[Webkit-unassigned] [Bug 146635] New: ASSERTION FAILED: exec->vm().typeProfiler() in functionReturnTypeFor

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=146635

            Bug ID: 146635
           Summary: ASSERTION FAILED: exec->vm().typeProfiler() in
                    functionReturnTypeFor
    Classification: Unclassified
           Product: WebKit
           Version: 528+ (Nightly build)
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: rhodovan.u-szeged at partner.samsung.com
                CC: ggaren at apple.com, saambarati1 at gmail.com
            Blocks: 116980

Created attachment 256208
  --> https://bugs.webkit.org/attachment.cgi?id=256208&action=review
Test case

Load this test with debug or release jsc:

returnTypeFor(arguments);


Backtrace:

ASSERTION FAILED: exec->vm().typeProfiler()
../../Source/JavaScriptCore/jsc.cpp(1142) : JSC::EncodedJSValue functionReturnTypeFor(JSC::ExecState*)
1   0x7ffff72d46db WTFCrash
2   0x428539
3   0x7fffb0fff0a8
[New Thread 0x7fffaf7fa700 (LWP 12117)]
[New Thread 0x7fffafffb700 (LWP 12116)]
[New Thread 0x7fffb07fc700 (LWP 12114)]
[New Thread 0x7fffb0ffd700 (LWP 12113)]

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff72d46e0 in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:321
321     *(int *)(uintptr_t)0xbbadbeef = 0;
(gdb) bt
#0  0x00007ffff72d46e0 in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:321
#1  0x0000000000428539 in functionReturnTypeFor (exec=0x7fffffffca70) at ../../Source/JavaScriptCore/jsc.cpp:1142
#2  0x00007fffb0fff0a8 in ?? ()
#3  0x00007fffffffcac0 in ?? ()
#4  0x00007ffff727e8e9 in llint_entry () from webkit/WebKitBuild/Debug/lib/libjavascriptcore_efl.so.1
Backtrace stopped: frame did not save the PC

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150706/dd97cf92/attachment.html>