<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>119447</bug_id>
          
          <creation_ts>2013-08-02 09:29:47 -0700</creation_ts>
          <short_desc>REGRESSION(FTL): Fix mips implementation of ctiVMThrowTrampolineSlowpath</short_desc>
          <delta_ts>2013-08-16 04:15:06 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>108664</blocked>
          <everconfirmed>0</everconfirmed>
          <reporter name="Julien Brianceau">jbriance</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>commit-queue</cc>
    
    <cc>fpizlo</cc>
    
    <cc>gergely</cc>
    
    <cc>ggaren</cc>
    
    <cc>kilvadyb</cc>
    
    <cc>msaboff</cc>
    
    <cc>oliver</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>914177</commentid>
    <comment_count>0</comment_count>
    <who name="Julien Brianceau">jbriance</who>
    <bug_when>2013-08-02 09:29:47 -0700</bug_when>
    <thetext>Crashes are observed during javascriptcore tests. For instance, array-defineOwnProperty.js:

This test checks the behavior of [[DefineOwnProperty]] applied to Array objects (see ES5.1 15.4.5.1).

On success, you will see a series of &quot;PASS&quot; messages, followed by &quot;TEST COMPLETE&quot;.


PASS Object.defineProperty([], &apos;x&apos;, { get:function(){return true;} }).x is true
PASS Object.defineProperty([], &apos;length&apos;, { value: 1 }).length is 1
PASS var a = Object.defineProperty([], &apos;length&apos;, { writable: false }); a[1] = 1; a.length is 0
PASS var a = Object.defineProperty([], &apos;length&apos;, { writable: false }); a.length = 1; a.length is 0
PASS var a = Object.defineProperty([], &apos;length&apos;, {}); a.length = 1; a.length is 1
Segmentation fault</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>914179</commentid>
    <comment_count>1</comment_count>
      <attachid>208028</attachid>
    <who name="Julien Brianceau">jbriance</who>
    <bug_when>2013-08-02 09:36:19 -0700</bug_when>
    <thetext>Created attachment 208028
ctiVMThrowTrampolineSlowpath fix for mips architecture.

This patches fixes the issue on my Broadcom 7241 board.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>914216</commentid>
    <comment_count>2</comment_count>
      <attachid>208028</attachid>
    <who name="Geoffrey Garen">ggaren</who>
    <bug_when>2013-08-02 11:21:29 -0700</bug_when>
    <thetext>Comment on attachment 208028
ctiVMThrowTrampolineSlowpath fix for mips architecture.

r=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>914226</commentid>
    <comment_count>3</comment_count>
      <attachid>208028</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2013-08-02 11:44:11 -0700</bug_when>
    <thetext>Comment on attachment 208028
ctiVMThrowTrampolineSlowpath fix for mips architecture.

Clearing flags on attachment: 208028

Committed r153659: &lt;http://trac.webkit.org/changeset/153659&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>914227</commentid>
    <comment_count>4</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2013-08-02 11:44:13 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>208028</attachid>
            <date>2013-08-02 09:36:19 -0700</date>
            <delta_ts>2013-08-02 11:44:11 -0700</delta_ts>
            <desc>ctiVMThrowTrampolineSlowpath fix for mips architecture.</desc>
            <filename>bug-119447.patch</filename>
            <type>text/plain</type>
            <size>2213</size>
            <attacher name="Julien Brianceau">jbriance</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09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=
</data>

          </attachment>
      

    </bug>

</bugzilla>