Bug 130114 (DFGCrash) - operationRegExpTest crash
Summary: operationRegExpTest crash
Status: NEW
Alias: DFGCrash
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-03-11 20:16 PDT by Peng Xinchao
Modified: 2014-03-12 19:12 PDT (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Peng Xinchao 2014-03-11 20:16:58 PDT 
In ARM GTK platform , "operationRegExpTest" may happen crash .

The reason of crash is  "argument" is errer point (please check  below my log).

Test scenario

1. Load www.kyeongin.com
2. Select any news  and wait a time . 
3. latch up happen.(probability = %50)


my related log :

                 [void JSC::DFG::SpeculativeJIT::compile(JSC::DFG::Node*)]argumentGPR=2,node->child2()=0xb0630108

                 operationRegExpTest base=0xb15baa78,argument=0x18b
Comment 1 Peng Xinchao 2014-03-12 19:12:53 PDT 
Today , i test in EFL and ISO platform , the crash is still exist .

My ISO equipment is ipad4 , ipad's system is iso6.13.

Test scenario :
1.Load www.kyeongin.com
2.click "12일(현지시간) 미국 뉴욕 맨해튼의 이스트할렘에서 주거용 빌딩 2채가 가스 누출로 추정되는 폭발로 붕괴되면서 다수의 사상자가 발생해 뉴요커들이 다" 
3. latch up happen (probability = %100)