[Webkit-unassigned] [Bug 154601] New: ASSERTION FAILED: !clobbersExitState(m_graph, previousNode) || !node->origin.exitOK || node->op() == ExitOK || node->origin.forExit != previousNode->origin.forExit

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=154601

            Bug ID: 154601
           Summary: ASSERTION FAILED: !clobbersExitState(m_graph,
                    previousNode) || !node->origin.exitOK || node->op() ==
                    ExitOK || node->origin.forExit !=
                    previousNode->origin.forExit
    Classification: Unclassified
           Product: WebKit
           Version: Other
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mcatanzaro at igalia.com

Created attachment 272042
  --> https://bugs.webkit.org/attachment.cgi?id=272042&action=review
Debug output

At @121: validation failed: !clobbersExitState(m_graph, previousNode) || !node->origin.exitOK || node->op() == ExitOK || node->origin.forExit != previousNode->origin.forExit (../../Source/JavaScriptCore/dfg/DFGValidate.cpp:202).

Hit this on https://tools.usps.com/go/ScheduleAPickupAction!input.action but it doesn't seem to be reproducible. Ludicrously-detailed debug output attached. This is a debug build of WebKitGTK+ on Linux x86_64, r196978.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160223/77665295/attachment.html>