Bug 206797 - REGRESSION (r250009): testair crashes in (anonymous namespace)::matchAll
Summary: REGRESSION (r250009): testair crashes in (anonymous namespace)::matchAll
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: David Kilzer (:ddkilzer)
URL:
Keywords: InRadar
Depends on: 201703
Blocks:
  Show dependency treegraph
 
Reported: 2020-01-25 04:42 PST by David Kilzer (:ddkilzer)
Modified: 2020-01-27 13:46 PST (History)
9 users (show)

See Also:


Attachments
Patch v1 (1.54 KB, patch)
2020-01-25 04:49 PST, David Kilzer (:ddkilzer)
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description David Kilzer (:ddkilzer) 2020-01-25 04:42:53 PST
testair crashes in (anonymous namespace)::matchAll when compiled with Address Sanitizer.

This regressed with the following change:

    Elide unnecessary moves in Air O0
    <https://bugs.webkit.org/show_bug.cgi?id=201703>
    <https://trac.webkit.org/changeset/250009>
Comment 1 David Kilzer (:ddkilzer) 2020-01-25 04:43:12 PST
<rdar://problem/58893221>
Comment 2 David Kilzer (:ddkilzer) 2020-01-25 04:49:24 PST
Created attachment 388768 [details]
Patch v1
Comment 3 Yusuke Suzuki 2020-01-27 13:12:57 PST
Comment on attachment 388768 [details]
Patch v1

r=me
Comment 4 WebKit Commit Bot 2020-01-27 13:46:40 PST
Comment on attachment 388768 [details]
Patch v1

Clearing flags on attachment: 388768

Committed r255171: <https://trac.webkit.org/changeset/255171>
Comment 5 WebKit Commit Bot 2020-01-27 13:46:41 PST
All reviewed patches have been landed.  Closing bug.