72396 2011-11-15 10:28:29 -0800 [ASSERT] in JSC::CodeBlock::reoptimizationRetryCounter 2011-11-16 04:03:45 -0800 1 1 1 Unclassified WebKit JavaScriptCore 528+ (Nightly build) Unspecified Unspecified RESOLVED DUPLICATE 72292 P2 Normal --- 1 xan.lopez webkit-unassigned fpizlo mrobinson wingo xan.lopez oldest_to_newest 503029 0 xan.lopez 2011-11-15 10:28:29 -0800 r100279, GNU/Linux x86/64. Fairly easy to reproduce clicking on the "N more tweets" thingie on twitter: Program received signal SIGSEGV, Segmentation fault. 0x00007ffff3d4445c in JSC::CodeBlock::reoptimizationRetryCounter (this=0x0) at ../../Source/JavaScriptCore/bytecode/CodeBlock.h:866 866 ASSERT(m_reoptimizationRetryCounter <= Heuristics::reoptimizationRetryCounterMax); (gdb) bt #0 0x00007ffff3d4445c in JSC::CodeBlock::reoptimizationRetryCounter (this=0x0) at ../../Source/JavaScriptCore/bytecode/CodeBlock.h:866 #1 0x00007ffff3dd554c in JSC::CodeBlock::largeFailCountThreshold (this=0xb438ed0) at ../../Source/JavaScriptCore/bytecode/CodeBlock.h:987 #2 0x00007ffff3dd3c45 in JSC::DFG::OSRExitCompiler::compileExit (this=0x7fffffffc2a0, exit=..., recovery=0x0) at ../../Source/JavaScriptCore/dfg/DFGOSRExitCompiler64.cpp:475 #3 0x00007ffff3dd646c in JSC::DFG::compileOSRExit (exec=0x7fff99ae6830) at ../../Source/JavaScriptCore/dfg/DFGOSRExitCompiler.cpp:59 #4 0x00007fff9b81b696 in ?? () #5 0x00007fffffffc330 in ?? () #6 0x00007fff88e684c0 in ?? () #7 0x0000000000000000 in ?? () 503047 1 mrobinson 2011-11-15 10:46:51 -0800 Certainly related to the recent activation of the DFG JIT for GTK+. 503050 2 xan.lopez 2011-11-15 10:50:01 -0800 (In reply to comment #1) > Certainly related to the recent activation of the DFG JIT for GTK+. More recent than that, I've been using the DFG JIT for some time already without issues. I believe this regression is a few days old only. 503717 3 wingo 2011-11-16 01:59:00 -0800 Related to bug 72292, perhaps. 503738 4 wingo 2011-11-16 02:51:10 -0800 I cannot reproduce this bug with current webkit, though I didn't reproduce it before either. Xan, please give it another go with current webkit. 503753 5 fpizlo 2011-11-16 04:03:45 -0800 (In reply to comment #4) > I cannot reproduce this bug with current webkit, though I didn't reproduce it before either. Xan, please give it another go with current webkit. I'm almost certain that it's a dup of https://bugs.webkit.org/show_bug.cgi?id=72292. Crashes in exactly this code path were the main symptom of that bug. Please reopen if you can still repro. *** This bug has been marked as a duplicate of bug 72292 ***