<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>135323</bug_id>
          
          <creation_ts>2014-07-26 10:02:20 -0700</creation_ts>
          <short_desc>[REGRESSION][ftlopt merge][32-bit] stress/prune-multi-put-by-offset-replace-or-transition-variant.js.dfg-eager hits an assertion in SpeculativeJIT::silentSavePlanForGPR</short_desc>
          <delta_ts>2014-07-29 15:45:51 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Filip Pizlo">fpizlo</reporter>
          <assigned_to name="Filip Pizlo">fpizlo</assigned_to>
          <cc>ap</cc>
    
    <cc>barraclough</cc>
    
    <cc>ggaren</cc>
    
    <cc>mark.lam</cc>
    
    <cc>mhahnenberg</cc>
    
    <cc>mmirman</cc>
    
    <cc>msaboff</cc>
    
    <cc>oliver</cc>
    
    <cc>sam</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1025023</commentid>
    <comment_count>0</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2014-07-26 10:02:20 -0700</bug_when>
    <thetext>Patch forthcoming.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1025024</commentid>
    <comment_count>1</comment_count>
      <attachid>235574</attachid>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2014-07-26 10:07:01 -0700</bug_when>
    <thetext>Created attachment 235574
the patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1025076</commentid>
    <comment_count>2</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2014-07-27 16:36:03 -0700</bug_when>
    <thetext>Landed in http://trac.webkit.org/changeset/171662</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1025581</commentid>
    <comment_count>3</comment_count>
    <who name="Mark Hahnenberg">mhahnenberg</who>
    <bug_when>2014-07-29 15:45:51 -0700</bug_when>
    <thetext>*** Bug 135025 has been marked as a duplicate of this bug. ***</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>235574</attachid>
            <date>2014-07-26 10:07:01 -0700</date>
            <delta_ts>2014-07-26 11:58:19 -0700</delta_ts>
            <desc>the patch</desc>
            <filename>blah.patch</filename>
            <type>text/plain</type>
            <size>5767</size>
            <attacher name="Filip Pizlo">fpizlo</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="260145"
          type_id="1"
          status="+"
          setter="oliver"
    />
          </attachment>
      

    </bug>

</bugzilla>