Bug 154168 - FTL JIT crash when running the TypeScript test from Octane benchmark
Summary: FTL JIT crash when running the TypeScript test from Octane benchmark
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: WebKit Local Build
Hardware: Unspecified Linux
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-02-12 08:10 PST by Ting-Wei Lan
Modified: 2016-03-07 06:51 PST (History)
3 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ting-Wei Lan 2016-02-12 08:10:36 PST
Steps to reproduce:
1. Build WebKit with debug configuration and FTL JIT enabled.
2. Run './MiniBrowser https://octane-benchmark.googlecode.com/svn/latest/index.html' from a terminal.
3. Click 'Start Octane 2.0' in the web page.

Result:
Assertion failure shows in the terminal and WebKitWebProcess crashes when it runs the TypeScript test. If it doesn't crash, running the benchmark again is likely to crash it.

This bug was found while making FTL JIT work on FreeBSD, so I put links to backtraces instead of pasting them again.
Backtrace on FreeBSD: https://bugs.webkit.org/show_bug.cgi?id=152258#c10
Backtrace on GNU/Linux: https://bugs.webkit.org/show_bug.cgi?id=152258#c11
Comment 1 Carlos Alberto Lopez Perez 2016-03-07 06:51:00 PST
I think this bug may be the same as 155037