No subject

.opGetByValSlow
    loadi 4[PC], t0
    loadi ArrayStorage::m_vector + TagOffset[t3, t1, 8], t2      // <=3D=3D=
=3D Crashed here.
    loadi ArrayStorage::m_vector + PayloadOffset[t3, t1, 8], t1
    bieq t2, EmptyValueTag, .opGetByValSlow

The crash is at the above line in LowLevelInterpreter32_64.asm.  The crash =
does not manifest consistently on any one test (except when I run it in the=
 C++ llint on the Windows port).  But if I run those 4 tests together (fast=
/js fast/regex ietestcenter/Javascript sputnik), the crash will manifest in=
 several tests, usually a few in ietestcenter/... and many more in sputnik/=
.=E2=80=A6

To repro the crashes, you will need to set useJIT() and useDFGJIT() to fals=
e in Options.cpp and run interpreted only.

--=20
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=3Demail
------- You are receiving this mail because: -------
You are the assignee for the bug.=