Bug 228838

Summary:

REGRESSION (r280507): ASSERTION FAILED: !undominatedPhis.contains(value) in JSC::B3::(anonymous namespace)::Validater::validatePhisAreDominatedByUpsilons()

Product:

WebKit

Reporter:

Ryan Haddad <ryanhaddad>

Component:

JavaScriptCore

Assignee:

Robin Morisset <rmorisset>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

ews-watchlist, ggaren, keith_miller, mark.lam, msaboff, saam, tzagallo, webkit-bot-watchers-bugzilla, webkit-bug-importer

Priority:

Keywords:

InRadar

Version:

Other

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Patch	none

Description Ryan Haddad 2021-08-05 12:27:22 PDT

testb3 is failing on JSC debug bots, I see the following assertion failure in the logs:

ASSERTION FAILED: !undominatedPhis.contains(value)
./b3/B3Validate.cpp(680) : void JSC::B3::(anonymous namespace)::Validater::validatePhisAreDominatedByUpsilons()

I think it may have started with https://trac.webkit.org/changeset/280507/webkit according to https://results.webkit.org/?suite=javascriptcore-tests&test=testb3

Comment 1 Radar WebKit Bug Importer 2021-08-05 12:27:51 PDT

<rdar://problem/81579314>

Comment 2 Ryan Haddad 2021-08-05 12:28:16 PDT

Example of failure: https://build.webkit.org/#/builders/100/builds/658/steps/10/logs/stdio

Comment 3 Robin Morisset 2021-08-05 14:55:59 PDT

Created attachment 435028 [details]
Patch

Comment 4 Geoffrey Garen 2021-08-05 14:58:10 PDT

Comment on attachment 435028 [details]
Patch

r=me

Comment 5 EWS 2021-08-05 15:40:04 PDT

Committed r280704 (240300@main): <https://commits.webkit.org/240300@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 435028 [details].