122838 2013-10-15 09:31:58 -0700 run-javascriptcore-tests crashes in LLINT due to bad CallFrame* 2013-11-06 16:17:44 -0800 1 1 1 Unclassified WebKit JavaScriptCore 528+ (Nightly build) Unspecified Unspecified ASSIGNED P2 Normal --- 122839 1 mark.lam mark.lam ggaren oldest_to_newest 939995 0 mark.lam 2013-10-15 09:31:58 -0700 With the debugger enabled, run-javascriptcore-tests crashes in the LLINT slow path for op_debug. The crash is due to a bad CodeBlock* value in the CallFrame. The op_debug being process is for a "DidExecuteProgram" notification. When this issue manifests, the CodeBlock* value is always 0x7. Investigating. 940075 1 mark.lam 2013-10-15 12:17:03 -0700 Turns out the issue reproduces even when I don't force the Debugger to be enabled. It reproduces readily with the C Loop LLINT. Still investigating.