[Webkit-unassigned] [Bug 162388] New: DFG Worklist Worker Thread crash in CFGSimplificationPhase

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=162388

            Bug ID: 162388
           Summary: DFG Worklist Worker Thread crash in
                    CFGSimplificationPhase
    Classification: Unclassified
           Product: WebKit
           Version: Safari Technology Preview
          Hardware: Unspecified
                OS: OS X 10.11
            Status: NEW
          Severity: Critical
          Priority: P2
         Component: WebCore JavaScript
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: tolaiti2 at gmail.com

Created attachment 289556
  --> https://bugs.webkit.org/attachment.cgi?id=289556&action=review
Stack trace of the crash

After a while, the browser reloads the page and says "A problem occurred with this web page, so it was reloaded.".

Browser: Release 13 (Safari 10.0, WebKit 11603.1.5)

Also crashes Safari on iOS 10.

Steps to Reproduce:
1. Unzip example.zip contents (index.html and all.js)
2. Open index.html in Safari (also available at http://www.feriko.fi/example/ )
3. Wait for a few seconds. 

Expected Results:
No crash. The JavaScript code writes "fuu" in the console indefinitely. 

Actual Results:
The browser reloads the page with the message "A problem occurred with this web page, so it was reloaded."

Notes:
The JavaScript code is obtained by compiling a Haskell code to JavaScript using ghcjs . The related issue is reported at https://github.com/ghcjs/ghcjs/issues/518

See the stack trace of the crash (crash.txt).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160922/d0eeb4f7/attachment.html>