<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>165829</bug_id>
          
          <creation_ts>2016-12-13 16:05:19 -0800</creation_ts>
          <short_desc>jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.* fails when run with JSC_validateBytecode=true.</short_desc>
          <delta_ts>2016-12-13 16:05:56 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>WebKit Local Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>ASSIGNED</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Mark Lam">mark.lam</reporter>
          <assigned_to name="Mark Lam">mark.lam</assigned_to>
          <cc>fpizlo</cc>
    
    <cc>ggaren</cc>
    
    <cc>jfbastien</cc>
    
    <cc>keith_miller</cc>
    
    <cc>msaboff</cc>
    
    <cc>saam</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1259574</commentid>
    <comment_count>0</comment_count>
    <who name="Mark Lam">mark.lam</who>
    <bug_when>2016-12-13 16:05:19 -0800</bug_when>
    <thetext>Running ...
    $ JSC_validateBytecode=1 ./Tools/Scripts/run-javascriptcore-tests --debug --no-build
... on a debug build of 209727 produces:

jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: Tests for ES6 class syntax default constructor
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: On success, you will see a series of &quot;PASS&quot; messages, followed by &quot;TEST COMPLETE&quot;.
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: PASS new A instanceof A
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: PASS A():::TypeError: Cannot call a class constructor without |new|
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: PASS A.prototype.constructor instanceof Function
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: PASS A.prototype.constructor.name:::&quot;A&quot;
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: PASS new B instanceof A; new B instanceof A
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: ASSERTION FAILED: i + 1 &lt; basicBlocks.size()
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: /Volumes/Data/ws2/OpenSource/Source/JavaScriptCore/bytecode/BytecodeBasicBlock.cpp(179) : static void JSC::BytecodeBasicBlock::computeImpl(Block *, Instruction *, unsigned int, Vector&lt;std::unique_ptr&lt;BytecodeBasicBlock&gt; &gt; &amp;) [Block = JSC::CodeBlock, Instruction = JSC::Instruction]
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 1   0x10e695ded WTFCrash
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 2   0x10d67eae9 void JSC::BytecodeBasicBlock::computeImpl&lt;JSC::CodeBlock, JSC::Instruction&gt;(JSC::CodeBlock*, JSC::Instruction*, unsigned int, WTF::Vector&lt;std::__1::unique_ptr&lt;JSC::BytecodeBasicBlock, std::__1::default_delete&lt;JSC::BytecodeBasicBlock&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul&gt;&amp;)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 3   0x10d67db0b JSC::BytecodeBasicBlock::compute(JSC::CodeBlock*, JSC::Instruction*, unsigned int, WTF::Vector&lt;std::__1::unique_ptr&lt;JSC::BytecodeBasicBlock, std::__1::default_delete&lt;JSC::BytecodeBasicBlock&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul&gt;&amp;)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 4   0x10d6e4a13 JSC::BytecodeGraph&lt;JSC::CodeBlock&gt;::BytecodeGraph(JSC::CodeBlock*, WTF::RefCountedArray&lt;JSC::Instruction&gt;&amp;)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 5   0x10d6e1e45 JSC::BytecodeGraph&lt;JSC::CodeBlock&gt;::BytecodeGraph(JSC::CodeBlock*, WTF::RefCountedArray&lt;JSC::Instruction&gt;&amp;)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 6   0x10d6e1dec JSC::BytecodeLivenessAnalysis::BytecodeLivenessAnalysis(JSC::CodeBlock*)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 7   0x10d6e1ead JSC::BytecodeLivenessAnalysis::BytecodeLivenessAnalysis(JSC::CodeBlock*)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 8   0x10d733d64 JSC::CodeBlock::validate()
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 9   0x10e4c67c9 JSC::ScriptExecutable::prepareForExecutionImpl(JSC::VM&amp;, JSC::JSFunction*, JSC::JSScope*, JSC::CodeSpecializationKind, JSC::CodeBlock*&amp;)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 10  0x10df340e0 JSC::JSObject* JSC::ScriptExecutable::prepareForExecution&lt;JSC::FunctionExecutable&gt;(JSC::VM&amp;, JSC::JSFunction*, JSC::JSScope*, JSC::CodeSpecializationKind, JSC::CodeBlock*&amp;)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 11  0x10e1d3a64 JSC::LLInt::setUpCall(JSC::ExecState*, JSC::Instruction*, JSC::CodeSpecializationKind, JSC::JSValue, JSC::LLIntCallLinkInfo*)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 12  0x10e1d2b83 JSC::LLInt::genericCall(JSC::ExecState*, JSC::Instruction*, JSC::CodeSpecializationKind)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 13  0x10e1d2a73 llint_slow_path_call
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 14  0x10e1e1083 llint_entry
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 15  0x10e1d995e vmEntryToJavaScript
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 16  0x10dfb8a92 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 17  0x10df3006f JSC::Interpreter::execute(JSC::EvalExecutable*, JSC::ExecState*, JSC::JSValue, JSC::JSScope*)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 18  0x10df2f007 JSC::eval(JSC::ExecState*)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 19  0x10e1d3673 llint_slow_path_call_eval
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 20  0x10e1e1926 llint_entry
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 21  0x10e1e1095 llint_entry
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 22  0x10e1d995e vmEntryToJavaScript
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 23  0x10dfb8a92 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 24  0x10df33464 JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::JSObject*)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 25  0x10d7c095d JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&amp;, JSC::JSValue, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 26  0x10d226061 runWithScripts(GlobalObject*, WTF::Vector&lt;Script, 0ul, WTF::CrashOnOverflow, 16ul&gt; const&amp;, WTF::String const&amp;, bool, bool, bool)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 27  0x10d21dc3a runJSC(JSC::VM*, CommandLine)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 28  0x10d21c79d jscmain(int, char**)
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 29  0x10d21c6ee main
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: 30  0x7fffb4298255 start
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: test_script_25656: line 2: 62134 Segmentation fault: 11  ( &quot;$@&quot; ../../../../.vm/JavaScriptCore.framework/Resources/jsc --useFTLJIT\=false --useFunctionDotArguments\=true --maxPerThreadStackUsage\=1572864 --testTheFTL\=true --useFTLJIT\=true resources/standalone-pre.js class-syntax-default-constructor.js resources/standalone-post.js )
jsc-layout-tests.yaml/js/script-tests/class-syntax-default-constructor.js.layout: ERROR: Unexpected exit code: 139

Basically, we&apos;re seeing an assertion failure:
    ASSERTION FAILED: i + 1 &lt; basicBlocks.size()</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>