[Webkit-unassigned] [Bug 143087] 2 new test introcuced in r181993 crashes on Linux with enabled FTL JIT

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=143087

--- Comment #2 from Csaba Osztrogonác <ossy at webkit.org> ---
release crash log on Linux X86_64 with LLVM 3.6:

stress/varargs-varargs-inlined-exit-strict-mode.js.default-ftl: Abstract value (CellBytecodedoubleBoolOther, TOP, TOP) for double node has type outside SpecFullDouble.
stress/varargs-varargs-inlined-exit-strict-mode.js.default-ftl: 1   0x2b9e7554f7d7 WTFCrash
stress/varargs-varargs-inlined-exit-strict-mode.js.default-ftl: 2   0x2b9e75069e6b JSC::DFG::AbstractValue::fixTypeForRepresentation(unsigned int)
stress/varargs-varargs-inlined-exit-strict-mode.js.default-ftl: 3   0x2b9e7509d573 JSC::DFG::AbstractInterpreter<JSC::DFG::InPlaceAbstractState>::executeEffects(unsigned int, JSC::DFG::Node*)
stress/varargs-varargs-inlined-exit-strict-mode.js.default-ftl: 4   0x2b9e750a0175 bool JSC::DFG::runPhase<JSC::DFG::CFAPhase>(JSC::DFG::Graph&)
stress/varargs-varargs-inlined-exit-strict-mode.js.default-ftl: 5   0x2b9e75144588 JSC::DFG::Plan::compileInThreadImpl(JSC::DFG::LongLivedState&)
stress/varargs-varargs-inlined-exit-strict-mode.js.default-ftl: 6   0x2b9e75144cf6 JSC::DFG::Plan::compileInThread(JSC::DFG::LongLivedState&, JSC::DFG::ThreadData*)
stress/varargs-varargs-inlined-exit-strict-mode.js.default-ftl: 7   0x2b9e751bec65 JSC::DFG::Worklist::runThread(JSC::DFG::ThreadData*)
stress/varargs-varargs-inlined-exit-strict-mode.js.default-ftl: 8   0x2b9e7555d525
stress/varargs-varargs-inlined-exit-strict-mode.js.default-ftl: 9   0x2b9e75583dda
stress/varargs-varargs-inlined-exit-strict-mode.js.default-ftl: 10  0x2b9e7592d182
stress/varargs-varargs-inlined-exit-strict-mode.js.default-ftl: 11  0x2b9e75f4147d clone
stress/varargs-varargs-inlined-exit-strict-mode.js.default-ftl: Segmentation fault (core dumped)
stress/varargs-varargs-inlined-exit-strict-mode.js.default-ftl: ERROR: Unexpected exit code: 139

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150410/e69c1a37/attachment-0001.html>