<html>
<head>
<base href="https://bugs.webkit.org/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - REGRESSION: Fix the remaining 20-40 crashes on AArch64"
href="https://bugs.webkit.org/show_bug.cgi?id=151486">151486</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>REGRESSION: Fix the remaining 20-40 crashes on AArch64
</td>
</tr>
<tr>
<th>Classification</th>
<td>Unclassified
</td>
</tr>
<tr>
<th>Product</th>
<td>WebKit
</td>
</tr>
<tr>
<th>Version</th>
<td>Other
</td>
</tr>
<tr>
<th>Hardware</th>
<td>Unspecified
</td>
</tr>
<tr>
<th>OS</th>
<td>Unspecified
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>Normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>P2
</td>
</tr>
<tr>
<th>Component</th>
<td>JavaScriptCore
</td>
</tr>
<tr>
<th>Assignee</th>
<td>webkit-unassigned@lists.webkit.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>ossy@webkit.org
</td>
</tr>
<tr>
<th>Blocks</th>
<td>108645
</td>
</tr></table>
<p>
<div>
<pre>After <a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED DUPLICATE - [ARM] REGRESSION(r189575): It made 2860 tests fail/crash on AArch64 Linux"
href="show_bug.cgi?id=149061">bug149061</a> we still have 20-40 crashes on the AArch64 JSC tester bot:
<a href="https://build.webkit.org/builders/EFL%20Linux%20AArch64%20Release?numbuilds=200">https://build.webkit.org/builders/EFL%20Linux%20AArch64%20Release?numbuilds=200</a>
Maybe <a href="http://trac.webkit.org/r192352">http://trac.webkit.org/r192352</a> ( <a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED DUPLICATE - [ARM] REGRESSION(r189575): It made 2860 tests fail/crash on AArch64 Linux"
href="show_bug.cgi?id=149061">bug149061</a> / <a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED FIXED - Crash in sorting-benchmark.js on ARM64 with full op_sub FTL coverage"
href="show_bug.cgi?id=150936">bug150936</a> ) didn't fix all issues
caused by <a href="http://trac.webkit.org/r189575">http://trac.webkit.org/r189575</a> or maybe it is a new regression happened
during the 2 months long breakage.
I just filed this bug report not to forget this regression,
but won't have time to debug this issue this year.
** The following JSC stress test failures have been introduced:
executableAllocationFuzz.yaml/executableAllocationFuzz/v8-raytrace.js.executable-allocation-fuzz-no-cjit
jsc-layout-tests.yaml/js/script-tests/dfg-put-by-id-prototype-check.js.layout
modules.yaml/modules/defaults.js.no-llint-modules
modules.yaml/modules/destructuring-export.js.dfg-eager-no-cjit-validate-modules
modules.yaml/modules/exported-function-may-be-called-before-module-is-executed.js.no-llint-modules
modules.yaml/modules/fallback-ambiguous.js.no-llint-modules
modules.yaml/modules/uncacheable-when-see-star.js.dfg-eager-modules
mozilla-tests.yaml/ecma/Date/15.9.3.1-1.js.mozilla-baseline
mozilla-tests.yaml/ecma/Date/15.9.5.28-1.js.mozilla-baseline
mozilla-tests.yaml/js1_2/function/Number.js.mozilla-baseline
mozilla-tests.yaml/js1_2/regexp/RegExp_input.js.mozilla-baseline
mozilla-tests.yaml/js1_2/regexp/RegExp_leftContext.js.mozilla-baseline
regress/script-tests/Float32Array-matrix-mult.js.dfg-eager-no-cjit-validate
regress/script-tests/Float32Array-matrix-mult.js.dfg-maximal-flush-validate-no-cjit
regress/script-tests/polymorphic-put-by-id.js.dfg-eager
regress/script-tests/raytrace-with-try-catch.js.no-cjit-validate-phases
stress/math-clz32-basics.js.dfg-eager
stress/multi-put-by-offset-reallocation-butterfly-cse.js.no-llint
stress/multi-put-by-offset-reallocation-cases.js.no-llint
stress/redundant-array-bounds-checks-addition.js.dfg-maximal-flush-validate-no-cjit
stress/v8-deltablue-strict.js.dfg-maximal-flush-validate-no-cjit
stress/v8-earley-boyer-strict.js.no-llint
stress/v8-raytrace-strict.js.always-trigger-copy-phase
stress/v8-raytrace-strict.js.no-llint
stress/v8-splay-strict.js.default
v8-v6/v8-raytrace.js.dfg-maximal-flush-validate-no-cjit
v8-v6/v8-regexp.js.no-llint
v8-v6/v8-splay.js.dfg-eager
v8-v6/v8-splay.js.no-llint</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>