[Webkit-unassigned] [Bug 25819] Assertion failure in JIT::compileGetByIdSlowCase on x86_64 Linux

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri May 15 07:47:12 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=25819





------- Comment #3 from alex at igalia.com  2009-05-15 07:47 PDT -------
Requested by bdash :)

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7f77cbbc87a0 (LWP 1607)]
0x00007f77c9c62e1b in JSC::JIT::compileGetByIdSlowCase (this=0x7fffd3bfb090,
resultVReg=4, baseVReg=-14, ident=0x139bcb0, iter=@0x7fffd3bfae48,
propertyAccessInstructionIndex=0)
    at JavaScriptCore/jit/JITPropertyAccess.cpp:252
252         ASSERT(differenceBetween(coldPathBegin, call) ==
patchOffsetGetByIdSlowCaseCall);
Current language:  auto; currently c++
(gdb) p differenceBetween(coldPathBegin, call)
$1 = 38
(gdb) p  patchOffsetGetByIdSlowCaseCall
$2 = 44
(gdb) p coldPathBegin
$3 = {m_label = {m_offset = 410, m_used = false}}
(gdb) p call         
$4 = {m_jmp = {m_offset = 448}, m_flags =
JSC::AbstractMacroAssembler<JSC::X86Assembler>::Call::Linkable}


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list