Created attachment 249481 [details] crash log stress/arguments-inlined-exit-strict-mode.js.default-ftl fails regularly at least on EFL Linux. ( it fails in ~50% of test runs ) log is attached
It is a new test inroduced in https://trac.webkit.org/changeset/181993
I got similar failures on AArch64 too with these tests: stress/arguments-exit-strict-mode.js.default-ftl stress/arguments-inlined-exit-strict-mode.js.default-ftl
(In reply to comment #2) > I got similar failures on AArch64 too with these tests: > stress/arguments-exit-strict-mode.js.default-ftl > stress/arguments-inlined-exit-strict-mode.js.default-ftl These are the new failures we saw on iOS AArch64 after r181993: jsc-layout-tests.yaml/js/script-tests/dfg-arguments-alias.js.layout-ftl jsc-layout-tests.yaml/js/script-tests/dfg-arguments-alias.js.layout-ftl-eager-no-cjit jsc-layout-tests.yaml/js/script-tests/dfg-arguments-alias.js.layout-ftl-no-cjit jsc-layout-tests.yaml/js/script-tests/dfg-arguments-mixed-alias.js.layout-ftl jsc-layout-tests.yaml/js/script-tests/dfg-arguments-mixed-alias.js.layout-ftl-no-cjit jsc-layout-tests.yaml/js/script-tests/dfg-arguments-osr-exit-multiple-blocks-before-exit.js.layout-ftl jsc-layout-tests.yaml/js/script-tests/dfg-arguments-osr-exit-multiple-blocks-before-exit.js.layout-ftl-eager-no-cjit jsc-layout-tests.yaml/js/script-tests/dfg-arguments-osr-exit-multiple-blocks-before-exit.js.layout-ftl-no-cjit jsc-layout-tests.yaml/js/script-tests/dfg-arguments-osr-exit-multiple-blocks.js.layout-ftl jsc-layout-tests.yaml/js/script-tests/dfg-arguments-osr-exit-multiple-blocks.js.layout-ftl-eager-no-cjit jsc-layout-tests.yaml/js/script-tests/dfg-arguments-osr-exit-multiple-blocks.js.layout-ftl-no-cjit jsc-layout-tests.yaml/js/script-tests/dfg-arguments-osr-exit.js.layout-ftl jsc-layout-tests.yaml/js/script-tests/dfg-arguments-osr-exit.js.layout-ftl-eager-no-cjit jsc-layout-tests.yaml/js/script-tests/dfg-arguments-osr-exit.js.layout-ftl-no-cjit jsc-layout-tests.yaml/js/script-tests/dfg-arguments-unexpected-escape.js.layout-ftl-eager-no-cjit regress/script-tests/deltablue-varargs.js.default-ftl regress/script-tests/deltablue-varargs.js.ftl-eager regress/script-tests/deltablue-varargs.js.ftl-eager-no-cjit regress/script-tests/deltablue-varargs.js.ftl-no-cjit-validate This have since been fixed.
This bug is still valid.
I tested it again on ToT, stress/arguments-inlined-exit-strict-mode.js.default-ftl doesn't fail now ... but something is changed, because FTL JIT isn't run at all for this test now. Of course FTL runs for the "ftl-eager-no-cjit" case ... but this test always passed in the passed. So the bug can be valid, but isn't triggered anymore.
These failures aren't exhibited anymore.