<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>123799</bug_id>
          
          <creation_ts>2013-11-05 04:49:41 -0800</creation_ts>
          <short_desc>REGRESSION(r158315): register mixup in JIT::compileOpCall</short_desc>
          <delta_ts>2013-11-05 09:09:26 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Julien Brianceau">jbriance</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>commit-queue</cc>
    
    <cc>fpizlo</cc>
    
    <cc>gergely</cc>
    
    <cc>kilvadyb</cc>
    
    <cc>mark.lam</cc>
    
    <cc>msaboff</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>947117</commentid>
    <comment_count>0</comment_count>
    <who name="Julien Brianceau">jbriance</who>
    <bug_when>2013-11-05 04:49:41 -0800</bug_when>
    <thetext>Changeset 158315 (http://trac.webkit.org/changeset/158315) is crashing architectures where JSInterfaceJIT::regT3 is different from GPRInfo::regT3, like in mips.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947120</commentid>
    <comment_count>1</comment_count>
      <attachid>216026</attachid>
    <who name="Julien Brianceau">jbriance</who>
    <bug_when>2013-11-05 04:54:33 -0800</bug_when>
    <thetext>Created attachment 216026
Use regT3 instead of GPRInfo::regT3 in JIT::compileOpCall</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947153</commentid>
    <comment_count>2</comment_count>
      <attachid>216026</attachid>
    <who name="Mark Lam">mark.lam</who>
    <bug_when>2013-11-05 07:16:41 -0800</bug_when>
    <thetext>Comment on attachment 216026
Use regT3 instead of GPRInfo::regT3 in JIT::compileOpCall

r=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947167</commentid>
    <comment_count>3</comment_count>
      <attachid>216026</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2013-11-05 07:32:07 -0800</bug_when>
    <thetext>Comment on attachment 216026
Use regT3 instead of GPRInfo::regT3 in JIT::compileOpCall

Clearing flags on attachment: 216026

Committed r158672: &lt;http://trac.webkit.org/changeset/158672&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947168</commentid>
    <comment_count>4</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2013-11-05 07:32:10 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947180</commentid>
    <comment_count>5</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2013-11-05 08:23:11 -0800</bug_when>
    <thetext>Why does MIPS use a different definition of regT3?

Why not fix that problem?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947182</commentid>
    <comment_count>6</comment_count>
    <who name="Mark Lam">mark.lam</who>
    <bug_when>2013-11-05 08:25:56 -0800</bug_when>
    <thetext>(In reply to comment #5)
&gt; Why does MIPS use a different definition of regT3?
&gt; 
&gt; Why not fix that problem?

I agree that we should make the register assignments consistent.  However, MIPS isn&apos;t the only CPU port that has this issue.  For now, I r+ the change to resolve the immediate action.  Longer term, we should look into unifying the register assignments in GPRInfo.h and JSInterfaceJIT.h.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947183</commentid>
    <comment_count>7</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2013-11-05 08:27:25 -0800</bug_when>
    <thetext>(In reply to comment #6)
&gt; (In reply to comment #5)
&gt; &gt; Why does MIPS use a different definition of regT3?
&gt; &gt; 
&gt; &gt; Why not fix that problem?
&gt; 
&gt; I agree that we should make the register assignments consistent.  However, MIPS isn&apos;t the only CPU port that has this issue.  For now, I r+ the change to resolve the immediate action.  Longer term, we should look into unifying the register assignments in GPRInfo.h and JSInterfaceJIT.h.

Which others have this problem?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947184</commentid>
    <comment_count>8</comment_count>
    <who name="Julien Brianceau">jbriance</who>
    <bug_when>2013-11-05 08:27:47 -0800</bug_when>
    <thetext>(In reply to comment #5)
&gt; Why does MIPS use a different definition of regT3?
Good question, I don&apos;t know why MIPS backend has been designed like this.
 
&gt; Why not fix that problem?
I can try if you think it&apos;s worth to do so.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947185</commentid>
    <comment_count>9</comment_count>
    <who name="Mark Lam">mark.lam</who>
    <bug_when>2013-11-05 08:36:44 -0800</bug_when>
    <thetext>(In reply to comment #7)
&gt; Which others have this problem?

Apart from MIPS, at a glance ...

For this exact problem:

CPU(ARM64):  regT3:  x23    vs    x3

For other discrepancies between GPRInfo.h and JSInterfaceJIT.h:

CPU(X86_86): regT4:   r10     vs    edi
CPU(ARM):      regT4:   r7      vs    r8
CPU(ARM64):  regT4:   x24    vs    x4</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947200</commentid>
    <comment_count>10</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2013-11-05 08:59:15 -0800</bug_when>
    <thetext>(In reply to comment #9)
&gt; (In reply to comment #7)
&gt; &gt; Which others have this problem?
&gt; 
&gt; Apart from MIPS, at a glance ...
&gt; 
&gt; For this exact problem:
&gt; 
&gt; CPU(ARM64):  regT3:  x23    vs    x3
&gt; 
&gt; For other discrepancies between GPRInfo.h and JSInterfaceJIT.h:
&gt; 
&gt; CPU(X86_86): regT4:   r10     vs    edi
&gt; CPU(ARM):      regT4:   r7      vs    r8
&gt; CPU(ARM64):  regT4:   x24    vs    x4

We should fix that by getting rid of the regT* definitions in JSInterfaceJIT.h

If some backend can&apos;t handle it then that&apos;s a separate problem.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947208</commentid>
    <comment_count>11</comment_count>
    <who name="Mark Lam">mark.lam</who>
    <bug_when>2013-11-05 09:05:15 -0800</bug_when>
    <thetext>(In reply to comment #10)
&gt; We should fix that by getting rid of the regT* definitions in JSInterfaceJIT.h

I&apos;ll work on it in https://bugs.webkit.org/show_bug.cgi?id=123806.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947216</commentid>
    <comment_count>12</comment_count>
    <who name="Julien Brianceau">jbriance</who>
    <bug_when>2013-11-05 09:09:26 -0800</bug_when>
    <thetext>As discussed with Mark on IRC, I&apos;ll submit a patch soon to fix MIPS backend in https://bugs.webkit.org/show_bug.cgi?id=123807</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>216026</attachid>
            <date>2013-11-05 04:54:33 -0800</date>
            <delta_ts>2013-11-05 07:32:07 -0800</delta_ts>
            <desc>Use regT3 instead of GPRInfo::regT3 in JIT::compileOpCall</desc>
            <filename>bug-123799.patch</filename>
            <type>text/plain</type>
            <size>1678</size>
            <attacher name="Julien Brianceau">jbriance</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291
cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkocmV2aXNpb24gMTU4NjYxKQorKysgU291cmNl
L0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE2IEBA
CisyMDEzLTExLTA1ICBKdWxpZW4gQnJpYW5jZWF1ICA8amJyaWFuY2VAY2lzY28uY29tPgorCisg
ICAgICAgIFJFR1JFU1NJT04ocjE1ODMxNSk6IEZpeCByZWdpc3RlciBtaXh1cCBpbiBKSVQ6OmNv
bXBpbGVPcENhbGwuCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNn
aT9pZD0xMjM3OTkKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAg
ICAgICBDaGFuZ2VzZXQgcjE1ODMxNSBpcyBjcmFzaGluZyBhcmNoaXRlY3R1cmVzIHdoZXJlIEpT
SW50ZXJmYWNlSklUOjpyZWdUMyBpcworICAgICAgICBkaWZmZXJlbnQgZnJvbSBHUFJJbmZvOjpy
ZWdUMy4gVGhpcyBpcyB0aGUgY2FzZSBmb3IgTUlQUyBhcmNoaXRlY3R1cmUuCisKKyAgICAgICAg
KiBqaXQvSklUQ2FsbDMyXzY0LmNwcDoKKyAgICAgICAgKEpTQzo6SklUOjpjb21waWxlT3BDYWxs
KToKKwogMjAxMy0xMS0wNCAgRmlsaXAgUGl6bG8gIDxmcGl6bG9AYXBwbGUuY29tPgogCiAgICAg
ICAgIGludGVybmFsLWpzLXRlc3RzLnlhbWwvT2N0YW5lL3N0cmVzcy10ZXN0cy9wZGZqcy5qcy5k
ZWZhdWx0OiBBU1NFUlRJT04gRkFJTEVEOiBtX3N0YXRlLmZvck5vZGUoY2hpbGQpLm1fZnV0dXJl
UG9zc2libGVTdHJ1Y3R1cmUuaXNTdWJzZXRPZihTdHJ1Y3R1cmVTZXQoc3RydWN0dXJlKSkgYXQg
REZHQ29uc3RhbnRGb2xkaW5nUGhhc2UuY3BwOjI0OQpJbmRleDogU291cmNlL0phdmFTY3JpcHRD
b3JlL2ppdC9KSVRDYWxsMzJfNjQuY3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9KYXZhU2NyaXB0
Q29yZS9qaXQvSklUQ2FsbDMyXzY0LmNwcAkocmV2aXNpb24gMTU4NjU0KQorKysgU291cmNlL0ph
dmFTY3JpcHRDb3JlL2ppdC9KSVRDYWxsMzJfNjQuY3BwCSh3b3JraW5nIGNvcHkpCkBAIC0yNjIs
NyArMjYyLDcgQEAgdm9pZCBKSVQ6OmNvbXBpbGVPcENhbGwoT3Bjb2RlSUQgb3Bjb2RlSQogICAg
IHN0b3JlMzIoVHJ1c3RlZEltbTMyKGxvY2F0aW9uQml0cyksIHRhZ0ZvcihKU1N0YWNrOjpBcmd1
bWVudENvdW50LCBjYWxsRnJhbWVSZWdpc3RlcikpOwogICAgIGVtaXRMb2FkKGNhbGxlZSwgcmVn
VDEsIHJlZ1QwKTsgLy8gcmVnVDEsIHJlZ1QwIGhvbGRzIGNhbGxlZS4KIAotICAgIHN0b3JlUHRy
KGNhbGxGcmFtZVJlZ2lzdGVyLCBBZGRyZXNzKEdQUkluZm86OnJlZ1QzLCBDYWxsRnJhbWU6OmNh
bGxlckZyYW1lT2Zmc2V0KCkpKTsKKyAgICBzdG9yZVB0cihjYWxsRnJhbWVSZWdpc3RlciwgQWRk
cmVzcyhyZWdUMywgQ2FsbEZyYW1lOjpjYWxsZXJGcmFtZU9mZnNldCgpKSk7CiAgICAgZW1pdFN0
b3JlKEpTU3RhY2s6OkNhbGxlZSwgcmVnVDEsIHJlZ1QwLCByZWdUMyk7CiAgICAgbW92ZShyZWdU
MywgY2FsbEZyYW1lUmVnaXN0ZXIpOwogCg==
</data>

          </attachment>
      

    </bug>

</bugzilla>