[Webkit-unassigned] [Bug 123277] REGRESSION(r157164): v8-v6/v8-raytrace.js crashes on arm and sh4
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Fri Oct 25 03:30:00 PDT 2013
https://bugs.webkit.org/show_bug.cgi?id=123277
--- Comment #3 from Julien Brianceau <jbriance at cisco.com> 2013-10-25 03:28:45 PST ---
First analyzis: it seems that there's a mixup betweeen JSInterfaceJIT::regT0 and GPRInfo::nonArgGPR0.
The issue is not seen on X86 and X86_64, because on these architectures we have regT0 == nonArgGPR0 == X86Registers::eax
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list