Bug 228654

Summary: stress/has-own-property-structure-for-in-loop-correctness.js periodically fails using the GC verifier
Product: WebKit Reporter: Saam Barati <saam>
Component: JavaScriptCoreAssignee: Saam Barati <saam>
Status: NEW    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Saam Barati
Reported 2021-07-30 12:25:10 PDT
Run like: for i in `seq 1 10000`; do(DYLD_FRAMEWORK_PATH=./WebKitBuild/Release ./WebKitBuild/Release/jsc --useDollarVM=1 --useFTLJIT=false --useFunctionDotArguments=true --validateExceptionChecks=true --useDollarVM=true --maxPerThreadStackUsage=1572864 --airForceBriggsAllocator=true --useRandomizingExecutableIslandAllocation=true --forcePolyProto=true --useDataIC=true --useFTLJIT=true --thresholdForJITAfterWarmUp=10 --thresholdForJITSoon=10 --thresholdForOptimizeAfterWarmUp=20 --thresholdForOptimizeAfterLongWarmUp=20 --thresholdForOptimizeSoon=20 --thresholdForFTLOptimizeAfterWarmUp=20 --thresholdForFTLOptimizeSoon=20 --thresholdForOMGOptimizeAfterWarmUp=20 --thresholdForOMGOptimizeSoon=20 --maximumEvalCacheableSourceLength=150000 --useEagerCodeBlockJettisonTiming=true --repatchBufferingCountdown=0 --collectContinuously=true --useGenerationalGC=false --verifyGC=true --verboseVerifyGC=1 JSTests/stress/has-own-property-structure-for-in-loop-correctness.js); done Fails ~once every ~50,000 runs. I've only reproduced on x86.
Attachments
Radar WebKit Bug Importer
Comment 1 2021-08-06 12:26:16 PDT
Note You need to log in before you can comment on or make changes to this bug.