Bug 261928

Summary:	REGRESSION(268259@main): ASSERTION FAILED: prologueSizeInBytesDataIC == (jit.debugOffset() - startOffset)
Product:	WebKit	Reporter:	Fujii Hironori <Hironori.Fujii>
Component:	JavaScriptCore	Assignee:	Fujii Hironori <Hironori.Fujii>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified
See Also:	https://bugs.webkit.org/show_bug.cgi?id=261595

Description Fujii Hironori 2023-09-21 18:47:11 PDT

After 268259@main (Bug 261595), WinCaior is crashing.
https://build.webkit.org/#/builders/727/builds/20961

ASSERTION FAILED: prologueSizeInBytesDataIC == (jit.debugOffset() - startOffset)
C:\BW\WinCairo-64-bit-Debug-Build\build\Source\JavaScriptCore\bytecode/InlineCacheCompiler.cpp(706) : JSC::InlineCacheCompiler::emitDataICPrologue
1   00007FF90450278B WTFCrash
2   00007FF8BB7EF8CE WTFCrashWithInfo
3   00007FF8BBA9125A JSC::InlineCacheCompiler::emitDataICPrologue
4   00007FF8BBA9720E JSC::getByIdSlowPathCodeGenerator
5   00007FF8BCA769B1 `JSC::JITThunks::ctiStub'::`2'::<lambda_1>::operator()
6   00007FF8BCA7F80F JSC::JITThunks::ctiStubImpl<`JSC::JITThunks::ctiStub'::`2'::<lambda_1> >
7   00007FF8BCA737E9 JSC::JITThunks::ctiStub
8   00007FF8BD34AA45 JSC::VM::getCTIStub
9   00007FF8BBA90F86 JSC::InlineCacheCompiler::generateSlowPathCode
10  00007FF8BCA6F25D JSC::JIT::emitSlow_op_get_by_id
11  00007FF8BC991613 JSC::JIT::privateCompileSlowCases
12  00007FF8BC9841C6 JSC::JIT::compileAndLinkWithoutFinalizing
13  00007FF8BC95335B JSC::BaselineJITPlan::compileInThreadImpl
14  00007FF8BCA2A849 JSC::JITPlan::compileInThread
15  00007FF8BCAA6BF9 JSC::JITWorklistThread::work
16  00007FF90450B93A `WTF::AutomaticThread::start'::`2'::<lambda_1>::operator()
17  00007FF90450BD3B WTF::Detail::CallableWrapper<`WTF::AutomaticThread::start'::`2'::<lambda_1>,void>::call
18  00007FF90451A9C3 WTF::Function<void __cdecl(void)>::operator()
19  00007FF9045C0898 WTF::Thread::entryPoint
20  00007FF9046970C4 WTF::wtfThreadEntryPoint
21  00007FF8F2D06B4C recalloc
22  00007FF900C54DE0 BaseThreadInitThunk
23  00007FF91541EC4B RtlUserThreadStart

Comment 1 Fujii Hironori 2023-09-21 21:00:37 PDT

Pull request: https://github.com/WebKit/WebKit/pull/18063

Comment 2 EWS 2023-09-22 14:26:19 PDT

Committed 268333@main (a6e0f8ae8578): <https://commits.webkit.org/268333@main>

Reviewed commits have been landed. Closing PR #18063 and removing active labels.

Comment 3 Radar WebKit Bug Importer 2023-09-22 14:27:18 PDT

<rdar://problem/115909797>