[Webkit-unassigned] [Bug 154168] New: FTL JIT crash when running the TypeScript test from Octane benchmark

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=154168

            Bug ID: 154168
           Summary: FTL JIT crash when running the TypeScript test from
                    Octane benchmark
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Local Build
          Hardware: Unspecified
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: lantw44 at gmail.com

Steps to reproduce:
1. Build WebKit with debug configuration and FTL JIT enabled.
2. Run './MiniBrowser https://octane-benchmark.googlecode.com/svn/latest/index.html' from a terminal.
3. Click 'Start Octane 2.0' in the web page.

Result:
Assertion failure shows in the terminal and WebKitWebProcess crashes when it runs the TypeScript test. If it doesn't crash, running the benchmark again is likely to crash it.

This bug was found while making FTL JIT work on FreeBSD, so I put links to backtraces instead of pasting them again.
Backtrace on FreeBSD: https://bugs.webkit.org/show_bug.cgi?id=152258#c10
Backtrace on GNU/Linux: https://bugs.webkit.org/show_bug.cgi?id=152258#c11

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160212/db155bb4/attachment.html>