164775 2016-11-15 08:29:48 -0800 REGRESSION (r208711-r208722): ASSERTION FAILED: hasInlineStorage() 2016-11-15 12:04:42 -0800 1 1 1 Unclassified WebKit JavaScriptCore WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 ryanhaddad fpizlo commit-queue fpizlo ggaren keith_miller mark.lam msaboff saam oldest_to_newest 1251440 0 ryanhaddad 2016-11-15 08:29:48 -0800 ASSERTION FAILED: hasInlineStorage() https://build.webkit.org/builders/Apple%20Yosemite%20Debug%20JSC%20%28Tests%29/builds/7323 stress/object-constructor-should-be-new-target-aware.js.default: ASSERTION FAILED: hasInlineStorage() stress/object-constructor-should-be-new-target-aware.js.default: /Volumes/Data/slave/yosemite-debug/build/Source/JavaScriptCore/runtime/JSObject.h(660) : PropertyStorage JSC::JSObject::inlineStorage() stress/object-constructor-should-be-new-target-aware.js.default: 1 0x10ba055a0 WTFCrash stress/object-constructor-should-be-new-target-aware.js.default: 2 0x10a972d09 JSC::JSObject::inlineStorage() stress/object-constructor-should-be-new-target-aware.js.default: 3 0x10a9860ae JSC::JSFinalObject::JSFinalObject(JSC::VM&, JSC::Structure*, JSC::Butterfly*) stress/object-constructor-should-be-new-target-aware.js.default: 4 0x10a985f3d JSC::JSFinalObject::JSFinalObject(JSC::VM&, JSC::Structure*, JSC::Butterfly*) stress/object-constructor-should-be-new-target-aware.js.default: 5 0x10a985d71 JSC::JSFinalObject::create(JSC::ExecState*, JSC::Structure*, JSC::Butterfly*) stress/object-constructor-should-be-new-target-aware.js.default: 6 0x10a9826f1 JSC::constructEmptyObject(JSC::ExecState*, JSC::Structure*) stress/object-constructor-should-be-new-target-aware.js.default: 7 0x10b634b2d JSC::constructObject(JSC::ExecState*, JSC::JSValue) stress/object-constructor-should-be-new-target-aware.js.default: 8 0x10b632771 JSC::constructWithObjectConstructor(JSC::ExecState*) stress/object-constructor-should-be-new-target-aware.js.default: 9 0x10b58cd0a JSC::LLInt::handleHostCall(JSC::ExecState*, JSC::Instruction*, JSC::JSValue, JSC::CodeSpecializationKind) stress/object-constructor-should-be-new-target-aware.js.default: 10 0x10b58dbcc JSC::LLInt::setUpCall(JSC::ExecState*, JSC::Instruction*, JSC::CodeSpecializationKind, JSC::JSValue, JSC::LLIntCallLinkInfo*) stress/object-constructor-should-be-new-target-aware.js.default: 11 0x10b58d7c6 JSC::LLInt::genericCall(JSC::ExecState*, JSC::Instruction*, JSC::CodeSpecializationKind) stress/object-constructor-should-be-new-target-aware.js.default: 12 0x10b58a0ac llint_slow_path_construct stress/object-constructor-should-be-new-target-aware.js.default: 13 0x10b598474 llint_entry stress/object-constructor-should-be-new-target-aware.js.default: 14 0x10b598486 llint_entry stress/object-constructor-should-be-new-target-aware.js.default: 15 0x10b5909de vmEntryToJavaScript stress/object-constructor-should-be-new-target-aware.js.default: 16 0x10b360efc JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) stress/object-constructor-should-be-new-target-aware.js.default: 17 0x10b2dc58e JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::JSObject*) stress/object-constructor-should-be-new-target-aware.js.default: 18 0x10abad855 JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) stress/object-constructor-should-be-new-target-aware.js.default: 19 0x10a6417c4 runWithScripts(GlobalObject*, WTF::Vector<Script, 0ul, WTF::CrashOnOverflow, 16ul> const&, WTF::String const&, bool, bool, bool) stress/object-constructor-should-be-new-target-aware.js.default: 20 0x10a6409e3 runJSC(JSC::VM*, CommandLine) stress/object-constructor-should-be-new-target-aware.js.default: 21 0x10a63f93f jscmain(int, char**) stress/object-constructor-should-be-new-target-aware.js.default: 22 0x10a63f80b main stress/object-constructor-should-be-new-target-aware.js.default: 23 0x7fff878515c9 start ** The following JSC stress test failures have been introduced: stress/object-constructor-should-be-new-target-aware.js.default stress/object-constructor-should-be-new-target-aware.js.dfg-eager stress/object-constructor-should-be-new-target-aware.js.dfg-eager-no-cjit-validate stress/object-constructor-should-be-new-target-aware.js.dfg-maximal-flush-validate-no-cjit stress/object-constructor-should-be-new-target-aware.js.ftl-eager stress/object-constructor-should-be-new-target-aware.js.ftl-eager-no-cjit stress/object-constructor-should-be-new-target-aware.js.ftl-no-cjit-no-inline-validate stress/object-constructor-should-be-new-target-aware.js.ftl-no-cjit-no-put-stack-validate stress/object-constructor-should-be-new-target-aware.js.ftl-no-cjit-small-pool stress/object-constructor-should-be-new-target-aware.js.ftl-no-cjit-validate-sampling-profiler stress/object-constructor-should-be-new-target-aware.js.no-cjit-validate-phases stress/object-constructor-should-be-new-target-aware.js.no-ftl stress/object-constructor-should-be-new-target-aware.js.no-llint 1251450 1 fpizlo 2016-11-15 09:06:51 -0800 Oh shoot! I'm looking at this now. 1251451 2 294841 fpizlo 2016-11-15 09:18:11 -0800 Created attachment 294841 the patch 1251454 3 294841 mark.lam 2016-11-15 09:20:40 -0800 Comment on attachment 294841 the patch r=me 1251459 4 fpizlo 2016-11-15 09:33:25 -0800 Landed in https://trac.webkit.org/changeset/208734 294841 2016-11-15 09:18:11 -0800 2016-11-15 09:20:40 -0800 the patch blah.patch text/plain 1478 fpizlo SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291 cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkocmV2aXNpb24gMjA4NzMzKQorKysgU291cmNl L0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE3IEBA CisyMDE2LTExLTE1ICBGaWxpcCBQaXpsbyAgPGZwaXpsb0BhcHBsZS5jb20+CisKKyAgICAgICAg UkVHUkVTU0lPTiAocjIwODcxMS1yMjA4NzIyKTogQVNTRVJUSU9OIEZBSUxFRDogaGFzSW5saW5l U3RvcmFnZSgpCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9p ZD0xNjQ3NzUKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKyAgICAgICAg CisgICAgICAgIFdlIHdlcmUgY2FsbGluZyBpbmxpbmVTdG9yYWdlKCkgd2hpY2ggYXNzZXJ0cyB0 aGF0IGlubGluZSBzdG9yYWdlIGlzIG5vdCBlbXB0eS4gQnV0IHdlCisgICAgICAgIHdlcmUgY2Fs bGluZyBpdCBpbiBhIGNvbnRleHQgd2hlcmUgaXQgY291bGQgYmUgZW1wdHkgYW5kIHRoYXQncyBm aW5lLiBTbywgd2Ugbm93IGNhbGwKKyAgICAgICAgaW5saW5lU3RvcmFnZVVuc2FmZSgpLgorCisg ICAgICAgICogcnVudGltZS9KU09iamVjdC5oOgorICAgICAgICAoSlNDOjpKU0ZpbmFsT2JqZWN0 OjpKU0ZpbmFsT2JqZWN0KToKKwogMjAxNi0xMS0xNCAgQ3NhYmEgT3N6dHJvZ29uw6FjICA8b3Nz eUB3ZWJraXQub3JnPgogCiAgICAgICAgIFtBUk1dIFVucmV2aWV3ZWQgYnVpbGRmaXggYWZ0ZXIg cjIwODcyMC4KSW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9ydW50aW1lL0pTT2JqZWN0LmgK PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PQotLS0gU291cmNlL0phdmFTY3JpcHRDb3JlL3J1bnRpbWUvSlNPYmplY3QuaAko cmV2aXNpb24gMjA4NzMzKQorKysgU291cmNlL0phdmFTY3JpcHRDb3JlL3J1bnRpbWUvSlNPYmpl Y3QuaAkod29ya2luZyBjb3B5KQpAQCAtMTExMiw3ICsxMTEyLDcgQEAgcHJpdmF0ZToKICAgICBl eHBsaWNpdCBKU0ZpbmFsT2JqZWN0KFZNJiB2bSwgU3RydWN0dXJlKiBzdHJ1Y3R1cmUsIEJ1dHRl cmZseSogYnV0dGVyZmx5ID0gbnVsbHB0cikKICAgICAgICAgOiBKU09iamVjdCh2bSwgc3RydWN0 dXJlLCBidXR0ZXJmbHkpCiAgICAgewotICAgICAgICBtZW1zZXQoaW5saW5lU3RvcmFnZSgpLCAw LCBzdHJ1Y3R1cmUtPmlubGluZUNhcGFjaXR5KCkgKiBzaXplb2YoRW5jb2RlZEpTVmFsdWUpKTsK KyAgICAgICAgbWVtc2V0KGlubGluZVN0b3JhZ2VVbnNhZmUoKSwgMCwgc3RydWN0dXJlLT5pbmxp bmVDYXBhY2l0eSgpICogc2l6ZW9mKEVuY29kZWRKU1ZhbHVlKSk7CiAgICAgfQogfTsKIAo=