220397 2021-01-06 21:11:11 -0800 The scratch register should be different from the target register when calling validateUntaggedPtr. 2021-01-09 08:53:38 -0800 1 1 1 Unclassified WebKit JavaScriptCore WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 mark.lam mark.lam ews-watchlist keith_miller msaboff saam tzagallo webkit-bug-importer ysuzuki zalan oldest_to_newest 1717850 0 mark.lam 2021-01-06 21:11:11 -0800 rdar://72771069 1717852 1 417152 mark.lam 2021-01-06 21:20:16 -0800 Created attachment 417152 proposed patch. 1717853 2 417152 ysuzuki 2021-01-06 21:22:44 -0800 Comment on attachment 417152 proposed patch. r=me 1717966 3 417152 mark.lam 2021-01-07 09:02:41 -0800 Comment on attachment 417152 proposed patch. Thanks for the review. Landing now. 1717979 4 ews-feeder 2021-01-07 09:33:29 -0800 Committed r271240: <https://trac.webkit.org/changeset/271240> All reviewed patches have been landed. Closing bug and clearing flags on attachment 417152. 1718562 5 zalan 2021-01-09 04:24:09 -0800 I can still repro the crash with the most recent spade (r271343). 1718571 6 mark.lam 2021-01-09 08:53:38 -0800 (In reply to zalan from comment #5) > I can still repro the crash with the most recent spade (r271343). This turns out to be a different issue. We should track it with a new bug. Closing this one. 417152 2021-01-06 21:20:16 -0800 2021-01-07 09:33:31 -0800 proposed patch. bug-220397.patch text/plain 2344 mark.lam SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291 cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkocmV2aXNpb24gMjcxMjIyKQorKysgU291cmNl L0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDIwIEBA CisyMDIxLTAxLTA2ICBNYXJrIExhbSAgPG1hcmsubGFtQGFwcGxlLmNvbT4KKworICAgICAgICBU aGUgc2NyYXRjaCByZWdpc3RlciBzaG91bGQgYmUgZGlmZmVyZW50IGZyb20gdGhlIHRhcmdldCBy ZWdpc3RlciB3aGVuIGNhbGxpbmcgdmFsaWRhdGVVbnRhZ2dlZFB0ci4KKyAgICAgICAgaHR0cHM6 Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIyMDM5NworICAgICAgICByZGFyOi8v NzI3NzEwNjkKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAg ICAqIGFzc2VtYmxlci9NYWNyb0Fzc2VtYmxlckFSTTY0RS5oOgorICAgICAgICAoSlNDOjpNYWNy b0Fzc2VtYmxlckFSTTY0RTo6dmFsaWRhdGVVbnRhZ2dlZFB0cik6CisgICAgICAgIC0gQWRkZWQg YW4gQVNTRVJUIHRvIGVuZm9yY2UgdGhpcyBpbnZhcmlhbnQuCisgICAgICAgICogaml0L1RodW5r R2VuZXJhdG9ycy5jcHA6CisgICAgICAgIChKU0M6OmVtaXRQb2ludGVyVmFsaWRhdGlvbik6Cisg ICAgICAgIC0gZW1pdFBvaW50ZXJWYWxpZGF0aW9uKCkgd2FzIHJldXNpbmcgdGhlIHRhcmdldCBy ZWdpc3RlciBhcyB0aGUgc2NyYXRjaCByZWdpc3Rlci4KKyAgICAgICAgICBUaGlzIGlzIGEgaG9s ZCBvdmVyIGZyb20gdGhlIHByZXZpb3VzIHdheSBvZiBkb2luZyB0aGUgdmFsaWRhdGlvbiAod2hp Y2ggaGFkIGEKKyAgICAgICAgICBidWcpLiAgV2l0aCB0aGUgdmFsaWRhdGlvbiBidWcgZml4ZWQs IHRoaXMgcmVnaXN0ZXIgcmV1c2UgaXMgbm8gbG9uZ2VyIGFsbG93ZWQuCisKIDIwMjEtMDEtMDYg IFl1c3VrZSBTdXp1a2kgIDx5c3V6dWtpQGFwcGxlLmNvbT4KIAogICAgICAgICBbSlNDXSBSZXBs YWNlIEpTQmlnSW50Ojp0b1VpbnQ2NCB3aXRoIEpTQmlnSW50Ojp0b0JpZ1VJbnQ2NApJbmRleDog U291cmNlL0phdmFTY3JpcHRDb3JlL2Fzc2VtYmxlci9NYWNyb0Fzc2VtYmxlckFSTTY0RS5oCj09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT0KLS0tIFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9hc3NlbWJsZXIvTWFjcm9Bc3NlbWJs ZXJBUk02NEUuaAkocmV2aXNpb24gMjcxMjIyKQorKysgU291cmNlL0phdmFTY3JpcHRDb3JlL2Fz c2VtYmxlci9NYWNyb0Fzc2VtYmxlckFSTTY0RS5oCSh3b3JraW5nIGNvcHkpCkBAIC04Nyw2ICs4 Nyw3IEBAIHB1YmxpYzoKICAgICAgICAgICAgIHNjcmF0Y2ggPSBnZXRDYWNoZWREYXRhVGVtcFJl Z2lzdGVySURBbmRJbnZhbGlkYXRlKCk7CiAKICAgICAgICAgRGlzYWxsb3dNYWNyb1NjcmF0Y2hS ZWdpc3RlclVzYWdlIGRpc2FsbG93U2NvcGUoKnRoaXMpOworICAgICAgICBBU1NFUlQodGFyZ2V0 ICE9IHNjcmF0Y2gpOwogICAgICAgICByc2hpZnQ2NCh0YXJnZXQsIFRydXN0ZWRJbW0zMig4KSwg c2NyYXRjaCk7CiAgICAgICAgIGFuZDY0KFRydXN0ZWRJbW02NCgweGZmMDAwMDAwMDAwMDAwKSwg c2NyYXRjaCwgc2NyYXRjaCk7CiAgICAgICAgIG9yNjQodGFyZ2V0LCBzY3JhdGNoLCBzY3JhdGNo KTsKSW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9qaXQvVGh1bmtHZW5lcmF0b3JzLmNwcAo9 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09Ci0tLSBTb3VyY2UvSmF2YVNjcmlwdENvcmUvaml0L1RodW5rR2VuZXJhdG9ycy5j cHAJKHJldmlzaW9uIDI3MTIyMikKKysrIFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9qaXQvVGh1bmtH ZW5lcmF0b3JzLmNwcAkod29ya2luZyBjb3B5KQpAQCAtNTEsNyArNTEsNyBAQCBpbmxpbmUgdm9p ZCBlbWl0UG9pbnRlclZhbGlkYXRpb24oQ0NhbGxICiAgICAgICAgIGlzTm9uWmVyby5saW5rKCZq aXQpOwogICAgICAgICBqaXQucHVzaFRvU2F2ZShwb2ludGVyR1BSKTsKICAgICAgICAgaml0LnVu dGFnUHRyKHRhZywgcG9pbnRlckdQUik7Ci0gICAgICAgIGppdC52YWxpZGF0ZVVudGFnZ2VkUHRy KHBvaW50ZXJHUFIsIHBvaW50ZXJHUFIpOworICAgICAgICBqaXQudmFsaWRhdGVVbnRhZ2dlZFB0 cihwb2ludGVyR1BSKTsKICAgICAgICAgaml0LnBvcFRvUmVzdG9yZShwb2ludGVyR1BSKTsKICAg ICB9CiB9Cg==