Bug 194699 – [CLoop] stress/butterfly-zero-unused-butterfly-properties.js started to crash on aarch64

• Status: RESOLVED
• Resolution: FIXED
• Component: JavaScriptCore

[Tomas Popela]

The stress/butterfly-zero-unused-butterfly-properties.js crashes with SIGILL:

stress/butterfly-zero-unused-butterfly-properties.js.default: test_script_2123: line 2:  6070 Segmentation fault      (core dumped) ( "$@" /home/jenkins/workspace/WebKit-JSC/label/aarch64/WebKitBuild/Release/bin/jsc --useFTLJIT\=false --useFunctionDotArguments\=true --validateExceptionChecks\=true --useDollarVM\=true --maxPerThreadStackUsage\=1572864 --useFTLJIT\=true --jitPolicyScale\=0 --gcMaxHeapSize\=2000 butterfly-zero-unused-butterfly-properties.js )
stress/butterfly-zero-unused-butterfly-properties.js.default: ERROR: Unexpected exit code: 139

It first started to crash in the 5th of February, when these commits were pushed:

[JSC] UnlinkedMetadataTable assumes that MetadataTable is destroyed (detail)
[iOS] Tiles not created in large scrollable iframes (detail)
DFG's doesGC() is incorrect about the SameValue node's behavior. (detail)
Source/WebCore: Rename GraphicsLayer and PlatformCALayer scrolling layer (detail)
[GTK] Remove last python2 dependency from CMake build process (detail)
Unreviewed, only force settings.acceleratedCompositingEnabled() to true (detail)
[css-scroll-snap] scroll-snap-align not honored on child with (detail)
[GTK] Allow pinch zoom on touchpad (detail)
Unreviewed, fix unused variable warnings introduced in r240912 (detail)
[LFC][IFC] Make InlineFormattingContext::collectInlineContent (detail)
Unreviewed, avoid -Wswitch warnings introduced in r240880 (detail)
[iOS] Unable to make a selection in jsfiddle.net using arrow keys when (detail)
Use a dedicated type instead of int32_t for pointer identifiers (detail)
Capture state should be managed consistently when doing process swapping (detail)
<rdar://problem/47788802> (detail)
Make sure to remove the device observer in AVVideoCaptureSource (detail)
IndexedDB: leak WebIDBConnectionToServer in layout tests (detail)
Add demos for Intersection Observer API (detail)
[iOS] API test WKAttachmentTests.InsertAndRemoveDuplicateAttachment is (detail)
REGRESSION (r237269): webkit-patch what-broke is broken (detail)
Unreviewed, improve preprocessor guard (detail)
[JSC] Shrink size of FunctionExecutable (detail)
Source/WebCore: When performing Increment or Decrement on sliders, check (detail)
PageOverlayController's layers should be created lazily (detail)
Async overflow scroll with border-radius renders incorrectly (detail)
[First paint] Adjust "finishedParsingMainDocument" flag by taking (detail)
Use constants for pointer types (detail)
Use deferrable timer to restart the Responsiveness Timer on each wheel (detail)
[Web GPU] Code clean-up for RenderPipeline backend (detail)
Web Inspector: Styles: fix race conditions when editing (detail)
Web Inspector: REGRESSION: clicking a selected call frame doesn't (detail)
Add WebView SPI to temporarily force light or dark appearance on a page. (detail)
[CG] Enable setAdditionalSupportedImageTypes for WK1 (detail)
Web Inspector: REGRESSION: Resources: WI.TreeOutline assertions when (detail)
[JSC] ExecutableToCodeBlockEdge should be smaller (detail)
Web Inspector: Resources: missing resource data for document on reload (detail)
webkitpy: Precedence of booted devices should match precedence in (detail)
Take additional process assertion while downloading. (detail)
Make MessageSender functions const (detail)
Move XPCService main to a shared file calling a C function (detail)
[iOS Simulator] pageoverlay/overlay tests are flaky failures (detail)
[curl] ASSERTION FAILED: !m_didNotifyResponse || m_multipartHandle (detail)
when lowering AssertNotEmpty, create the value before creating the (detail)

[Tomas Popela]

No longer reproducible after run from 17. 2. 2019 (these changes were applied):

AX: Audit tab should have built-in accessibility tests. (details)
[JSC] Lazily create empty RegExp (details)
NetworkDataTask should check its client before calling (details)
Web Inspector: Some timelines views work, show Legacy CPU timeline (details)
Web Inspector: Logging a native function to the console, such as (details)
[JSC] Remove unused global private variables (details)
[JSC] Shrink UnlinkedFunctionExecutable (details)
[LFC] Apply min/max width constraints to preferred width computation (details)
[LFC][BFC] Add support for block replaced intrinsic width. (details)
[LFC] RenderImage's default intrinsic size is 0. (details)
[JSC] JSWrapperObject should not be destructible (details)