[Webkit-unassigned] [Bug 155037] [GTK] Octane typescript benchmark test crashes sometimes

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=155037

--- Comment #1 from Carlos Alberto Lopez Perez <clopez at igalia.com> ---
I managed to make it crash also with the Debug build, gave an assert:

ASSERTION FAILED: value.isUndefinedOrNull()
../../Source/JavaScriptCore/bytecode/SpeculatedType.cpp(404) : SpeculatedType JSC::speculationFromValue(JSC::JSValue)
1   0x7f7c8bd11750 /home/clopez/webkit/webkit/WebKitBuild/Debug/lib/libjavascriptcoregtk-4.0.so.18(WTFCrash+0x20) [0x7f7c8bd11750]
2   0x7f7c8b1c8acc /home/clopez/webkit/webkit/WebKitBuild/Debug/lib/libjavascriptcoregtk-4.0.so.18(_ZN3JSC20speculationFromValueENS_7JSValueE+0x17c) [0x7f7c8b1c8acc]
3   0x7f7c8b1644f4 /home/clopez/webkit/webkit/WebKitBuild/Debug/lib/libjavascriptcoregtk-4.0.so.18(_ZN3JSC16ValueProfileBaseILj1EE24computeUpdatedPredictionERKNS_19ConcurrentJITLockerE+0x84) [0x7f7c8b1644f4]
4   0x7f7c8b155f60 /home/clopez/webkit/webkit/WebKitBuild/Debug/lib/libjavascriptcoregtk-4.0.so.18(_ZN3JSC9CodeBlock36updateAllPredictionsAndCountLivenessERjS1_+0x100) [0x7f7c8b155f60]
5   0x7f7c8b15602d /home/clopez/webkit/webkit/WebKitBuild/Debug/lib/libjavascriptcoregtk-4.0.so.18(_ZN3JSC9CodeBlock32updateAllValueProfilePredictionsEv+0x1d) [0x7f7c8b15602d]
6   0x7f7c8b153c99 /home/clopez/webkit/webkit/WebKitBuild/Debug/lib/libjavascriptcoregtk-4.0.so.18(_ZN3JSC9CodeBlock20updateAllPredictionsEv+0x19) [0x7f7c8b153c99]
7   0x7f7c8b8504d8 /home/clopez/webkit/webkit/WebKitBuild/Debug/lib/libjavascriptcoregtk-4.0.so.18(+0x1b2f4d8) [0x7f7c8b8504d8]
8   0x7f7c3c0b8c72 [0x7f7c3c0b8c72]


I'm attaching the backtrace for the debug build

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160304/0ed5e10b/attachment.html>