Bug 261928

Summary:	REGRESSION(268259@main): ASSERTION FAILED: prologueSizeInBytesDataIC == (jit.debugOffset() - startOffset)
Product:	WebKit	Reporter:	Fujii Hironori <fujii.hironori>
Component:	JavaScriptCore	Assignee:	Fujii Hironori <fujii.hironori>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified
See Also:	https://bugs.webkit.org/show_bug.cgi?id=261595

Fujii Hironori

Reported 2023-09-21 18:47:11 PDT

After 268259@main (Bug 261595), WinCaior is crashing. https://build.webkit.org/#/builders/727/builds/20961 ASSERTION FAILED: prologueSizeInBytesDataIC == (jit.debugOffset() - startOffset) C:\BW\WinCairo-64-bit-Debug-Build\build\Source\JavaScriptCore\bytecode/InlineCacheCompiler.cpp(706) : JSC::InlineCacheCompiler::emitDataICPrologue 1 00007FF90450278B WTFCrash 2 00007FF8BB7EF8CE WTFCrashWithInfo 3 00007FF8BBA9125A JSC::InlineCacheCompiler::emitDataICPrologue 4 00007FF8BBA9720E JSC::getByIdSlowPathCodeGenerator 5 00007FF8BCA769B1 `JSC::JITThunks::ctiStub'::`2'::<lambda_1>::operator() 6 00007FF8BCA7F80F JSC::JITThunks::ctiStubImpl<`JSC::JITThunks::ctiStub'::`2'::<lambda_1> > 7 00007FF8BCA737E9 JSC::JITThunks::ctiStub 8 00007FF8BD34AA45 JSC::VM::getCTIStub 9 00007FF8BBA90F86 JSC::InlineCacheCompiler::generateSlowPathCode 10 00007FF8BCA6F25D JSC::JIT::emitSlow_op_get_by_id 11 00007FF8BC991613 JSC::JIT::privateCompileSlowCases 12 00007FF8BC9841C6 JSC::JIT::compileAndLinkWithoutFinalizing 13 00007FF8BC95335B JSC::BaselineJITPlan::compileInThreadImpl 14 00007FF8BCA2A849 JSC::JITPlan::compileInThread 15 00007FF8BCAA6BF9 JSC::JITWorklistThread::work 16 00007FF90450B93A `WTF::AutomaticThread::start'::`2'::<lambda_1>::operator() 17 00007FF90450BD3B WTF::Detail::CallableWrapper<`WTF::AutomaticThread::start'::`2'::<lambda_1>,void>::call 18 00007FF90451A9C3 WTF::Function<void __cdecl(void)>::operator() 19 00007FF9045C0898 WTF::Thread::entryPoint 20 00007FF9046970C4 WTF::wtfThreadEntryPoint 21 00007FF8F2D06B4C recalloc 22 00007FF900C54DE0 BaseThreadInitThunk 23 00007FF91541EC4B RtlUserThreadStart

Attachments
Add attachment proposed patch, testcase, etc.

Fujii Hironori

Comment 1 2023-09-21 21:00:37 PDT

Pull request: https://github.com/WebKit/WebKit/pull/18063

EWS

Comment 2 2023-09-22 14:26:19 PDT

Committed 268333@main (a6e0f8ae8578): <https://commits.webkit.org/268333@main> Reviewed commits have been landed. Closing PR #18063 and removing active labels.

Radar WebKit Bug Importer

Comment 3 2023-09-22 14:27:18 PDT

<rdar://problem/115909797>

Note You need to log in before you can comment on or make changes to this bug.