[Webkit-unassigned] [Bug 273048] [Mac WK1, GTK, WPE, Win] ASSERTION FAILED: v <= 0 under MacroAssemblerX86Common::sub32

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=273048

--- Comment #2 from Fujii Hironori <Hironori.Fujii at sony.com> ---
https://build.webkit.org/results/WinCairo-64-bit-Debug-Tests/277774@main%20(22418)/animations/3d/transform-origin-vs-functions-crash-log.txt

ASSERTION FAILED: v <= 0
C:\BW\WinCairo-64-bit-Debug-Build\build\WebKitBuild\Debug\WTF\Headers\wtf/MathExtras.h(787) : negate
1   00007FF8F53D1CA9 WTFCrash
2   00007FF8E4E4D22D WTFCrashWithInfo
3   00007FF8E5CC53BB WTF::negate<int>
4   00007FF8E6BE83A8 JSC::MacroAssemblerX86Common::sub32
5   00007FF8E6BDE08A JSC::MacroAssembler::sub32
6   00007FF8E6BD2E2D JSC::Yarr::YarrGenerator<JSC::Yarr::YarrJITDefaultRegisters>::generate
7   00007FF8E6BACC84 JSC::Yarr::YarrGenerator<JSC::Yarr::YarrJITDefaultRegisters>::compile
8   00007FF8E6BA90EF JSC::Yarr::jitCompile
9   00007FF8E66FCD53 JSC::RegExp::compile
10  00007FF8E577CB70 JSC::RegExp::compileIfNecessary
11  00007FF8E67057BA JSC::RegExp::matchInline<WTF::Vector<int,0,WTF::CrashOnOverflow,16,WTF::FastMalloc>,0>
12  00007FF8E66FCFEE JSC::RegExp::match
13  00007FF8E671E224 JSC::RegExpGlobalData::performMatch
14  00007FF8E6718D4D JSC::genericSplit<`lambda at C:\BW\WinCairo-64-bit-Debug-Build\build\Source\JavaScriptCore\runtime\RegExpPrototype.cpp:575:9',`lambda at C:\BW\WinCairo-64-bit-Debug-Build\build\Source\JavaScriptCore\runtime\RegExpPrototype.cpp:580:9'>
15  00007FF8E67182A1 JSC::regExpProtoFuncSplitFast
16  000002130000119E (null)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240421/18331c7b/attachment.htm>