[Webkit-unassigned] [Bug 246930] REGRESSION(255859 at main) dfg/DFGCFAPhase.cpp(240) : JSC::DFG::CFAPhase::performBlockCFA: DFG ASSERTION FAILED: AI-clobberize disagreement; AI says ClobberedStructures while clobberize says (Direct:[SideState], Super:[World])

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=246930

Fujii Hironori <Hironori.Fujii at sony.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ysuzuki at apple.com
            Summary|dfg/DFGCFAPhase.cpp(240) :  |REGRESSION(255859 at main)
                   |JSC::DFG::CFAPhase::perform |dfg/DFGCFAPhase.cpp(240) :
                   |BlockCFA: DFG ASSERTION     |JSC::DFG::CFAPhase::perform
                   |FAILED: AI-clobberize       |BlockCFA: DFG ASSERTION
                   |disagreement; AI says       |FAILED: AI-clobberize
                   |ClobberedStructures while   |disagreement; AI says
                   |clobberize says             |ClobberedStructures while
                   |(Direct:[SideState],        |clobberize says
                   |Super:[World])              |(Direct:[SideState],
                   |                            |Super:[World])

--- Comment #1 from Fujii Hironori <Hironori.Fujii at sony.com> ---
This is a regression between the following revision range:
 255858 at main Good
 255866 at main Bad

255859 at main seems like the culprit.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20221024/304ee4e6/attachment.htm>