Bug 244061 – REGRESSION (253491@main): [ macOS Debug ] Nine wasm.yaml/wasm/gc/rec.js tests are consistent failures

• Component: JavaScriptCore
• Status: RESOLVED FIXED

[Karl Rackler]

Description:
wasm.yaml/wasm/gc/rec.js.default-wasm
wasm.yaml/wasm/gc/rec.js.wasm-air
wasm.yaml/wasm/gc/rec.js.wasm-b3
wasm.yaml/wasm/gc/rec.js.wasm-bbqb3
wasm.yaml/wasm/gc/rec.js.wasm-eager
wasm.yaml/wasm/gc/rec.js.wasm-eager-jettison
wasm.yaml/wasm/gc/rec.js.wasm-no-cjit-yes-tls-context
wasm.yaml/wasm/gc/rec.js.wasm-no-tls-context
wasm.yaml/wasm/gc/rec.js.wasm-slow-memory

The history shows the regression at 253503@main.

https://build.webkit.org/#/builders/378/builds/1540/steps/12/logs/stdio 

History:
https://results.webkit.org/?suite=javascriptcore-tests&suite=javascriptcore-tests&suite=javascriptcore-tests&suite=javascriptcore-tests&suite=javascriptcore-tests&suite=javascriptcore-tests&suite=javascriptcore-tests&suite=javascriptcore-tests&suite=javascriptcore-tests&test=wasm.yaml%2Fwasm%2Fgc%2Frec.js.default-wasm&test=wasm.yaml%2Fwasm%2Fgc%2Frec.js.wasm-air&test=wasm.yaml%2Fwasm%2Fgc%2Frec.js.wasm-b3&test=wasm.yaml%2Fwasm%2Fgc%2Frec.js.wasm-bbqb3&test=wasm.yaml%2Fwasm%2Fgc%2Frec.js.wasm-eager&test=wasm.yaml%2Fwasm%2Fgc%2Frec.js.wasm-eager-jettison&test=wasm.yaml%2Fwasm%2Fgc%2Frec.js.wasm-no-cjit-yes-tls-context&test=wasm.yaml%2Fwasm%2Fgc%2Frec.js.wasm-no-tls-context&test=wasm.yaml%2Fwasm%2Fgc%2Frec.js.wasm-slow-memory

wasm.yaml/wasm/gc/rec.js.default-wasm

SHOULD NEVER BE REACHED
wasm/WasmTypeDefinition.cpp(278) : const JSC::Wasm::TypeDefinition &JSC::Wasm::TypeDefinition::replacePlaceholders(JSC::Wasm::TypeIndex) const
1   0x112c6988c WTFCrash
2   0x113273c20 JSC::IntlListFormat::initializeListFormat(JSC::JSGlobalObject*, JSC::JSValue, JSC::JSValue)
3   0x114f222ec JSC::Wasm::TypeDefinition::replacePlaceholders(unsigned long) const
4   0x114f22568 JSC::Wasm::TypeDefinition::expand() const
5   0x114dfd190 JSC::Wasm::FunctionParser<JSC::Wasm::LLIntGenerator>::FunctionParser(JSC::Wasm::LLIntGenerator&, unsigned char const*, unsigned long, JSC::Wasm::TypeDefinition const&, JSC::Wasm::ModuleInformation const&)
6   0x114dc1c2c JSC::Wasm::FunctionParser<JSC::Wasm::LLIntGenerator>::FunctionParser(JSC::Wasm::LLIntGenerator&, unsigned char const*, unsigned long, JSC::Wasm::TypeDefinition const&, JSC::Wasm::ModuleInformation const&)
7   0x114dc1ac8 JSC::Wasm::parseAndCompileBytecode(unsigned char const*, unsigned long, JSC::Wasm::TypeDefinition const&, JSC::Wasm::ModuleInformation&, unsigned int)
8   0x114dd688c JSC::Wasm::LLIntPlan::compileFunction(unsigned int)
9   0x114db390c JSC::Wasm::EntryPlan::compileFunctions(JSC::Wasm::Plan::CompilationEffort)
10  0x114dd7de4 JSC::Wasm::LLIntPlan::work(JSC::Wasm::Plan::CompilationEffort)
11  0x114f2bedc JSC::Wasm::Worklist::Thread::work()
12  0x112c7fbd0 WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0::operator()() const
13  0x112c7f7c8 WTF::Detail::CallableWrapper<WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0, void>::call()
14  0x112c96f28 WTF::Function<void ()>::operator()() const
15  0x112d81830 WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*)
16  0x112d90148 WTF::wtfThreadEntryPoint(void*)
17  0x1826f626c _pthread_start
18  0x1826f108c thread_start
test_script_76687: line 2: 34768 Segmentation fault: 11  ( "$@" ../../../../.vm/JavaScriptCore.framework/Helpers/jsc --useFTLJIT\=false --useFunctionDotArguments\=true --validateExceptionChecks\=true --useDollarVM\=true --maxPerThreadStackUsage\=1572864 --useFTLJIT\=true -m --useWebAssemblyTypedFunctionReferences\=true --useWebAssemblyGC\=true rec.js )
ERROR: Unexpected exit code: 139
FAIL: wasm.yaml/wasm/gc/rec.js.default-wasm

[Radar WebKit Bug Importer]

<rdar://problem/98800203>

[Karl Rackler]

Upon further review the regression is more likely to be 253491@main.

[Karl Rackler]

REGRESSION(253491@main): Revert WASM GC patch
Committed 253541@main (be774cf81a91): <https://commits.webkit.org/253541@main>