[Webkit-unassigned] [Bug 278132] New: REGRESSION(281900 at main?): [ macOS Debug ] workers/wasm-references.html is a flaky crash

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=278132

            Bug ID: 278132
           Summary: REGRESSION(281900 at main?): [ macOS Debug ]
                    workers/wasm-references.html is a flaky crash
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: darbinyan at apple.com

The following test is flaky crash on Sonoma Debug starting from 281900 at main.

workers/wasm-references.html


Crash logs:
stderr:
ASSERTION FAILED: ((opcode & (1 << 24)) - 1) == opcode
./wasm/WasmOpcodeOrigin.h(56) : JSC::Wasm::OpcodeOrigin::OpcodeOrigin(JSC::Wasm::OpType, uint32_t, size_t)
1   0x11db53b5c JSC::Wasm::OpcodeOrigin::OpcodeOrigin(JSC::Wasm::OpType, unsigned int, unsigned long)
2   0x11db383e8 JSC::Wasm::OpcodeOrigin::OpcodeOrigin(JSC::Wasm::OpType, unsigned int, unsigned long)
3   0x11db11bb0 JSC::Wasm::OMGIRGenerator::origin()
4   0x11db17a50 JSC::Wasm::OMGIRGenerator::addTableFill(unsigned int, JSC::B3::Variable*, JSC::B3::Variable*, JSC::B3::Variable*)
5   0x11dbb1c8c JSC::Wasm::FunctionParser<JSC::Wasm::OMGIRGenerator>::parseExpression()
6   0x11dba309c JSC::Wasm::FunctionParser<JSC::Wasm::OMGIRGenerator>::parseBody()
7   0x11db3460c JSC::Wasm::FunctionParser<JSC::Wasm::OMGIRGenerator>::parse()
8   0x11db38770 JSC::Wasm::parseAndCompileOMG(JSC::Wasm::CompilationContext&, JSC::Wasm::OptimizingJITCallee&, JSC::Wasm::FunctionData const&, JSC::Wasm::TypeDefinition const&, WTF::Vector<JSC::Wasm::UnlinkedWasmToWasmCall, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, JSC::Wasm::CalleeGroup&, JSC::Wasm::ModuleInformation const&, JSC::MemoryMode, JSC::Wasm::CompilationMode, unsigned int, std::__1::optional<bool>, unsigned int, JSC::Wasm::TierUpCount*)
9   0x11dbfa844 JSC::Wasm::OMGPlan::work(JSC::Wasm::Plan::CompilationEffort)
10  0x11dc90690 JSC::Wasm::Worklist::Thread::work()
11  0x11b689450 WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0::operator()() const
12  0x11b689038 WTF::Detail::CallableWrapper<WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0, void>::call()
13  0x11b6a37f8 WTF::Function<void ()>::operator()() const
14  0x11b7c7fb0 WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*)
15  0x11b7d478c WTF::wtfThreadEntryPoint(void*)
16  0x18aa5bfa8 _pthread_start
17  0x18aa56da0 thread_start

History:
https://results.webkit.org/?platform=ios&platform=mac&style=debug&suite=layout-tests&test=workers%2Fwasm-references.html

Test Result: 
https://build.webkit.org/results/Apple-Ventura-Debug-AppleSilicon-WK1-Tests/281900@main%20(7127)/results.html

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240814/9037019f/attachment.htm>