[Webkit-unassigned] [Bug 192018] New: ASSERTION FAILED: capacity && isPageAligned(capacity) in JSC::CLoopStack::CLoopStack(JSC::VM&)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=192018

            Bug ID: 192018
           Summary: ASSERTION FAILED: capacity && isPageAligned(capacity)
                    in JSC::CLoopStack::CLoopStack(JSC::VM&)
           Product: WebKit
           Version: Other
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ryanhaddad at apple.com

The following assertion failure is seen on the 32-bit JSC bot:

stress/regress-191579.js.default: ASSERTION FAILED: capacity && isPageAligned(capacity)
stress/regress-191579.js.default: ./interpreter/CLoopStack.cpp(59) : JSC::CLoopStack::CLoopStack(JSC::VM &)
stress/regress-191579.js.default: 1   0x25d77b WTFCrash
stress/regress-191579.js.default: 2   0x25e3a4 WTFCrashWithInfo(int, char const*, char const*, int)
stress/regress-191579.js.default: 3   0x8e0c2c JSC::CLoopStack::CLoopStack(JSC::VM&)
stress/regress-191579.js.default: 4   0x8e1094 JSC::CLoopStack::CLoopStack(JSC::VM&)
stress/regress-191579.js.default: 5   0x8e804e JSC::Interpreter::Interpreter(JSC::VM&)
stress/regress-191579.js.default: 6   0x8e8144 JSC::Interpreter::Interpreter(JSC::VM&)
stress/regress-191579.js.default: 7   0xeb89d1 JSC::VM::VM(JSC::VM::VMType, JSC::HeapType)
stress/regress-191579.js.default: 8   0xebd7d1 JSC::VM::VM(JSC::VM::VMType, JSC::HeapType)
stress/regress-191579.js.default: 9   0xec04db JSC::VM::create(JSC::HeapType)
stress/regress-191579.js.default: 10  0x2207e int runJSC<jscmain(int, char**)::$_3>(CommandLine, bool, jscmain(int, char**)::$_3 const&)
stress/regress-191579.js.default: 11  0x20cb0 jscmain(int, char**)
stress/regress-191579.js.default: 12  0x20bd7 main
stress/regress-191579.js.default: 13  0xa73f4611 start
stress/regress-191579.js.default: test_script_1895: line 2: 36513 Segmentation fault: 11  ( "$@" ../../.vm/JavaScriptCore.framework/Resources/jsc --useFTLJIT\=false --useFunctionDotArguments\=true --validateExceptionChecks\=true --useDollarVM\=true --maxPerThreadStackUsage\=1572864 --maxPerThreadStackUsage\=400000 --useTypeProfiler\=true --exceptionStackTraceLimit\=1 --defaultErrorStackTraceLimit\=1 --useFTLJIT\=true regress-191579.js )
stress/regress-191579.js.default: ERROR: Unexpected exit code: 139

https://build.webkit.org/builders/Apple%20High%20Sierra%2032-bit%20JSC%20%28BuildAndTest%29/builds/2925

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20181127/c2379539/attachment-0001.html>