[Webkit-unassigned] [Bug 201138] New: testmasm: save r6 in JIT'ed code on ARM_THUMB2

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Aug 26 06:50:59 PDT 2019


https://bugs.webkit.org/show_bug.cgi?id=201138

            Bug ID: 201138
           Summary: testmasm: save r6 in JIT'ed code on ARM_THUMB2
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Tools / Tests
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: guijemont at igalia.com

MacroAssemblerArmv7 uses r6 as a temporary register, and it is a callee-saved register. The JITs use AssemblyHelpers::emitSaveCalleeSaves() and friends to save callee-saved registers, but there is no such mechanism in testmasm, which seems to make the assumption that the macroassembler does not use callee-saved registers (which I guess is true for all other architectures, but not for Armv7).

This issue means that testmasm crashes on Armv7 since code generated by gcc uses r6, and it gets modified by JIT'ed code.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190826/b781adb2/attachment.html>


More information about the webkit-unassigned mailing list