147031 2015-07-16 21:34:53 -0700 Failed jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js when we don't use YarrJIT 2015-07-16 21:35:45 -0700 1 1 1 Unclassified WebKit JavaScriptCore 528+ (Nightly build) Unspecified Unspecified ASSIGNED InRadar P2 Normal --- 1 mark.lam mark.lam webkit-bug-importer oldest_to_newest 1110084 0 mark.lam 2015-07-16 21:34:53 -0700 Steps to reproduce: 1. Modify Platform.h and #define ENABLE_YARR_JIT 0 2. Build with Tools/Scripts/build-jsc --debug --no-ftl-jit 3. Run Tools/Scripts/run-javascriptcore-tests --debug --no-build You'll see the following failures: ** The following JSC stress test failures have been introduced: jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout-dfg-eager-no-cjit jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout-ftl jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout-ftl-eager-no-cjit jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout-ftl-no-cjit jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout-no-cjit jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout-no-llint Here's an example crash trace: jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout-no-llint: ERROR: Unexpected exit code: 139 jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: This page tests handling of parentheses subexpressions. jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE". jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: PASS regexp1.exec('abc') is ['ab','a','b'] jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: PASS regexp2.exec('abacadabe') is ['abe','ab','b','b'] jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: PASS regexp3.exec('abacadabe') is ['abe','ab','b',undefined] jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: PASS regexp4.exec('abacadabe') is ['abe','ab','b',undefined] jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: PASS regexp5.exec('abacadabe') is ['abe','ab','b','b',undefined,undefined] jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: PASS regexp6.exec('abcde') is ['ab','ab','b','b',undefined,undefined] jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: ASSERTION FAILED: (&term - term.atom.parenthesesWidth)->inputPosition == term.inputPosition jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: /Volumes/Data/ws6/OpenSource/Source/JavaScriptCore/yarr/YarrInterpreter.cpp(740) : bool JSC::Yarr::Interpreter<unsigned char>::backtrackParenthesesOnceEnd(JSC::Yarr::ByteTerm &, JSC::Yarr::Interpreter::DisjunctionContext *) [CharType = unsigned char] jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 1 0x10c641510 WTFCrash jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 2 0x10c60aa3d JSC::Yarr::Interpreter<unsigned char>::backtrackParenthesesOnceEnd(JSC::Yarr::ByteTerm&, JSC::Yarr::Interpreter<unsigned char>::DisjunctionContext*) jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 3 0x10c6075d2 JSC::Yarr::Interpreter<unsigned char>::matchDisjunction(JSC::Yarr::ByteDisjunction*, JSC::Yarr::Interpreter<unsigned char>::DisjunctionContext*, bool) jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 4 0x10c5fc951 JSC::Yarr::Interpreter<unsigned char>::interpret() jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 5 0x10c5fc4fd JSC::Yarr::interpret(JSC::Yarr::BytecodePattern*, WTF::String const&, unsigned int, unsigned int*) jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 6 0x10c52d362 JSC::RegExp::match(JSC::VM&, WTF::String const&, unsigned int) jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 7 0x10c536270 JSC::RegExpConstructor::performMatch(JSC::VM&, JSC::RegExp*, JSC::JSString*, WTF::String const&, int) jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 8 0x10c535f03 JSC::RegExpObject::match(JSC::ExecState*, JSC::JSString*) jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 9 0x10c535de7 JSC::RegExpObject::exec(JSC::ExecState*, JSC::JSString*) jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 10 0x10c536a32 JSC::regExpProtoFuncExec(JSC::ExecState*) jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 11 0x206b23001028 jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 12 0x10c3d3b01 llint_entry jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 13 0x10c3cd2c9 vmEntryToJavaScript jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 14 0x10c22913c JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 15 0x10c20a060 JSC::Interpreter::execute(JSC::EvalExecutable*, JSC::ExecState*, JSC::JSValue, JSC::JSScope*) jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 16 0x10c20964b JSC::eval(JSC::ExecState*) jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 17 0x10c3c6e28 llint_slow_path_call_eval jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 18 0x10c3d3e1c llint_entry jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 19 0x10c3d3b01 llint_entry jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 20 0x10c3cd2c9 vmEntryToJavaScript jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 21 0x10c22913c JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 22 0x10c20cec3 JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::JSObject*) jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 23 0x10bceedc1 JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 24 0x10bb45194 runWithScripts(GlobalObject*, WTF::Vector<Script, 0ul, WTF::CrashOnOverflow, 16ul> const&, bool) jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 25 0x10bb4452f jscmain(int, char**) jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 26 0x10bb4402b main jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 27 0x7fff95a505ad start jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: 28 0x6 jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: test_script_20907: line 2: 86725 Segmentation fault: 11 "$@" ../../../../../.vm/JavaScriptCore.framework/Resources/jsc --useFTLJIT\=false --enableFunctionDotArguments\=true resources/standalone-pre.js parentheses.js resources/standalone-post.js jsc-layout-tests.yaml/fast/regex/script-tests/parentheses.js.layout: ERROR: Unexpected exit code: 139 1110086 1 webkit-bug-importer 2015-07-16 21:35:45 -0700 <rdar://problem/21869357>