[Webkit-unassigned] [Bug 242294] REGRESSION (iOS 16): RELEASE_ASSERT in slow_path_wasm_loop_osr

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=242294

--- Comment #4 from Kurt Revis <krevis at figma.com> ---
Test case: 
https://krevis-figma.github.io/webkit-jsc-ios16-regression/loop-bad.html

The failure was caused by this WebKit commit:
https://github.com/WebKit/WebKit/commit/e38fc8815d7063e888a1eb3ecb2c7c93ba3fbe84

for bug 234587 “Allow loop tier up to the Air tier”:
https://bugs.webkit.org/show_bug.cgi?id=234587

More notes in the page above.

Attached 3 potential patches:

1-add-regression-test.patch: Adds a regression test that covers this case.

2-add-stress-tests.patch: Adds code to `run-jsc-stress-tests` to cover the fallback-to-B3 code path.

3-fix.patch: A potential fix. Probably not correct style, but it works.

This bug makes figma.com completely unusable in iOS and iPadOS 16. We've had > 100 customer complaints, so far. We would love to see it fixed as soon as possible, certainly before iOS 16 ships.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220704/b1be31c8/attachment-0001.htm>