[Webkit-unassigned] [Bug 148376] New tests introduced in r188545 fail on 32 bit ARM

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Aug 27 06:07:12 PDT 2015


https://bugs.webkit.org/show_bug.cgi?id=148376

--- Comment #5 from Csaba Osztrogonác <ossy at webkit.org> ---
Here is a crash log in debug mode:

stress/arrowfunction-bound.js.default: ASSERTION FAILED: !from || from->JSCell::inherits(std::remove_pointer<To>::type::info())
stress/arrowfunction-bound.js.default: ../../Source/JavaScriptCore/runtime/JSCell.h(250) : To JSC::jsCast(From*) [with To = JSC::JSObject*; From = JSC::JSCell]
stress/arrowfunction-bound.js.default: 1   0xb65960e4 WTFCrashWithSecurityImplication
stress/arrowfunction-bound.js.default: 2   0x41134 JSC::JSObject* JSC::jsCast<JSC::JSObject*, JSC::JSCell>(JSC::JSCell*)
stress/arrowfunction-bound.js.default: 3   0x3bade JSC::asObject(JSC::JSCell*)
stress/arrowfunction-bound.js.default: 4   0x3de14 JSC::JSValue::getPropertySlot(JSC::ExecState*, JSC::PropertyName, JSC::PropertySlot&) const
stress/arrowfunction-bound.js.default: 5   0xb62ffbb2
stress/arrowfunction-bound.js.default: Segmentation fault
stress/arrowfunction-bound.js.default: ERROR: Unexpected exit code: 139
FAIL: stress/arrowfunction-bound.js.default

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150827/2d3c0ed3/attachment.html>


More information about the webkit-unassigned mailing list