154168 2016-02-12 08:10:36 -0800 FTL JIT crash when running the TypeScript test from Octane benchmark 2016-03-07 06:51:00 -0800 1 1 1 Unclassified WebKit JavaScriptCore WebKit Local Build Unspecified Linux NEW https://bugs.webkit.org/show_bug.cgi?id=155037 P2 Normal --- 1 lantw44 webkit-unassigned bugs-noreply clopez mcatanzaro oldest_to_newest 1164142 0 lantw44 2016-02-12 08:10:36 -0800 Steps to reproduce: 1. Build WebKit with debug configuration and FTL JIT enabled. 2. Run './MiniBrowser https://octane-benchmark.googlecode.com/svn/latest/index.html' from a terminal. 3. Click 'Start Octane 2.0' in the web page. Result: Assertion failure shows in the terminal and WebKitWebProcess crashes when it runs the TypeScript test. If it doesn't crash, running the benchmark again is likely to crash it. This bug was found while making FTL JIT work on FreeBSD, so I put links to backtraces instead of pasting them again. Backtrace on FreeBSD: https://bugs.webkit.org/show_bug.cgi?id=152258#c10 Backtrace on GNU/Linux: https://bugs.webkit.org/show_bug.cgi?id=152258#c11 1171572 1 clopez 2016-03-07 06:51:00 -0800 I think this bug may be the same as 155037