231688 2021-10-13 11:22:55 -0700 REGRESSION (r283852): ASSERTION FAILED: (bytecodeIndex << checkpointShift) >> checkpointShift == bytecodeIndex 2021-10-18 12:25:13 -0700 1 1 1 Unclassified WebKit JavaScriptCore Other Unspecified Unspecified RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=229681 InRadar P2 Normal --- 229681 1 ryanhaddad tzagallo ews-watchlist jonlee keith_miller mark.lam msaboff saam tzagallo webkit-bot-watchers-bugzilla webkit-bug-importer ysuzuki oldest_to_newest 1803878 0 ryanhaddad 2021-10-13 11:22:55 -0700 Multiple wasm/function-tests/trap-* tests are asserting on debug JSC bots: ASSERTION FAILED: (bytecodeIndex << checkpointShift) >> checkpointShift == bytecodeIndex /Volumes/Data/worker/catalina-debug/build/Source/JavaScriptCore/bytecode/BytecodeIndex.h(94) : static uint32_t JSC::BytecodeIndex::pack(uint32_t, JSC::Checkpoint) 1 0x1057a2fd9 WTFCrash 2 0x1060e173b WTFCrashWithInfo(int, char const*, char const*, int) 3 0x1059ff004 JSC::BytecodeIndex::pack(unsigned int, unsigned char) 4 0x1059feed6 JSC::BytecodeIndex::BytecodeIndex(unsigned int, unsigned char) 5 0x10596a272 JSC::BytecodeIndex::BytecodeIndex(unsigned int, unsigned char) 6 0x106454d12 JSC::CallSiteIndex::bytecodeIndex() const 7 0x106e1f52b JSC::CallFrame::bytecodeIndex() const 8 0x106e2e90f JSC::StackVisitor::readNonInlinedFrame(JSC::CallFrame*, JSC::CodeOrigin*) 9 0x106e2e218 JSC::StackVisitor::readFrame(JSC::CallFrame*) 10 0x106e2e0b9 JSC::StackVisitor::StackVisitor(JSC::CallFrame*, JSC::VM&) 11 0x106e2e4b5 JSC::StackVisitor::StackVisitor(JSC::CallFrame*, JSC::VM&) 12 0x106e252d8 void JSC::StackVisitor::visit<(JSC::StackVisitor::EmptyEntryFrameAction)0, JSC::Interpreter::getStackTrace(JSC::JSCell*, WTF::Vector<JSC::StackFrame, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, unsigned long, unsigned long)::$_6>(JSC::CallFrame*, JSC::VM&, JSC::Interpreter::getStackTrace(JSC::JSCell*, WTF::Vector<JSC::StackFrame, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, unsigned long, unsigned long)::$_6 const&) 13 0x106e251a7 JSC::Interpreter::getStackTrace(JSC::JSCell*, WTF::Vector<JSC::StackFrame, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, unsigned long, unsigned long) 14 0x1072d8464 JSC::getStackTrace(JSC::JSGlobalObject*, JSC::VM&, JSC::JSObject*, bool) 15 0x1072db16e JSC::ErrorInstance::finishCreation(JSC::VM&, JSC::JSGlobalObject*, WTF::String const&, JSC::JSValue, WTF::String (*)(WTF::String const&, WTF::String const&, JSC::RuntimeType, JSC::ErrorInstance::SourceTextWhereErrorOccurred), JSC::RuntimeType, bool) 16 0x10719dcd3 JSC::ErrorInstance::create(JSC::JSGlobalObject*, JSC::VM&, JSC::Structure*, WTF::String const&, JSC::JSValue, WTF::String (*)(WTF::String const&, WTF::String const&, JSC::RuntimeType, JSC::ErrorInstance::SourceTextWhereErrorOccurred), JSC::RuntimeType, JSC::ErrorType, bool) 17 0x107a573cf JSC::createJSWebAssemblyRuntimeError(JSC::JSGlobalObject*, JSC::VM&, JSC::Wasm::ExceptionType) 18 0x1079df084 operationWasmToJSException 19 0x107a03727 slow_path_wasm_throw_exception 20 0x105e6a8a5 wasmLLIntPCRangeStart 21 0x5443cc656071 22 0x5443cc653dba 23 0x105e64570 llint_entry 24 0x105e40980 vmEntryToJavaScript 25 0x106e290fb JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) 26 0x106e2b7f1 JSC::Interpreter::executeModuleProgram(JSC::JSModuleRecord*, JSC::ModuleProgramExecutable*, JSC::JSGlobalObject*, JSC::JSModuleEnvironment*, JSC::JSValue, JSC::JSValue) 27 0x1074ec95d JSC::JSModuleRecord::evaluate(JSC::JSGlobalObject*, JSC::JSValue, JSC::JSValue) 28 0x10719be2e JSC::AbstractModuleRecord::evaluate(JSC::JSGlobalObject*, JSC::JSValue, JSC::JSValue) 29 0x1074e60a9 JSC::JSModuleLoader::evaluateNonVirtual(JSC::JSGlobalObject*, JSC::JSValue, JSC::JSValue, JSC::JSValue, JSC::JSValue, JSC::JSValue) 30 0x1074e5fd6 JSC::JSModuleLoader::evaluate(JSC::JSGlobalObject*, JSC::JSValue, JSC::JSValue, JSC::JSValue, JSC::JSValue, JSC::JSValue) 31 0x107514750 JSC::moduleLoaderEvaluate(JSC::JSGlobalObject*, JSC::CallFrame*) test_script_71485: line 2: 91042 Segmentation fault: 11 ( "$@" ../../../../.vm/JavaScriptCore.framework/Helpers/jsc --useFTLJIT\=false --useFunctionDotArguments\=true --validateExceptionChecks\=true --useDollarVM\=true --maxPerThreadStackUsage\=1572864 --useFastTLSForWasmContext\=true --useFTLJIT\=true --useConcurrentJIT\=false --thresholdForJITAfterWarmUp\=100 --scribbleFreeCells\=true -m trap-load-shared.js ) https://build.webkit.org/#/builders/17/builds/1236/steps/jscore-test/logs/stdio https://results.webkit.org/?suite=javascriptcore-tests&suite=javascriptcore-tests&suite=javascriptcore-tests&suite=javascriptcore-tests&suite=javascriptcore-tests&suite=javascriptcore-tests&suite=javascriptcore-tests&suite=javascriptcore-tests&suite=javascriptcore-tests&test=wasm.yaml%2Fwasm%2Ffunction-tests%2Ftrap-load-shared.js.wasm-eager&test=wasm.yaml%2Fwasm%2Ffunction-tests%2Ftrap-load-shared.js.wasm-eager-jettison&test=wasm.yaml%2Fwasm%2Ffunction-tests%2Ftrap-load-shared.js.wasm-no-cjit-yes-tls-context&test=wasm.yaml%2Fwasm%2Ffunction-tests%2Ftrap-load.js.wasm-eager&test=wasm.yaml%2Fwasm%2Ffunction-tests%2Ftrap-load.js.wasm-eager-jettison&test=wasm.yaml%2Fwasm%2Ffunction-tests%2Ftrap-load.js.wasm-no-cjit-yes-tls-context&test=wasm.yaml%2Fwasm%2Ffunction-tests%2Ftrap-store-2.js.wasm-eager&test=wasm.yaml%2Fwasm%2Ffunction-tests%2Ftrap-store-2.js.wasm-eager-jettison&test=wasm.yaml%2Fwasm%2Ffunction-tests%2Ftrap-store-2.js.wasm-no-cjit-yes-tls-context 1803880 1 ryanhaddad 2021-10-13 11:25:51 -0700 I think this could be related to https://trac.webkit.org/changeset/283852/webkit 1803881 2 webkit-bug-importer 2021-10-13 11:26:05 -0700 <rdar://problem/84207898> 1804501 3 441280 tzagallo 2021-10-14 14:18:11 -0700 Created attachment 441280 Patch 1804520 4 441280 ysuzuki 2021-10-14 14:39:25 -0700 Comment on attachment 441280 Patch r=me 1804577 5 ews-feeder 2021-10-14 16:15:23 -0700 Committed r284212 (243022@main): <https://commits.webkit.org/243022@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 441280. 441280 2021-10-14 14:18:11 -0700 2021-10-14 16:15:24 -0700 Patch bug-231688-20211014141810.patch text/plain 2200 tzagallo U3VidmVyc2lvbiBSZXZpc2lvbjogMjg0MTk1CmRpZmYgLS1naXQgYS9Tb3VyY2UvSmF2YVNjcmlw dENvcmUvQ2hhbmdlTG9nIGIvU291cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwppbmRleCBm NDIyMmYxMGIwNTdiNmMwMGY0MzA1N2NkOTg1MDE1NDMxNTZmN2ZiLi5jY2FlZjIzNjkyYmYwM2I3 YmMyODcxZTA2Mzk1YjNlNzdjYTc4Yjk5IDEwMDY0NAotLS0gYS9Tb3VyY2UvSmF2YVNjcmlwdENv cmUvQ2hhbmdlTG9nCisrKyBiL1NvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKQEAgLTEs MyArMSwyMCBAQAorMjAyMS0xMC0xNCAgVGFkZXUgWmFnYWxsbyAgPHR6YWdhbGxvQGFwcGxlLmNv bT4KKworICAgICAgICBXYXNtIExMSW50IHNob3VsZCB6ZXJvIGJ5dGVjb2RlSW5kZXggYmVmb3Jl IHRocm93aW5nCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9p ZD0yMzE2ODgKKyAgICAgICAgPHJkYXI6Ly84NDIwNzg5OD4KKworICAgICAgICBSZXZpZXdlZCBi eSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBBZnRlciByMjgzODUyLCB0aGUgdW53aW5kZXIg Y2FuIG5vdyBhc2sgV2ViQXNzZW1ibHkgZnJhbWVzIGZvciB0aGVpciBieXRlY29kZUluZGV4Lgor ICAgICAgICBXZSBkbyB3cml0ZSB0byB0aGUgYnl0ZWNvZGVJbmRleCB3aGVuIHRocm93aW5nIGZy b20gdGhlIHdhc20gYHRocm93YCBvcGNvZGUsIGJ1dCB3ZQorICAgICAgICBmYWlsZWQgdG8gd3Jp dGUgd2hlbiB0cmFwcGluZyAoZS5nLiAgdGhyb3dpbmcgYW4gT09CIG9yIFVucmVhY2hhYmxlKS4g VGhlIHZhbHVlIG9mCisgICAgICAgIHRoZSBieXRlY29kZUluZGV4IGluIHRoaXMgaXMgY2FzZSBp cyBub3QgaW50ZXJlc3RpbmcsIHNpbmNlIHRoZXNlIGV4Y2VwdGlvbnMgY2FuJ3QgYmUKKyAgICAg ICAgY2F1Z2h0IGZyb20gV2FzbSwgYWxsIHdlIG5lZWQgdG8ga25vdyBpcyBlbnN1cmUgdGhlcmUg aXNuJ3QgYW4gaW52YWxpZCBsZWZ0LW92ZXIKKyAgICAgICAgdmFsdWUgaW4gdGhhdCBzdGFjayBz bG90LCBzbyB3ZSB6ZXJvIGl0LgorCisgICAgICAgICogbGxpbnQvV2ViQXNzZW1ibHkuYXNtOgor CiAyMDIxLTEwLTE0ICBNeWxlcyBDLiBNYXhmaWVsZCAgPG1tYXhmaWVsZEBhcHBsZS5jb20+CiAK ICAgICAgICAgQWxsIHRoZSBTREtWYXJpYW50LnhjY29uZmlnIGZpbGVzIHNob3VsZCBtYXRjaApk aWZmIC0tZ2l0IGEvU291cmNlL0phdmFTY3JpcHRDb3JlL2xsaW50L1dlYkFzc2VtYmx5LmFzbSBi L1NvdXJjZS9KYXZhU2NyaXB0Q29yZS9sbGludC9XZWJBc3NlbWJseS5hc20KaW5kZXggZmU5ODlj ODNhMTEwYjFjODM4NzQzZjk3MzJjOWEyYmNlNWFmZDU2Zi4uNWJjYmRmODMwODIzMzY3OWQwODQz YzJiODNhODUzMzk1ZTViYThhMiAxMDA2NDQKLS0tIGEvU291cmNlL0phdmFTY3JpcHRDb3JlL2xs aW50L1dlYkFzc2VtYmx5LmFzbQorKysgYi9Tb3VyY2UvSmF2YVNjcmlwdENvcmUvbGxpbnQvV2Vi QXNzZW1ibHkuYXNtCkBAIC01NDgsNiArNTQ4LDcgQEAgb3Aod2FzbV90aHJvd19mcm9tX3Nsb3df cGF0aF90cmFtcG9saW5lLCBtYWNybyAoKQogICAgIG1vdmUgd2FzbUluc3RhbmNlLCBhMgogICAg ICMgU2xvdyBwYXRocyBhbmQgdGhlIHRocm93RXhjZXB0aW9uIG1hY3JvIHN0b3JlIHRoZSBleGNl cHRpb24gY29kZSBpbiB0aGUgQXJndW1lbnRDb3VudEluY2x1ZGluZ1RoaXMgc2xvdAogICAgIGxv YWRpIEFyZ3VtZW50Q291bnRJbmNsdWRpbmdUaGlzICsgUGF5bG9hZE9mZnNldFtjZnJdLCBhMwor ICAgIHN0b3JlaSAwLCBBcmd1bWVudENvdW50SW5jbHVkaW5nVGhpcyArIFRhZ09mZnNldFtjZnJd CiAgICAgY0NhbGw0KF9zbG93X3BhdGhfd2FzbV90aHJvd19leGNlcHRpb24pCiAgICAganVtcFRv RXhjZXB0aW9uKCkKIGVuZCkKQEAgLTU2MSw2ICs1NjIsNyBAQCBtYWNybyB3YXNtX3Rocm93X2Zy b21fZmF1bHRfaGFuZGxlcihpbnN0YW5jZSkKICAgICBtb3ZlIGNvbnN0ZXhwciBXYXNtOjpFeGNl cHRpb25UeXBlOjpPdXRPZkJvdW5kc01lbW9yeUFjY2VzcywgYTMKICAgICBtb3ZlIDAsIGExCiAg ICAgbW92ZSBjZnIsIGEwCisgICAgc3RvcmVpIDAsIEFyZ3VtZW50Q291bnRJbmNsdWRpbmdUaGlz ICsgVGFnT2Zmc2V0W2Nmcl0KICAgICBjQ2FsbDQoX3Nsb3dfcGF0aF93YXNtX3Rocm93X2V4Y2Vw dGlvbikKICAgICBqdW1wVG9FeGNlcHRpb24oKQogZW5kCg==