Bug 228838 - REGRESSION (r280507): ASSERTION FAILED: !undominatedPhis.contains(value) in JSC::B3::(anonymous namespace)::Validater::validatePhisAreDominatedByUpsilons()
Summary: REGRESSION (r280507): ASSERTION FAILED: !undominatedPhis.contains(value) in J...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: Other
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Robin Morisset
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2021-08-05 12:27 PDT by Ryan Haddad
Modified: 2021-08-05 15:40 PDT (History)
9 users (show)

See Also:

Attachments
Patch (1.98 KB, patch)
2021-08-05 14:55 PDT, Robin Morisset 		no flags Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Ryan Haddad 2021-08-05 12:27:22 PDT 
testb3 is failing on JSC debug bots, I see the following assertion failure in the logs:

ASSERTION FAILED: !undominatedPhis.contains(value)
./b3/B3Validate.cpp(680) : void JSC::B3::(anonymous namespace)::Validater::validatePhisAreDominatedByUpsilons()

I think it may have started with https://trac.webkit.org/changeset/280507/webkit according to https://results.webkit.org/?suite=javascriptcore-tests&test=testb3
Comment 1 Radar WebKit Bug Importer 2021-08-05 12:27:51 PDT 
<rdar://problem/81579314>
Comment 2 Ryan Haddad 2021-08-05 12:28:16 PDT 
Example of failure: https://build.webkit.org/#/builders/100/builds/658/steps/10/logs/stdio
Comment 3 Robin Morisset 2021-08-05 14:55:59 PDT 
Created attachment 435028 [details]
Patch
Comment 4 Geoffrey Garen 2021-08-05 14:58:10 PDT 
Comment on attachment 435028 [details]
Patch

r=me
Comment 5 EWS 2021-08-05 15:40:04 PDT 
Committed r280704 (240300@main): <https://commits.webkit.org/240300@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 435028 [details].