[Webkit-unassigned] [Bug 90344] Reproducible crash in CFGSimplificationPhase::mergeBlocks

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=90344

Saam Barati <sbarati at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |sbarati at apple.com

--- Comment #5 from Saam Barati <sbarati at apple.com> ---
(In reply to Robin Morisset from comment #4)
> I tried reproducing this, and http://www.ebbc.org/ worked without problems.
> Since CFGSimplificationPhase::mergeBlocks was fixed a dozen times since this
> bug was reported, I suspect the bug was fixed.

I believe I fixed this. I think the bug was we were merging a block with itself, hence, infinite loop until we ran out of memory.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20171108/028281b3/attachment.html>