[Webkit-unassigned] [Bug 265742] [Wasm-GC] BBQJIT crashes compiling Wasm GC program with ASSERTION FAILED: !currentLocation.isRegister()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=265742

--- Comment #1 from Asumu Takikawa <asumu at igalia.com> ---
Here's a more minimized repro case:

instantiate(`
  (module
    (type (struct (field (mut i32))))
    (func (result i32)
      (local $19 (ref 0))
      (local $22 i32)
      (local.set $19 (struct.new_default 0))
      (i32.const 1)
      if (result i32)
        (local.get $19)
        (block (result i32)
          (i32.const 1)
          (br 0))
        (struct.set 0 0)
        (i32.const 1)
      else
        (i32.const 0)
      end))
`);

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20231203/873dae28/attachment.htm>