149341 2015-09-18 03:44:01 -0700 REGRESSION(r189889): It made Speedometer/Full.html performance test crash on Linux 2018-01-17 19:11:50 -0800 1 1 1 Unclassified WebKit New Bugs Other Unspecified Unspecified NEW P1 Critical --- 149220 1 ossy webkit-unassigned basile_clement cdumez cgarcia clopez fpizlo ggaren gyuyoung.kim msaboff ossy rniwa saam oldest_to_newest 1127092 0 ossy 2015-09-18 03:44:01 -0700 +++ This bug was initially created as a clone of Bug #149162 +++ http://trac.webkit.org/changeset/189774 made Speedometer/Full.html test crash on the performance bots: - Apple Yosemite: https://build.webkit.org/builders/Apple%20Yosemite%20Release%20WK2%20%28Perf%29/builds/2904 - Apple Mavericks: https://build.webkit.org/builders/Apple%20Mavericks%20Release%20WK2%20%28Perf%29/builds/5762 - EFL: https://build.webkit.org/builders/EFL%20Linux%2064-bit%20Release%20WK2%20%28Perf%29/builds/6860 - GTK: https://build.webkit.org/builders/GTK%20Linux%2064-bit%20Release%20%28Perf%29/builds/4051 ----- It was relanded in http://trac.webkit.org/changeset/189884 , but unfortunately Speedometer/Full.html is still crashing on Linux performance bots: - https://build.webkit.org/builders/GTK%20Linux%2064-bit%20Release%20%28Perf%29/builds/4071 - https://build.webkit.org/builders/EFL%20Linux%2064-bit%20Release%20WK2%20%28Perf%29/builds/6877 crash log from the EFL bot: Running Speedometer/Full.html (150 of 150) error: Speedometer/Full.html 1 0x7f8ec5735488 2 0x7f8ec5913eb0 3 0x7f8ec53869ef JSC::SlotVisitor::drain() 4 0x7f8ec5371d8f JSC::Heap::markRoots(double, void*, void*, __jmp_buf_tag (&) [1]) 5 0x7f8ec537c6b3 JSC::Heap::collectImpl(JSC::HeapOperation, void*, void*, __jmp_buf_tag (&) [1]) 6 0x7f8ec537c948 JSC::Heap::collect(JSC::HeapOperation) 7 0x7f8ec5381e35 JSC::MarkedAllocator::allocateSlowCase(unsigned long) 8 0x7f8ec540cce0 JSC::Structure::prototypeChain(JSC::ExecState*) const 9 0x7f8ec540cee4 JSC::propertyNameEnumerator(JSC::ExecState*, JSC::JSObject*) 10 0x7f8e68081b4c FAILED 1127099 1 ossy 2015-09-18 04:42:56 -0700 It seems http://trac.webkit.org/changeset/189884 is innocent, http://trac.webkit.org/changeset/189889 is the culprit. I tested it on EFL, it passes on r189888, but fails on r189889. 1128462 2 ossy 2015-09-24 03:26:22 -0700 This GC related regresssion is still valid. Isn't anybody interested in fixing it? 1390354 3 rniwa 2018-01-17 19:11:50 -0800 Is this still happening?