Bug 122134
| Summary: | REGRESSION: inspector/debugger/live-edit-breakpoints.html flakily crashes in Structure::getConcurrently | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Alexey Proskuryakov <ap> |
| Component: | JavaScriptCore | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED INVALID | ||
| Severity: | Normal | CC: | dbates, fpizlo, ggaren, joepeck, mhahnenberg, msaboff, oliver, webkit-bug-importer |
| Priority: | P1 | Keywords: | InRadar, MakingBotsRed, Regression |
| Version: | 528+ (Nightly build) | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Alexey Proskuryakov
A few days ago, we started getting crashes in inspector/debugger/live-edit-breakpoints.html. This was (very) roughly around r156470.
This is a recent regression and is very bad for bot stability, as it crashes in release too. Please fix soon!
Thread 13 Crashed:: JSC Compilation Thread
0 com.apple.JavaScriptCore 0x00000001007fd196 JSC::Structure::getConcurrently(JSC::VM&, WTF::StringImpl*, unsigned int&, JSC::JSCell*&) + 182 (PropertyMapHashTable.h:295)
1 com.apple.JavaScriptCore 0x0000000100641dca JSC::GetByIdStatus::computeFor(JSC::VM&, JSC::Structure*, WTF::StringImpl*) + 442 (GetByIdStatus.cpp:279)
2 com.apple.JavaScriptCore 0x00000001005672b7 JSC::DFG::AbstractInterpreter<JSC::DFG::InPlaceAbstractState>::executeEffects(unsigned int, JSC::DFG::Node*) + 2119 (GetByIdStatus.h:80)
3 com.apple.JavaScriptCore 0x0000000100565ac9 JSC::DFG::CFAPhase::performBlockCFA(JSC::DFG::BasicBlock*) + 537 (DFGAbstractInterpreterInlines.h:1577)
4 com.apple.JavaScriptCore 0x0000000100565886 JSC::DFG::CFAPhase::run() + 214 (DFGCFAPhase.cpp:134)
5 com.apple.JavaScriptCore 0x0000000100565745 bool JSC::DFG::runPhase<JSC::DFG::CFAPhase>(JSC::DFG::Graph&) + 117 (DFGCommon.h:106)
6 com.apple.JavaScriptCore 0x00000001005656c9 JSC::DFG::performCFA(JSC::DFG::Graph&) + 9 (DFGCFAPhase.cpp:151)
7 com.apple.JavaScriptCore 0x00000001005bad9b JSC::DFG::Plan::compileInThreadImpl(JSC::DFG::LongLivedState&) + 571 (DFGPlan.cpp:201)
8 com.apple.JavaScriptCore 0x00000001005ba9c5 JSC::DFG::Plan::compileInThread(JSC::DFG::LongLivedState&) + 245 (DFGPlan.cpp:116)
9 com.apple.JavaScriptCore 0x00000001006332fb JSC::DFG::Worklist::runThread() + 539 (DFGWorklist.cpp:239)
10 com.apple.JavaScriptCore 0x000000010088b16f WTF::wtfThreadEntryPoint(void*) + 15 (ThreadingPthreads.cpp:195)
http://build.webkit.org/results/Apple%20MountainLion%20Release%20WK1%20(Tests)/r156534%20(13290)/inspector/debugger/live-edit-breakpoints-crash-log.txt
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Radar WebKit Bug Importer
<rdar://problem/15116719>
Brian Burg
The related test(s) have been removed from trunk.