<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>141577</bug_id>
          
          <creation_ts>2015-02-13 14:33:56 -0800</creation_ts>
          <short_desc>REGRESSION(r180060) New js/regress-141098 test crashes when LLInt is disabled.</short_desc>
          <delta_ts>2015-02-13 14:46:54 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>141098</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Michael Saboff">msaboff</reporter>
          <assigned_to name="Michael Saboff">msaboff</assigned_to>
          <cc>achristensen</cc>
    
    <cc>ap</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1069034</commentid>
    <comment_count>0</comment_count>
    <who name="Michael Saboff">msaboff</who>
    <bug_when>2015-02-13 14:33:56 -0800</bug_when>
    <thetext>jsc-layout-tests.yaml/js/script-tests/regress-141098.js.layout-no-llint: Regression test for https://webkit.org/b/141098. Make sure eval() properly handles running out of stack space. This test should run without crashing.
jsc-layout-tests.yaml/js/script-tests/regress-141098.js.layout-no-llint: 
jsc-layout-tests.yaml/js/script-tests/regress-141098.js.layout-no-llint: On success, you will see a series of &quot;PASS&quot; messages, followed by &quot;TEST COMPLETE&quot;.
jsc-layout-tests.yaml/js/script-tests/regress-141098.js.layout-no-llint: 
jsc-layout-tests.yaml/js/script-tests/regress-141098.js.layout-no-llint: 
jsc-layout-tests.yaml/js/script-tests/regress-141098.js.layout-no-llint: test_script_9825: line 2:  1584 Segmentation fault      &quot;$@&quot; ../../../../.vm/JavaScriptCore.framework/Resources/jsc --useFTLJIT\=false --enableFunctionDotArguments\=true --useLLInt\=false resources/standalone-pre.js regress-141098.js resources/standalone-post.js
jsc-layout-tests.yaml/js/script-tests/regress-141098.js.layout-no-llint: ERROR: Unexpected exit code: 139
FAIL: jsc-layout-tests.yaml/js/script-tests/regress-141098.js.layout-no-llint

Need to make a similar stack check to the Baseline JIT.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1069035</commentid>
    <comment_count>1</comment_count>
      <attachid>246550</attachid>
    <who name="Michael Saboff">msaboff</who>
    <bug_when>2015-02-13 14:39:44 -0800</bug_when>
    <thetext>Created attachment 246550
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1069038</commentid>
    <comment_count>2</comment_count>
      <attachid>246550</attachid>
    <who name="Benjamin Poulain">benjamin</who>
    <bug_when>2015-02-13 14:44:39 -0800</bug_when>
    <thetext>Comment on attachment 246550
Patch

rs=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1069040</commentid>
    <comment_count>3</comment_count>
    <who name="Michael Saboff">msaboff</who>
    <bug_when>2015-02-13 14:46:54 -0800</bug_when>
    <thetext>Committed r180083: &lt;http://trac.webkit.org/changeset/180083&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>246550</attachid>
            <date>2015-02-13 14:39:44 -0800</date>
            <delta_ts>2015-02-13 14:44:39 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>141577.patch</filename>
            <type>text/plain</type>
            <size>3151</size>
            <attacher name="Michael Saboff">msaboff</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="271491"
          type_id="1"
          status="+"
          setter="benjamin"
    />
          </attachment>
      

    </bug>

</bugzilla>