[Webkit-unassigned] [Bug 78153] New: Assertion failure under JSC::DFG::AbstractState::execute loading economist.com

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=78153

           Summary: Assertion failure under
                    JSC::DFG::AbstractState::execute loading economist.com
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
               URL: http://www.economist.com
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: koivisto at iki.fi


Loading economist.com with ToT debug build I get

ASSERTION FAILED: node.op == ValueAdd
/Users/antti/webkit/OpenSource/Source/JavaScriptCore/dfg/DFGAbstractState.cpp(279) : bool JSC::DFG::AbstractState::execute(NodeIndex)
1   0x102ad3c26 JSC::DFG::AbstractState::execute(unsigned int)
2   0x102b331f9 JSC::DFG::Propagator::performBlockCFA(JSC::DFG::AbstractState&, unsigned int)
3   0x102b33139 JSC::DFG::Propagator::performForwardCFA(JSC::DFG::AbstractState&)
4   0x102b330b7 JSC::DFG::Propagator::globalCFA()
5   0x102b32ac6 JSC::DFG::Propagator::fixpoint()
6   0x102b32934 JSC::DFG::propagate(JSC::DFG::Graph&, JSC::JSGlobalData*, JSC::CodeBlock*)
7   0x102b0dfac JSC::DFG::compile(JSC::DFG::CompileMode, JSC::JSGlobalData&, JSC::CodeBlock*, JSC::JITCode&, JSC::MacroAssemblerCodePtr*)
8   0x102b0ddc4 JSC::DFG::tryCompileFunction(JSC::JSGlobalData&, JSC::CodeBlock*, JSC::JITCode&, JSC::MacroAssemblerCodePtr&)
9   0x102ba01b6 JSC::jitCompileFunctionIfAppropriate(JSC::JSGlobalData&, WTF::OwnPtr<JSC::FunctionCodeBlock>&, JSC::JITCode&, JSC::MacroAssemblerCodePtr&, JSC::SharedSymbolTable*&, JSC::JITCode::JITType)
10  0x102b9c357 JSC::FunctionExecutable::compileForCallInternal(JSC::ExecState*, JSC::ScopeChainNode*, JSC::JITCode::JITType)
11  0x102b9bf14 JSC::FunctionExecutable::compileOptimizedForCall(JSC::ExecState*, JSC::ScopeChainNode*)
12  0x102aa3c11 JSC::FunctionExecutable::compileOptimizedFor(JSC::ExecState*, JSC::ScopeChainNode*, JSC::CodeSpecializationKind)
13  0x102a9de0b JSC::FunctionCodeBlock::compileOptimized(JSC::ExecState*, JSC::ScopeChainNode*)
14  0x102c03a6d cti_optimize_from_ret
15  0x102c0c4d0 jscGeneratedNativeCode
16  0x102bcf879 JSC::JITCode::execute(JSC::RegisterFile*, JSC::ExecState*, JSC::JSGlobalData*)
17  0x102bcb7de JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::ScopeChainNode*, JSC::JSObject*)
18  0x102ab8612 JSC::evaluate(JSC::ExecState*, JSC::ScopeChainNode*, JSC::SourceCode const&, JSC::JSValue, JSC::JSValue*)
19  0x1042315b1 WebCore::JSMainThreadExecState::evaluate(JSC::ExecState*, JSC::ScopeChainNode*, JSC::SourceCode const&, JSC::JSValue, JSC::JSValue*)
20  0x10498699f WebCore::ScriptController::evaluateInWorld(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld*)
21  0x104986b04 WebCore::ScriptController::evaluate(WebCore::ScriptSourceCode const&)
22  0x10499d803 WebCore::ScriptElement::executeScript(WebCore::ScriptSourceCode const&)
23  0x10499db37 WebCore::ScriptElement::execute(WebCore::CachedScript*)
24  0x1049adbcd WebCore::ScriptRunner::timerFired(WebCore::Timer<WebCore::ScriptRunner>*)
25  0x1049b1a63 WebCore::Timer<WebCore::ScriptRunner>::fired()
26  0x104c00ee7 WebCore::ThreadTimers::sharedTimerFiredInternal()
27  0x104c00cb9 WebCore::ThreadTimers::sharedTimerFired()
28  0x104a08123 _ZN7WebCoreL10timerFiredEP16__CFRunLoopTimerPv
29  0x7fff9332bc24 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__
30  0x7fff9332b776 __CFRunLoopDoTimer
31  0x7fff9330c001 __CFRunLoopRun

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.