Bug 130114 (DFGCrash)

Summary: operationRegExpTest crash
Product: WebKit Reporter: Peng Xinchao <xinchao.peng>
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Status: NEW    
Severity: Normal CC: fpizlo
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   

Peng Xinchao
Reported 2014-03-11 20:16:58 PDT
In ARM GTK platform , "operationRegExpTest" may happen crash . The reason of crash is "argument" is errer point (please check below my log). Test scenario 1. Load www.kyeongin.com 2. Select any news and wait a time . 3. latch up happen.(probability = %50) my related log : [void JSC::DFG::SpeculativeJIT::compile(JSC::DFG::Node*)]argumentGPR=2,node->child2()=0xb0630108 operationRegExpTest base=0xb15baa78,argument=0x18b
Attachments
Peng Xinchao
Comment 1 2014-03-12 19:12:53 PDT
Today , i test in EFL and ISO platform , the crash is still exist . My ISO equipment is ipad4 , ipad's system is iso6.13. Test scenario : 1.Load www.kyeongin.com 2.click "12일(현지시간) 미국 뉴욕 맨해튼의 이스트할렘에서 주거용 빌딩 2채가 가스 누출로 추정되는 폭발로 붕괴되면서 다수의 사상자가 발생해 뉴요커들이 다" 3. latch up happen (probability = %100)
Note You need to log in before you can comment on or make changes to this bug.