[Webkit-unassigned] [Bug 207572] stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler a flakey failure

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Feb 11 15:23:15 PST 2020


https://bugs.webkit.org/show_bug.cgi?id=207572

--- Comment #1 from Alexey Proskuryakov <ap at webkit.org> ---
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: Timed out after 587.000000 sec seconds!
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 1   0x10ff662b9 WTFCrash
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 2   0x10e7fd057 timeoutCheckCallback(JSC::VM&)
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 3   0x11194fb00 JSC::VMTraps::handleTraps(JSC::JSGlobalObject*, JSC::CallFrame*, JSC::VMTraps::Mask)
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 4   0x111276626 JSC::VM::handleTraps(JSC::JSGlobalObject*, JSC::CallFrame*, JSC::VMTraps::Mask)
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 5   0x111276db4 JSC::Interpreter::executeCall(JSC::JSGlobalObject*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&)
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 6   0x111592dec JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&)
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 7   0x11179a0ab JSC::JSValue JSC::callToPrimitiveFunction<(JSC::TypeHintMode)1>(JSC::JSGlobalObject*, JSC::JSObject const*, JSC::PropertyName, JSC::PreferredPrimitiveType)
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 8   0x11179994f JSC::JSObject::ordinaryToPrimitive(JSC::JSGlobalObject*, JSC::PreferredPrimitiveType) const
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 9   0x111783c53 JSC::JSObject::defaultValue(JSC::JSObject const*, JSC::JSGlobalObject*, JSC::PreferredPrimitiveType)
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 10  0x11179a460 JSC::JSObject::toPrimitive(JSC::JSGlobalObject*, JSC::PreferredPrimitiveType) const
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 11  0x1116d9463 JSC::JSCell::toPrimitive(JSC::JSGlobalObject*, JSC::PreferredPrimitiveType) const
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 12  0x1104b4138 JSC::JSValue::toPrimitive(JSC::JSGlobalObject*, JSC::PreferredPrimitiveType) const
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 13  0x11131c423 JSC::JSValue::equalSlowCaseInline(JSC::JSGlobalObject*, JSC::JSValue, JSC::JSValue)
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 14  0x11130a4c3 operationCompareEq
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 15  0x5159e7400ed9
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 16  0x110462f03 vmEntryToJavaScript
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 17  0x111276887 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*)
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 18  0x111275f0c JSC::Interpreter::executeProgram(JSC::SourceCode const&, JSC::JSGlobalObject*, JSC::JSObject*)
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 19  0x1115f3e9c JSC::evaluate(JSC::JSGlobalObject*, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&)
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 20  0x10e8342df runWithOptions(GlobalObject*, CommandLine&, bool&)
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 21  0x10e805a1a jscmain(int, char**)::$_6::operator()(JSC::VM&, GlobalObject*, bool&) const
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 22  0x10e7e0d6b int runJSC<jscmain(int, char**)::$_6>(CommandLine const&, bool, jscmain(int, char**)::$_6 const&)
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 23  0x10e7df7f8 jscmain(int, char**)
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 24  0x10e7df5ce main
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 25  0x7fff719c87fd start
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 26  0x16
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: test_script_11672: line 2:  4976 Segmentation fault: 11  ( "$@" ../../.vm/JavaScriptCore.framework/Helpers/jsc --useFTLJIT\=false --useFunctionDotArguments\=true --validateExceptionChecks\=true --useDollarVM\=true --maxPerThreadStackUsage\=1572864 --exceptionStackTraceLimit\=0 --defaultErrorStackTraceLimit\=0 --forceRAMSize\=1000000 --forceDebuggerBytecodeGeneration\=1 --useZombieMode\=1 --jitPolicyScale\=0 --collectContinuously\=1 --useConcurrentJIT\=0 --validateGraph\=true --useSamplingProfiler\=true --airForceIRCAllocator\=true --useFTLJIT\=true --useConcurrentJIT\=false --thresholdForJITAfterWarmUp\=100 --scribbleFreeCells\=true dfg-to-string-on-string-object-does-not-gc.js )

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200211/83157ad6/attachment-0001.htm>


More information about the webkit-unassigned mailing list