[Webkit-unassigned] [Bug 156443] New: Rare debug crash in ByteCodeParser in stress/raise-error-in-iterator-close.js.dfg-eager: ASSERTION FAILED: !HashTranslator::equal(KeyTraits::emptyValue(), key)
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Sat Apr 9 13:38:57 PDT 2016
https://bugs.webkit.org/show_bug.cgi?id=156443
Bug ID: 156443
Summary: Rare debug crash in ByteCodeParser in
stress/raise-error-in-iterator-close.js.dfg-eager:
ASSERTION FAILED:
!HashTranslator::equal(KeyTraits::emptyValue(), key)
Classification: Unclassified
Product: WebKit
Version: WebKit Nightly Build
Hardware: All
OS: All
Status: NEW
Severity: Normal
Priority: P2
Component: JavaScriptCore
Assignee: webkit-unassigned at lists.webkit.org
Reporter: fpizlo at apple.com
Here's the failure:
stress/raise-error-in-iterator-close.js.dfg-eager: ASSERTION FAILED: !HashTranslator::equal(KeyTraits::emptyValue(), key)
stress/raise-error-in-iterator-close.js.dfg-eager: /Volumes/Data/secondary/OpenSource/WebKitBuild/Debug/usr/local/include/wtf/HashTable.h(585) : void WTF::HashTable<JSC::CodeOrigin, WTF::KeyValuePair<JSC::CodeOrigin, JSC::StructureStubInfo *>, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<JSC::CodeOrigin, JSC::StructureStubInfo *> >, JSC::CodeOriginApproximateHash, WTF::HashMap<JSC::CodeOrigin, JSC::StructureStubInfo *, JSC::CodeOriginApproximateHash, WTF::HashTraits<JSC::CodeOrigin>, WTF::HashTraits<JSC::StructureStubInfo *> >::KeyValuePairTraits, WTF::HashTraits<JSC::CodeOrigin> >::checkKey(const T &) [Key = JSC::CodeOrigin, Value = WTF::KeyValuePair<JSC::CodeOrigin, JSC::StructureStubInfo *>, Extractor = WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<JSC::CodeOrigin, JSC::StructureStubInfo *> >, HashFunctions = JSC::CodeOriginApproximateHash, Traits = WTF::HashMap<JSC::CodeOrigin, JSC::StructureStubInfo *, JSC::CodeOriginApproximateHash, WTF::HashTraits<JSC::CodeOrigin>, WTF::H
stress/raise-error-in-iterator-close.js.dfg-eager: 1 0x1040bafc0 WTFCrash
stress/raise-error-in-iterator-close.js.dfg-eager: 2 0x1033cc1e8 void WTF::HashTable<JSC::CodeOrigin, WTF::KeyValuePair<JSC::CodeOrigin, JSC::StructureStubInfo*>, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<JSC::CodeOrigin, JSC::StructureStubInfo*> >, JSC::CodeOriginApproximateHash, WTF::HashMap<JSC::CodeOrigin, JSC::StructureStubInfo*, JSC::CodeOriginApproximateHash, WTF::HashTraits<JSC::CodeOrigin>, WTF::HashTraits<JSC::StructureStubInfo*> >::KeyValuePairTraits, WTF::HashTraits<JSC::CodeOrigin> >::checkKey<WTF::HashMapTranslator<WTF::HashMap<JSC::CodeOrigin, JSC::StructureStubInfo*, JSC::CodeOriginApproximateHash, WTF::HashTraits<JSC::CodeOrigin>, WTF::HashTraits<JSC::StructureStubInfo*> >::KeyValuePairTraits, JSC::CodeOriginApproximateHash>, JSC::CodeOrigin>(JSC::CodeOrigin const&)
stress/raise-error-in-iterator-close.js.dfg-eager: 3 0x1033cbf0f WTF::HashTableAddResult<WTF::HashTableIterator<JSC::CodeOrigin, WTF::KeyValuePair<JSC::CodeOrigin, JSC::StructureStubInfo*>, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<JSC::CodeOrigin, JSC::StructureStubInfo*> >, JSC::CodeOriginApproximateHash, WTF::HashMap<JSC::CodeOrigin, JSC::StructureStubInfo*, JSC::CodeOriginApproximateHash, WTF::HashTraits<JSC::CodeOrigin>, WTF::HashTraits<JSC::StructureStubInfo*> >::KeyValuePairTraits, WTF::HashTraits<JSC::CodeOrigin> > > WTF::HashTable<JSC::CodeOrigin, WTF::KeyValuePair<JSC::CodeOrigin, JSC::StructureStubInfo*>, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<JSC::CodeOrigin, JSC::StructureStubInfo*> >, JSC::CodeOriginApproximateHash, WTF::HashMap<JSC::CodeOrigin, JSC::StructureStubInfo*, JSC::CodeOriginApproximateHash, WTF::HashTraits<JSC::CodeOrigin>, WTF::HashTraits<JSC::StructureStubInfo*> >::KeyValuePairTraits, WTF::HashTraits<JSC::CodeOrigin> >::add<WTF::HashMapTran
stress/raise-error-in-iterator-close.js.dfg-eager: 4 0x1033cbebc WTF::HashTableAddResult<WTF::HashTableIterator<JSC::CodeOrigin, WTF::KeyValuePair<JSC::CodeOrigin, JSC::StructureStubInfo*>, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<JSC::CodeOrigin, JSC::StructureStubInfo*> >, JSC::CodeOriginApproximateHash, WTF::HashMap<JSC::CodeOrigin, JSC::StructureStubInfo*, JSC::CodeOriginApproximateHash, WTF::HashTraits<JSC::CodeOrigin>, WTF::HashTraits<JSC::StructureStubInfo*> >::KeyValuePairTraits, WTF::HashTraits<JSC::CodeOrigin> > > WTF::HashMap<JSC::CodeOrigin, JSC::StructureStubInfo*, JSC::CodeOriginApproximateHash, WTF::HashTraits<JSC::CodeOrigin>, WTF::HashTraits<JSC::StructureStubInfo*> >::inlineAdd<JSC::CodeOrigin const&, JSC::StructureStubInfo*&>(JSC::CodeOrigin const&&&, JSC::StructureStubInfo*&&&)
stress/raise-error-in-iterator-close.js.dfg-eager: 5 0x1033cbe54 WTF::HashTableAddResult<WTF::HashTableIterator<JSC::CodeOrigin, WTF::KeyValuePair<JSC::CodeOrigin, JSC::StructureStubInfo*>, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<JSC::CodeOrigin, JSC::StructureStubInfo*> >, JSC::CodeOriginApproximateHash, WTF::HashMap<JSC::CodeOrigin, JSC::StructureStubInfo*, JSC::CodeOriginApproximateHash, WTF::HashTraits<JSC::CodeOrigin>, WTF::HashTraits<JSC::StructureStubInfo*> >::KeyValuePairTraits, WTF::HashTraits<JSC::CodeOrigin> > > WTF::HashMap<JSC::CodeOrigin, JSC::StructureStubInfo*, JSC::CodeOriginApproximateHash, WTF::HashTraits<JSC::CodeOrigin>, WTF::HashTraits<JSC::StructureStubInfo*> >::add<JSC::StructureStubInfo*&>(JSC::CodeOrigin const&, JSC::StructureStubInfo*&&&)
stress/raise-error-in-iterator-close.js.dfg-eager: 6 0x1033ae42d void WTF::toHashMap<JSC::StructureStubInfo, JSC::CodeOrigin, JSC::CodeOriginApproximateHash, JSC::CodeOrigin (JSC::StructureStubInfo&)>(WTF::Bag<JSC::StructureStubInfo>&, JSC::CodeOrigin (&)(JSC::StructureStubInfo&), WTF::HashMap<JSC::CodeOrigin, JSC::StructureStubInfo*, JSC::CodeOriginApproximateHash, WTF::HashTraits<JSC::CodeOrigin>, WTF::HashTraits<JSC::StructureStubInfo*> >&)
stress/raise-error-in-iterator-close.js.dfg-eager: 7 0x1033a14bd JSC::CodeBlock::getStubInfoMap(JSC::ConcurrentJITLocker const&, WTF::HashMap<JSC::CodeOrigin, JSC::StructureStubInfo*, JSC::CodeOriginApproximateHash, WTF::HashTraits<JSC::CodeOrigin>, WTF::HashTraits<JSC::StructureStubInfo*> >&)
stress/raise-error-in-iterator-close.js.dfg-eager: 8 0x1034ded60 JSC::DFG::ByteCodeParser::InlineStackEntry::InlineStackEntry(JSC::DFG::ByteCodeParser*, JSC::CodeBlock*, JSC::CodeBlock*, JSC::DFG::BasicBlock*, JSC::JSFunction*, JSC::VirtualRegister, JSC::VirtualRegister, int, JSC::InlineCallFrame::Kind)
stress/raise-error-in-iterator-close.js.dfg-eager: 9 0x1034dfa19 JSC::DFG::ByteCodeParser::InlineStackEntry::InlineStackEntry(JSC::DFG::ByteCodeParser*, JSC::CodeBlock*, JSC::CodeBlock*, JSC::DFG::BasicBlock*, JSC::JSFunction*, JSC::VirtualRegister, JSC::VirtualRegister, int, JSC::InlineCallFrame::Kind)
stress/raise-error-in-iterator-close.js.dfg-eager: 10 0x1034e06e1 JSC::DFG::ByteCodeParser::parse()
stress/raise-error-in-iterator-close.js.dfg-eager: 11 0x1034e0a2e JSC::DFG::parse(JSC::DFG::Graph&)
stress/raise-error-in-iterator-close.js.dfg-eager: 12 0x10373cf1d JSC::DFG::Plan::compileInThreadImpl(JSC::DFG::LongLivedState&)
stress/raise-error-in-iterator-close.js.dfg-eager: 13 0x10373c9ea JSC::DFG::Plan::compileInThread(JSC::DFG::LongLivedState&, JSC::DFG::ThreadData*)
stress/raise-error-in-iterator-close.js.dfg-eager: 14 0x103868e0a JSC::DFG::Worklist::runThread(JSC::DFG::ThreadData*)
stress/raise-error-in-iterator-close.js.dfg-eager: 15 0x103867164 JSC::DFG::Worklist::threadFunction(void*)
stress/raise-error-in-iterator-close.js.dfg-eager: 16 0x1041273e9 WTF::createThread(void (*)(void*), void*, char const*)::$_0::operator()() const
stress/raise-error-in-iterator-close.js.dfg-eager: 17 0x1041273bd void std::__1::__invoke_void_return_wrapper<void>::__call<WTF::createThread(void (*)(void*), void*, char const*)::$_0&>(WTF::createThread(void (*)(void*), void*, char const*)::$_0&&&)
stress/raise-error-in-iterator-close.js.dfg-eager: 18 0x10412735c std::__1::__function::__func<WTF::createThread(void (*)(void*), void*, char const*)::$_0, std::__1::allocator<WTF::createThread(void (*)(void*), void*, char const*)::$_0>, void ()>::operator()()
stress/raise-error-in-iterator-close.js.dfg-eager: 19 0x1039b22ea std::__1::function<void ()>::operator()() const
stress/raise-error-in-iterator-close.js.dfg-eager: 20 0x104125fbe WTF::threadEntryPoint(void*)
stress/raise-error-in-iterator-close.js.dfg-eager: 21 0x104127951 WTF::wtfThreadEntryPoint(void*)
stress/raise-error-in-iterator-close.js.dfg-eager: 22 0x7fff9d41e99d _pthread_body
stress/raise-error-in-iterator-close.js.dfg-eager: 23 0x7fff9d41e91a _pthread_body
stress/raise-error-in-iterator-close.js.dfg-eager: 24 0x7fff9d41c351 thread_start
stress/raise-error-in-iterator-close.js.dfg-eager: test_script_17851: line 2: 60368 Segmentation fault: 11 ( "$@" ../../.vm/JavaScriptCore.framework/Resources/jsc --useFTLJIT\=false --useFunctionDotArguments\=true --thresholdForJITAfterWarmUp\=10 --thresholdForJITSoon\=10 --thresholdForOptimizeAfterWarmUp\=20 --thresholdForOptimizeAfterLongWarmUp\=20 --thresholdForOptimizeSoon\=20 --thresholdForFTLOptimizeAfterWarmUp\=20 --thresholdForFTLOptimizeSoon\=20 --maximumEvalCacheableSourceLength\=150000 raise-error-in-iterator-close.js )
stress/raise-error-in-iterator-close.js.dfg-eager: ERROR: Unexpected exit code: 139
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160409/e460db60/attachment.html>
More information about the webkit-unassigned
mailing list