[Webkit-unassigned] [Bug 216214] DFG ASSERTION FAILED: Value not defined in FTLLowerDFGToB3.cpp

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=216214

Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |fpizlo at apple.com,
                   |                            |mark.lam at apple.com,
                   |                            |sbarati at apple.com,
                   |                            |webkit-bug-importer at group.a
                   |                            |pple.com
                 OS|Linux                       |Unspecified

--- Comment #1 from Alexey Proskuryakov <ap at webkit.org> ---
I can reproduce, but get a different assertion:

ASSERTION FAILED: !edge->isPhantomAllocation()
./dfg/DFGValidate.cpp(946) : auto JSC::DFG::(anonymous namespace)::Validate::validateSSA()::(anonymous class)::operator()(const JSC::DFG::Edge &) const
1   0x111e8ef79 WTFCrash
2   0x112f537f1 JSC::DFG::(anonymous namespace)::Validate::validateSSA()::'lambda'(JSC::DFG::Edge const&)::operator()(JSC::DFG::Edge const&) const
3   0x112f53724 void JSC::DFG::Graph::doToChildren<JSC::DFG::(anonymous namespace)::Validate::validateSSA()::'lambda'(JSC::DFG::Edge const&)>(JSC::DFG::Node*, JSC::DFG::(anonymous namespace)::Validate::validateSSA()::'lambda'(JSC::DFG::Edge const&) const&)::ForwardingFunc::operator()(JSC::DFG::Node*, JSC::DFG::Edge&) const
4   0x112f536af void JSC::DFG::Graph::doToChildrenWithNode<void JSC::DFG::Graph::doToChildren<JSC::DFG::(anonymous namespace)::Validate::validateSSA()::'lambda'(JSC::DFG::Edge const&)>(JSC::DFG::Node*, JSC::DFG::(anonymous namespace)::Validate::validateSSA()::'lambda'(JSC::DFG::Edge const&) const&)::ForwardingFunc>(JSC::DFG::Node*, JSC::DFG::(anonymous namespace)::Validate::validateSSA()::'lambda'(JSC::DFG::Edge const&) const&)
5   0x112f53518 void JSC::DFG::Graph::doToChildren<JSC::DFG::(anonymous namespace)::Validate::validateSSA()::'lambda'(JSC::DFG::Edge const&)>(JSC::DFG::Node*, JSC::DFG::(anonymous namespace)::Validate::validateSSA()::'lambda'(JSC::DFG::Edge const&) const&)
6   0x112f50bff JSC::DFG::(anonymous namespace)::Validate::validateSSA()
7   0x112f4a4b7 JSC::DFG::(anonymous namespace)::Validate::validate()
8   0x112f4655f JSC::DFG::validate(JSC::DFG::Graph&, JSC::DFG::GraphDumpMode, WTF::CString)
9   0x112ed0173 JSC::DFG::(anonymous namespace)::dumpAndVerifyGraph(JSC::DFG::Graph&, char const*, bool)
10  0x112ecf6ae JSC::DFG::Plan::compileInThreadImpl()
11  0x112eca818 JSC::DFG::Plan::compileInThread(JSC::DFG::ThreadData*)
12  0x112f86b9e JSC::DFG::Worklist::ThreadBody::work()
13  0x111ea4c93 WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0::operator()() const
14  0x111ea487e WTF::Detail::CallableWrapper<WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0, void>::call()
15  0x111eb6ac2 WTF::Function<void ()>::operator()() const
16  0x111f64f28 WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*)
17  0x111f70e88 WTF::wtfThreadEntryPoint(void*)
18  0x7fff6a51a109 _pthread_start
19  0x7fff6a515b8b thread_start

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200908/81129786/attachment.htm>