[Webkit-unassigned] [Bug 160082] REGRESSION(r203537): It made many tests crash on ARMv7 Linux platforms

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Jul 22 06:13:19 PDT 2016


https://bugs.webkit.org/show_bug.cgi?id=160082

--- Comment #5 from Csaba Osztrogonác <ossy at webkit.org> ---
(In reply to comment #4)
> crash log on ARMv7 with ARM instruction set:
> 
> Running stress/exit-after-int52-to-double.js.default
> stress/exit-after-int52-to-double.js.default: ASSERTION FAILED:
> linkBuffer.isValid()
> stress/exit-after-int52-to-double.js.default:
> ../../Source/JavaScriptCore/jit/JITMathIC.h(130) : void
> JSC::JITMathIC<Generator>::generateOutOfLine(JSC::VM&, JSC::CodeBlock*,
> JSC::FunctionPtr) [with GeneratorType = JSC::JITAddGenerator]
> stress/exit-after-int52-to-double.js.default: 1   0xb6394fb0 WTFCrash
> stress/exit-after-int52-to-double.js.default: 2   0xb5ea3104
> JSC::JITMathIC<JSC::JITAddGenerator>::generateOutOfLine(JSC::VM&,
> JSC::CodeBlock*, JSC::FunctionPtr)
> stress/exit-after-int52-to-double.js.default: 3   0xb5e9a0b8
> stress/exit-after-int52-to-double.js.default: Segmentation fault
> stress/exit-after-int52-to-double.js.default: ERROR: Unexpected exit code:
> 139
> FAIL: stress/exit-after-int52-to-double.js.default

It seems it is a similar to bug159720 .

Can't we disable this new feature somehow similar to https://trac.webkit.org/changeset/203272 ? I can't debug new and new regressions at a pace you
add them. :-/ And it seems nobody else help maintaining ARM Linux ports ...

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160722/550f6abe/attachment-0001.html>


More information about the webkit-unassigned mailing list