<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>197807</bug_id>
          
          <creation_ts>2019-05-10 17:47:04 -0700</creation_ts>
          <short_desc>Call to JSToWasmICCallee::createStructure passes in wrong prototype value</short_desc>
          <delta_ts>2019-05-10 18:40:07 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Saam Barati">saam</reporter>
          <assigned_to name="Saam Barati">saam</assigned_to>
          <cc>benjamin</cc>
    
    <cc>commit-queue</cc>
    
    <cc>fpizlo</cc>
    
    <cc>ggaren</cc>
    
    <cc>gskachkov</cc>
    
    <cc>guijemont</cc>
    
    <cc>keith_miller</cc>
    
    <cc>mark.lam</cc>
    
    <cc>msaboff</cc>
    
    <cc>rmorisset</cc>
    
    <cc>ticaiolima</cc>
    
    <cc>tzagallo</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>ysuzuki</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1535278</commentid>
    <comment_count>0</comment_count>
    <who name="Saam Barati">saam</who>
    <bug_when>2019-05-10 17:47:04 -0700</bug_when>
    <thetext>...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1535279</commentid>
    <comment_count>1</comment_count>
    <who name="Saam Barati">saam</who>
    <bug_when>2019-05-10 17:48:06 -0700</bug_when>
    <thetext>&lt;rdar://problem/50530400&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1535281</commentid>
    <comment_count>2</comment_count>
      <attachid>369626</attachid>
    <who name="Saam Barati">saam</who>
    <bug_when>2019-05-10 17:51:25 -0700</bug_when>
    <thetext>Created attachment 369626
patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1535282</commentid>
    <comment_count>3</comment_count>
      <attachid>369626</attachid>
    <who name="Yusuke Suzuki">ysuzuki</who>
    <bug_when>2019-05-10 17:52:10 -0700</bug_when>
    <thetext>Comment on attachment 369626
patch

r=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1535283</commentid>
    <comment_count>4</comment_count>
      <attachid>369626</attachid>
    <who name="Keith Miller">keith_miller</who>
    <bug_when>2019-05-10 17:52:46 -0700</bug_when>
    <thetext>Comment on attachment 369626
patch

View in context: https://bugs.webkit.org/attachment.cgi?id=369626&amp;action=review

&gt; JSTests/stress/js-to-wasm-callee-has-correct-prototype.js:1
&gt; +//@ runDefault(&quot;--jitPolicyScale=0&quot;, &quot;--useSamplingProfiler=1&quot;)

Don&apos;t we usually put these tests in the wasm directory?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1535284</commentid>
    <comment_count>5</comment_count>
    <who name="Saam Barati">saam</who>
    <bug_when>2019-05-10 17:53:28 -0700</bug_when>
    <thetext>(In reply to Keith Miller from comment #4)
&gt; Comment on attachment 369626 [details]
&gt; patch
&gt; 
&gt; View in context:
&gt; https://bugs.webkit.org/attachment.cgi?id=369626&amp;action=review
&gt; 
&gt; &gt; JSTests/stress/js-to-wasm-callee-has-correct-prototype.js:1
&gt; &gt; +//@ runDefault(&quot;--jitPolicyScale=0&quot;, &quot;--useSamplingProfiler=1&quot;)
&gt; 
&gt; Don&apos;t we usually put these tests in the wasm directory?

Not always. If you grep through stress you will find some Wasm tests.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1535285</commentid>
    <comment_count>6</comment_count>
    <who name="Saam Barati">saam</who>
    <bug_when>2019-05-10 17:53:58 -0700</bug_when>
    <thetext>(In reply to Saam Barati from comment #5)
&gt; (In reply to Keith Miller from comment #4)
&gt; &gt; Comment on attachment 369626 [details]
&gt; &gt; patch
&gt; &gt; 
&gt; &gt; View in context:
&gt; &gt; https://bugs.webkit.org/attachment.cgi?id=369626&amp;action=review
&gt; &gt; 
&gt; &gt; &gt; JSTests/stress/js-to-wasm-callee-has-correct-prototype.js:1
&gt; &gt; &gt; +//@ runDefault(&quot;--jitPolicyScale=0&quot;, &quot;--useSamplingProfiler=1&quot;)
&gt; &gt; 
&gt; &gt; Don&apos;t we usually put these tests in the wasm directory?
&gt; 
&gt; Not always. If you grep through stress you will find some Wasm tests.

The reason I put it here is it allowed me to do the `runDefault` at the top. That&apos;d be different if I made it a Wasm test unfortunately.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1535301</commentid>
    <comment_count>7</comment_count>
      <attachid>369626</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2019-05-10 18:40:05 -0700</bug_when>
    <thetext>Comment on attachment 369626
patch

Clearing flags on attachment: 369626

Committed r245203: &lt;https://trac.webkit.org/changeset/245203&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1535303</commentid>
    <comment_count>8</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2019-05-10 18:40:07 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>369626</attachid>
            <date>2019-05-10 17:51:25 -0700</date>
            <delta_ts>2019-05-10 18:40:05 -0700</delta_ts>
            <desc>patch</desc>
            <filename>b-backup.diff</filename>
            <type>text/plain</type>
            <size>3688</size>
            <attacher name="Saam Barati">saam</attacher>
            
              <data encoding="base64">SW5kZXg6IEpTVGVzdHMvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09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</data>

          </attachment>
      

    </bug>

</bugzilla>