[Webkit-unassigned] [Bug 22287] ASSERTION FAILED: Not enough jumps linked in slow case codegen in CTI::privateCompileSlowCases())

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=22287


webkit at mattlilek.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ggaren at apple.com,
                   |                            |cwzwarich at uwaterloo.ca
             Status|UNCONFIRMED                 |NEW
          Component|New Bugs                    |JavaScriptCore
     Ever Confirmed|0                           |1
           Keywords|                            |NeedsReduction, Regression
           Priority|P2                          |P1
            Summary|Site crashes.... everytime  |ASSERTION FAILED: Not enough
                   |                            |jumps linked in slow case
                   |                            |codegen in
                   |                            |CTI::privateCompileSlowCases
                   |                            |())




------- Comment #1 from webkit at mattlilek.com  2008-11-16 08:45 PDT -------
Confirmed with r38440:

ASSERTION FAILED: Not enough jumps linked in slow case codegen.
(iter + 1) == m_slowCases.end() || firstTo != (iter + 1)->to
(/Users/matt/Code/WebKit/JavaScriptCore/VM/CTI.cpp:2995 void
JSC::CTI::privateCompileSlowCases())

Thread 0 Crashed:
0   com.apple.JavaScriptCore            0x0057293e
JSC::CTI::privateCompileSlowCases() + 15856 (CTI.cpp:2995)
1   com.apple.JavaScriptCore            0x0057aa77 JSC::CTI::privateCompile() +
315 (CTI.cpp:3035)
2   com.apple.JavaScriptCore            0x00542ce7
JSC::CTI::compile(JSC::JSGlobalData*, JSC::CodeBlock*) + 45 (CTI.h:289)
3   com.apple.JavaScriptCore            0x00529479
JSC::BytecodeInterpreter::cti_op_call_JSFunction(void*, ...) + 211
(Machine.cpp:4693)
4   com.apple.JavaScriptCore            0x00524126 jscGeneratedNativeCode + 0
(Machine.cpp:4261)
5   com.apple.JavaScriptCore            0x0052af5d
JSC::BytecodeInterpreter::execute(JSC::FunctionBodyNode*, JSC::ExecState*,
JSC::JSFunction*, JSC::JSObject*, JSC::ArgList const&, JSC::ScopeChainNode*,
JSC::JSValue**) + 789 (Machine.cpp:1008)
6   com.apple.JavaScriptCore            0x004805bb
JSC::JSFunction::call(JSC::ExecState*, JSC::JSValue*, JSC::ArgList const&) +
139 (JSFunction.cpp:83)
7   com.apple.JavaScriptCore            0x0048066c JSC::call(JSC::ExecState*,
JSC::JSValue*, JSC::CallType, JSC::CallData const&, JSC::JSValue*, JSC::ArgList
const&) + 170 (CallData.cpp:39)
8   com.apple.JavaScriptCore            0x0048e48a
__ZN3JSCL22functionProtoFuncApplyEPNS_9ExecStateEPNS_8JSObjectEPNS_7JSValueERKNS_7ArgListE
+ 684 (FunctionPrototype.cpp:113)
9   com.apple.JavaScriptCore            0x00529188
JSC::BytecodeInterpreter::cti_op_call_NotJSFunction(void*, ...) + 454
(Machine.cpp:4813)
10  com.apple.JavaScriptCore            0x00524126 jscGeneratedNativeCode + 0
(Machine.cpp:4261)
11  com.apple.JavaScriptCore            0x0052af5d
JSC::BytecodeInterpreter::execute(JSC::FunctionBodyNode*, JSC::ExecState*,
JSC::JSFunction*, JSC::JSObject*, JSC::ArgList const&, JSC::ScopeChainNode*,
JSC::JSValue**) + 789 (Machine.cpp:1008)
12  com.apple.JavaScriptCore            0x004805bb
JSC::JSFunction::call(JSC::ExecState*, JSC::JSValue*, JSC::ArgList const&) +
139 (JSFunction.cpp:83)
13  com.apple.JavaScriptCore            0x0048066c JSC::call(JSC::ExecState*,
JSC::JSValue*, JSC::CallType, JSC::CallData const&, JSC::JSValue*, JSC::ArgList
const&) + 170 (CallData.cpp:39)
14  com.apple.WebCore                   0x039934e9
WebCore::JSAbstractEventListener::handleEvent(WebCore::Event*, bool) + 793
(JSEventListener.cpp:110)


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.