160881 2016-08-15 17:01:55 -0700 [Regression 204203-204210] 32-bit ASSERTION FAILED: !m_data[index].name.isValid() 2016-08-16 09:34:15 -0700 1 1 1 Unclassified WebKit JavaScriptCore WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 mark.lam benjamin benjamin commit-queue fpizlo ggaren keith_miller mark.lam msaboff ryanhaddad saam oldest_to_newest 1220243 0 mark.lam 2016-08-15 17:01:55 -0700 The mozilla-tests.yaml/ecma/LexicalConventions/7.7.3.js.mozilla-dfg-eager-no-cjit-validate-phases test is failing on the 32-bit JSC test bot: https://build.webkit.org/builders/Apple%20El%20Capitan%2032-bit%20JSC%20%28BuildAndTest%29/builds/3166 ASSERTION FAILED: !m_data[index].name.isValid() /Volumes/Data/slave/elcapitan-32bitJSC-debug/build/Source/JavaScriptCore/dfg/DFGRegisterBank.h(168) : void JSC::DFG::RegisterBank<JSC::GPRInfo>::retain(RegID, JSC::VirtualRegister, SpillHint) [BankInfo = JSC::GPRInfo] 1 0xe83c8d WTFCrash 2 0x6b147b JSC::DFG::RegisterBank<JSC::GPRInfo>::retain(JSC::X86Registers::RegisterID, JSC::VirtualRegister, unsigned int) 3 0x6b57f6 JSC::DFG::SpeculativeJIT::jsValueResult(JSC::X86Registers::RegisterID, JSC::X86Registers::RegisterID, JSC::DFG::Node*, JSC::DataFormat, JSC::DFG::SpeculativeJIT::UseChildrenMode) 4 0x7089e3 JSC::DFG::SpeculativeJIT::compile(JSC::DFG::Node*) 5 0x67f1dc JSC::DFG::SpeculativeJIT::compileCurrentBlock() 6 0x67fb82 JSC::DFG::SpeculativeJIT::compile() 7 0x5280ec JSC::DFG::JITCompiler::compileBody() 8 0x52bd5a JSC::DFG::JITCompiler::compileFunction() 9 0x6316bc JSC::DFG::Plan::compileInThreadImpl() 10 0x6301af JSC::DFG::Plan::compileInThread(JSC::DFG::ThreadData*) 11 0x4a6d95 JSC::DFG::compileImpl(JSC::VM&, JSC::CodeBlock*, JSC::CodeBlock*, JSC::DFG::CompilationMode, unsigned int, JSC::Operands<JSC::JSValue> const&, WTF::PassRefPtr<JSC::DeferredCompilationCallback>) 12 0x4a67b2 JSC::DFG::compile(JSC::VM&, JSC::CodeBlock*, JSC::CodeBlock*, JSC::DFG::CompilationMode, unsigned int, JSC::Operands<JSC::JSValue> const&, WTF::PassRefPtr<JSC::DeferredCompilationCallback>) 13 0x960f45 operationOptimize 14 0x2b80456 15 0xb57c01 llint_entry 16 0xb525ac vmEntryToJavaScript 17 0x946bd2 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) 18 0x8e4e5e JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::JSObject*) 19 0x2c3818 JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) 20 0x686df runWithScripts(GlobalObject*, WTF::Vector<Script, 0ul, WTF::CrashOnOverflow, 16ul> const&, WTF::String const&, bool, bool) 21 0x67856 runJSC(JSC::VM*, CommandLine) 22 0x66699 jscmain(int, char**) 23 0x66506 main 24 0x97baf6ad start 25 0x13 1220246 1 mark.lam 2016-08-15 17:06:44 -0700 Line for running the test: $ jsc --useFTLJIT\=false --useFunctionDotArguments\=true --maxPerThreadStackUsage\=1572864 --validateBytecode\=true --validateGraphAtEachPhase\=true --useConcurrentJIT\=false --thresholdForJITAfterWarmUp\=100 --thresholdForJITAfterWarmUp\=10 --thresholdForJITSoon\=10 --thresholdForOptimizeAfterWarmUp\=20 --thresholdForOptimizeAfterLongWarmUp\=20 --thresholdForOptimizeSoon\=20 --thresholdForFTLOptimizeAfterWarmUp\=20 --thresholdForFTLOptimizeSoon\=20 --maximumEvalCacheableSourceLength\=150000 --useEagerCodeBlockJettisonTiming\=true ../shell.js 7.7.3.js 1220296 2 286133 benjamin 2016-08-15 18:52:29 -0700 Created attachment 286133 Patch 1220305 3 286133 mark.lam 2016-08-15 19:25:33 -0700 Comment on attachment 286133 Patch r=me 1220347 4 286133 commit-queue 2016-08-15 21:19:11 -0700 Comment on attachment 286133 Patch Clearing flags on attachment: 286133 Committed r204495: <http://trac.webkit.org/changeset/204495> 1220348 5 commit-queue 2016-08-15 21:19:15 -0700 All reviewed patches have been landed. Closing bug. 1220365 6 ap 2016-08-15 22:53:33 -0700 *** Bug 160662 has been marked as a duplicate of this bug. *** 1220460 7 ap 2016-08-16 09:34:15 -0700 *** Bug 160662 has been marked as a duplicate of this bug. *** 286133 2016-08-15 18:52:29 -0700 2016-08-15 21:19:11 -0700 Patch bug-160881-20160815185044.patch text/plain 2058 benjamin U3VidmVyc2lvbiBSZXZpc2lvbjogMjA0NDg5CmRpZmYgLS1naXQgYS9Tb3VyY2UvSmF2YVNjcmlw dENvcmUvQ2hhbmdlTG9nIGIvU291cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwppbmRleCA2 YTg5NjVkN2Y5ZDBhODI1MTQzZDMzY2E2ZDA2NTQ0ZDVlMWQwZjBmLi4zYzM5YjBiZmVmNGYyZjEy ZDc2OTg3YjA0ODg1ZWQyNDlhYzA1NTFjIDEwMDY0NAotLS0gYS9Tb3VyY2UvSmF2YVNjcmlwdENv cmUvQ2hhbmdlTG9nCisrKyBiL1NvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKQEAgLTEs MyArMSwxNiBAQAorMjAxNi0wOC0xNSAgQmVuamFtaW4gUG91bGFpbiAgPGJwb3VsYWluQGFwcGxl LmNvbT4KKworICAgICAgICBbUmVncmVzc2lvbiAyMDQyMDMtMjA0MjEwXSAzMi1iaXQgQVNTRVJU SU9OIEZBSUxFRDogIW1fZGF0YVtpbmRleF0ubmFtZS5pc1ZhbGlkKCkKKyAgICAgICAgaHR0cHM6 Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE2MDg4MQorCisgICAgICAgIFJldmll d2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgICogZGZnL0RGR1NwZWN1bGF0aXZlSklU MzJfNjQuY3BwOgorICAgICAgICAoSlNDOjpERkc6OlNwZWN1bGF0aXZlSklUOjpjb21waWxlKToK KyAgICAgICAgV2Ugd2VyZSB0cnlpbmcgdG8gc2V0IHRoZSByZXN1bHQgb2YgdGhlIElkZW50aXR5 IG5vZGUgdG8gdGhlIHNhbWUKKyAgICAgICAgdmFsdWUgYXMgdGhlIHNvdXJjZSBvZiB0aGUgSWRl bnRpdHkuCisgICAgICAgIFRoYXQgaXMgcHJldHR5IG1lc3NlZCB1cC4KKwogMjAxNi0wOC0xNSAg U2FhbSBCYXJhdGkgIDxzYmFyYXRpQGFwcGxlLmNvbT4KIAogICAgICAgICBXZWIgSW5zcGVjdG9y OiBJbnRyb2R1Y2UgYSBtZXRob2QgdG8gZW5hYmxlIGNvZGUgY292ZXJhZ2UgcHJvZmlsZXIgd2l0 aG91dCBlbmFibGluZyB0eXBlIHByb2ZpbGVyCmRpZmYgLS1naXQgYS9Tb3VyY2UvSmF2YVNjcmlw dENvcmUvZGZnL0RGR1NwZWN1bGF0aXZlSklUMzJfNjQuY3BwIGIvU291cmNlL0phdmFTY3JpcHRD b3JlL2RmZy9ERkdTcGVjdWxhdGl2ZUpJVDMyXzY0LmNwcAppbmRleCAxMGRkYzRkZmJkZjQ5MGRi NzUxNjRiNGE4ZWViNmZiZWVmYzMwM2NlLi5hZjQyMTdhNWJhY2EzMjkwZjQ3ODk3NmYxMjE2MTVi NzFmNGYxNDM3IDEwMDY0NAotLS0gYS9Tb3VyY2UvSmF2YVNjcmlwdENvcmUvZGZnL0RGR1NwZWN1 bGF0aXZlSklUMzJfNjQuY3BwCisrKyBiL1NvdXJjZS9KYXZhU2NyaXB0Q29yZS9kZmcvREZHU3Bl Y3VsYXRpdmVKSVQzMl82NC5jcHAKQEAgLTE5NzMsNyArMTk3MywxNSBAQCB2b2lkIFNwZWN1bGF0 aXZlSklUOjpjb21waWxlKE5vZGUqIG5vZGUpCiAgICAgICAgIH0KICAgICAgICAgZGVmYXVsdDog ewogICAgICAgICAgICAgSlNWYWx1ZU9wZXJhbmQgb3AodGhpcywgbm9kZS0+Y2hpbGQxKCkpOwot ICAgICAgICAgICAganNWYWx1ZVJlc3VsdChvcC50YWdHUFIoKSwgb3AucGF5bG9hZEdQUigpLCBu b2RlKTsKKyAgICAgICAgICAgIEdQUlRlbXBvcmFyeSByZXN1bHRUYWcodGhpcywgUmV1c2UsIG9w LCBUYWdXb3JkKTsKKyAgICAgICAgICAgIEdQUlRlbXBvcmFyeSByZXN1bHRQYXlsb2FkKHRoaXMs IFJldXNlLCBvcCwgUGF5bG9hZFdvcmQpOworICAgICAgICAgICAgR1BSUmVnIHNvdXJjZVRhZyA9 IG9wLnRhZ0dQUigpOworICAgICAgICAgICAgR1BSUmVnIHNvdXJjZVBheWxvYWQgPSBvcC5wYXls b2FkR1BSKCk7CisgICAgICAgICAgICBHUFJSZWcgcmVzdWx0VGFnR1BSID0gcmVzdWx0VGFnLmdw cigpOworICAgICAgICAgICAgR1BSUmVnIHJlc3VsdFBheWxvYWRHUFIgPSByZXN1bHRQYXlsb2Fk LmdwcigpOworICAgICAgICAgICAgbV9qaXQubW92ZShzb3VyY2VUYWcsIHJlc3VsdFRhZ0dQUik7 CisgICAgICAgICAgICBtX2ppdC5tb3ZlKHNvdXJjZVBheWxvYWQsIHJlc3VsdFBheWxvYWRHUFIp OworICAgICAgICAgICAganNWYWx1ZVJlc3VsdChyZXN1bHRUYWdHUFIsIHJlc3VsdFBheWxvYWRH UFIsIG5vZGUpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgIH0KICAgICAgICAgfSAvLyBz d2l0Y2gK