[Webkit-unassigned] [Bug 72396] New: [ASSERT] in JSC::CodeBlock::reoptimizationRetryCounter

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=72396

           Summary: [ASSERT] in JSC::CodeBlock::reoptimizationRetryCounter
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: xan.lopez at gmail.com


r100279, GNU/Linux x86/64. Fairly easy to reproduce clicking on the "N more tweets" thingie on twitter:


Program received signal SIGSEGV, Segmentation fault.
0x00007ffff3d4445c in JSC::CodeBlock::reoptimizationRetryCounter (this=0x0) at ../../Source/JavaScriptCore/bytecode/CodeBlock.h:866
866                ASSERT(m_reoptimizationRetryCounter <= Heuristics::reoptimizationRetryCounterMax);
(gdb) bt
#0  0x00007ffff3d4445c in JSC::CodeBlock::reoptimizationRetryCounter (this=0x0) at ../../Source/JavaScriptCore/bytecode/CodeBlock.h:866
#1  0x00007ffff3dd554c in JSC::CodeBlock::largeFailCountThreshold (this=0xb438ed0) at ../../Source/JavaScriptCore/bytecode/CodeBlock.h:987
#2  0x00007ffff3dd3c45 in JSC::DFG::OSRExitCompiler::compileExit (this=0x7fffffffc2a0, exit=..., recovery=0x0)
    at ../../Source/JavaScriptCore/dfg/DFGOSRExitCompiler64.cpp:475
#3  0x00007ffff3dd646c in JSC::DFG::compileOSRExit (exec=0x7fff99ae6830) at ../../Source/JavaScriptCore/dfg/DFGOSRExitCompiler.cpp:59
#4  0x00007fff9b81b696 in ?? ()
#5  0x00007fffffffc330 in ?? ()
#6  0x00007fff88e684c0 in ?? ()
#7  0x0000000000000000 in ?? ()

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.