[Webkit-unassigned] [Bug 155037] Octane typescript benchmark test crashes sometimes

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=155037

Carlos Alberto Lopez Perez <clopez at igalia.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|[GTK] Octane typescript     |Octane typescript benchmark
                   |benchmark test crashes      |test crashes sometimes
                   |sometimes                   |

--- Comment #5 from Carlos Alberto Lopez Perez <clopez at igalia.com> ---
This is not GTK specific. I was able to make the Mac port also crash.

- Debug build on r197699 on MacOS 10.10.5 and running the minibrowser via "Tools/Scripts/run-minibrowser --debug" or running safari via "Tools/Scripts/run-safari --debug". After loading http://people.igalia.com/clopez/wkbug/155037/octane in the browser I get a crash in few minutes. 

The assert is the same:



ASSERTION FAILED: value.isUndefinedOrNull()
/Users/clopez/webkit/Source/JavaScriptCore/bytecode/SpeculatedType.cpp(404) : SpeculatedType JSC::speculationFromValue(JSC::JSValue)
1   0x10955dca0 WTFCrash
2   0x109394f5c JSC::speculationFromValue(JSC::JSValue)
3   0x1088ab4d4 JSC::ValueProfileBase<1u>::computeUpdatedPrediction(JSC::ConcurrentJITLocker const&)
4   0x10889ede5 JSC::CodeBlock::updateAllPredictionsAndCountLiveness(unsigned int&, unsigned int&)
5   0x10889ee8d JSC::CodeBlock::updateAllValueProfilePredictions()
6   0x10889c979 JSC::CodeBlock::updateAllPredictions()
7   0x108fb9a4f operationOptimize
8   0x25b845d8e351
9   0x25b845c2813f
10  0x25b845f71413
11  0x25b845c29680
12  0x25b845f71413
13  0x25b84620f2e4
14  0x25b845a0265d
15  0x25b84621373e
16  0x25b846212128
17  0x25b845a0265d
18  0x25b845f387b9
19  0x25b845bf56a6
20  0x25b845d46a33
21  0x25b8461ff3bc
22  0x25b845a7588a
23  0x25b845a8e7e8
24  0x25b846208e1c
25  0x25b845a0265d
26  0x25b845f7b50b
27  0x25b846207b5a
28  0x25b845a0265d
29  0x10918eb8b llint_entry
30  0x10918eb8b llint_entry
31  0x10918ec05 llint_entry

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160307/37e0dd0a/attachment.html>