[Webkit-unassigned] [Bug 140458] New: CRASH in JSC::CallEdgeProfile::mergeBack running Dromaeo/jslib-style-jquery.html js-perf-test

Wed Jan 14 11:24:39 PST 2015

https://bugs.webkit.org/show_bug.cgi?id=140458

            Bug ID: 140458
           Summary: CRASH in JSC::CallEdgeProfile::mergeBack running
                    Dromaeo/jslib-style-jquery.html js-perf-test
    Classification: Unclassified
           Product: WebKit
           Version: 528+ (Nightly build)
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: joepeck at webkit.org
                CC: ggaren at apple.com, msaboff at apple.com

* SUMMARY
CRASH (probably a RELEASE_ASSERT) in JSC::CallEdgeProfile::mergeBack running Dromaeo/jslib-style-jquery.html js-perf-test on the Apple Mavericks Release (Perf) bot. This has been happening on and off for a while (looks like about 12/25 it started), about once every 10 bot runs.

* NOTES
python ./Tools/Scripts/run-perf-tests --output-json-path perf-test-results.json --slave-config-json-path ../../perf-test-config.json --no-show-results --reset-results --test-results-server perf.webkit.org --builder-name 'Apple Mavericks Release (Perf)' --build-number 3651 --platform mac-mavericks --no-build --release

...
Running Dromaeo/jslib-style-jquery.html (66 of 142)
error: Dromaeo/jslib-style-jquery.html
1   0x1036e4fad JSC::CallEdgeProfile::mergeBack()
2   0x1036e5194 JSC::CallEdgeLog::processLog()
3   0x4c54c247bba9
4   0x4c54c247ca89
5   0x4c54c2493f7a
6   0x4c54c2486533
7   0x4c54c2498fd4
8   0x4c54c24997b6
9   0x4c54c2498adc
10  0x4c54c24306e1
11  0x1038af768 vmEntryToJavaScript
12  0x1037bac49 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*)
13  0x1037a02b9 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&)
14  0x10352ea6f JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, JSC::JSValue*)
15  0x105213c7f WebCore::ScheduledAction::executeFunctionInContext(JSC::JSGlobalObject*, JSC::JSValue, WebCore::ScriptExecutionContext&)
16  0x1052138e9 WebCore::ScheduledAction::execute(WebCore::Document&)
17  0x1049147d8 WebCore::DOMTimer::fired()
18  0x1053fa57d WebCore::ThreadTimers::sharedTimerFiredInternal()
19  0x105288784 WebCore::timerFired(__CFRunLoopTimer*, void*)
20  0x7fff828663e4 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__
21  0x7fff82865f1f __CFRunLoopDoTimer
22  0x7fff828d75aa __CFRunLoopDoTimers
23  0x7fff828216a5 __CFRunLoopRun
24  0x7fff82820e75 CFRunLoopRunSpecific
25  0x1033a2601 runTest(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&)
26  0x1033a1bac dumpRenderTree(int, char const**)
27  0x1033a2dc5 DumpRenderTreeMain(int, char const**)
28  0x7fff850fe5fd start
29  0x3
...

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150114/963a1fa3/attachment-0002.html>