This test flakily fails in automation: https://results.webkit.org/?suite=javascriptcore-tests&test=stress%2Fdfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler Added by Mark Lam in r240616.
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: Timed out after 587.000000 sec seconds! stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 1 0x10ff662b9 WTFCrash stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 2 0x10e7fd057 timeoutCheckCallback(JSC::VM&) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 3 0x11194fb00 JSC::VMTraps::handleTraps(JSC::JSGlobalObject*, JSC::CallFrame*, JSC::VMTraps::Mask) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 4 0x111276626 JSC::VM::handleTraps(JSC::JSGlobalObject*, JSC::CallFrame*, JSC::VMTraps::Mask) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 5 0x111276db4 JSC::Interpreter::executeCall(JSC::JSGlobalObject*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 6 0x111592dec JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 7 0x11179a0ab JSC::JSValue JSC::callToPrimitiveFunction<(JSC::TypeHintMode)1>(JSC::JSGlobalObject*, JSC::JSObject const*, JSC::PropertyName, JSC::PreferredPrimitiveType) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 8 0x11179994f JSC::JSObject::ordinaryToPrimitive(JSC::JSGlobalObject*, JSC::PreferredPrimitiveType) const stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 9 0x111783c53 JSC::JSObject::defaultValue(JSC::JSObject const*, JSC::JSGlobalObject*, JSC::PreferredPrimitiveType) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 10 0x11179a460 JSC::JSObject::toPrimitive(JSC::JSGlobalObject*, JSC::PreferredPrimitiveType) const stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 11 0x1116d9463 JSC::JSCell::toPrimitive(JSC::JSGlobalObject*, JSC::PreferredPrimitiveType) const stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 12 0x1104b4138 JSC::JSValue::toPrimitive(JSC::JSGlobalObject*, JSC::PreferredPrimitiveType) const stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 13 0x11131c423 JSC::JSValue::equalSlowCaseInline(JSC::JSGlobalObject*, JSC::JSValue, JSC::JSValue) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 14 0x11130a4c3 operationCompareEq stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 15 0x5159e7400ed9 stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 16 0x110462f03 vmEntryToJavaScript stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 17 0x111276887 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 18 0x111275f0c JSC::Interpreter::executeProgram(JSC::SourceCode const&, JSC::JSGlobalObject*, JSC::JSObject*) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 19 0x1115f3e9c JSC::evaluate(JSC::JSGlobalObject*, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 20 0x10e8342df runWithOptions(GlobalObject*, CommandLine&, bool&) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 21 0x10e805a1a jscmain(int, char**)::$_6::operator()(JSC::VM&, GlobalObject*, bool&) const stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 22 0x10e7e0d6b int runJSC<jscmain(int, char**)::$_6>(CommandLine const&, bool, jscmain(int, char**)::$_6 const&) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 23 0x10e7df7f8 jscmain(int, char**) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 24 0x10e7df5ce main stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 25 0x7fff719c87fd start stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 26 0x16 stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: test_script_11672: line 2: 4976 Segmentation fault: 11 ( "$@" ../../.vm/JavaScriptCore.framework/Helpers/jsc --useFTLJIT\=false --useFunctionDotArguments\=true --validateExceptionChecks\=true --useDollarVM\=true --maxPerThreadStackUsage\=1572864 --exceptionStackTraceLimit\=0 --defaultErrorStackTraceLimit\=0 --forceRAMSize\=1000000 --forceDebuggerBytecodeGeneration\=1 --useZombieMode\=1 --jitPolicyScale\=0 --collectContinuously\=1 --useConcurrentJIT\=0 --validateGraph\=true --useSamplingProfiler\=true --airForceIRCAllocator\=true --useFTLJIT\=true --useConcurrentJIT\=false --thresholdForJITAfterWarmUp\=100 --scribbleFreeCells\=true dfg-to-string-on-string-object-does-not-gc.js )