Bug 228654 - stress/has-own-property-structure-for-in-loop-correctness.js periodically fails using the GC verifier
Summary: stress/has-own-property-structure-for-in-loop-correctness.js periodically fai...
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Saam Barati
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2021-07-30 12:25 PDT by Saam Barati
Modified: 2021-08-06 12:26 PDT (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Saam Barati 2021-07-30 12:25:10 PDT
Run like:

for i in `seq 1 10000`; do(DYLD_FRAMEWORK_PATH=./WebKitBuild/Release ./WebKitBuild/Release/jsc --useDollarVM=1 --useFTLJIT=false --useFunctionDotArguments=true --validateExceptionChecks=true --useDollarVM=true --maxPerThreadStackUsage=1572864 --airForceBriggsAllocator=true --useRandomizingExecutableIslandAllocation=true --forcePolyProto=true --useDataIC=true --useFTLJIT=true --thresholdForJITAfterWarmUp=10 --thresholdForJITSoon=10 --thresholdForOptimizeAfterWarmUp=20 --thresholdForOptimizeAfterLongWarmUp=20 --thresholdForOptimizeSoon=20 --thresholdForFTLOptimizeAfterWarmUp=20 --thresholdForFTLOptimizeSoon=20 --thresholdForOMGOptimizeAfterWarmUp=20 --thresholdForOMGOptimizeSoon=20 --maximumEvalCacheableSourceLength=150000 --useEagerCodeBlockJettisonTiming=true --repatchBufferingCountdown=0 --collectContinuously=true --useGenerationalGC=false --verifyGC=true --verboseVerifyGC=1 JSTests/stress/has-own-property-structure-for-in-loop-correctness.js); done


Fails ~once every ~50,000 runs.

I've only reproduced on x86.
Comment 1 Radar WebKit Bug Importer 2021-08-06 12:26:16 PDT
<rdar://problem/81628046>