<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>210507</bug_id>
          
          <creation_ts>2020-04-14 11:27:37 -0700</creation_ts>
          <short_desc>[Catalina JSC Debug] Multiple stress/typed-array-subarray-can-throw-oom-error.js are timing out.</short_desc>
          <delta_ts>2020-04-14 12:09:35 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=209974</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Matt Lewis">jlewis3</reporter>
          <assigned_to name="Yusuke Suzuki">ysuzuki</assigned_to>
          <cc>mark.lam</cc>
    
    <cc>ryanhaddad</cc>
    
    <cc>tsavell</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1641469</commentid>
    <comment_count>0</comment_count>
    <who name="Matt Lewis">jlewis3</who>
    <bug_when>2020-04-14 11:27:37 -0700</bug_when>
    <thetext>Multiple stress/typed-array-subarray-can-throw-oom-error.js are timing out on Catalina JSC Debug testers. It looks like these have been timing out since being added in : https://trac.webkit.org/changeset/259478/webkit
tests:
        stress/typed-array-subarray-can-throw-oom-error.js.bytecode-cache
	stress/typed-array-subarray-can-throw-oom-error.js.default
	stress/typed-array-subarray-can-throw-oom-error.js.dfg-eager
	stress/typed-array-subarray-can-throw-oom-error.js.dfg-eager-no-cjit-validate
	stress/typed-array-subarray-can-throw-oom-error.js.eager-jettison-no-cjit
	stress/typed-array-subarray-can-throw-oom-error.js.ftl-eager
	stress/typed-array-subarray-can-throw-oom-error.js.ftl-eager-no-cjit
	stress/typed-array-subarray-can-throw-oom-error.js.ftl-eager-no-cjit-b3o1
	stress/typed-array-subarray-can-throw-oom-error.js.ftl-no-cjit-b3o0
	stress/typed-array-subarray-can-throw-oom-error.js.ftl-no-cjit-no-inline-validate
	stress/typed-array-subarray-can-throw-oom-error.js.ftl-no-cjit-no-put-stack-validate
	stress/typed-array-subarray-can-throw-oom-error.js.ftl-no-cjit-small-pool
	stress/typed-array-subarray-can-throw-oom-error.js.ftl-no-cjit-validate-sampling-profiler
	stress/typed-array-subarray-can-throw-oom-error.js.mini-mode
	stress/typed-array-subarray-can-throw-oom-error.js.no-cjit-validate-phases
	stress/typed-array-subarray-can-throw-oom-error.js.no-ftl
	stress/typed-array-subarray-can-throw-oom-error.js.no-llint

the test all have a similar backtrace:
Timed out after 587.000000 sec seconds!
1   0x109dd7c39 WTFCrash
2   0x109c7d117 timeoutCheckCallback(JSC::VM&amp;)
3   0x10b7f7c8d JSC::VMTraps::handleTraps(JSC::JSGlobalObject*, JSC::CallFrame*, JSC::VMTraps::Mask)
4   0x10b10b8db JSC::VM::handleTraps(JSC::JSGlobalObject*, JSC::CallFrame*, JSC::VMTraps::Mask)
5   0x10b10c0c9 JSC::Interpreter::executeCall(JSC::JSGlobalObject*, JSC::JSObject*, JSC::CallType, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;)
6   0x10b432109 JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallType, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;)
7   0x10b503cd2 JSC::callGetter(JSC::JSGlobalObject*, JSC::JSValue, JSC::JSValue)
8   0x10b71b594 JSC::PropertySlot::functionGetter(JSC::JSGlobalObject*) const
9   0x10b557c0c JSC::PropertySlot::getValue(JSC::JSGlobalObject*, unsigned int) const
10  0x10b3d4abe JSC::JSObject::get(JSC::JSGlobalObject*, unsigned int) const
11  0x10adad503 JSC::JSGenericTypedArrayView&lt;JSC::Int16Adaptor&gt;::set(JSC::JSGlobalObject*, unsigned int, JSC::JSObject*, unsigned int, unsigned int, JSC::CopyType)
12  0x10ad1bace JSC::JSObject* JSC::constructGenericTypedArrayViewWithArguments&lt;JSC::JSGenericTypedArrayView&lt;JSC::Int16Adaptor&gt; &gt;(JSC::JSGlobalObject*, JSC::Structure*, long long, unsigned int, WTF::Optional&lt;unsigned int&gt;)
13  0x10b5cc421 long long JSC::constructGenericTypedArrayView&lt;JSC::JSGenericTypedArrayView&lt;JSC::Int16Adaptor&gt; &gt;(JSC::JSGlobalObject*, JSC::CallFrame*)
14  0x491596e010c7
15  0x491596e0dbc6
16  0x10a2ec3c3 vmEntryToJavaScript
17  0x10b10bd27 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*)
18  0x10b10c49f JSC::Interpreter::executeCall(JSC::JSGlobalObject*, JSC::JSObject*, JSC::CallType, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;)
19  0x10b432109 JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallType, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;)
20  0x10b503cd2 JSC::callGetter(JSC::JSGlobalObject*, JSC::JSValue, JSC::JSValue)
21  0x10b71b594 JSC::PropertySlot::functionGetter(JSC::JSGlobalObject*) const
22  0x10b557c0c JSC::PropertySlot::getValue(JSC::JSGlobalObject*, unsigned int) const
23  0x10b3d4abe JSC::JSObject::get(JSC::JSGlobalObject*, unsigned int) const
24  0x10adad503 JSC::JSGenericTypedArrayView&lt;JSC::Int16Adaptor&gt;::set(JSC::JSGlobalObject*, unsigned int, JSC::JSObject*, unsigned int, unsigned int, JSC::CopyType)
25  0x10ad1bace JSC::JSObject* JSC::constructGenericTypedArrayViewWithArguments&lt;JSC::JSGenericTypedArrayView&lt;JSC::Int16Adaptor&gt; &gt;(JSC::JSGlobalObject*, JSC::Structure*, long long, unsigned int, WTF::Optional&lt;unsigned int&gt;)
26  0x10b5cc421 long long JSC::constructGenericTypedArrayView&lt;JSC::JSGenericTypedArrayView&lt;JSC::Int16Adaptor&gt; &gt;(JSC::JSGlobalObject*, JSC::CallFrame*)
27  0x491596e010c7
28  0x491596e0dbc6
29  0x10a2ec3c3 vmEntryToJavaScript
30  0x10b10bd27 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*)
31  0x10b10c49f JSC::Interpreter::executeCall(JSC::JSGlobalObject*, JSC::JSObject*, JSC::CallType, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;)
test_script_98: line 2: 45245 Segmentation fault: 11  ( &quot;$@&quot; ../../.vm/JavaScriptCore.framework/Helpers/jsc --useFTLJIT\=false --useFunctionDotArguments\=true --validateExceptionChecks\=true --useDollarVM\=true --maxPerThreadStackUsage\=1572864 --jitMemoryReservationSize\=50000 --useFTLJIT\=true --useConcurrentJIT\=false --thresholdForJITAfterWarmUp\=100 --scribbleFreeCells\=true typed-array-subarray-can-throw-oom-error.js )
ERROR: Unexpected exit code: 139

https://build.webkit.org/builders/Apple-Catalina-Debug-JSC-Tests/builds/679/steps/jscore-test/logs/stdio
https://build.webkit.org/builders/Apple-Catalina-Debug-JSC-Tests/builds/679</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1641472</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2020-04-14 11:28:12 -0700</bug_when>
    <thetext>&lt;rdar://problem/61781787&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1641473</commentid>
    <comment_count>2</comment_count>
    <who name="Matt Lewis">jlewis3</who>
    <bug_when>2020-04-14 11:30:17 -0700</bug_when>
    <thetext>results history:
https://results.webkit.org/?suite=javascriptcore-tests&amp;suite=javascriptcore-tests&amp;suite=javascriptcore-tests&amp;suite=javascriptcore-tests&amp;suite=javascriptcore-tests&amp;suite=javascriptcore-tests&amp;suite=javascriptcore-tests&amp;suite=javascriptcore-tests&amp;suite=javascriptcore-tests&amp;suite=javascriptcore-tests&amp;test=stress%2Ftyped-array-subarray-can-throw-oom-error.js.bytecode-cache&amp;test=stress%2Ftyped-array-subarray-can-throw-oom-error.js.default&amp;test=stress%2Ftyped-array-subarray-can-throw-oom-error.js.dfg-eager&amp;test=stress%2Ftyped-array-subarray-can-throw-oom-error.js.dfg-eager-no-cjit-validate&amp;test=stress%2Ftyped-array-subarray-can-throw-oom-error.js.eager-jettison-no-cjit&amp;test=stress%2Ftyped-array-subarray-can-throw-oom-error.js.ftl-eager&amp;test=stress%2Ftyped-array-subarray-can-throw-oom-error.js.ftl-eager-no-cjit&amp;test=stress%2Ftyped-array-subarray-can-throw-oom-error.js.ftl-eager-no-cjit-b3o1&amp;test=stress%2Ftyped-array-subarray-can-throw-oom-error.js.ftl-no-cjit-b3o0&amp;test=stress%2Ftyped-array-subarray-can-throw-oom-error.js.ftl-no-cjit-no-inline-validate</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1641488</commentid>
    <comment_count>3</comment_count>
    <who name="Yusuke Suzuki">ysuzuki</who>
    <bug_when>2020-04-14 12:09:35 -0700</bug_when>
    <thetext>Committed r260087: &lt;https://trac.webkit.org/changeset/260087&gt;</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>