[Webkit-unassigned] [Bug 280257] New: DFG ASSERTION FAILED
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Tue Sep 24 00:05:25 PDT 2024
https://bugs.webkit.org/show_bug.cgi?id=280257
Bug ID: 280257
Summary: DFG ASSERTION FAILED
Product: WebKit
Version: WebKit Local Build
Hardware: PC
OS: Linux
Status: NEW
Severity: Normal
Priority: P2
Component: JavaScriptCore
Assignee: webkit-unassigned at lists.webkit.org
Reporter: qbtly201 at gmail.com
###### Webkit
dd2f7300b2fa6d90313353ad19ad95d6ed9fb05f
###### Build platform
Ubuntu 22.04.3
###### Build steps
```sh
./Tools/Scripts/build-jsc --jsc-only --build-dir=release --cmakeargs="-DENABLE_STATIC_JSC=ON"
```
###### Test case
```sh
function v9() {
const v14 = {};
const v15 = {};
v14.b = v15;
for (const v18 of "a")
v14.b = v15;
}
for (let v27 = 0; v27 < 100000; v27++) {
v9();
}
```
###### Execution steps
```sh
./jsc poc.js
```
###### Output
(gdb) r /js/poc1.js
Starting program: /JSC/release/JSCOnly/Release/bin/jsc /js/poc1.js
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7fffed8fc640 (LWP 2395887)]
[New Thread 0x7fffa90f9640 (LWP 2395888)]
[New Thread 0x7fffa88f8640 (LWP 2395889)]
[New Thread 0x7fffa80f7640 (LWP 2395890)]
DFG ASSERTION FAILED: Value not defined: 26
/JSC/Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp(21330) : JSC::FTL::LValue JSC::FTL::(anonymous namespace)::LowerDFGToB3::lowJSValue(JSC::DFG::Edge, JSC::DFG::OperandSpeculationMode)
While handling node D at 79
Graph at time of failure:
62: DFG for v9#<no-hash>:[0x7fffaa5387c0->0x7fffaa538220->0x7fffaa50e200, DFGFunctionCall, 142 (DidTryToEnterInLoop)]:
62: Fixpoint state: FixpointConverged; Form: SSA; Unification state: GloballyUnified; Ref count state: ExactRefCount
62: Argument formats for entrypoint index: 0 : FlushedJSValue
0 62: Block #0 (bc#0): (OSR target)
0 62: Execution count: 1.000000
0 62: Predecessors:
0 62: Successors: #1
0 62: Dominated by: #0
0 62: Dominates: #0 #1 #2 #3 #4 #5 #6
0 62: Dominance Frontier:
0 62: Iterated Dominance Frontier:
0 62: Backwards dominates by: #root #0 #1 #3
0 62: Backwards dominates: #0
0 62: Control equivalent to: #0 #1 #3
0 62: States: StructuresAreWatched
0 62: Live:
0 62: Values:
0 0 62: D at 133:< 14:-> JSConstant(JS|PureInt, Other, Undefined, bc#0, ExitValid)
1 0 62: D at 122:< 1:-> JSConstant(JS|PureInt, NonBoolInt32, Int32: 1927, bc#0, ExitValid)
2 0 62: D at 123:< 1:-> JSConstant(JS|PureInt, OtherCell, Weak:Structure: %Cl:Object, StructureID: 16752, bc#0, ExitValid)
3 0 62: D at 124:< 1:-> JSConstant(JS|PureInt, OtherCell, Weak:Structure: %Ab:Object, StructureID: 16752, bc#0, ExitValid)
4 0 62: D at 125:< 1:-> JSConstant(JS|PureInt, OtherCell, Weak:Structure: %BP:Object, StructureID: 16752, bc#0, ExitValid)
5 0 62: D at 41:< 3:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Function, Weak:Object: 0x7fffaa47ce60 with butterfly 0x7fffaa470d28(base=0x7fffaa470d00) (Structure %BG:Function), StructureID: 22800, bc#0, ExitValid)
6 0 62: D at 1:< 1:-> JSConstant(JS|PureInt, Other, Undefined, bc#0, ExitValid)
7 0 62: D at 70:< 3:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Function, Weak:Object: 0x7fffaa47cf80 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Av:Function), StructureID: 21904, bc#0, ExitValid)
8 0 62: D at 119:< 1:-> JSConstant(JS|PureNum, StringIdent, Weak:String (atomic),8Bit:(1),length:(0): , StructureID: 16976, bc#0, ExitValid)
9 0 62: D at 35:< 4:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, StringIdent, Strong:String (atomic),8Bit:(1),length:(1): a, StructureID: 16976, bc#0, ExitValid)
10 0 62: D at 80:<!0:-> ExitOK(MustGen, W:SideState, bc#0, ExitValid)
11 0 62: D at 52:<!0:-> InitializeEntrypointArguments(MustGen, W:SideState, ClobbersExit, bc#0, ExitValid)
12 0 62: D at 96:<!0:-> ExitOK(MustGen, W:SideState, bc#0, ExitValid)
13 0 62: D at 77:<!0:-> KillStack(MustGen, loc0, W:Stack(loc0), ClobbersExit, bc#0, ExitValid)
14 0 62: D at 2:<!0:-> ZombieHint(Check:Untyped:D at 133, MustGen, loc0, W:SideState, ClobbersExit, bc#0, ExitInvalid)
15 0 62: D at 73:<!0:-> KillStack(MustGen, loc1, W:Stack(loc1), ClobbersExit, bc#0, ExitInvalid)
16 0 62: D at 4:<!0:-> ZombieHint(Check:Untyped:D at 133, MustGen, loc1, W:SideState, ClobbersExit, bc#0, ExitInvalid)
17 0 62: D at 68:<!0:-> KillStack(MustGen, loc2, W:Stack(loc2), ClobbersExit, bc#0, ExitInvalid)
18 0 62: D at 6:<!0:-> ZombieHint(Check:Untyped:D at 133, MustGen, loc2, W:SideState, ClobbersExit, bc#0, ExitInvalid)
19 0 62: D at 66:<!0:-> KillStack(MustGen, loc3, W:Stack(loc3), ClobbersExit, bc#0, ExitInvalid)
20 0 62: D at 8:<!0:-> ZombieHint(Check:Untyped:D at 133, MustGen, loc3, W:SideState, ClobbersExit, bc#0, ExitInvalid)
21 0 62: D at 65:<!0:-> KillStack(MustGen, loc4, W:Stack(loc4), ClobbersExit, bc#0, ExitInvalid)
22 0 62: D at 10:<!0:-> ZombieHint(Check:Untyped:D at 133, MustGen, loc4, W:SideState, ClobbersExit, bc#0, ExitInvalid)
23 0 62: D at 102:<!0:-> KillStack(MustGen, loc4, W:Stack(loc4), ClobbersExit, bc#0, ExitInvalid)
24 0 62: D at 14:<!0:-> ZombieHint(Check:Untyped:D at 133, MustGen, loc4, W:SideState, ClobbersExit, bc#0, ExitInvalid)
25 0 62: D at 15:<!0:-> ExitOK(MustGen, W:SideState, bc#0, ExitValid)
26 0 62: D at 16:<!0:-> InvalidationPoint(MustGen, W:SideState, Exits, bc#0, ExitValid)
27 0 62: D at 64:<!0:-> KillStack(MustGen, loc5, W:Stack(loc5), ClobbersExit, bc#1, ExitValid)
28 0 62: D at 19:<!0:-> ZombieHint(Check:Untyped:D at 133, MustGen, loc5, W:SideState, ClobbersExit, bc#1, ExitInvalid)
29 0 62: D at 103:<!0:-> KillStack(MustGen, loc6, W:Stack(loc6), ClobbersExit, bc#4, ExitValid)
30 0 62: D at 21:<!0:-> ZombieHint(Check:Untyped:D at 133, MustGen, loc6, W:SideState, ClobbersExit, bc#4, ExitInvalid)
31 0 62: D at 23:<!7:-> PhantomNewObject(JS|MustGen|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Final, R:HeapObjectCount, W:HeapObjectCount, bc#7, ExitValid)
32 0 62: D at 127:<!0:-> PutHint(Check:Untyped:D at 23, Check:Untyped:Kill:D at 122, MustGen, NamedPropertyPLoc(0), W:SideState, ClobbersExit, bc#7, ExitValid)
33 0 62: D at 128:<!0:-> PutHint(Check:Untyped:D at 23, Check:Untyped:Kill:D at 123, MustGen, StructurePLoc(0), W:SideState, ClobbersExit, bc#7, ExitInvalid)
34 0 62: D at 129:<!0:-> ExitOK(MustGen, W:SideState, bc#7, ExitValid)
35 0 62: D at 59:<!0:-> KillStack(MustGen, loc5, W:Stack(loc5), ClobbersExit, bc#7, ExitValid)
36 0 62: D at 24:<!0:-> MovHint(Check:Untyped:D at 23, MustGen, loc5, W:SideState, ClobbersExit, bc#7, ExitInvalid)
37 0 62: D at 26:<!6:-> PhantomNewObject(JS|MustGen|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Final, R:HeapObjectCount, W:HeapObjectCount, bc#11, ExitValid)
38 0 62: D at 130:<!0:-> PutHint(Check:Untyped:D at 26, Check:Untyped:Kill:D at 124, MustGen, StructurePLoc(0), W:SideState, ClobbersExit, bc#11, ExitValid)
39 0 62: D at 131:<!0:-> ExitOK(MustGen, W:SideState, bc#11, ExitValid)
40 0 62: D at 60:<!0:-> KillStack(MustGen, loc6, W:Stack(loc6), ClobbersExit, bc#11, ExitValid)
41 0 62: D at 27:<!0:-> MovHint(Check:Untyped:D at 26, MustGen, loc6, W:SideState, ClobbersExit, bc#11, ExitInvalid)
42 0 62: D at 132:<!0:-> PutHint(Check:Untyped:D at 23, Check:Untyped:D at 26, MustGen, NamedPropertyPLoc(0), W:SideState, ClobbersExit, bc#15, ExitValid)
43 0 62: D at 86:<!0:-> PutHint(Check:Untyped:D at 23, Check:Untyped:Kill:D at 125, MustGen, StructurePLoc(0), W:SideState, ClobbersExit, bc#15, ExitInvalid)
44 0 62: D at 61:<!0:-> KillStack(MustGen, loc7, W:Stack(loc7), ClobbersExit, bc#21, ExitValid)
45 0 62: D at 33:<!0:-> ZombieHint(Check:Untyped:D at 133, MustGen, loc7, W:SideState, ClobbersExit, bc#21, ExitInvalid)
46 0 62: D at 62:<!0:-> KillStack(MustGen, loc8, W:Stack(loc8), ClobbersExit, bc#24, ExitValid)
47 0 62: D at 36:<!0:-> MovHint(Check:Untyped:D at 35, MustGen, loc8, W:SideState, ClobbersExit, bc#24, ExitInvalid)
48 0 62: D at 38:<!0:-> FilterGetByStatus(Check:Untyped:D at 35, MustGen, (Simple, <id='uid:(Symbol.iterator)', [0x7ffe00004250:[0x4250/16976, string, (0/0, 0/0){}, NonArray, Unknown, Leaf (Watched)]], [<Object: 0x7fffec0317c8 with butterfly 0x7fffaa5106a8(base=0x7fffaa5104a0) (Structure 0x7ffe00007270:[0x7270/29296, String, (0/0, 35/64){toString:64, valueOf:65, charAt:66, charCodeAt:67, codePointAt:68, indexOf:69, lastIndexOf:70, replaceUsingRegExp:71, replaceUsingStringSearch:72, replaceAllUsingStringSearch:73, slice:74, substr:75, substring:76, toLowerCase:77, toUpperCase:78, localeCompare:79, toLocaleLowerCase:80, toLocaleUpperCase:81, trim:82, startsWith:83, endsWith:84, includes:85, normalize:86, charCodeAt:87, at:88, trimStart:89, trimLeft:90, trimEnd:91, trimRight:92, Symbol.iterator:93, substr:94, endsWith:95, isWellFormed:96, toWellFormed:97, constructor:98}, NonArray, BecomePrototype, Proto:0x7fffec018848, Leaf (Watched)]), StructureID: 29296: Presence of Symbol.iterator at 93 with attributes 4>], viaGlobalProxy = false, offset = 93>, seenInJIT = true), W:SideState, bc#27, ExitValid)
49 0 62: D at 63:<!0:-> KillStack(MustGen, loc11, W:Stack(loc11), ClobbersExit, bc#27, ExitValid)
50 0 62: D at 42:<!0:-> MovHint(Check:Untyped:D at 41, MustGen, loc11, W:SideState, ClobbersExit, bc#27, ExitInvalid)
51 0 62: D at 89:<!0:-> KillStack(MustGen, loc12, W:Stack(loc12), ClobbersExit, bc#33, ExitValid)
52 0 62: D at 44:<!0:-> MovHint(Check:Untyped:D at 35, MustGen, loc12, W:SideState, ClobbersExit, bc#33, ExitInvalid)
53 0 62: D at 46:<!0:-> FilterCallLinkStatus(Check:Untyped:D at 41, MustGen, Statically Proved, (Function: Object: 0x7fffaa47ce60 with butterfly 0x7fffaa470d28(base=0x7fffaa470d00) (Structure 0x7ffe00005910:[0x5910/22800, Function, (0/0, 2/4){length:64, name:65}, NonArray, PropertyAddition, Proto:0x7fffec01c448, Leaf (Watched)]), StructureID: 22800; Executable: NativeExecutable:0x1672e00/0x144b690), W:SideState, bc#36, ExitValid)
54 0 62: D at 47:<!7:-> DirectCall(Check:Untyped:Kill:D at 41, Check:Untyped:Kill:D at 35, JS|MustGen|VarArgs|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, OtherObj, <0x7fffaa4655d0, NativeExecutable>, <host function>, R:World, W:Heap, Exits, ClobbersExit, bc#36, ExitValid) predicting OtherObj
55 0 62: D at 51:<!0:-> KillStack(MustGen, loc10, W:Stack(loc10), ClobbersExit, bc#36, ExitInvalid)
56 0 62: D at 48:<!0:-> MovHint(Check:Untyped:D at 47, MustGen, loc10, W:SideState, ClobbersExit, bc#36, ExitInvalid)
57 0 62: D at 105:<!0:-> InvalidationPoint(MustGen, W:SideState, Exits, bc#36, exit: bc#36cp#1, ExitValid)
58 0 62: D at 49:<!0:-> Check(Check:Cell:D at 47, MustGen, Exits, bc#36, exit: bc#36cp#1, ExitValid)
59 0 62: D at 108:<!0:-> Check(Check:Object:D at 47, MustGen, Exits, bc#36cp#1, ExitValid)
60 0 62: D at 67:<!0:-> FilterGetByStatus(Check:Untyped:D at 47, MustGen, (Simple, <id='uid:(next)', [0x7ffe00007c10:[0x7c10/31760, String Iterator, (0/0, 0/0){}, NonArray, Unknown, Proto:0x7fffaa51c1d0, Leaf (Watched)]], [<Object: 0x7fffaa51c1d0 with butterfly 0x7fffaa470f08(base=0x7fffaa470ee0) (Structure 0x7ffe00007ba0:[0x7ba0/31648, String Iterator, (0/0, 2/4){next:64, Symbol.toStringTag:65}, NonArray, BecomePrototype, Proto:0x7fffec018ac8, Leaf (Watched)]), StructureID: 31648: Presence of next at 64 with attributes 4>], viaGlobalProxy = false, offset = 64>, seenInJIT = true), W:SideState, bc#36cp#1, ExitValid)
61 0 62: D at 69:<!0:-> CheckStructure(Cell:D at 47, MustGen, [%As:String Iterator], R:JSCell_structureID, Exits, bc#36cp#1, ExitValid)
62 0 62: D at 40:<!0:-> KillStack(MustGen, loc9, W:Stack(loc9), ClobbersExit, bc#36cp#1, ExitValid)
63 0 62: D at 71:<!0:-> MovHint(Check:Untyped:D at 70, MustGen, loc9, W:SideState, ClobbersExit, bc#36cp#1, ExitInvalid)
64 0 62: D at 39:<!0:-> KillStack(MustGen, loc11, W:Stack(loc11), ClobbersExit, bc#46, ExitValid)
65 0 62: D at 75:<!0:-> ZombieHint(Check:Untyped:D at 133, MustGen, loc11, W:SideState, ClobbersExit, bc#46, ExitInvalid)
66 0 62: D at 30:<!0:-> KillStack(MustGen, loc12, W:Stack(loc12), ClobbersExit, bc#49, ExitValid)
67 0 62: D at 78:<!0:-> ZombieHint(Check:Untyped:D at 133, MustGen, loc12, W:SideState, ClobbersExit, bc#49, ExitInvalid)
68 0 62: D at 116:<!0:-> KillStack(MustGen, loc13, W:Stack(loc13), ClobbersExit, bc#52, ExitValid)
69 0 62: D at 81:<!0:-> ZombieHint(Check:Untyped:D at 133, MustGen, loc13, W:SideState, ClobbersExit, bc#52, ExitInvalid)
70 0 62: D at 79:< 1:-> Upsilon(Check:Untyped:D at 26, ^126, W:SideState, bc#55, ExitValid)
71 0 62: D at 83:<!0:-> Jump(MustGen, T:#1, W:SideState, bc#55, ExitValid)
0 62: States: InvalidBranchDirection, StructuresAreWatched
0 62: Live: D at 1, D at 23, D at 26, D at 47, D at 70, D at 119, shadow(D at 126), D at 133
0 62: Values: D at 1=>(Other, Undefined, 2:StructuresAreWatched), D at 23=>(None, 2:StructuresAreWatched), D at 26=>(None, 2:StructuresAreWatched), D at 47=>(OtherObj, NonArray, [%As:String Iterator], 2:StructuresAreWatched), D at 70=>(Function, TOP, [%Av:Function], Object: 0x7fffaa47cf80 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Av:Function), StructureID: 21904, 2:StructuresAreWatched), D at 119=>(StringIdent, TOP, [%A7:string], String (atomic),8Bit:(1),length:(0): , StructureID: 16976, 2:StructuresAreWatched), shadow(D at 126)=>(None, 2:StructuresAreWatched)
1 62: Block #1 (bc#55): (OSR target)
1 62: Execution count: 10.000000
1 62: Predecessors: #0 #5
1 62: Successors: #2 #4
1 62: Dominated by: #0 #1
1 62: Dominates: #1 #2 #3 #4 #5 #6
1 62: Dominance Frontier: #1
1 62: Iterated Dominance Frontier: #1
1 62: Backwards dominates by: #root #1 #3
1 62: Backwards dominates: #0 #1
1 62: Control equivalent to: #0 #1 #3
1 62: Loop header, contains: #1 #2 #3 #4 #5
1 62: Containing loop headers: #1
1 62: States: StructuresAreWatched
1 62: Live: D at 1, D at 23, D at 26, D at 47, D at 70, D at 119, shadow(D at 126), D at 133
1 62: Values: D at 1=>(Other, Undefined, 2:StructuresAreWatched), D at 23=>(None, none:StructuresAreClobbered), D at 26=>(None, none:StructuresAreClobbered), D at 47=>(OtherObj, TOP, [%As:String Iterator], 2:StructuresAreWatched), D at 70=>(Function, TOP, [%Av:Function], Object: 0x7fffaa47cf80 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Av:Function), StructureID: 21904, 2:StructuresAreWatched), D at 119=>(StringIdent, TOP, [%A7:string], String (atomic),8Bit:(1),length:(0): , StructureID: 16976, 2:StructuresAreWatched), shadow(D at 126)=>(None, none:StructuresAreClobbered)
0 1 62: D at 126:< 1:-> Phi(JS|PureInt, HeapTop, W:SideState, bc#55, ExitInvalid)
1 1 62: D at 32:<!0:-> PutHint(Check:Untyped:D at 23, Check:Untyped:Kill:D at 126, MustGen, NamedPropertyPLoc(0), W:SideState, ClobbersExit, bc#55, ExitInvalid)
2 1 62: D at 113:<!0:-> ExitOK(MustGen, W:SideState, bc#55, ExitValid)
3 1 62: D at 84:<!0:-> LoopHint(MustGen, W:SideState, bc#55, ExitValid)
4 1 62: D at 85:<!0:-> InvalidationPoint(MustGen, W:SideState, Exits, bc#56, ExitValid)
5 1 62: D at 111:<!0:-> KillStack(MustGen, loc16, W:Stack(loc16), ClobbersExit, bc#57, ExitValid)
6 1 62: D at 87:<!0:-> MovHint(Check:Untyped:D at 47, MustGen, loc16, W:SideState, ClobbersExit, bc#57, ExitInvalid)
7 1 62: D at 91:<!0:-> FilterCallLinkStatus(Check:Untyped:D at 70, MustGen, (Function: Object: 0x7fffaa47cf80 with butterfly (nil)(base=0xfffffffffffffff8) (Structure 0x7ffe00005590:[0x5590/21904, Function, (0/0, 0/0){}, NonArray, Unknown, Proto:0x7fffec01c448, Leaf (Watched)]), StructureID: 21904; Executable: next#<no-hash>:[0x7fffaa5386d0->0x7fffaa538310->0x7fffaa50d000, FTLFunctionCall, 204 (StrictMode)]), W:SideState, bc#60, ExitValid)
8 1 62: D at 92:<!8:-> DirectCall(Check:Untyped:D at 70, Check:Untyped:D at 47, JS|MustGen|VarArgs|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Final, <0x7fffaa50d000, FunctionExecutable>, next#<no-hash>/<nogen>:[0x7fffaa50d000], R:World, W:Heap, Exits, ClobbersExit, bc#60, ExitValid) predicting Final
9 1 62: D at 110:<!0:-> KillStack(MustGen, tmp0, W:Stack(tmp0), ClobbersExit, bc#60, ExitInvalid)
10 1 62: D at 93:<!0:-> MovHint(Check:Untyped:D at 92, MustGen, tmp0, W:SideState, ClobbersExit, bc#60, ExitInvalid)
11 1 62: D at 106:<!0:-> InvalidationPoint(MustGen, W:SideState, Exits, bc#60, exit: bc#60cp#1, ExitValid)
12 1 62: D at 104:<!0:-> CheckStructure(Check:Cell:D at 92, MustGen, [%Ck:Object], R:JSCell_structureID, Exits, bc#60, exit: bc#60cp#1, ExitValid)
13 1 62: D at 114:<!0:-> FilterGetByStatus(Check:Untyped:D at 92, MustGen, (Simple, <id='uid:(done)', [0x7ffe0000a320:[0xa320/41760, Object, (2/2, 0/0){value:0, done:1}, NonArray, PropertyAddition, Proto:0x7fffec018848, Leaf (Watched)]], [], viaGlobalProxy = false, offset = 1>, seenInJIT = true), W:SideState, bc#60cp#1, ExitValid)
14 1 62: D at 117:< 4:-> GetByOffset(KnownCell:D at 92, KnownCell:D at 92, JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Bool, id4{done}, 1, R:NamedProperties(4), bc#60cp#1, ExitValid) predicting Bool
15 1 62: D at 34:<!0:-> KillStack(MustGen, loc14, W:Stack(loc14), ClobbersExit, bc#60cp#1, ExitValid)
16 1 62: D at 118:<!0:-> MovHint(Check:Untyped:D at 117, MustGen, loc14, W:SideState, ClobbersExit, bc#60cp#1, ExitInvalid)
17 1 62: D at 28:<!0:-> KillStack(MustGen, loc13, W:Stack(loc13), ClobbersExit, bc#60cp#1, ExitInvalid)
18 1 62: D at 120:<!0:-> ZombieHint(Check:Untyped:D at 133, MustGen, loc13, W:SideState, ClobbersExit, bc#60cp#1, ExitInvalid)
19 1 62: D at 121:<!0:-> Check(Check:Boolean:D at 117, MustGen, Exits, bc#60cp#1, exit: bc#60cp#2, ExitValid)
20 1 62: D at 101:<!0:-> Branch(Boolean:D at 117, MustGen, T:#2/w:10.000000, F:#4/w:10.000000, W:SideState, bc#60cp#2, ExitValid)
1 62: States: TakeBoth, StructuresAreWatched
1 62: Live: D at 1, D at 23, D at 26, D at 47, D at 70, D at 92, D at 117, D at 119, D at 133
1 62: Values: D at 1=>(Other, Undefined, 2:StructuresAreWatched), D at 23=>(None, 2:StructuresAreWatched), D at 26=>(None, 2:StructuresAreWatched), D at 47=>(OtherObj, TOP, [%As:String Iterator], 2:StructuresAreWatched), D at 70=>(Function, TOP, [%Av:Function], Object: 0x7fffaa47cf80 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Av:Function), StructureID: 21904, 2:StructuresAreWatched), D at 92=>(Final, NonArray, [%Ck:Object], 2:StructuresAreWatched), D at 117=>(Bool, 2:StructuresAreWatched), D at 119=>(StringIdent, TOP, [%A7:string], String (atomic),8Bit:(1),length:(0): , StructureID: 16976, 2:StructuresAreWatched)
2 62: Block #2 (bc#71):
2 62: Execution count: 10.000000
2 62: Predecessors: #1
2 62: Successors: #3
2 62: Dominated by: #0 #1 #2
2 62: Dominates: #2
2 62: Dominance Frontier: #3
2 62: Iterated Dominance Frontier: #1 #3
2 62: Backwards dominates by: #root #2 #3
2 62: Backwards dominates: #2
2 62: Control equivalent to: #2
2 62: Containing loop headers: #1
2 62: States: StructuresAreWatched
2 62: Live: D at 1, D at 23, D at 26, D at 47, D at 70, D at 117, D at 119, D at 133
2 62: Values: D at 1=>(Other, Undefined, 2:StructuresAreWatched), D at 23=>(None, none:StructuresAreClobbered), D at 26=>(None, none:StructuresAreClobbered), D at 47=>(OtherObj, TOP, [%As:String Iterator], 2:StructuresAreWatched), D at 70=>(Function, TOP, [%Av:Function], Object: 0x7fffaa47cf80 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Av:Function), StructureID: 21904, 2:StructuresAreWatched), D at 117=>(Bool, 2:StructuresAreWatched), D at 119=>(StringIdent, TOP, [%A7:string], String (atomic),8Bit:(1),length:(0): , StructureID: 16976, 2:StructuresAreWatched)
0 2 62: D at 5:<!0:-> ExitOK(MustGen, W:SideState, bc#71, ExitValid)
1 2 62: D at 3:< 1:-> Upsilon(Check:Untyped:D at 119, ^90, W:SideState, bc#71, ExitValid)
2 2 62: D at 82:<!0:-> Jump(MustGen, T:#3, W:SideState, bc#71, ExitValid)
2 62: States: InvalidBranchDirection, StructuresAreWatched
2 62: Live: D at 1, D at 23, D at 26, D at 47, D at 70, shadow(D at 90), D at 117, D at 119, D at 133
2 62: Values: D at 1=>(Other, Undefined, 1:StructuresAreWatched), D at 23=>(None, 1:StructuresAreWatched), D at 26=>(None, 1:StructuresAreWatched), D at 47=>(OtherObj, TOP, [%As:String Iterator], 1:StructuresAreWatched), D at 70=>(Function, TOP, [%Av:Function], Object: 0x7fffaa47cf80 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Av:Function), StructureID: 21904, 1:StructuresAreWatched), shadow(D at 90)=>(StringIdent, TOP, [%A7:string], String (atomic),8Bit:(1),length:(0): , StructureID: 16976, 1:StructuresAreWatched), D at 117=>(Bool, 1:StructuresAreWatched), D at 119=>(StringIdent, TOP, [%A7:string], String (atomic),8Bit:(1),length:(0): , StructureID: 16976, 1:StructuresAreWatched)
3 62: Block #3 (bc#71):
3 62: Execution count: 10.000000
3 62: Predecessors: #2 #4
3 62: Successors: #6 #5
3 62: Dominated by: #0 #1 #3
3 62: Dominates: #3 #5 #6
3 62: Dominance Frontier: #1
3 62: Iterated Dominance Frontier: #1
3 62: Backwards dominates by: #root #3
3 62: Backwards dominates: #0 #1 #2 #3 #4
3 62: Control equivalent to: #0 #1 #3
3 62: Containing loop headers: #1
3 62: States: StructuresAreWatched
3 62: Live: D at 1, D at 23, D at 26, D at 47, D at 70, shadow(D at 90), D at 117, D at 119, D at 133
3 62: Values: D at 1=>(Other, Undefined, 1:StructuresAreWatched), D at 23=>(None, none:StructuresAreClobbered), D at 26=>(None, none:StructuresAreClobbered), D at 47=>(OtherObj, TOP, [%As:String Iterator], 1:StructuresAreWatched), D at 70=>(Function, TOP, [%Av:Function], Object: 0x7fffaa47cf80 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Av:Function), StructureID: 21904, 1:StructuresAreWatched), shadow(D at 90)=>(HeapTop, TOP, TOP, 1:StructuresAreWatched), D at 117=>(Bool, 1:StructuresAreWatched), D at 119=>(StringIdent, TOP, [%A7:string], String (atomic),8Bit:(1),length:(0): , StructureID: 16976, 1:StructuresAreWatched)
0 3 62: D at 90:< 1:-> Phi(JS|PureInt, StringIdent, W:SideState, bc#71, ExitInvalid)
1 3 62: D at 100:<!0:-> MovHint(Check:Untyped:Kill:D at 90, MustGen, loc13, W:SideState, ClobbersExit, bc#71, ExitInvalid)
2 3 62: D at 115:<!0:-> ExitOK(MustGen, W:SideState, bc#71, ExitValid)
3 3 62: D at 94:<!0:-> Branch(Boolean:Kill:D at 117, MustGen, T:#6/w:1.000000, F:#5/w:10.000000, W:SideState, bc#71, ExitValid)
3 62: States: TakeBoth, StructuresAreWatched
3 62: Live: D at 1, D at 23, D at 26, D at 47, D at 70, D at 119, D at 133
3 62: Values: D at 1=>(Other, Undefined, 1:StructuresAreWatched), D at 23=>(None, 1:StructuresAreWatched), D at 26=>(None, 1:StructuresAreWatched), D at 47=>(OtherObj, TOP, [%As:String Iterator], 1:StructuresAreWatched), D at 70=>(Function, TOP, [%Av:Function], Object: 0x7fffaa47cf80 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Av:Function), StructureID: 21904, 1:StructuresAreWatched), D at 90=>(HeapTop, TOP, TOP, 1:StructuresAreWatched), D at 119=>(StringIdent, TOP, [%A7:string], String (atomic),8Bit:(1),length:(0): , StructureID: 16976, 1:StructuresAreWatched)
4 62: Block #4 (bc#60cp#2):
4 62: Execution count: 10.000000
4 62: Predecessors: #1
4 62: Successors: #3
4 62: Dominated by: #0 #1 #4
4 62: Dominates: #4
4 62: Dominance Frontier: #3
4 62: Iterated Dominance Frontier: #1 #3
4 62: Backwards dominates by: #root #3 #4
4 62: Backwards dominates: #4
4 62: Control equivalent to: #4
4 62: Containing loop headers: #1
4 62: States: StructuresAreWatched
4 62: Live: D at 1, D at 23, D at 26, D at 47, D at 70, D at 92, D at 117, D at 119, D at 133
4 62: Values: D at 1=>(Other, Undefined, 2:StructuresAreWatched), D at 23=>(None, none:StructuresAreClobbered), D at 26=>(None, none:StructuresAreClobbered), D at 47=>(OtherObj, TOP, [%As:String Iterator], 2:StructuresAreWatched), D at 70=>(Function, TOP, [%Av:Function], Object: 0x7fffaa47cf80 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Av:Function), StructureID: 21904, 2:StructuresAreWatched), D at 92=>(Final, NonArray, [%Ck:Object], 2:StructuresAreWatched), D at 117=>(Bool, 2:StructuresAreWatched), D at 119=>(StringIdent, TOP, [%A7:string], String (atomic),8Bit:(1),length:(0): , StructureID: 16976, 2:StructuresAreWatched)
0 4 62: D at 45:<!0:-> ExitOK(MustGen, W:SideState, bc#60cp#2, ExitValid)
1 4 62: D at 99:<!0:-> FilterGetByStatus(Check:Untyped:D at 92, MustGen, (Simple, <id='uid:(value)', [0x7ffe0000a320:[0xa320/41760, Object, (2/2, 0/0){value:0, done:1}, NonArray, PropertyAddition, Proto:0x7fffec018848, Leaf (Watched)]], [], viaGlobalProxy = false, offset = 0>, seenInJIT = true), W:SideState, bc#60cp#2, ExitValid)
2 4 62: D at 98:< 2:-> GetByOffset(KnownCell:Kill:D at 92, KnownCell:D at 92, JS|PureNum, StringIdent, id5{value}, 0, R:NamedProperties(5), bc#60cp#2, ExitValid) predicting StringIdent
3 4 62: D at 43:<!0:-> KillStack(MustGen, loc13, W:Stack(loc13), ClobbersExit, bc#60cp#2, ExitValid)
4 4 62: D at 97:<!0:-> MovHint(Check:Untyped:D at 98, MustGen, loc13, W:SideState, ClobbersExit, bc#60cp#2, ExitInvalid)
5 4 62: D at 37:< 1:-> Upsilon(Check:Untyped:Kill:D at 98, ^90, W:SideState, bc#71, ExitValid)
6 4 62: D at 95:<!0:-> Jump(MustGen, T:#3, W:SideState, bc#71, ExitValid)
4 62: States: InvalidBranchDirection, StructuresAreWatched
4 62: Live: D at 1, D at 23, D at 26, D at 47, D at 70, shadow(D at 90), D at 117, D at 119, D at 133
4 62: Values: D at 1=>(Other, Undefined, 1:StructuresAreWatched), D at 23=>(None, 1:StructuresAreWatched), D at 26=>(None, 1:StructuresAreWatched), D at 47=>(OtherObj, TOP, [%As:String Iterator], 1:StructuresAreWatched), D at 70=>(Function, TOP, [%Av:Function], Object: 0x7fffaa47cf80 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Av:Function), StructureID: 21904, 1:StructuresAreWatched), shadow(D at 90)=>(HeapTop, TOP, TOP, 1:StructuresAreWatched), D at 117=>(Bool, 1:StructuresAreWatched), D at 119=>(StringIdent, TOP, [%A7:string], String (atomic),8Bit:(1),length:(0): , StructureID: 16976, 1:StructuresAreWatched)
5 62: Block #5 (bc#74):
5 62: Execution count: 10.000000
5 62: Predecessors: #3
5 62: Successors: #1
5 62: Dominated by: #0 #1 #3 #5
5 62: Dominates: #5
5 62: Dominance Frontier: #1
5 62: Iterated Dominance Frontier: #1
5 62: Backwards dominates by: #root #5
5 62: Backwards dominates: #5
5 62: Control equivalent to: #5
5 62: Containing loop headers: #1
5 62: States: StructuresAreWatched
5 62: Live: D at 1, D at 23, D at 26, D at 47, D at 70, D at 119, D at 133
5 62: Values: D at 1=>(Other, Undefined, 1:StructuresAreWatched), D at 23=>(None, none:StructuresAreClobbered), D at 26=>(None, none:StructuresAreClobbered), D at 47=>(OtherObj, TOP, [%As:String Iterator], 1:StructuresAreWatched), D at 70=>(Function, TOP, [%Av:Function], Object: 0x7fffaa47cf80 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Av:Function), StructureID: 21904, 1:StructuresAreWatched), D at 90=>(HeapTop, TOP, TOP, 1:StructuresAreWatched), D at 119=>(StringIdent, TOP, [%A7:string], String (atomic),8Bit:(1),length:(0): , StructureID: 16976, 1:StructuresAreWatched)
0 5 62: D at 109:<!0:-> ExitOK(MustGen, W:SideState, bc#74, ExitValid)
1 5 62: D at 72:<!0:-> KillStack(MustGen, loc7, W:Stack(loc7), ClobbersExit, bc#74, ExitValid)
2 5 62: D at 88:<!0:-> ZombieHint(Check:Untyped:D at 133, MustGen, loc7, W:SideState, ClobbersExit, bc#74, ExitInvalid)
3 5 62: D at 31:<!0:-> PutHint(Check:Untyped:D at 23, Check:Untyped:D at 26, MustGen, NamedPropertyPLoc(0), W:SideState, ClobbersExit, bc#77, ExitValid)
4 5 62: D at 29:< 1:-> Upsilon(Check:Untyped:D at 26, ^126, W:SideState, bc#83, ExitValid)
5 5 62: D at 76:<!0:-> Jump(MustGen, T:#1, W:SideState, bc#83, ExitValid)
5 62: States: InvalidBranchDirection, StructuresAreWatched
5 62: Live: D at 1, D at 23, D at 26, D at 47, D at 70, D at 119, shadow(D at 126), D at 133
5 62: Values: D at 1=>(Other, Undefined, 1:StructuresAreWatched), D at 23=>(None, 1:StructuresAreWatched), D at 26=>(None, 1:StructuresAreWatched), D at 47=>(OtherObj, TOP, [%As:String Iterator], 1:StructuresAreWatched), D at 70=>(Function, TOP, [%Av:Function], Object: 0x7fffaa47cf80 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Av:Function), StructureID: 21904, 1:StructuresAreWatched), D at 119=>(StringIdent, TOP, [%A7:string], String (atomic),8Bit:(1),length:(0): , StructureID: 16976, 1:StructuresAreWatched), shadow(D at 126)=>(None, 1:StructuresAreWatched)
6 62: Block #6 (bc#125):
6 62: Execution count: 1.000000
6 62: Predecessors: #3
6 62: Successors:
6 62: Dominated by: #0 #1 #3 #6
6 62: Dominates: #6
6 62: Dominance Frontier:
6 62: Iterated Dominance Frontier:
6 62: Backwards dominates by: #root #6
6 62: Backwards dominates: #6
6 62: Control equivalent to: #6
6 62: States: StructuresAreWatched
6 62: Live: D at 1
6 62: Values: D at 1=>(Other, Undefined, 1:StructuresAreWatched)
0 6 62: D at 112:<!0:-> ExitOK(MustGen, W:SideState, bc#125, ExitValid)
1 6 62: D at 0:<!0:-> Return(Check:Untyped:Kill:D at 1, MustGen, W:SideState, Exits, bc#125, ExitValid)
6 62: States: InvalidBranchDirection, StructuresAreWatched, CFAInvalidated
6 62: Live:
6 62: Values:
62: GC Values:
62: Strong:Cell: 0x7fffaa50e200 (%EN:FunctionExecutable), StructureID: 18096
62: Weak:Object: 0x7fffaa47e7e0 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Aba:Function), StructureID: 22352
62: Weak:Object: 0x7fffec04c408 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Ae:JSGlobalLexicalEnvironment), StructureID: 21568
62: Strong:String (atomic),8Bit:(1),length:(1): a, StructureID: 16976
62: Weak:Object: 0x7fffaa47ce60 with butterfly 0x7fffaa470d28(base=0x7fffaa470d00) (Structure %BG:Function), StructureID: 22800
62: Weak:Object: 0x7fffaa47cf80 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Av:Function), StructureID: 21904
62: Weak:String (atomic),8Bit:(1),length:(0): , StructureID: 16976
62: Strong:String (atomic),8Bit:(1),length:(43): Iterator result interface is not an object., StructureID: 16976
62: Weak:Cell: 0x7fffaa4655d0 (%AZ:NativeExecutable), StructureID: 17760
62: Weak:Cell: 0x7fffaa50d000 (%EN:FunctionExecutable), StructureID: 18096
62: Weak:Structure: %Cl:Object, StructureID: 16752
62: Weak:Structure: %Ab:Object, StructureID: 16752
62: Weak:Structure: %BP:Object, StructureID: 16752
62: Desired watchpoints:
62: Watchpoint sets:
62: Inline watchpoint sets: 0x7ffe000042b8, 0x7ffe000041d8, 0x7ffe000054a8, 0x7ffe0000a388, 0x7ffe00004718, 0x7ffe00007c78, 0x7ffe0000a2a8, 0x7ffe000057b8, 0x7ffe00005978, 0x7ffe000045c8, 0x7ffe00004868, 0x7ffe00005c88, 0x7ffe000055f8
62: SymbolTables:
62: FunctionExecutables: 0x7fffaa50e200
62: Buffer views:
62: Object property conditions: <Object: 0x7fffaa51c1d0 with butterfly 0x7fffaa470f08(base=0x7fffaa470ee0) (Structure %Bm:String Iterator), StructureID: 31648: Equivalence of next with Object: 0x7fffaa47cf80 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Av:Function), StructureID: 21904>, <Object: 0x7fffec018848 with butterfly 0x7fffaa4782a8(base=0x7fffaa478220) (Structure %A8:Object), StructureID: 23472: AbsenceOfSetEffect of b with prototype <JSValue()>>, <Object: 0x7fffec0317c8 with butterfly 0x7fffaa5106a8(base=0x7fffaa5104a0) (Structure %DU:String), StructureID: 29296: Equivalence of Symbol.iterator with Object: 0x7fffaa47ce60 with butterfly 0x7fffaa470d28(base=0x7fffaa470d00) (Structure %BG:Function), StructureID: 22800>
62: Structures:
62: %A7:string = 0x7ffe00004250:[0x4250/16976, string, (0/0, 0/0){}, NonArray, Unknown, Leaf (Watched)]
62: %A8:Object = 0x7ffe00005bb0:[0x5bb0/23472, Object, (0/0, 12/16){toString:64, toLocaleString:65, valueOf:66, hasOwnProperty:67, propertyIsEnumerable:68, isPrototypeOf:69, __defineGetter__:70, __defineSetter__:71, __lookupGetter__:72, __lookupSetter__:73, __proto__:74, constructor:75}, NonArray, BecomePrototype, Leaf (Watched)]
62: %AZ:NativeExecutable = 0x7ffe00004560:[0x4560/17760, NativeExecutable, (0/0, 0/0){}, NonArray, Unknown, Leaf (Watched)]
62: %Ab:Object = 0x7ffe00005c20:[0x5c20/23584, Object, (0/6, 0/0){}, NonArray, Unknown, Proto:0x7fffec018848, Leaf (Watched)]
62: %Aba:Function = 0x7ffe00005750:[0x5750/22352, Function, (0/0, 0/0){}, NonArray, Unknown, Proto:0x7fffec01c448, Leaf (Watched)]
62: %Ae:JSGlobalLexicalEnvironment = 0x7ffe00005440:[0x5440/21568, JSGlobalLexicalEnvironment, (0/0, 0/0){}, NonArray, Unknown, Leaf (Watched)]
62: %As:String Iterator = 0x7ffe00007c10:[0x7c10/31760, String Iterator, (0/0, 0/0){}, NonArray, Unknown, Proto:0x7fffaa51c1d0, Leaf (Watched)]
62: %Av:Function = 0x7ffe00005590:[0x5590/21904, Function, (0/0, 0/0){}, NonArray, Unknown, Proto:0x7fffec01c448, Leaf (Watched)]
62: %BG:Function = 0x7ffe00005910:[0x5910/22800, Function, (0/0, 2/4){length:64, name:65}, NonArray, PropertyAddition, Proto:0x7fffec01c448, Leaf (Watched)]
62: %BP:Object = 0x7ffe0000a240:[0xa240/41536, Object, (1/2, 0/0){b:0}, NonArray, PropertyAddition, Proto:0x7fffec018848, Leaf (Watched)]
62: %Bm:String Iterator = 0x7ffe00007ba0:[0x7ba0/31648, String Iterator, (0/0, 2/4){next:64, Symbol.toStringTag:65}, NonArray, BecomePrototype, Proto:0x7fffec018ac8, Leaf (Watched)]
62: %Ck:Object = 0x7ffe0000a320:[0xa320/41760, Object, (2/2, 0/0){value:0, done:1}, NonArray, PropertyAddition, Proto:0x7fffec018848, Leaf (Watched)]
62: %Cl:Object = 0x7ffe0000a1d0:[0xa1d0/41424, Object, (0/2, 0/0){}, NonArray, Unknown, Proto:0x7fffec018848]
62: %DU:String = 0x7ffe00007270:[0x7270/29296, String, (0/0, 35/64){toString:64, valueOf:65, charAt:66, charCodeAt:67, codePointAt:68, indexOf:69, lastIndexOf:70, replaceUsingRegExp:71, replaceUsingStringSearch:72, replaceAllUsingStringSearch:73, slice:74, substr:75, substring:76, toLowerCase:77, toUpperCase:78, localeCompare:79, toLocaleLowerCase:80, toLocaleUpperCase:81, trim:82, startsWith:83, endsWith:84, includes:85, normalize:86, charCodeAt:87, at:88, trimStart:89, trimLeft:90, trimEnd:91, trimRight:92, Symbol.iterator:93, substr:94, endsWith:95, isWellFormed:96, toWellFormed:97, constructor:98}, NonArray, BecomePrototype, Proto:0x7fffec018848, Leaf (Watched)]
62: %EN:FunctionExecutable = 0x7ffe000046b0:[0x46b0/18096, FunctionExecutable, (0/0, 0/0){}, NonArray, Unknown, Leaf (Watched)]
DFG ASSERTION FAILED: Value not defined: 26
/JSC/Source/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp(21330) : JSC::FTL::LValue JSC::FTL::(anonymous namespace)::LowerDFGToB3::lowJSValue(JSC::DFG::Edge, JSC::DFG::OperandSpeculationMode)
Thread 4 "JITWorker" received signal SIGABRT, Aborted.
[Switching to Thread 0x7fffa88f8640 (LWP 2395889)]
__pthread_kill_implementation (no_tid=0, signo=6, threadid=140736021366336) at ./nptl/pthread_kill.c:44
44 ./nptl/pthread_kill.c: No such file or directory.
(gdb) bt
#0 __pthread_kill_implementation (no_tid=0, signo=6, threadid=140736021366336) at ./nptl/pthread_kill.c:44
#1 __pthread_kill_internal (signo=6, threadid=140736021366336) at ./nptl/pthread_kill.c:78
#2 __GI___pthread_kill (threadid=140736021366336, signo=signo at entry=6) at ./nptl/pthread_kill.c:89
#3 0x00007ffff5948476 in __GI_raise (sig=sig at entry=6) at ../sysdeps/posix/raise.c:26
#4 0x00007ffff592e7f3 in __GI_abort () at ./stdlib/abort.c:79
#5 0x000000000064f1fa in WTFCrashWithInfo(int, char const*, char const*, int) ()
#6 0x0000000000f0d5e6 in JSC::FTL::(anonymous namespace)::LowerDFGToB3::lowJSValue(JSC::DFG::Edge, JSC::DFG::OperandSpeculationMode) ()
#7 0x0000000000e96f74 in JSC::FTL::(anonymous namespace)::LowerDFGToB3::compileUpsilon() ()
#8 0x0000000000e951a6 in JSC::FTL::(anonymous namespace)::LowerDFGToB3::compileNode(unsigned int) ()
#9 0x0000000000e8d20f in JSC::FTL::lowerDFGToB3(JSC::FTL::State&) ()
#10 0x0000000000a80ee8 in JSC::DFG::Plan::compileInThreadImpl() ()
#11 0x0000000001169e69 in JSC::JITPlan::compileInThread(JSC::JITWorklistThread*) ()
#12 0x00000000011b1cab in JSC::JITWorklistThread::work() ()
#13 0x0000000001b44a54 in WTF::Detail::CallableWrapper<WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0, void>::call() ()
#14 0x0000000001b5ca20 in WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*) ()
#15 0x0000000001bdc196 in WTF::wtfThreadEntryPoint(void*) ()
#16 0x00007ffff599aac3 in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:442
#17 0x00007ffff5a2c850 in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240924/b11218db/attachment-0001.htm>
More information about the webkit-unassigned
mailing list