[Webkit-unassigned] [Bug 119140] REGRESSION: There are zillion crashes after FTL merge on 32 bit platforms

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=119140





--- Comment #2 from Csaba Osztrogonac <ossy at webkit.org>  2013-07-26 02:27:52 PST ---
Here is a shorter gdb backtrace for a jsc test:

$ gdb --args ../../../../WebKitBuild/Debug/bin/jsc -s  -f ./js1_6/shell.js -f ./js1_6/Array/shell.js -f ./js1_6/Array/regress-304828.js
GNU gdb (Ubuntu/Linaro 7.4-2012.02-0ubuntu2) 7.4-2012.02
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i686-linux-gnu".
For bug reporting instructions, please see:
<http://bugs.launchpad.net/gdb-linaro/>...
Reading symbols from /home/webkitbuildbot/oszi/WebKit/WebKitBuild/Debug/bin/jsc...done.
(gdb) run
Starting program: /home/webkitbuildbot/oszi/WebKit/WebKitBuild/Debug/bin/jsc -s -f ./js1_6/shell.js -f ./js1_6/Array/shell.js -f ./js1_6/Array/regress-304828.js
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
[New Thread 0xf60d7b40 (LWP 11820)]
[New Thread 0xf56ffb40 (LWP 11821)]
[New Thread 0xf4efeb40 (LWP 11822)]
[New Thread 0xf44ffb40 (LWP 11823)]
[New Thread 0xf3affb40 (LWP 11824)]
[New Thread 0xf30ffb40 (LWP 11825)]
[New Thread 0xf26ffb40 (LWP 11826)]
BUGNUMBER: 304828

STATUS: Array Generic Methods


Program received signal SIGSEGV, Segmentation fault.
0x080c1a48 in JSC::CodeBlock::vm() () at /home/webkitbuildbot/oszi/WebKit/Source/WTF/wtf/PrintStream.h:59
59          }
(gdb) bt
#0  0x080c1a48 in JSC::CodeBlock::vm() () at /home/webkitbuildbot/oszi/WebKit/Source/WTF/wtf/PrintStream.h:59
#1  0x082e827d in cti_vm_throw_slowpath (callFrame=0x82df9ee) at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/jit/JITStubs.cpp:2167
#2  0x082df9f5 in ctiVMThrowTrampolineSlowpath () at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/runtime/IndexingType.h:139
#3  0x082c2122 in JSC::JITCode::execute (this=0x89f69c0, stack=0x89deccc, callFrame=0xf1700058, vm=0x89d5828)
    at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/jit/JITCode.cpp:46
#4  0x082a896c in JSC::Interpreter::execute (this=0x89decc0, program=0xf153f9a8, callFrame=0xf16bfc8c, thisObj=0xf167fee8)
    at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/interpreter/Interpreter.cpp:856
#5  0x0838c864 in JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&, JSC::JSValue, JSC::JSValue*) ()
    at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/runtime/Completion.cpp:83
#6  0x0805657a in runWithScripts (globalObject=0xf16bfc38, scripts=0xffffd0d0, dump=134603264)
    at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/jsc.cpp:596
#7  0x08057269 in jscmain (argc=8, argv=0xffffd1f4) at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/jsc.cpp:812
#8  0x080563a3 in main (argc=8, argv=0xffffd1f4) at /home/webkitbuildbot/oszi/WebKit/Source/JavaScriptCore/jsc.cpp:554

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.