[Webkit-unassigned] [Bug 195165] [JSC]

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=195165

--- Comment #1 from Tomas Popela <tpopela at redhat.com> ---
Core was generated by `./WebKitBuild/Debug/bin/jsc JSTests/stress/put-by-id-flags.js '.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  JSC::LLInt::CLoop::execute (entryOpcodeID=JSC::llint_vm_entry_to_javascript, executableAddress=0x7fffa2497c30 <JSC::LLInt::CLoop::execute(JSC::OpcodeID, void*, JSC::VM*, JSC::ProtoCallFrame*, bool)+23080>, vm=0x7fff9e7d0010, protoCallFrame=0x7ffff404bd20, isInitializationPass=false)
    at /home/tpopela/WebKit/WebKitBuild/Debug/DerivedSources/JavaScriptCore/LLIntAssembly.h:6092
6092        t2 = *CAST<int64_t*>(t2.i8p() + 32);                     // /home/tpopela/WebKit/Source/JavaScriptCore/llint/LowLevelInterpreter64.asm:1368
Missing separate debuginfos, use: dnf debuginfo-install glibc-2.27.9000-16.fc29.ppc64 libgcc-8.1.1-1.fc29.ppc64 libicu-60.2-3.fc29.ppc64 libstdc++-8.1.1-1.fc29.ppc64
(gdb) bt
#0  JSC::LLInt::CLoop::execute (entryOpcodeID=JSC::llint_vm_entry_to_javascript, executableAddress=0x7fffa2497c30 <JSC::LLInt::CLoop::execute(JSC::OpcodeID, void*, JSC::VM*, JSC::ProtoCallFrame*, bool)+23080>, vm=0x7fff9e7d0010, protoCallFrame=0x7ffff404bd20, isInitializationPass=false)
    at /home/tpopela/WebKit/WebKitBuild/Debug/DerivedSources/JavaScriptCore/LLIntAssembly.h:6092
#1  0x00007fffa25640e0 in JSC::vmEntryToJavaScript (executableAddress=0x7fffa2497c30 <JSC::LLInt::CLoop::execute(JSC::OpcodeID, void*, JSC::VM*, JSC::ProtoCallFrame*, bool)+23080>, vm=0x7fff9e7d0010, protoCallFrame=0x7ffff404bd20) at /home/tpopela/WebKit/Source/JavaScriptCore/llint/LLIntThunks.cpp:108
#2  0x00007fffa2475b04 in JSC::JITCode::execute (this=0x10002417b70, vm=0x7fff9e7d0010, protoCallFrame=0x7ffff404bd20) at /home/tpopela/WebKit/Source/JavaScriptCore/jit/JITCodeInlines.h:38
#3  0x00007fffa246777c in JSC::Interpreter::executeProgram (this=0x100023d02f0, source=..., callFrame=0x100023f0048, thisObj=0x7fff9e260280) at /home/tpopela/WebKit/Source/JavaScriptCore/interpreter/Interpreter.cpp:834
#4  0x00007fffa27be880 in JSC::evaluate (exec=0x100023f0048, source=..., thisValue=..., returnedException=...) at /home/tpopela/WebKit/Source/JavaScriptCore/runtime/Completion.cpp:141
#5  0x000000001005d7e8 in runWithOptions (globalObject=0x100023f0000, options=..., success=@0x7ffff404cb48: true) at /home/tpopela/WebKit/Source/JavaScriptCore/jsc.cpp:2586
#6  0x000000001005eea0 in <lambda(JSC::VM&, GlobalObject*, bool&)>::operator()(JSC::VM &, GlobalObject *, bool &) const (__closure=0x7ffff404cc08, vm=..., globalObject=0x100023f0000, success=@0x7ffff404cb48: true) at /home/tpopela/WebKit/Source/JavaScriptCore/jsc.cpp:3052
#7  0x00000000100608c0 in runJSC<jscmain(int, char**)::<lambda(JSC::VM&, GlobalObject*, bool&)> >(const CommandLine &, bool, const <lambda(JSC::VM&, GlobalObject*, bool&)> &) (options=..., isWorker=false, func=...) at /home/tpopela/WebKit/Source/JavaScriptCore/jsc.cpp:2910
#8  0x000000001005ef74 in jscmain (argc=2, argv=0x7ffff404d158) at /home/tpopela/WebKit/Source/JavaScriptCore/jsc.cpp:3045
#9  0x000000001005bf78 in main (argc=2, argv=0x7ffff404d158) at /home/tpopela/WebKit/Source/JavaScriptCore/jsc.cpp:2410

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190228/07919c42/attachment.html>