<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>119089</bug_id>
          
          <creation_ts>2013-07-25 08:09:29 -0700</creation_ts>
          <short_desc>REGRESSION(FTL): Most layout tests crashes</short_desc>
          <delta_ts>2013-07-30 08:15:30 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P1</priority>
          <bug_severity>Blocker</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>119256</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Allan Sandfeld Jensen">allan.jensen</reporter>
          <assigned_to name="Allan Sandfeld Jensen">allan.jensen</assigned_to>
          <cc>barraclough</cc>
    
    <cc>cdumez</cc>
    
    <cc>fpizlo</cc>
    
    <cc>gaborb</cc>
    
    <cc>ggaren</cc>
    
    <cc>jbriance</cc>
    
    <cc>mark.lam</cc>
    
    <cc>mhahnenberg</cc>
    
    <cc>oliver</cc>
    
    <cc>ossy</cc>
    
    <cc>spena</cc>
    
    <cc>zan</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>911618</commentid>
    <comment_count>0</comment_count>
    <who name="Allan Sandfeld Jensen">allan.jensen</who>
    <bug_when>2013-07-25 08:09:29 -0700</bug_when>
    <thetext>After the FTL tree was merged and the many build breaks were fixes, we now have most of the layout tests crashes. At least a large portion of them triggers asserts or 0 point access due to CodeBlocks with no jitCode.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911619</commentid>
    <comment_count>1</comment_count>
      <attachid>207460</attachid>
    <who name="Allan Sandfeld Jensen">allan.jensen</who>
    <bug_when>2013-07-25 08:11:37 -0700</bug_when>
    <thetext>Created attachment 207460
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911620</commentid>
    <comment_count>2</comment_count>
    <who name="Csaba Osztrogonác">ossy</who>
    <bug_when>2013-07-25 08:16:58 -0700</bug_when>
    <thetext>JSC guys: If the FTL merge was so important (keeping in top secret without any announcment e-mail), please fix the bugs your hundreds of patches caused as soon as possible. Thanks for your cooperation in advance.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911625</commentid>
    <comment_count>3</comment_count>
      <attachid>207460</attachid>
    <who name="Mark Lam">mark.lam</who>
    <bug_when>2013-07-25 08:40:41 -0700</bug_when>
    <thetext>Comment on attachment 207460
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=207460&amp;action=review

&gt; Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:295
&gt; +
&gt; +    if (!codeBlock-&gt;jitCode()) {
&gt; +        if (Options::verboseOSR())
&gt; +            dataLogF(&quot;    No code to compile.\n&quot;);
&gt; +        return false;
&gt; +    }
&gt; +

This doesn&apos;t make sense.  The statements that follow below will attempt to compile the codeBlock, and should handle it appropriately if the compilation fails.  Can you please share your findings that led you to think that this is needed?  Perhaps the real issue lies elsewhere.  Thanks.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911626</commentid>
    <comment_count>4</comment_count>
    <who name="Csaba Osztrogonác">ossy</who>
    <bug_when>2013-07-25 08:42:54 -0700</bug_when>
    <thetext>Hi Mark,

Thanks for looking into it. You can find more detailed infos on these bots:
http://build.webkit.org/builders/GTK%20Linux%2064-bit%20Debug%20WK1/builds/3235
http://build.webkit.sed.hu/builders/x86-64%20Linux%20Qt%20Debug/builds/29786</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911629</commentid>
    <comment_count>5</comment_count>
    <who name="Allan Sandfeld Jensen">allan.jensen</who>
    <bug_when>2013-07-25 08:52:45 -0700</bug_when>
    <thetext>A common backtrace:
#0  0x00007ffff34942f4 in WTFCrash () at /src/webkit/Source/WTF/wtf/Assertions.cpp:339
#1  0x00007ffff325d459 in JSC::CodeBlock::jitCompile (this=0x69ff50, exec=0x7fff9dbfa140) at /src/webkit/Source/JavaScriptCore/bytecode/CodeBlock.h:298
#2  0x00007ffff3335f3d in JSC::LLInt::jitCompileAndSetHeuristics (codeBlock=0x69ff50, exec=0x7fff9dbfa140) at /src/webkit/Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:296
#3  0x00007ffff332cd18 in JSC::LLInt::llint_replace (exec=0x7fff9dbfa140, pc=0x6a0408) at /src/webkit/Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:414
#4  0x00007ffff3339209 in llint_op_ret () from /src/webkit/WebKitBuild/Debug/lib/libQt5WebKit.so.5
#5  0x00007fffffffc670 in ?? ()
#6  0x00007ffff32e7bcf in JSC::JSStack::installTrapsAfterFrame (this=0x0, frame=0x0) at /src/webkit/Source/JavaScriptCore/interpreter/JSStackInlines.h:212
#7  0x00007ffff32f8e66 in JSC::JITCode::execute (this=0x6923d0, stack=0x65d808, callFrame=0x7fff9dbfa058, vm=0x64d060) at /src/webkit/Source/JavaScriptCore/jit/JITCode.cpp:46
#8  0x00007ffff32e4455 in JSC::Interpreter::execute (this=0x65d7f0, program=0x7fffe40ffef0, callFrame=0x7fffe41ef8e0, thisObj=0x7fffe409ff70)
    at /src/webkit/Source/JavaScriptCore/interpreter/Interpreter.cpp:856
#9  0x00007ffff33c6a5d in JSC::evaluate (exec=0x7fffe41ef8e0, source=..., thisValue=..., returnedException=0x7fffffffd350) at /src/webkit/Source/JavaScriptCore/runtime/Completion.cpp:83
#10 0x00007ffff30c413f in JSEvaluateScript (ctx=0x7fffe41ef8e0, script=0x4aa700, thisObject=0x7fffe409ff70, sourceURL=0x0, startingLineNumber=0, exception=0x7fffffffd428)
    at /src/webkit/Source/JavaScriptCore/API/JSBase.cpp:61
#11 0x0000000000424e07 in DumpRenderTree::initJSObjects (this=0x7fffffffdea0) at /src/webkit/Tools/DumpRenderTree/qt/DumpRenderTreeQt.cpp:789</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911630</commentid>
    <comment_count>6</comment_count>
    <who name="Allan Sandfeld Jensen">allan.jensen</who>
    <bug_when>2013-07-25 08:55:34 -0700</bug_when>
    <thetext>(In reply to comment #3)
&gt; (From update of attachment 207460 [details])
&gt; View in context: https://bugs.webkit.org/attachment.cgi?id=207460&amp;action=review
&gt; 
&gt; &gt; Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:295
&gt; &gt; +
&gt; &gt; +    if (!codeBlock-&gt;jitCode()) {
&gt; &gt; +        if (Options::verboseOSR())
&gt; &gt; +            dataLogF(&quot;    No code to compile.\n&quot;);
&gt; &gt; +        return false;
&gt; &gt; +    }
&gt; &gt; +
&gt; 
&gt; This doesn&apos;t make sense.  The statements that follow below will attempt to compile the codeBlock, and should handle it appropriately if the compilation fails.  Can you please share your findings that led you to think that this is needed?  Perhaps the real issue lies elsewhere.  Thanks.

CodeBlock::jitCompile will ASSERT because jitType() returns JITCode::None, which it does becase m_jitCode is nullptr. Trying to let it compile will just result in later ASSERTs because or similar (jitType() == JITCode::InterpreterThunk) asserts later.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911631</commentid>
    <comment_count>7</comment_count>
    <who name="Mark Lam">mark.lam</who>
    <bug_when>2013-07-25 09:06:36 -0700</bug_when>
    <thetext>(In reply to comment #6)
&gt; CodeBlock::jitCompile will ASSERT because jitType() returns JITCode::None, which it does becase m_jitCode is nullptr. Trying to let it compile will just result in later ASSERTs because or similar (jitType() == JITCode::InterpreterThunk) asserts later.

Thanks.  I don&apos;t think it should ever return JITCode::None.  That sounds like something else has gone haywire.  Can you please provide a test case that reproduces this issue?  I&apos;ve just run run-javascriptcore-tests, and unlike the results that Csaba shared, I&apos;m not seeing any failures at all in my local build (unmodified from trunk).</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911632</commentid>
    <comment_count>8</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2013-07-25 09:09:38 -0700</bug_when>
    <thetext>(In reply to comment #2)
&gt; JSC guys: If the FTL merge was so important (keeping in top secret without any announcment e-mail), please fix the bugs your hundreds of patches caused as soon as possible. Thanks for your cooperation in advance.

Because there should not have been any dramatic fallout - I ran all tests without the FTL enabled, are you trying to enable it?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911634</commentid>
    <comment_count>9</comment_count>
    <who name="Csaba Osztrogonác">ossy</who>
    <bug_when>2013-07-25 09:12:50 -0700</bug_when>
    <thetext>(In reply to comment #8)
&gt; (In reply to comment #2)
&gt; &gt; JSC guys: If the FTL merge was so important (keeping in top secret without any announcment e-mail), please fix the bugs your hundreds of patches caused as soon as possible. Thanks for your cooperation in advance.
&gt; 
&gt; Because there should not have been any dramatic fallout - I ran all tests without the FTL enabled, are you trying to enable it?

No, jsc and layout tests assert/crash with disabled FTL 
on GTK and Qt too. On EFL the build is still broken.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911637</commentid>
    <comment_count>10</comment_count>
    <who name="Geoffrey Garen">ggaren</who>
    <bug_when>2013-07-25 09:20:02 -0700</bug_when>
    <thetext>&gt; JSC guys: If the FTL merge was so important (keeping in top secret without any announcment e-mail), please fix the bugs your hundreds of patches caused as soon as possible.

Ossy, you&apos;re a great bot watcher, but this antagonistic mindset is not helping.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911645</commentid>
    <comment_count>11</comment_count>
    <who name="Allan Sandfeld Jensen">allan.jensen</who>
    <bug_when>2013-07-25 09:32:59 -0700</bug_when>
    <thetext>(In reply to comment #7)
&gt; (In reply to comment #6)
&gt; &gt; CodeBlock::jitCompile will ASSERT because jitType() returns JITCode::None, which it does becase m_jitCode is nullptr. Trying to let it compile will just result in later ASSERTs because or similar (jitType() == JITCode::InterpreterThunk) asserts later.
&gt; 
&gt; Thanks.  I don&apos;t think it should ever return JITCode::None.  That sounds like something else has gone haywire.  Can you please provide a test case that reproduces this issue?  I&apos;ve just run run-javascriptcore-tests, and unlike the results that Csaba shared, I&apos;m not seeing any failures at all in my local build (unmodified from trunk).

It happens when running the DumpRenderTree, but apparently only for GTK and Qt. For instance WebKitBuild/Release/bin/DumpRenderTree LayoutTest/fast/css/001.html will assert as above.

It seems to happen most frequently during clean-up phases when the execution-context is recreated, but there are a number of different triggers above the common backtrace I posted earlier.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911647</commentid>
    <comment_count>12</comment_count>
    <who name="Csaba Osztrogonác">ossy</who>
    <bug_when>2013-07-25 09:36:12 -0700</bug_when>
    <thetext>(In reply to comment #10)
&gt; &gt; JSC guys: If the FTL merge was so important (keeping in top secret without any announcment e-mail), please fix the bugs your hundreds of patches caused as soon as possible.
&gt; 
&gt; Ossy, you&apos;re a great bot watcher, but this antagonistic mindset is not helping.

I agree, it doesn&apos;t help, but my 5 buildfixes maybe helped 
a little bit. And the other 22 buildfixes made by others ...

It was only my rough but frank opinion about this situation. If we had got
a friendly reminder e-mail _before_ merging, I would have been friendlier ...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911651</commentid>
    <comment_count>13</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2013-07-25 09:44:03 -0700</bug_when>
    <thetext>What are the qt builds settings?  Which JIT&apos;s are enabled? Do you have the LLINT?  Is this 32 and/or 64 bit?

That&apos;s information that would be useful to know - are tests failing in run-javascriptore-tests?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911659</commentid>
    <comment_count>14</comment_count>
    <who name="Csaba Osztrogonác">ossy</who>
    <bug_when>2013-07-25 09:56:01 -0700</bug_when>
    <thetext>(In reply to comment #13)
&gt; What are the qt builds settings?  Which JIT&apos;s are enabled? Do you have the LLINT?  Is this 32 and/or 64 bit?
&gt; 
&gt; That&apos;s information that would be useful to know - are tests failing in run-javascriptore-tests?

LLINT, JIT and DFG-JIT are enabled on Qt and the problem occurs 
on 32 and 64 bit too, there are failing jsc and layout tests too

Here is the 32 bit relase Qt bot: http://build.webkit.org/builders/Qt%20Linux%20Release/builds/61619
Here is the 32 bit debug Qt bot: http://build.webkit.sed.hu/builders/x86-32%20Linux%20Qt%20Debug/builds/26602
Here is the 64 bit release Qt bot: http://build.webkit.sed.hu/builders/x86-64%20Linux%20Qt%20Release/builds/52568
Here is the 64 bit debug Qt bot: http://build.webkit.sed.hu/builders/x86-64%20Linux%20Qt%20Debug/builds/29786

and you can see these fails on the GTK bots too:
- http://build.webkit.org/builders/GTK%20Linux%2064-bit%20Debug%20WK1/builds/3240
- http://build.webkit.org/builders/GTK%20Linux%2064-bit%20Release/builds/39364
- http://build.webkit.org/builders/GTK%20Linux%2064-bit%20Release%20WK2%20%28Tests%29/builds/7516</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911665</commentid>
    <comment_count>15</comment_count>
    <who name="Mark Lam">mark.lam</who>
    <bug_when>2013-07-25 10:07:01 -0700</bug_when>
    <thetext>(In reply to comment #11)
&gt; (In reply to comment #7)
&gt; &gt; (In reply to comment #6)
&gt; &gt; &gt; CodeBlock::jitCompile will ASSERT because jitType() returns JITCode::None, which it does becase m_jitCode is nullptr. Trying to let it compile will just result in later ASSERTs because or similar (jitType() == JITCode::InterpreterThunk) asserts later.
&gt; &gt; 
&gt; &gt; Thanks.  I don&apos;t think it should ever return JITCode::None.  That sounds like something else has gone haywire.  Can you please provide a test case that reproduces this issue?  I&apos;ve just run run-javascriptcore-tests, and unlike the results that Csaba shared, I&apos;m not seeing any failures at all in my local build (unmodified from trunk).
&gt; 
&gt; It happens when running the DumpRenderTree, but apparently only for GTK and Qt. For instance WebKitBuild/Release/bin/DumpRenderTree LayoutTest/fast/css/001.html will assert as above.
&gt; 
&gt; It seems to happen most frequently during clean-up phases when the execution-context is recreated, but there are a number of different triggers above the common backtrace I posted earlier.

I&apos;ve just finished my build of DumpRenderTree and ran the test you suggested.  As expected, I&apos;m not seeing the issue on Mac.  I don&apos;t think we&apos;ll be able to debug this on our side since it doesn&apos;t reproduce.  I&apos;ll do some more investigation and come back to provide you with some recommendations on how to debug the root cause of this issue.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911669</commentid>
    <comment_count>16</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2013-07-25 10:20:53 -0700</bug_when>
    <thetext>(In reply to comment #14)
&gt; (In reply to comment #13)
&gt; &gt; What are the qt builds settings?  Which JIT&apos;s are enabled? Do you have the LLINT?  Is this 32 and/or 64 bit?
&gt; &gt; 
&gt; &gt; That&apos;s information that would be useful to know - are tests failing in run-javascriptore-tests?
&gt; 
&gt; LLINT, JIT and DFG-JIT are enabled on Qt and the problem occurs 
&gt; on 32 and 64 bit too, there are failing jsc and layout tests too
&gt; 
&gt; Here is the 32 bit relase Qt bot: http://build.webkit.org/builders/Qt%20Linux%20Release/builds/61619
&gt; Here is the 32 bit debug Qt bot: http://build.webkit.sed.hu/builders/x86-32%20Linux%20Qt%20Debug/builds/26602
&gt; Here is the 64 bit release Qt bot: http://build.webkit.sed.hu/builders/x86-64%20Linux%20Qt%20Release/builds/52568
&gt; Here is the 64 bit debug Qt bot: http://build.webkit.sed.hu/builders/x86-64%20Linux%20Qt%20Debug/builds/29786
&gt; 
&gt; and you can see these fails on the GTK bots too:
&gt; - http://build.webkit.org/builders/GTK%20Linux%2064-bit%20Debug%20WK1/builds/3240
&gt; - http://build.webkit.org/builders/GTK%20Linux%2064-bit%20Release/builds/39364
&gt; - http://build.webkit.org/builders/GTK%20Linux%2064-bit%20Release%20WK2%20%28Tests%29/builds/7516

Can you run jsc tests yourself?  If you see a test failing you can search the scroll back and see the command that lead to the failure.

You&apos;ll need to run the command in JavaScriptCore/tests/mozilla, run-jsc &lt;list of files&gt; _should_ do the right thing.

If that also crashes, then load up gdb, do attach -w jsc and then run the test that was failing.  GDB should connect, then do a continue and gdb should catch the fault</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911670</commentid>
    <comment_count>17</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2013-07-25 10:22:17 -0700</bug_when>
    <thetext>(In reply to comment #15)
&gt; (In reply to comment #11)
&gt; &gt; (In reply to comment #7)
&gt; &gt; &gt; (In reply to comment #6)
&gt; &gt; &gt; &gt; CodeBlock::jitCompile will ASSERT because jitType() returns JITCode::None, which it does becase m_jitCode is nullptr. Trying to let it compile will just result in later ASSERTs because or similar (jitType() == JITCode::InterpreterThunk) asserts later.
&gt; &gt; &gt; 
&gt; &gt; &gt; Thanks.  I don&apos;t think it should ever return JITCode::None.  That sounds like something else has gone haywire.  Can you please provide a test case that reproduces this issue?  I&apos;ve just run run-javascriptcore-tests, and unlike the results that Csaba shared, I&apos;m not seeing any failures at all in my local build (unmodified from trunk).
&gt; &gt; 
&gt; &gt; It happens when running the DumpRenderTree, but apparently only for GTK and Qt. For instance WebKitBuild/Release/bin/DumpRenderTree LayoutTest/fast/css/001.html will assert as above.
&gt; &gt; 
&gt; &gt; It seems to happen most frequently during clean-up phases when the execution-context is recreated, but there are a number of different triggers above the common backtrace I posted earlier.
&gt; 
&gt; I&apos;ve just finished my build of DumpRenderTree and ran the test you suggested.  As expected, I&apos;m not seeing the issue on Mac.  I don&apos;t think we&apos;ll be able to debug this on our side since it doesn&apos;t reproduce.  I&apos;ll do some more investigation and come back to provide you with some recommendations on how to debug the root cause of this issue.

hmmm, try run-javascriptocre-tests --32-bit 

I had been running them, but i think i see failures now, so maybe one of the last patches broke things somehow?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911671</commentid>
    <comment_count>18</comment_count>
    <who name="Csaba Osztrogonác">ossy</who>
    <bug_when>2013-07-25 10:25:25 -0700</bug_when>
    <thetext>Here is a gdb backtrace for you on Qt 64 bit debug on r153330:

$ gdb --args ../../../../WebKitBuild/Debug/bin/jsc  -s  -f ./ecma/shell.js -f ./ecma/Array/15.4-1.js
GNU gdb (Ubuntu/Linaro 7.4-2012.04-0ubuntu2.1) 7.4-2012.04
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later &lt;http://gnu.org/licenses/gpl.html&gt;
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type &quot;show copying&quot;
and &quot;show warranty&quot; for details.
This GDB was configured as &quot;x86_64-linux-gnu&quot;.
For bug reporting instructions, please see:
&lt;http://bugs.launchpad.net/gdb-linaro/&gt;...
Reading symbols from /home/webkitbuildbot/oszi/WebKit/WebKitBuild/Debug/bin/jsc...done.
(gdb) run
Starting program: /home/webkitbuildbot/oszi/WebKit/WebKitBuild/Debug/bin/jsc -s -f ./ecma/shell.js -f ./ecma/Array/15.4-1.js
[Thread debugging using libthread_db enabled]
Using host libthread_db library &quot;/lib/x86_64-linux-gnu/libthread_db.so.1&quot;.
[New Thread 0x7fffb4309700 (LWP 1862)]
[New Thread 0x7fffb3ae9700 (LWP 1863)]
[New Thread 0x7fffb32e8700 (LWP 1864)]
[New Thread 0x7fffb2ae7700 (LWP 1865)]
[New Thread 0x7fffb22e6700 (LWP 1866)]
[New Thread 0x7fffb1ae5700 (LWP 1867)]
[New Thread 0x7fffb12e4700 (LWP 1868)]
15.4-1 Array Objects
ASSERTION FAILED: jitType() == JITCode::BaselineJIT
/home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/bytecode/CodeBlock.h(298) : JSC::CompilationResult JSC::CodeBlock::jitCompile(JSC::ExecState*)
1   0x841769 /home/webkitbuildbot/oszi/WebKit/WebKitBuild/Debug/bin/jsc() [0x841769]
2   0x5fc095 /home/webkitbuildbot/oszi/WebKit/WebKitBuild/Debug/bin/jsc() [0x5fc095]
3   0x6d6a3b /home/webkitbuildbot/oszi/WebKit/WebKitBuild/Debug/bin/jsc() [0x6d6a3b]
4   0x6cd7c3 /home/webkitbuildbot/oszi/WebKit/WebKitBuild/Debug/bin/jsc() [0x6cd7c3]
5   0x6d9ca9 /home/webkitbuildbot/oszi/WebKit/WebKitBuild/Debug/bin/jsc() [0x6d9ca9]

Program received signal SIGSEGV, Segmentation fault.
0x000000000084176e in WTFCrash () at /home/webkitbuildbot/oszi/WebKit/Source/WTF/wtf/Assertions.cpp:339
339         *(int *)(uintptr_t)0xbbadbeef = 0;
(gdb) bt
#0  0x000000000084176e in WTFCrash () at /home/webkitbuildbot/oszi/WebKit/Source/WTF/wtf/Assertions.cpp:339
#1  0x00000000005fc095 in JSC::CodeBlock::jitCompile (this=0x1010aa0, exec=0x7fffb06e41a0) at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/bytecode/CodeBlock.h:298
#2  0x00000000006d6a3b in JSC::LLInt::jitCompileAndSetHeuristics (codeBlock=0x1010aa0, exec=0x7fffb06e41a0) at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:290
#3  0x00000000006cd7c3 in JSC::LLInt::llint_replace (exec=0x7fffb06e41a0, pc=0x100ff70) at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:403
#4  0x00000000006d9ca9 in llint_op_ret ()
#5  0x00007fffffffc9b0 in ?? ()
#6  0x0000000000687843 in JSC::JSStack::installTrapsAfterFrame (this=0x0, frame=0x0) at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/interpreter/JSStackInlines.h:212
#7  0x00000000006997de in JSC::JITCode::execute (this=0xfdaf00, stack=0xfdb668, callFrame=0x7fffb06e4058, vm=0xfca730) at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/jit/JITCode.cpp:46
#8  0x00000000006837c7 in JSC::Interpreter::execute (this=0xfdb650, program=0x7ffff7e3fe70, callFrame=0x7ffff7f7f8e0, thisObj=0x7ffff7e7feb0) at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/interpreter/Interpreter.cpp:856
#9  0x000000000076e009 in JSC::evaluate (exec=0x7ffff7f7f8e0, source=..., thisValue=..., returnedException=0x7fffffffdfb0) at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/runtime/Completion.cpp:83
#10 0x000000000040ffbc in runWithScripts (globalObject=0x7ffff7f7f870, scripts=..., dump=false) at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/jsc.cpp:596
#11 0x0000000000410cc7 in jscmain (argc=6, argv=0x7fffffffe278) at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/jsc.cpp:812
#12 0x000000000040fd98 in main (argc=6, argv=0x7fffffffe278) at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/jsc.cpp:554</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911672</commentid>
    <comment_count>19</comment_count>
    <who name="Csaba Osztrogonác">ossy</who>
    <bug_when>2013-07-25 10:28:13 -0700</bug_when>
    <thetext>+info: If I set JSC_useDFGJIT=0, I got the same assertion.
But if I set JSC_useJIT=0, this test pass.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911685</commentid>
    <comment_count>20</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2013-07-25 11:00:14 -0700</bug_when>
    <thetext>For what it&apos;s worth we also hit the following assertion on EFL:
crash log for WebProcess (pid &lt;unknown&gt;):
STDOUT: &lt;empty&gt;
STDERR: ASSERTION FAILED: jitType() == JITCode::BaselineJIT
STDERR: /home/chris/devel/WebKit/Source/JavaScriptCore/bytecode/CodeBlock.h(298) : JSC::CompilationResult JSC::CodeBlock::jitCompile(JSC::ExecState*)
STDERR: 1   0x7fd251aa27cf WTFCrash
STDERR: 2   0x7fd251807825 JSC::CodeBlock::jitCompile(JSC::ExecState*)
STDERR: 3   0x7fd251aa1329 JSC::LLInt::jitCompileAndSetHeuristics(JSC::CodeBlock*, JSC::ExecState*)
STDERR: 4   0x7fd251a9866d
STDERR: 5   0x7fd251e7714c</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911695</commentid>
    <comment_count>21</comment_count>
    <who name="Zan Dobersek">zan</who>
    <bug_when>2013-07-25 11:16:46 -0700</bug_when>
    <thetext>As I&apos;ve reported in #webkit, I get no regressions when running run-javascriptcore-tests when jsc is built with Clang, in debug mode, on the GTK port.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911788</commentid>
    <comment_count>22</comment_count>
      <attachid>207460</attachid>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2013-07-25 15:58:15 -0700</bug_when>
    <thetext>Comment on attachment 207460
Patch

Zan has a fix</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911791</commentid>
    <comment_count>23</comment_count>
      <attachid>207492</attachid>
    <who name="Zan Dobersek">zan</who>
    <bug_when>2013-07-25 16:08:41 -0700</bug_when>
    <thetext>Created attachment 207492
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911792</commentid>
    <comment_count>24</comment_count>
      <attachid>207492</attachid>
    <who name="Zan Dobersek">zan</who>
    <bug_when>2013-07-25 16:13:32 -0700</bug_when>
    <thetext>Comment on attachment 207492
Patch

Clearing flags on attachment: 207492

Committed r153354: &lt;http://trac.webkit.org/changeset/153354&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911793</commentid>
    <comment_count>25</comment_count>
    <who name="Zan Dobersek">zan</who>
    <bug_when>2013-07-25 16:13:41 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911829</commentid>
    <comment_count>26</comment_count>
    <who name="Geoffrey Garen">ggaren</who>
    <bug_when>2013-07-25 17:50:06 -0700</bug_when>
    <thetext>&gt; It was only my rough but frank opinion about this situation.

Rough yes, frank no.

frank 1 |fraNGk|
adjective
open, honest, and direct

Your bizarre musing about the FTL somehow being &quot;top secret&quot; was not frank.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>911936</commentid>
    <comment_count>27</comment_count>
    <who name="Csaba Osztrogonác">ossy</who>
    <bug_when>2013-07-26 04:40:55 -0700</bug_when>
    <thetext>(In reply to comment #26)
&gt; &gt; It was only my rough but frank opinion about this situation.
&gt; 
&gt; Rough yes, frank no.
&gt; 
&gt; frank 1 |fraNGk|
&gt; adjective
&gt; open, honest, and direct

- open - yes
- honest - yes
- direct - yes

honest
adj
1. not given to lying, cheating, stealing, etc.; trustworthy
2. not false or misleading; genuine
 
&gt; Your bizarre musing about the FTL somehow being &quot;top secret&quot; was not frank.
I think you probably misinterpreted my sentence. I&apos;ve never said that FTL
was kept top secret. But the merge was top secret and done in ~7 minutes:
- https://trac.webkit.org/changeset/153113 - 07/25/13 05:58:12 (CEST)
- https://trac.webkit.org/changeset/153296 - 07/25/13 06:05:36 (CEST)

and then http://webkitmemes.tumblr.com/post/18264800090/cool-developers-dont-look-at-the-build-bots ... when the european developers still slept ...

The missing communication of the merge was so bizarre, not my opinion.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>912030</commentid>
    <comment_count>28</comment_count>
    <who name="Geoffrey Garen">ggaren</who>
    <bug_when>2013-07-26 12:01:49 -0700</bug_when>
    <thetext>(In reply to comment #27)

Look, I understand that you&apos;re skilled at being stubborn, so I&apos;m not going to waste my time arguing with you. I&apos;m just informing you: Your bad attitude is doing harm to your relationship with JSC developers, and the likely result will be a low-quality JS engine for Qt.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>912848</commentid>
    <comment_count>29</comment_count>
    <who name="Csaba Osztrogonác">ossy</who>
    <bug_when>2013-07-30 08:15:30 -0700</bug_when>
    <thetext>(In reply to comment #28)
&gt; (In reply to comment #27)
&gt; 
&gt; Look, I understand that you&apos;re skilled at being stubborn, so I&apos;m not going to waste my time arguing with you. I&apos;m just informing you: Your bad attitude is doing harm to your relationship with JSC developers, and the likely result will be a low-quality JS engine for Qt.

I really don&apos;t understand this threat. :o I only criticezed the _missing_ communication/announcment of the _merge_. (not the FTL development) I didn&apos;t lie, I didn&apos;t indulge in personalities. But I and other developers landed many
buildfixes and then I _asked_ JSC developers to fix the regressions and said
&quot;Thanks for your cooperation in advance.&quot; And generated backtrace in https://bugs.webkit.org/show_bug.cgi?id=119140 to help debugging. And I
was online at night in my free time and try to help Oliver figuring out
what happened. And tried to build QtWebKit with clang to check if it is
a gcc related or not (unfortunately without success). So please don&apos;t
consider me a hostile person.

And punishing Qt with low quality JS engine because of my opinion
would be a non-sense. I&apos;m not the Qt port and Qt port isn&apos;t me and I didn&apos;t
work on Qt port at all since Digia acquired it last year. Apart from this, 
I try to help the community and sometimes fix GTK/EFL/Qt builds and cross
platform issues too on trunk. (Of course I referenced to Qt results in
bug119140, because only Qt port has public 32 bit x86 and ARM tester
bots on WebKit trunk.)</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>207460</attachid>
            <date>2013-07-25 08:11:37 -0700</date>
            <delta_ts>2013-07-25 16:08:32 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-119089-20130725171136.patch</filename>
            <type>text/plain</type>
            <size>1538</size>
            <attacher name="Allan Sandfeld Jensen">allan.jensen</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTUzMzI1CmRpZmYgLS1naXQgYS9Tb3VyY2UvSmF2YVNjcmlw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=
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>207492</attachid>
            <date>2013-07-25 16:08:41 -0700</date>
            <delta_ts>2013-07-25 16:13:31 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-119089-20130725160841.patch</filename>
            <type>text/plain</type>
            <size>3069</size>
            <attacher name="Zan Dobersek">zan</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTUzMzQzCmRpZmYgLS1naXQgYS9Tb3VyY2UvSmF2YVNjcmlw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</data>

          </attachment>
      

    </bug>

</bugzilla>