKS5tX3R5cGUgJiB+U3BlY0NlbGw7CiAgICAgICAgICAgICAgICAgCiAgICAgICAgICAg
ICAgICAgUHV0QnlJZFN0YXR1cyBzdGF0dXMgPSBQdXRCeUlkU3RhdHVzOjpjb21wdXRlRm9yKAog
ICAgICAgICAgICAgICAgICAgICBnbG9iYWxEYXRhKCksCkBAIC0yNDAsNyArMjQyLDcgQEAgcHJp
dmF0ZToKICAgICAgICAgICAgICAgICAgICAgbV9pbnNlcnRpb25TZXQuaW5zZXJ0Tm9kZSgKICAg
ICAgICAgICAgICAgICAgICAgICAgIGluZGV4SW5CbG9jaywgU3BlY05vbmUsIFN0cnVjdHVyZVRy
YW5zaXRpb25XYXRjaHBvaW50LCBjb2RlT3JpZ2luLAogICAgICAgICAgICAgICAgICAgICAgICAg
T3BJbmZvKHN0cnVjdHVyZSksIGNoaWxkRWRnZSk7Ci0gICAgICAgICAgICAgICAgfSBlbHNlIGlm
IChtX3N0YXRlLmZvck5vZGUoY2hpbGQpLm1fdHlwZSAmIH5TcGVjQ2VsbCkgeworICAgICAgICAg
ICAgICAgIH0gZWxzZSBpZiAobmVlZHNDZWxsQ2hlY2spIHsKICAgICAgICAgICAgICAgICAgICAg
bV9pbnNlcnRpb25TZXQuaW5zZXJ0Tm9kZSgKICAgICAgICAgICAgICAgICAgICAgICAgIGluZGV4
SW5CbG9jaywgU3BlY05vbmUsIFBoYW50b20sIGNvZGVPcmlnaW4sIGNoaWxkRWRnZSk7CiAgICAg
ICAgICAgICAgICAgfQpAQCAtMjY5LDcgKzI3MSw3IEBAIHByaXZhdGU6CiAgICAgICAgICAgICAg
ICAgICAgICAgICB9CiAgICAgICAgICAgICAgICAgICAgIH0KICAgICAgICAgICAgICAgICB9Ci0K
KyAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICBFZGdlIHByb3BlcnR5U3RvcmFnZTsK
ICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICBpZiAoaXNJbmxpbmVPZmZzZXQoc3Rh
dHVzLm9mZnNldCgpKSkKSW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0t
LSBMYXlvdXRUZXN0cy9DaGFuZ2VMb2cJKHJldmlzaW9uIDE0NzkyMykKKysrIExheW91dFRlc3Rz
L0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDEzLTA0LTA4ICBG
aWxpcCBQaXpsbyAgPGZwaXpsb0BhcHBsZS5jb20+CisKKyAgICAgICAgUkVHUkVTU0lPTihyMTQ2
NjY5KTogQXNzZXJ0aW9uIGhpdCBpbiBKU0M6OkRGRzo6U3BlY3VsYXRpdmVKSVQ6OmZpbGxTcGVj
dWxhdGVDZWxsKCkgcnVubmluZyB3ZWJnbCB0ZXN0cworICAgICAgICBodHRwczovL2J1Z3Mud2Vi
a2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTE0MTI5IGFuZCBodHRwczovL2J1Z3Mud2Via2l0Lm9y
Zy9zaG93X2J1Zy5jZ2k/aWQ9OTA2NDkKKyAgICAgICAgPHJkYXI6Ly9wcm9ibGVtLzEzNTk0ODk4
PiBhbmQgPHJkYXI6Ly9wcm9ibGVtLzExODE1NzI3PgorCisgICAgICAgIFJldmlld2VkIGJ5IE5P
Qk9EWSAoT09QUyEpLgorICAgICAgICAKKyAgICAgICAgVW5za2lwIHRoZXNlIHRlc3RzIGJlY2F1
c2UgdGhleSBnaXZlIHVzIERGRyBjb3ZlcmFnZSBhbmQgdGhleSBhcmUgbm93IHBhc3NpbmcuCisK
KyAgICAgICAgKiBwbGF0Zm9ybS9tYWMvVGVzdEV4cGVjdGF0aW9uczoKKwogMjAxMy0wNC0wOCAg
WW91ZW5uIEZhYmxldCAgPHlvdWVubmZAZ21haWwuY29tPgogCiAgICAgICAgIFtHVEtdW0VGTF0g
SEVBRCByZXF1ZXN0cyBjaGFuZ2VkIHRvIEdFVCBhZnRlciAzMDMgcmVkaXJlY3Rpb24KSW5kZXg6
IExheW91dFRlc3RzL3BsYXRmb3JtL21hYy9UZXN0RXhwZWN0YXRpb25zCj09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0t
IExheW91dFRlc3RzL3BsYXRmb3JtL21hYy9UZXN0RXhwZWN0YXRpb25zCShyZXZpc2lvbiAxNDc5
MTkpCisrKyBMYXlvdXRUZXN0cy9wbGF0Zm9ybS9tYWMvVGVzdEV4cGVjdGF0aW9ucwkod29ya2lu
ZyBjb3B5KQpAQCAtODQ0LDEwICs4NDQsNiBAQCBmYXN0L2NhbnZhcy9jYW52YXMtaW1hZ2VTbW9v
dGhpbmdFbmFibGVkCiAjIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD04
OTg0NQogZmFzdC9mb3Jtcy9pbnB1dC1zZXQtY29tcG9zaXRpb24tc2Nyb2xsLmh0bWwKIAotIyBo
dHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9OTA2NDkKLWZhc3QvY2FudmFz
L3dlYmdsL3RleC1pbWFnZS13aXRoLWZvcm1hdC1hbmQtdHlwZS5odG1sCi1mYXN0L2NhbnZhcy93
ZWJnbC90ZXgtc3ViLWltYWdlLTJkLmh0bWwKLQogIyBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9z
aG93X2J1Zy5jZ2k/aWQ9OTA3MDYKIGluc3BlY3Rvci90aW1lbGluZS90aW1lbGluZS1mcmFtZXMu
aHRtbAogCg==
</data>
<flag name="review"
          id="219047"
          type_id="1"
          status="+"
          setter="darin"
    />
          </attachment>
      

    </bug>

</bugzilla>