<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>168259</bug_id>
          
          <creation_ts>2017-02-13 15:23:56 -0800</creation_ts>
          <short_desc>asyncDisassembly crashes on iOS</short_desc>
          <delta_ts>2017-02-13 17:10:31 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Michael Saboff">msaboff</reporter>
          <assigned_to name="Michael Saboff">msaboff</assigned_to>
          <cc>commit-queue</cc>
    
    <cc>keith_miller</cc>
    
    <cc>mark.lam</cc>
    
    <cc>saam</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1276401</commentid>
    <comment_count>0</comment_count>
    <who name="Michael Saboff">msaboff</who>
    <bug_when>2017-02-13 15:23:56 -0800</bug_when>
    <thetext>It crashes with Bus Error right after emitting the jitWrite thunk.

Looks like this is due to the mapping of the jitWrite thunk pages being changed to execute only immediately after generating and linking the code.  With async disassembly, we can&apos;t read the code to disassemble.

&lt;rdar://problem/30124488&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1276404</commentid>
    <comment_count>1</comment_count>
      <attachid>301401</attachid>
    <who name="Michael Saboff">msaboff</who>
    <bug_when>2017-02-13 15:30:24 -0800</bug_when>
    <thetext>Created attachment 301401
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1276461</commentid>
    <comment_count>2</comment_count>
    <who name="Michael Saboff">msaboff</who>
    <bug_when>2017-02-13 17:10:31 -0800</bug_when>
    <thetext>Committed r212262: &lt;http://trac.webkit.org/changeset/212262&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>301401</attachid>
            <date>2017-02-13 15:30:24 -0800</date>
            <delta_ts>2017-02-13 15:32:45 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>168259.patch</filename>
            <type>text/plain</type>
            <size>1986</size>
            <attacher name="Michael Saboff">msaboff</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="323217"
          type_id="1"
          status="+"
          setter="fpizlo"
    />
          </attachment>
      

    </bug>

</bugzilla>