<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>166873</bug_id>
          
          <creation_ts>2017-01-09 18:03:19 -0800</creation_ts>
          <short_desc>REGRESSION (r210522): ASSERTION FAILED: divot.offset &gt;= divotStart.offset seen with stress/import-basic.js and stress/import-from-eval.js</short_desc>
          <delta_ts>2017-01-09 20:20:49 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>Other</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Ryan Haddad">ryanhaddad</reporter>
          <assigned_to name="Yusuke Suzuki">ysuzuki</assigned_to>
          <cc>commit-queue</cc>
    
    <cc>keith_miller</cc>
    
    <cc>mark.lam</cc>
    
    <cc>msaboff</cc>
    
    <cc>saam</cc>
    
    <cc>ysuzuki</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1265239</commentid>
    <comment_count>0</comment_count>
    <who name="Ryan Haddad">ryanhaddad</who>
    <bug_when>2017-01-09 18:03:19 -0800</bug_when>
    <thetext>stress/import-basic.js.default: ASSERTION FAILED: divot.offset &gt;= divotStart.offset
stress/import-basic.js.default: /Volumes/Data/slave/elcapitan-debug/build/Source/JavaScriptCore/bytecompiler/BytecodeGenerator.h(518) : void JSC::BytecodeGenerator::emitExpressionInfo(const JSC::JSTextPosition &amp;, const JSC::JSTextPosition &amp;, const JSC::JSTextPosition &amp;)
stress/import-basic.js.default: 1   0x104e48a20 WTFCrash
stress/import-basic.js.default: 2   0x103f7c478 JSC::BytecodeGenerator::emitExpressionInfo(JSC::JSTextPosition const&amp;, JSC::JSTextPosition const&amp;, JSC::JSTextPosition const&amp;)
stress/import-basic.js.default: 3   0x103f69605 JSC::BytecodeGenerator::emitCall(JSC::OpcodeID, JSC::RegisterID*, JSC::RegisterID*, JSC::ExpectedFunction, JSC::CallArguments&amp;, JSC::JSTextPosition const&amp;, JSC::JSTextPosition const&amp;, JSC::JSTextPosition const&amp;, JSC::DebuggableCall)
stress/import-basic.js.default: 4   0x103f5c031 JSC::BytecodeGenerator::emitCall(JSC::RegisterID*, JSC::RegisterID*, JSC::ExpectedFunction, JSC::CallArguments&amp;, JSC::JSTextPosition const&amp;, JSC::JSTextPosition const&amp;, JSC::JSTextPosition const&amp;, JSC::DebuggableCall)
stress/import-basic.js.default: 5   0x104a56408 JSC::ImportNode::emitBytecode(JSC::BytecodeGenerator&amp;, JSC::RegisterID*)
stress/import-basic.js.default: 6   0x103f8a6b2 JSC::BytecodeGenerator::emitNodeInTailPosition(JSC::RegisterID*, JSC::ExpressionNode*)
stress/import-basic.js.default: 7   0x103f775ae JSC::BytecodeGenerator::emitNode(JSC::RegisterID*, JSC::ExpressionNode*)
stress/import-basic.js.default: 8   0x104a71135 JSC::AwaitExprNode::emitBytecode(JSC::BytecodeGenerator&amp;, JSC::RegisterID*)
stress/import-basic.js.default: 9   0x103f8a6b2 JSC::BytecodeGenerator::emitNodeInTailPosition(JSC::RegisterID*, JSC::ExpressionNode*)
stress/import-basic.js.default: 10  0x103f775ae JSC::BytecodeGenerator::emitNode(JSC::RegisterID*, JSC::ExpressionNode*)
stress/import-basic.js.default: 11  0x104a72739 JSC::DestructuringAssignmentNode::emitBytecode(JSC::BytecodeGenerator&amp;, JSC::RegisterID*)
stress/import-basic.js.default: 12  0x103f8a6b2 JSC::BytecodeGenerator::emitNodeInTailPosition(JSC::RegisterID*, JSC::ExpressionNode*)
stress/import-basic.js.default: 13  0x103f775ae JSC::BytecodeGenerator::emitNode(JSC::RegisterID*, JSC::ExpressionNode*)
stress/import-basic.js.default: 14  0x104a79fc4 JSC::BytecodeGenerator::emitNode(JSC::ExpressionNode*)
stress/import-basic.js.default: 15  0x104a69c28 JSC::DeclarationStatement::emitBytecode(JSC::BytecodeGenerator&amp;, JSC::RegisterID*)
stress/import-basic.js.default: 16  0x104a7b452 JSC::BytecodeGenerator::emitNodeInTailPosition(JSC::RegisterID*, JSC::StatementNode*)
stress/import-basic.js.default: 17  0x104a7b31e JSC::SourceElements::emitBytecode(JSC::BytecodeGenerator&amp;, JSC::RegisterID*)
stress/import-basic.js.default: 18  0x104a69a7c JSC::BlockNode::emitBytecode(JSC::BytecodeGenerator&amp;, JSC::RegisterID*)
stress/import-basic.js.default: 19  0x104a7b452 JSC::BytecodeGenerator::emitNodeInTailPosition(JSC::RegisterID*, JSC::StatementNode*)
stress/import-basic.js.default: 20  0x104a7b31e JSC::SourceElements::emitBytecode(JSC::BytecodeGenerator&amp;, JSC::RegisterID*)
stress/import-basic.js.default: 21  0x104a7b9ba JSC::ScopeNode::emitStatementsBytecode(JSC::BytecodeGenerator&amp;, JSC::RegisterID*)
stress/import-basic.js.default: 22  0x104a70853 JSC::FunctionNode::emitBytecode(JSC::BytecodeGenerator&amp;, JSC::RegisterID*)
stress/import-basic.js.default: 23  0x103f54a55 JSC::BytecodeGenerator::generate()
stress/import-basic.js.default: 24  0x104d0f948 JSC::ParserError JSC::BytecodeGenerator::generate&lt;JSC::FunctionNode*, JSC::UnlinkedFunctionCodeBlock*&amp;, JSC::DebuggerMode&amp;, JSC::VariableEnvironment const*&gt;(JSC::VM&amp;, JSC::FunctionNode*&amp;&amp;, JSC::UnlinkedFunctionCodeBlock*&amp;&amp;&amp;, JSC::DebuggerMode&amp;&amp;&amp;, JSC::VariableEnvironment const*&amp;&amp;)
stress/import-basic.js.default: 25  0x104d0e29c JSC::generateUnlinkedFunctionCodeBlock(JSC::VM&amp;, JSC::UnlinkedFunctionExecutable*, JSC::SourceCode const&amp;, JSC::CodeSpecializationKind, JSC::DebuggerMode, JSC::UnlinkedFunctionKind, JSC::ParserError&amp;, JSC::SourceParseMode)
stress/import-basic.js.default: 26  0x104d0dbaa JSC::UnlinkedFunctionExecutable::unlinkedCodeBlockFor(JSC::VM&amp;, JSC::SourceCode const&amp;, JSC::CodeSpecializationKind, JSC::DebuggerMode, JSC::ParserError&amp;, JSC::SourceParseMode)
stress/import-basic.js.default: 27  0x104c780c4 JSC::ScriptExecutable::newCodeBlockFor(JSC::CodeSpecializationKind, JSC::JSFunction*, JSC::JSScope*, JSC::JSObject*&amp;)
stress/import-basic.js.default: 28  0x104c787fb JSC::ScriptExecutable::prepareForExecutionImpl(JSC::VM&amp;, JSC::JSFunction*, JSC::JSScope*, JSC::CodeSpecializationKind, JSC::CodeBlock*&amp;)
stress/import-basic.js.default: 29  0x1047c9800 JSC::JSObject* JSC::ScriptExecutable::prepareForExecution&lt;JSC::FunctionExecutable&gt;(JSC::VM&amp;, JSC::JSFunction*, JSC::JSScope*, JSC::CodeSpecializationKind, JSC::CodeBlock*&amp;)
stress/import-basic.js.default: 30  0x104a01589 JSC::LLInt::setUpCall(JSC::ExecState*, JSC::Instruction*, JSC::CodeSpecializationKind, JSC::JSValue, JSC::LLIntCallLinkInfo*)
stress/import-basic.js.default: 31  0x104a00fb6 JSC::LLInt::genericCall(JSC::ExecState*, JSC::Instruction*, JSC::CodeSpecializationKind)
stress/import-basic.js.default: test_script_8938: line 2: 39680 Segmentation fault: 11  ( &quot;$@&quot; ../../.vm/JavaScriptCore.framework/Resources/jsc --useFTLJIT\=false --useFunctionDotArguments\=true --maxPerThreadStackUsage\=1572864 --useFTLJIT\=true import-basic.js )
stress/import-basic.js.default: ERROR: Unexpected exit code: 139

** The following JSC stress test failures have been introduced:
	stress/import-basic.js.default
	stress/import-basic.js.dfg-eager
	stress/import-basic.js.dfg-eager-no-cjit-validate
	stress/import-basic.js.dfg-maximal-flush-validate-no-cjit
	stress/import-basic.js.ftl-eager
	stress/import-basic.js.ftl-eager-no-cjit
	stress/import-basic.js.ftl-no-cjit-no-inline-validate
	stress/import-basic.js.ftl-no-cjit-no-put-stack-validate
	stress/import-basic.js.ftl-no-cjit-small-pool
	stress/import-basic.js.ftl-no-cjit-validate-sampling-profiler
	stress/import-basic.js.no-cjit-validate-phases
	stress/import-basic.js.no-ftl
	stress/import-basic.js.no-llint
	stress/import-from-eval.js.default
	stress/import-from-eval.js.dfg-eager
	stress/import-from-eval.js.dfg-eager-no-cjit-validate
	stress/import-from-eval.js.dfg-maximal-flush-validate-no-cjit
	stress/import-from-eval.js.ftl-eager
	stress/import-from-eval.js.ftl-eager-no-cjit
	stress/import-from-eval.js.ftl-no-cjit-no-inline-validate
	stress/import-from-eval.js.ftl-no-cjit-no-put-stack-validate
	stress/import-from-eval.js.ftl-no-cjit-small-pool
	stress/import-from-eval.js.ftl-no-cjit-validate-sampling-profiler
	stress/import-from-eval.js.no-cjit-validate-phases
	stress/import-from-eval.js.no-ftl
	stress/import-from-eval.js.no-llint</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1265240</commentid>
    <comment_count>1</comment_count>
    <who name="Ryan Haddad">ryanhaddad</who>
    <bug_when>2017-01-09 18:03:33 -0800</bug_when>
    <thetext>https://build.webkit.org/builders/Apple%20El%20Capitan%20Debug%20JSC%20%28Tests%29/builds/4832</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1265241</commentid>
    <comment_count>2</comment_count>
    <who name="Ryan Haddad">ryanhaddad</who>
    <bug_when>2017-01-09 18:06:09 -0800</bug_when>
    <thetext>The failing tests were added with https://trac.webkit.org/changeset/210522</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1265249</commentid>
    <comment_count>3</comment_count>
      <attachid>298429</attachid>
    <who name="Yusuke Suzuki">ysuzuki</who>
    <bug_when>2017-01-09 18:24:10 -0800</bug_when>
    <thetext>Created attachment 298429
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1265269</commentid>
    <comment_count>4</comment_count>
      <attachid>298429</attachid>
    <who name="Yusuke Suzuki">ysuzuki</who>
    <bug_when>2017-01-09 19:56:52 -0800</bug_when>
    <thetext>Comment on attachment 298429
Patch

Thanks!</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1265278</commentid>
    <comment_count>5</comment_count>
      <attachid>298429</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2017-01-09 20:20:45 -0800</bug_when>
    <thetext>Comment on attachment 298429
Patch

Clearing flags on attachment: 298429

Committed r210535: &lt;http://trac.webkit.org/changeset/210535&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1265279</commentid>
    <comment_count>6</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2017-01-09 20:20:49 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>298429</attachid>
            <date>2017-01-09 18:24:10 -0800</date>
            <delta_ts>2017-01-09 20:20:45 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-166873-20170110112234.patch</filename>
            <type>text/plain</type>
            <size>1611</size>
            <attacher name="Yusuke Suzuki">ysuzuki</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjEwNTMyCmRpZmYgLS1naXQgYS9Tb3VyY2UvSmF2YVNjcmlw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</data>

          </attachment>
      

    </bug>

</bugzilla>