[Webkit-unassigned] [Bug 22353] New: Assertion failure on fast/js/number-cell-reuse.html

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=22353

           Summary: Assertion failure on fast/js/number-cell-reuse.html
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Normal
          Priority: P1
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ap at webkit.org
                CC: ggaren at apple.com, cwzwarich at uwaterloo.ca


ASSERT_WITH_MESSAGE((iter + 1) == m_slowCases.end() || firstTo != (iter +
1)->to,"Not enough jumps linked in slow case codegen.");

Thread 0 Crashed:
0   com.apple.JavaScriptCore            0x0052b8ee
JSC::JIT::privateCompileSlowCases() + 15856 (JIT.cpp:3005)
1   com.apple.JavaScriptCore            0x00533a27 JSC::JIT::privateCompile() +
315 (JIT.cpp:3045)
2   com.apple.JavaScriptCore            0x0051f3bd
JSC::JIT::compile(JSC::JSGlobalData*, JSC::CodeBlock*) + 45 (JIT.h:305)
3   com.apple.JavaScriptCore            0x0050625d
JSC::Interpreter::cti_op_call_JSFunction(void*, ...) + 211
(Interpreter.cpp:4693)
4   com.apple.JavaScriptCore            0x00500f0a jscGeneratedNativeCode + 0
(Interpreter.cpp:4261)
5   com.apple.JavaScriptCore            0x00509714
JSC::Interpreter::execute(JSC::EvalNode*, JSC::ExecState*, JSC::JSObject*, int,
JSC::ScopeChainNode*, JSC::JSValue**) + 1170 (Interpreter.cpp:1100)
6   com.apple.JavaScriptCore            0x00509ddf
JSC::Interpreter::callEval(JSC::ExecState*, JSC::RegisterFile*, JSC::Register*,
int, int, JSC::JSValue*&) + 399 (Interpreter.cpp:601)
7   com.apple.JavaScriptCore            0x00509f17
JSC::Interpreter::cti_op_call_eval(void*, ...) + 271 (Interpreter.cpp:5580)
8   com.apple.JavaScriptCore            0x00500f0a jscGeneratedNativeCode + 0
(Interpreter.cpp:4261)
9   com.apple.JavaScriptCore            0x00508050
JSC::Interpreter::execute(JSC::ProgramNode*, JSC::ExecState*,
JSC::ScopeChainNode*, JSC::JSObject*, JSC::JSValue**) + 670
(Interpreter.cpp:942)
10  com.apple.JavaScriptCore            0x004641a6
JSC::evaluate(JSC::ExecState*, JSC::ScopeChain&, JSC::SourceCode const&,
JSC::JSValue*) + 438 (Completion.cpp:67)
11  com.apple.WebCore                   0x039d69a6
WebCore::ScriptController::evaluate(WebCore::String const&, int,
WebCore::String const&) + 250 (ScriptController.cpp:111)
12  com.apple.WebCore                   0x0355a35e
WebCore::FrameLoader::executeScript(WebCore::String const&, int,
WebCore::String const&) + 154 (FrameLoader.cpp:800)


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.