[Webkit-unassigned] [Bug 54667] New: latest jsc for armv7 crashes in sunspider tests

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=54667

           Summary: latest jsc for armv7 crashes in sunspider tests
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Other
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: Major
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: vjaquez at igalia.com


According to our builbot this commit http://trac.webkit.org/changeset/78732 crashes the execution of the sunspider tests, and also the v8 benchmarks.

The machine is an ARMv7 Pandaboard EA1, kernel 2.6.35.3 and the JSC is natively compiled with g++ (Ubuntu/Linaro 4.4.4-14ubuntu5) 4.4.5

trace:

 ~/WebKit/Programs/jsc sunspider-0.9.1/3d-cube.js
ASSERTION FAILED: differenceBetween(hotPathBegin, displacementLabel1) == patchOffsetPutByIdPropertyMapOffset1
Source/JavaScriptCore/jit/JITPropertyAccess32_64.cpp(517) : void JSC::JIT::emit_op_put_by_id(JSC::Instruction*)
Segmentation fault


gdb trace:

Starting program: /home/user/buildslave/full-wk/build/Programs/jsc 3d-cube.js
[Thread debugging using libthread_db enabled]
[New Thread 0x41e5f460 (LWP 23458)]
Program received signal SIGSEGV, Segmentation fault.
0x000d80b8 in JITStubThunked_op_create_this ()
(gdb) bt
#0  0x000d80b8 in JITStubThunked_op_create_this ()
#1  0x000d3b1c in cti_op_create_this ()
#2  0x000d3b1c in cti_op_create_this ()

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.