<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>48912</bug_id>
          
          <creation_ts>2010-11-03 06:26:36 -0700</creation_ts>
          <short_desc>ARM JIT asserts when loading http://reader.google.com in debug mode</short_desc>
          <delta_ts>2010-11-22 16:52:24 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Other</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc>http://reader.google.com</bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P4</priority>
          <bug_severity>Minor</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Jocelyn Turcotte">jturcotte</reporter>
          <assigned_to name="Gabor Loki">loki</assigned_to>
          <cc>abarth</cc>
    
    <cc>barraclough</cc>
    
    <cc>christian.webkit</cc>
    
    <cc>commit-queue</cc>
    
    <cc>ddkilzer</cc>
    
    <cc>eric</cc>
    
    <cc>loki</cc>
    
    <cc>oliver</cc>
    
    <cc>thomas</cc>
    
    <cc>webkit.review.bot</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>304003</commentid>
    <comment_count>0</comment_count>
    <who name="Jocelyn Turcotte">jturcotte</who>
    <bug_when>2010-11-03 06:26:36 -0700</bug_when>
    <thetext>ASSERTION FAILED: differenceBetween(m_uninterruptedInstructionSequenceBegin, label()) == insnSpace
(../../../qtwebkit-webkit2-dev/JavaScriptCore/jit/JITInlineMethods.h:127 void JSC::JIT::endUninterruptedSequence(int, int))

It happens under JIT::compileGetByIdSlowCase, stubCall.call(dst) eventually calls ARMAssembler::dataTransfer32 which might generate 1 or 2 instructions depending on the value of &quot;dst&quot;.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>304712</commentid>
    <comment_count>1</comment_count>
    <who name="David Kilzer (:ddkilzer)">ddkilzer</who>
    <bug_when>2010-11-04 09:44:27 -0700</bug_when>
    <thetext>I believe this is only an issue with the ARMAssembler, not the ARMv7Assembler.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>304835</commentid>
    <comment_count>2</comment_count>
    <who name="Gabor Loki">loki</who>
    <bug_when>2010-11-04 13:38:03 -0700</bug_when>
    <thetext>This issue is related to ARM JIT, not ARMv7 (Thumb-2) one. I will upload a patch soon.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>306643</commentid>
    <comment_count>3</comment_count>
      <attachid>73344</attachid>
    <who name="Gabor Loki">loki</who>
    <bug_when>2010-11-09 00:34:13 -0800</bug_when>
    <thetext>Created attachment 73344
ARM JIT asserts when loading http://reader.google.com in debug mode</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>307188</commentid>
    <comment_count>4</comment_count>
      <attachid>73344</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2010-11-09 23:36:54 -0800</bug_when>
    <thetext>Comment on attachment 73344
ARM JIT asserts when loading http://reader.google.com in debug mode

Clearing flags on attachment: 73344

Committed r71722: &lt;http://trac.webkit.org/changeset/71722&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>307189</commentid>
    <comment_count>5</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2010-11-09 23:37:00 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>307228</commentid>
    <comment_count>6</comment_count>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2010-11-10 00:52:22 -0800</bug_when>
    <thetext>http://trac.webkit.org/changeset/71722 might have broken GTK Linux 64-bit Debug
The following tests are not passing:
fast/events/tabindex-focus-blur-all.html</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>307242</commentid>
    <comment_count>7</comment_count>
    <who name="Gabor Loki">loki</who>
    <bug_when>2010-11-10 01:23:33 -0800</bug_when>
    <thetext>&gt; http://trac.webkit.org/changeset/71722 might have broken GTK Linux 64-bit Debug
&gt; The following tests are not passing:
&gt; fast/events/tabindex-focus-blur-all.html

It should be a flaky test. This patch related to ARM.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>307376</commentid>
    <comment_count>8</comment_count>
      <attachid>73344</attachid>
    <who name="Darin Adler">darin</who>
    <bug_when>2010-11-10 09:15:21 -0800</bug_when>
    <thetext>Comment on attachment 73344
ARM JIT asserts when loading http://reader.google.com in debug mode

View in context: https://bugs.webkit.org/attachment.cgi?id=73344&amp;action=review

&gt; JavaScriptCore/jit/JITInlineMethods.h:131
&gt; +    /* There are several cases when the uninterrupted sequence is larger than
&gt; +     * maximum required offset for pathing the same sequence. Eg.: if in a
&gt; +     * uninterrupted sequence the last macroassembler&apos;s instruction is a stub
&gt; +     * call, it emits store instruction(s) which should not be included in the
&gt; +     * calculation of length of uninterrupted sequence. So, the insnSpace and
&gt; +     * constSpace should be upper limit instead of hard limit.
&gt; +     */

In the future, please use // comments, not /* comments, in WebKit code.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>73344</attachid>
            <date>2010-11-09 00:34:13 -0800</date>
            <delta_ts>2010-11-10 09:15:21 -0800</delta_ts>
            <desc>ARM JIT asserts when loading http://reader.google.com in debug mode</desc>
            <filename>0001-ARM-JIT-asserts-when-loading-http-reader.google.com-.patch</filename>
            <type>text/plain</type>
            <size>3589</size>
            <attacher name="Gabor Loki">loki</attacher>
            
              <data encoding="base64">RnJvbSBkODEzZmViZWJkOTBhMjMzODIyMDU3NTdjZmIyMWJhNTc3ZjliYmYzIE1vbiBTZXAgMTcg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==
</data>

          </attachment>
      

    </bug>

</bugzilla>