[Webkit-unassigned] [Bug 28317] Assertion being hit on layout tests in debug build

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=28317


Priit Laes (IRC: plaes) <amd at store20.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |amd at store20.com




--- Comment #3 from Priit Laes (IRC: plaes) <amd at store20.com>  2009-08-18 02:46:40 PDT ---
I'm getting it also with debug build (and webkit-gtk)

>From my local backtrace:

(gdb) info locals
coldPathBegin = {m_label = {m_offset = 549, m_used = false}}
stubCall = {static stackIndexStep = 1, static stackIndexStart = 1, m_jit =
0x7ffff8654640, m_stub = 0x7fb63115a505, m_returnType =
JSC::JITStubCall::VoidPtr, m_stackIndex = 3}
call = {m_jmp = {m_offset = 584}, m_flags =
JSC::AbstractMacroAssembler<JSC::X86Assembler>::Call::Linkable}
__PRETTY_FUNCTION__ = "void JSC::JIT::compileGetByIdSlowCase(int, int,
JSC::Identifier*, JSC::SlowCaseEntry*&, bool)"
(gdb) p patchOffsetGetByIdSlowCaseCall
$1 = 41
(gdb) p coldPathBegin
$2 = {m_label = {m_offset = 549, m_used = false}}
(gdb) p call
$3 = {m_jmp = {m_offset = 584}, m_flags =
JSC::AbstractMacroAssembler<JSC::X86Assembler>::Call::Linkable}

>From here (and your backtrace) the correct value for
patchOffsetGetByIdSlowCaseCall should be 35 (584 minus 549 equals 35 and your
case 1691-1656 is also 35)

Now we only need to figure out what has changed and which
patchOffsetGetByIdSlowCaseCall value in JavaScriptCore/jit/JIT.h should be
changed ;)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.