[Webkit-unassigned] [Bug 75602] New: Short circuit for a 16 bit pattern character and an 8 bit string failed

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=75602

           Summary: Short circuit for a 16 bit pattern character and an 8
                    bit string failed
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: hojong.han at samsung.com


In case of ARM_TRADITIONAL, crash occurs like below when loading http://v.youku.com/v_playlist/f16850225o1p0.html

#0  0xfffffffe in ?? ()
No symbol table info available.
#1  0x419d160c in execute (jitObject=<value optimized out>, input=<value optimized out>, start=<value optimized out>, 
    length=<value optimized out>, output=0x0)
    at /home/SOURCE/webkit-efl/Source/JavaScriptCore/yarr/YarrJIT.h:74
No locals.
#2  JSC::Yarr::execute (jitObject=<value optimized out>, input=<value optimized out>, start=<value optimized out>, 
    length=<value optimized out>, output=0x0)
    at /home/SOURCEwebkit-efl/Source/JavaScriptCore/yarr/YarrJIT.cpp:2505

The problem is caused by the instruction which loads the invalid branch target(0xffffffff).
That instruction is append to the assembler buffer while generating greedy pattern character about a 16 bit pattern character and an 8 bit string.
Updating the branch target for that instruction is necessary but it's not in any where.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.