<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>266294</bug_id>
          
          <creation_ts>2023-12-12 10:44:52 -0800</creation_ts>
          <short_desc>ASSERTION FAILED: ptr under CodePtr.h(129) : static CodePtr&lt;tag, attr&gt; WTF::CodePtr&lt;357&gt;::fromTaggedPtr(void *) [tag = 357, attr = WTF::FunctionAttributes::None</short_desc>
          <delta_ts>2023-12-13 15:53:32 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Karl Rackler">rackler</reporter>
          <assigned_to name="Mark Lam">mark.lam</assigned_to>
          <cc>mark.lam</cc>
    
    <cc>webkit-bot-watchers-bugzilla</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1999030</commentid>
    <comment_count>0</comment_count>
    <who name="Karl Rackler">rackler</who>
    <bug_when>2023-12-12 10:44:52 -0800</bug_when>
    <thetext>https://build.webkit.org/#/builders/945/builds/2948

Description:
114 tests have the same assertion: Assert Failed ptr under CodePtr.h(129) : static CodePtr&lt;tag, attr&gt; WTF::CodePtr&lt;357&gt;::fromTaggedPtr(void *) [tag = 357, attr = WTF::FunctionAttributes::None

https://build.webkit.org/#/builders/945/builds/2948/steps/11/logs/stdio
Stdio:
 15.6.2 15.6.2 The Boolean Constructor; 15.6.2.1 new Boolean( value ); 15.6.2.2 new Boolean()
 ASSERTION FAILED: ptr
 /Volumes/Data/worker/Apple-Sonoma-LLINT-CLoop-BuildAndTest/build/WebKitBuild/Debug/usr/local/include/wtf/CodePtr.h(129) : static CodePtr&lt;tag, attr&gt; WTF::CodePtr&lt;357&gt;::fromTaggedPtr(void *) [tag = 357, attr = WTF::FunctionAttributes::None]
 1   0x110381ee9 WTFCrash
 2   0x1103845fb WTFCrashWithInfo(int, char const*, char const*, int)
 3   0x1109e050d WTF::CodePtr&lt;(WTF::PtrTag)357, (WTF::FunctionAttributes)0&gt;::fromTaggedPtr(void*)
 4   0x110e8cd4f WTF::CodePtr&lt;(WTF::PtrTag)357, (WTF::FunctionAttributes)0&gt; JSC::LLInt::getCodePtrImpl&lt;(WTF::PtrTag)357&gt;(void*, void const*)
 5   0x110e96787 WTF::CodePtr&lt;(WTF::PtrTag)357, (WTF::FunctionAttributes)0&gt; JSC::LLInt::getWide16CodePtr&lt;(WTF::PtrTag)357&gt;(JSC::OpcodeID)
 6   0x110e6c5d2 JSC::MacroAssemblerCodeRef&lt;(WTF::PtrTag)357&gt; JSC::LLInt::getWide16CodeRef&lt;(WTF::PtrTag)357&gt;(JSC::OpcodeID)
 7   0x110e6c541 JSC::LLInt::genericReturnPointEntrypoint(JSC::OpcodeSize)
 8   0x110e86362 llint_slow_path_call_direct_eval_wide16
 9   0x1106f5f07 JSC::LLInt::CLoop::execute(JSC::OpcodeID, void*, JSC::VM*, JSC::ProtoCallFrame*, bool)
 10  0x110e8bc4d vmEntryToJavaScript
 11  0x110e4820d JSC::Interpreter::executeProgram(JSC::SourceCode const&amp;, JSC::JSGlobalObject*, JSC::JSObject*)
 12  0x110fc0f0d JSC::evaluate(JSC::JSGlobalObject*, JSC::SourceCode const&amp;, JSC::JSValue, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;)
 13  0x10b8248b1 runWithOptions(GlobalObject*, CommandLine&amp;, bool&amp;)
 14  0x10b7d020a jscmain(int, char**)::$_10::operator()(JSC::VM&amp;, GlobalObject*, bool&amp;) const
 15  0x10b7947fd int runJSC&lt;jscmain(int, char**)::$_10&gt;(CommandLine const&amp;, bool, jscmain(int, char**)::$_10 const&amp;)
 16  0x10b79202d jscmain(int, char**)
 17  0x10b791cd8 main
 18  0x7ff81229c3a6 start
 test_script_222: line 2: 84546 Segmentation fault: 11  ( &quot;$@&quot; ../../../../.vm/JavaScriptCore.framework/Helpers/jsc --useFTLJIT\=false --useFunctionDotArguments\=true --validateExceptionChecks\=true --useDollarVM\=true --maxPerThreadStackUsage\=1572864 --useJIT\=false ../shell.js 15.6.2.js )
 ERROR: Unexpected exit code: 139
FAIL: mozilla-tests.yaml/ecma/Boolean/15.6.2.js.mozilla-llint</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1999031</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2023-12-12 10:45:19 -0800</bug_when>
    <thetext>&lt;rdar://problem/119563251&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1999260</commentid>
    <comment_count>2</comment_count>
    <who name="Mark Lam">mark.lam</who>
    <bug_when>2023-12-13 07:56:56 -0800</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/21734</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1999437</commentid>
    <comment_count>3</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2023-12-13 15:53:30 -0800</bug_when>
    <thetext>Committed 272012@main (aa62ce7b9059): &lt;https://commits.webkit.org/272012@main&gt;

Reviewed commits have been landed. Closing PR #21734 and removing active labels.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>