Bug 130114 (DFGCrash)

Summary: operationRegExpTest crash
Product: WebKit Reporter: Peng Xinchao <xinchao.peng>
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Status: NEW ---    
Severity: Normal CC: fpizlo
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   

Description Peng Xinchao 2014-03-11 20:16:58 PDT
In ARM GTK platform , "operationRegExpTest" may happen crash .

The reason of crash is  "argument" is errer point (please check  below my log).

Test scenario

1. Load www.kyeongin.com
2. Select any news  and wait a time . 
3. latch up happen.(probability = %50)


my related log :

                 [void JSC::DFG::SpeculativeJIT::compile(JSC::DFG::Node*)]argumentGPR=2,node->child2()=0xb0630108

                 operationRegExpTest base=0xb15baa78,argument=0x18b
Comment 1 Peng Xinchao 2014-03-12 19:12:53 PDT
Today , i test in EFL and ISO platform , the crash is still exist .

My ISO equipment is ipad4 , ipad's system is iso6.13.

Test scenario :
1.Load www.kyeongin.com
2.click "12일(현지시간) 미국 뉴욕 맨해튼의 이스트할렘에서 주거용 빌딩 2채가 가스 누출로 추정되는 폭발로 붕괴되면서 다수의 사상자가 발생해 뉴요커들이 다" 
3. latch up happen (probability = %100)