[Webkit-unassigned] [Bug 116889] fourthTier: The baseline jit and LLint should use common slow paths

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Jun 10 13:36:47 PDT 2013


https://bugs.webkit.org/show_bug.cgi?id=116889


Geoffrey Garen <ggaren at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |




--- Comment #14 from Geoffrey Garen <ggaren at apple.com>  2013-06-10 13:35:23 PST ---
Darn, looks like this is still crashing at r151362:

run-webkit-tests --debug --verbose fast/workers/stress-js-execution.html fast/workers/termination-early.html fast/workers/stress-js-execution.html fast/workers/termination-early.html

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x00000000bbadbeef

Thread 14 Crashed:: WebCore: Worker
0   com.apple.JavaScriptCore          0x000000010954c9d0 JSC::JSActivation::tearOff(JSC::VM&) + 96 (JSActivation.h:154)
1   com.apple.JavaScriptCore          0x0000000109547466 JSC::Interpreter::unwindCallFrame(JSC::ExecState*&, JSC::JSValue, unsigned int&, JSC::CodeBlock*&) + 550 (Interpreter.cpp:499)
2   com.apple.JavaScriptCore          0x0000000109548841 JSC::Interpreter::throwException(JSC::ExecState*&, JSC::JSValue&, unsigned int) + 1137 (Interpreter.cpp:779)
3   com.apple.JavaScriptCore          0x000000010956be06 JSC::genericThrow(JSC::VM*, JSC::ExecState*, JSC::JSValue, unsigned int) + 166 (JITExceptions.cpp:56)
4   com.apple.JavaScriptCore          0x000000010956bf6c JSC::jitThrowNew(JSC::VM*, JSC::ExecState*, JSC::JSValue) + 60 (JITExceptions.cpp:80)
5   com.apple.JavaScriptCore          0x000000010958f37c cti_vm_throw_slowpath + 60 (JITStubs.cpp:2230)
6   com.apple.JavaScriptCore          0x0000000109584db9 ctiVMThrowTrampolineSlowpath + 8

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list