[Webkit-unassigned] [Bug 25819] Assertion failure in JIT::compileGetByIdSlowCase on x86_64 Linux
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Fri May 15 07:47:12 PDT 2009
https://bugs.webkit.org/show_bug.cgi?id=25819
------- Comment #3 from alex at igalia.com 2009-05-15 07:47 PDT -------
Requested by bdash :)
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7f77cbbc87a0 (LWP 1607)]
0x00007f77c9c62e1b in JSC::JIT::compileGetByIdSlowCase (this=0x7fffd3bfb090,
resultVReg=4, baseVReg=-14, ident=0x139bcb0, iter=@0x7fffd3bfae48,
propertyAccessInstructionIndex=0)
at JavaScriptCore/jit/JITPropertyAccess.cpp:252
252 ASSERT(differenceBetween(coldPathBegin, call) ==
patchOffsetGetByIdSlowCaseCall);
Current language: auto; currently c++
(gdb) p differenceBetween(coldPathBegin, call)
$1 = 38
(gdb) p patchOffsetGetByIdSlowCaseCall
$2 = 44
(gdb) p coldPathBegin
$3 = {m_label = {m_offset = 410, m_used = false}}
(gdb) p call
$4 = {m_jmp = {m_offset = 448}, m_flags =
JSC::AbstractMacroAssembler<JSC::X86Assembler>::Call::Linkable}
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
More information about the webkit-unassigned
mailing list