<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>164274</bug_id>
          
          <creation_ts>2016-11-01 08:39:52 -0700</creation_ts>
          <short_desc>ASSERTION FAILED: op() == CreateRest || op() == GetRestLength || op() == GetMyArgumentByVal || op() == GetMyArgumentByValOutOfBounds</short_desc>
          <delta_ts>2016-11-01 10:34:44 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>164276</dup_id>
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Ryan Haddad">ryanhaddad</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>saam</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1246903</commentid>
    <comment_count>0</comment_count>
    <who name="Ryan Haddad">ryanhaddad</who>
    <bug_when>2016-11-01 08:39:52 -0700</bug_when>
    <thetext>https://build.webkit.org/builders/Apple%20El%20Capitan%20Debug%20JSC%20%28Tests%29/builds/4424/steps/jscore-test/logs/stdio

stress/rest-parameter-basics.js.default: ASSERTION FAILED: op() == CreateRest || op() == GetRestLength || op() == GetMyArgumentByVal || op() == GetMyArgumentByValOutOfBounds
stress/rest-parameter-basics.js.default: /Volumes/Data/slave/elcapitan-debug/build/Source/JavaScriptCore/dfg/DFGNode.h(2393) : unsigned int JSC::DFG::Node::numberOfArgumentsToSkip()
stress/rest-parameter-basics.js.default: 1   0x102a28790 WTFCrash
stress/rest-parameter-basics.js.default: 2   0x101c8dd38 JSC::DFG::Node::numberOfArgumentsToSkip()
stress/rest-parameter-basics.js.default: 3   0x101c9237b JSC::DFG::emitCodeToGetArgumentsArrayLength(JSC::DFG::InsertionSet&amp;, JSC::DFG::Node*, unsigned int, JSC::DFG::NodeOrigin)
stress/rest-parameter-basics.js.default: 4   0x101c7be74 JSC::DFG::(anonymous namespace)::ArgumentsEliminationPhase::transform()::&apos;lambda&apos;(JSC::DFG::Node*)::operator()(JSC::DFG::Node*) const
stress/rest-parameter-basics.js.default: 5   0x101c6765a JSC::DFG::(anonymous namespace)::ArgumentsEliminationPhase::transform()
stress/rest-parameter-basics.js.default: 6   0x101c66039 JSC::DFG::(anonymous namespace)::ArgumentsEliminationPhase::run()
stress/rest-parameter-basics.js.default: 7   0x101c65df2 bool JSC::DFG::runAndLog&lt;JSC::DFG::(anonymous namespace)::ArgumentsEliminationPhase&gt;(JSC::DFG::(anonymous namespace)::ArgumentsEliminationPhase&amp;)
stress/rest-parameter-basics.js.default: 8   0x101c65d55 bool JSC::DFG::runPhase&lt;JSC::DFG::(anonymous namespace)::ArgumentsEliminationPhase&gt;(JSC::DFG::Graph&amp;)
stress/rest-parameter-basics.js.default: 9   0x101c65d25 JSC::DFG::performArgumentsElimination(JSC::DFG::Graph&amp;)
stress/rest-parameter-basics.js.default: 10  0x101f78a80 JSC::DFG::Plan::compileInThreadImpl(JSC::DFG::LongLivedState&amp;)
stress/rest-parameter-basics.js.default: 11  0x101f770db JSC::DFG::Plan::compileInThread(JSC::DFG::LongLivedState&amp;, JSC::DFG::ThreadData*)
stress/rest-parameter-basics.js.default: 12  0x1020e8ae0 JSC::DFG::Worklist::ThreadBody::work()
stress/rest-parameter-basics.js.default: 13  0x102a8eaa1 WTF::AutomaticThread::start(WTF::Locker&lt;WTF::LockBase&gt; const&amp;)::$_0::operator()() const
stress/rest-parameter-basics.js.default: 14  0x102a8e85d void std::__1::__invoke_void_return_wrapper&lt;void&gt;::__call&lt;WTF::AutomaticThread::start(WTF::Locker&lt;WTF::LockBase&gt; const&amp;)::$_0&amp;&gt;(WTF::AutomaticThread::start(WTF::Locker&lt;WTF::LockBase&gt; const&amp;)::$_0&amp;&amp;&amp;)
stress/rest-parameter-basics.js.default: 15  0x102a8e66c std::__1::__function::__func&lt;WTF::AutomaticThread::start(WTF::Locker&lt;WTF::LockBase&gt; const&amp;)::$_0, std::__1::allocator&lt;WTF::AutomaticThread::start(WTF::Locker&lt;WTF::LockBase&gt; const&amp;)::$_0&gt;, void ()&gt;::operator()()
stress/rest-parameter-basics.js.default: 16  0x101fe90aa std::__1::function&lt;void ()&gt;::operator()() const
stress/rest-parameter-basics.js.default: 17  0x102aa13be WTF::threadEntryPoint(void*)
stress/rest-parameter-basics.js.default: 18  0x102aa2e61 WTF::wtfThreadEntryPoint(void*)
stress/rest-parameter-basics.js.default: 19  0x7fff8919799d _pthread_body
stress/rest-parameter-basics.js.default: 20  0x7fff8919791a _pthread_body
stress/rest-parameter-basics.js.default: 21  0x7fff89195351 thread_start
stress/rest-parameter-basics.js.default: test_script_13721: line 2: 36143 Segmentation fault: 11  ( &quot;$@&quot; ../../.vm/JavaScriptCore.framework/Resources/jsc --useFTLJIT\=false --useFunctionDotArguments\=true --maxPerThreadStackUsage\=1572864 --useFTLJIT\=true rest-parameter-basics.js )
stress/rest-parameter-basics.js.default: ERROR: Unexpected exit code: 139</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1246904</commentid>
    <comment_count>1</comment_count>
    <who name="Ryan Haddad">ryanhaddad</who>
    <bug_when>2016-11-01 08:40:00 -0700</bug_when>
    <thetext>** The following JSC stress test failures have been introduced:
	microbenchmarks/rest-parameter-allocation-elimination.js.default
	microbenchmarks/rest-parameter-allocation-elimination.js.ftl-eager
	microbenchmarks/rest-parameter-allocation-elimination.js.ftl-eager-no-cjit
	microbenchmarks/rest-parameter-allocation-elimination.js.ftl-no-cjit-no-inline-validate
	microbenchmarks/rest-parameter-allocation-elimination.js.ftl-no-cjit-no-put-stack-validate
	microbenchmarks/rest-parameter-allocation-elimination.js.ftl-no-cjit-small-pool
	microbenchmarks/rest-parameter-allocation-elimination.js.ftl-no-cjit-validate-sampling-profiler
	microbenchmarks/rest-parameter-construction-performance.js.default
	microbenchmarks/rest-parameter-construction-performance.js.ftl-eager
	microbenchmarks/rest-parameter-construction-performance.js.ftl-eager-no-cjit
	microbenchmarks/rest-parameter-construction-performance.js.ftl-no-cjit-no-put-stack-validate
	microbenchmarks/rest-parameter-construction-performance.js.ftl-no-cjit-small-pool
	microbenchmarks/rest-parameter-construction-performance.js.ftl-no-cjit-validate-sampling-profiler
	stress/proxy-call.js.ftl-eager-no-cjit
	stress/proxy-construct.js.ftl-eager-no-cjit
	stress/rest-parameter-basics.js.default
	stress/rest-parameter-basics.js.ftl-eager
	stress/rest-parameter-basics.js.ftl-eager-no-cjit
	stress/rest-parameter-basics.js.ftl-no-cjit-no-inline-validate
	stress/rest-parameter-basics.js.ftl-no-cjit-no-put-stack-validate
	stress/rest-parameter-basics.js.ftl-no-cjit-small-pool
	stress/rest-parameter-basics.js.ftl-no-cjit-validate-sampling-profiler
	stress/rest-parameter-is-destructuring.js.ftl-eager-no-cjit
	stress/rest-parameter-various-types.js.default
	stress/rest-parameter-various-types.js.ftl-eager
	stress/rest-parameter-various-types.js.ftl-eager-no-cjit
	stress/rest-parameter-various-types.js.ftl-no-cjit-no-put-stack-validate
	stress/rest-parameter-various-types.js.ftl-no-cjit-validate-sampling-profiler</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1246905</commentid>
    <comment_count>2</comment_count>
    <who name="Ryan Haddad">ryanhaddad</who>
    <bug_when>2016-11-01 08:41:08 -0700</bug_when>
    <thetext>Started with https://trac.webkit.org/changeset/208208</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1246926</commentid>
    <comment_count>3</comment_count>
    <who name="Ryan Haddad">ryanhaddad</who>
    <bug_when>2016-11-01 10:34:44 -0700</bug_when>
    <thetext>

*** This bug has been marked as a duplicate of bug 164276 ***</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>