[Webkit-unassigned] [Bug 68965] New: WebKit crashes in JSC when ENABLE_JIT is 0

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=68965

           Summary: WebKit crashes in JSC when ENABLE_JIT is 0
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: eric.hennigan at gmail.com


Found in WebKit repo 337174f23f1feb767b4201b8a9fc95105967ba7e

Steps to reproduce:
1. Turn off the JIT. Edited Source/JavaScriptCore/wtf/Platform.h and changed all defines for ENABLE_JIT to "#define ENABLE_JIT 0".
2. build-webkit --qt --debug (64-bit machine, running ubuntu)
3. run-launcher --qt --debug (runs WebKitBuild/Debug/bin/QtTestBrowser)
4. visit www.google.com
5. see crash message:
Starting webkit launcher, running against the built WebKit in ~/projects/jsflow-webkit/web0-webkit-orig/WebKitBuild/Debug/lib...
QInotifyFileSystemWatcherEngine::addPaths: inotify_add_watch failed: No such file or directory
QFileSystemWatcher: failed to add paths: /home/erich/.config/ibus/bus
ASSERTION FAILED: slot.base() == baseValue
../../../Source/JavaScriptCore/interpreter/Interpreter.cpp(3220) : JSC::JSValue JSC::Interpreter::privateExecute(JSC::Interpreter::ExecutionFlag, JSC::RegisterFile*, JSC::CallFrame*)
Segmentation fault

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.