[Webkit-unassigned] [Bug 216406] REGRESSION(r266770): construct-return-early-from-infinite-loop-for-fuzzer.js loops on x86_64 llint

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Sep 14 07:28:23 PDT 2020


https://bugs.webkit.org/show_bug.cgi?id=216406

Guillaume Emont <guijemont at igalia.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |guijemont at igalia.com

--- Comment #1 from Guillaume Emont <guijemont at igalia.com> ---
(In reply to Michael Catanzaro from comment #0)
> The new construct-return-early-from-infinite-loop-for-fuzzer.js test added
> in r266770 "[JSC] returnEarlyFromInfiniteLoopsForFuzzing should return
> object" loops forever on llint, but only on x86_64. Other architectures
> seems to be fine. (So this doesn't affect any architectures that commonly
> use llint, but x86_64 is great to have working as a baseline to see when
> problems occur only on a particular architecture.)

Did you mean when using CLoop (JIT disabled at compile time)? Or with LLInt compiled with the x86_64 backend (default) and disabling higher tiers at runtime? FWIW x86_64 does use LLInt as its first tier by default.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200914/6fe57c50/attachment-0001.htm>


More information about the webkit-unassigned mailing list