[Webkit-unassigned] [Bug 90728] New: REGRESSION(r118555): Assertion failure in JSC::DFG::AssemblyHelpers::decodedCodeMapFor on MathJax v2.0 sample

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=90728

           Summary: REGRESSION(r118555): Assertion failure in
                    JSC::DFG::AssemblyHelpers::decodedCodeMapFor on
                    MathJax v2.0 sample
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: khodych at gmail.com
                CC: fpizlo at apple.com


To reproduce:

Load MathJax sample file test/sample-eqnum.html from mathjax_sample.zip

webkit is built by following command:

./Tools/Scripts/build-webkit --qt --minimal --debug

Backtrace:
Program received signal SIGSEGV, Segmentation fault.
0x00007ffff65ec7d4 in JSC::DFG::AssemblyHelpers::decodedCodeMapFor (this=0x7fffffffc730, codeBlock=0x105e330) at ../../../../Source/JavaScriptCore/dfg/DFGAssemblyHelpers.cpp:47
47          ASSERT(codeBlock->jitCodeMap());
(gdb) bt
#0  0x00007ffff65ec7d4 in JSC::DFG::AssemblyHelpers::decodedCodeMapFor (this=0x7fffffffc730, codeBlock=0x105e330)
    at ../../../../Source/JavaScriptCore/dfg/DFGAssemblyHelpers.cpp:47
#1  0x00007ffff663fb46 in JSC::DFG::OSRExitCompiler::compileExit (this=0x7fffffffc850, exit=..., recovery=0x0)
    at ../../../../Source/JavaScriptCore/dfg/DFGOSRExitCompiler64.cpp:647
#2  0x00007ffff663bc6a in JSC::DFG::compileOSRExit (exec=0x7fff9c1efdc8) at ../../../../Source/JavaScriptCore/dfg/DFGOSRExitCompiler.cpp:79
#3  0x00007fffa05ffaad in ?? ()
#4  0x00007fffffffc920 in ?? ()
#5  0x00007fff9c1c4a80 in ?? ()
#6  0x00007fff95ed3c60 in ?? ()
#7  0x00007fff95a98600 in ?? ()
#8  0x00007fff00000004 in ?? ()
#9  0x00007fff95e407c0 in ?? ()
#10 0x00007ffff7e0ff40 in ?? ()
#11 0x00007fffffffc960 in ?? ()
#12 0x00007fffffffc970 in ?? ()
#13 0x00007fffa0744100 in ?? ()
#14 0x0000000000943688 in ?? ()
#15 0x00007fff9c1efdc8 in ?? ()
#16 0x0000000000000000 in ?? ()

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.