Bug 169713

Summary:	WebAssembly: Allocating a fast memory is a bit racy
Product:	WebKit	Reporter:	Saam Barati <saam>
Component:	JavaScriptCore	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED DUPLICATE
Severity:	Normal	CC:	benjamin, fpizlo, ggaren, gskachkov, jfbastien, keith_miller, mark.lam, msaboff, ticaiolima, ysuzuki
Priority:	P2
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified
See Also:	https://bugs.webkit.org/show_bug.cgi?id=170628

Description Saam Barati 2017-03-15 15:47:27 PDT

e.g, checking the allocatedFastMemories integer can be racy. We probably need more fine grained locking around parts of that algorithm.

Comment 1 JF Bastien 2017-03-15 17:36:46 PDT

I think resizing.wast.js runs into that issue. On ARM64 it'll segfault half the time for me.

Comment 2 JF Bastien 2017-04-07 17:13:55 PDT


*** This bug has been marked as a duplicate of bug 170628 ***