[Webkit-unassigned] [Bug 174900] New: ASSERTION FAILED: candidate->op() == PhantomCreateRest || candidate->op() == PhantomDirectArguments || candidate->op() == PhantomClonedArguments || candidate->op() == PhantomSpread || candidate->op() == PhantomNewArrayWithSpread

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=174900

            Bug ID: 174900
           Summary: ASSERTION FAILED: candidate->op() == PhantomCreateRest
                    || candidate->op() == PhantomDirectArguments ||
                    candidate->op() == PhantomClonedArguments ||
                    candidate->op() == PhantomSpread || candidate->op() ==
                    PhantomNewArrayWithSpread
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mark.lam at apple.com

Debug build JSC tests are failing:
** The following JSC stress test failures have been introduced:
        microbenchmarks/deltablue-varargs.js.ftl-eager
        microbenchmarks/deltablue-varargs.js.ftl-eager-no-cjit
        microbenchmarks/deltablue-varargs.js.ftl-eager-no-cjit-b3o1

The commit range that introduced this failure is: 219725:219732.
The likely culprit (given the assertion failure) is https://trac.webkit.org/r219727.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170727/63064c25/attachment.html>