Bug 148778

Summary:	REGRESSION(r183787): Mozilla test is failing on ARM64 Debug
Product:	WebKit	Reporter:	Basile Clement <basile_clement>
Component:	JavaScriptCore	Assignee:	Filip Pizlo <fpizlo>
Status:	NEW ---
Severity:	Normal	CC:	ggaren, keith_miller, mark.lam, msaboff, onlyoneu, saam
Priority:	P2
Version:	WebKit Nightly Build
Hardware:	iPhone / iPad
OS:	Unspecified

Description Basile Clement 2015-09-03 19:50:12 PDT

The failing test is Source/JavaScriptCore/tests/mozilla/js1_5/Array/regress-157652.js.
This is flaky, and I couldn't ever get it to happen inside lldb or in Release mode.

while true; do DYLD_FRAMEWORK_PATH=jsc.deb/ jsc.deb/jsc   --useFTLJIT\=false --enableFunctionDotArguments\=true --useFTLJIT\=true --ftlCrashesIfCantInitializeLLVM\=true shell.js regress-157652.js --useDFGJIT=0 --useLLInt=0; done
BUGNUMBER: 157652
STATUS: Testing that Array.sort() doesn't crash on very large arrays
BUGNUMBER: 157652
STATUS: Testing that Array.sort() doesn't crash on very large arrays
BUGNUMBER: 157652
STATUS: Testing that Array.sort() doesn't crash on very large arrays
BUGNUMBER: 157652
STATUS: Testing that Array.sort() doesn't crash on very large arrays
BUGNUMBER: 157652
STATUS: Testing that Array.sort() doesn't crash on very large arrays
BUGNUMBER: 157652
STATUS: Testing that Array.sort() doesn't crash on very large arrays
BUGNUMBER: 157652
STATUS: Testing that Array.sort() doesn't crash on very large arrays
Segmentation fault: 11
BUGNUMBER: 157652
STATUS: Testing that Array.sort() doesn't crash on very large arrays
Segmentation fault: 11