<html>
<head>
<base href="https://bugs.webkit.org/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - FTL JIT crash when running the TypeScript test from Octane benchmark"
href="https://bugs.webkit.org/show_bug.cgi?id=154168">154168</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>FTL JIT crash when running the TypeScript test from Octane benchmark
</td>
</tr>
<tr>
<th>Classification</th>
<td>Unclassified
</td>
</tr>
<tr>
<th>Product</th>
<td>WebKit
</td>
</tr>
<tr>
<th>Version</th>
<td>WebKit Local Build
</td>
</tr>
<tr>
<th>Hardware</th>
<td>Unspecified
</td>
</tr>
<tr>
<th>OS</th>
<td>Linux
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>Normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>P2
</td>
</tr>
<tr>
<th>Component</th>
<td>JavaScriptCore
</td>
</tr>
<tr>
<th>Assignee</th>
<td>webkit-unassigned@lists.webkit.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>lantw44@gmail.com
</td>
</tr></table>
<p>
<div>
<pre>Steps to reproduce:
1. Build WebKit with debug configuration and FTL JIT enabled.
2. Run './MiniBrowser <a href="https://octane-benchmark.googlecode.com/svn/latest/index.html">https://octane-benchmark.googlecode.com/svn/latest/index.html</a>' from a terminal.
3. Click 'Start Octane 2.0' in the web page.
Result:
Assertion failure shows in the terminal and WebKitWebProcess crashes when it runs the TypeScript test. If it doesn't crash, running the benchmark again is likely to crash it.
This bug was found while making FTL JIT work on FreeBSD, so I put links to backtraces instead of pasting them again.
Backtrace on FreeBSD: <a class="bz_bug_link
bz_status_NEW "
title="NEW - Enable FTL on FreeBSD"
href="show_bug.cgi?id=152258#c10">https://bugs.webkit.org/show_bug.cgi?id=152258#c10</a>
Backtrace on GNU/Linux: <a class="bz_bug_link
bz_status_NEW "
title="NEW - Enable FTL on FreeBSD"
href="show_bug.cgi?id=152258#c11">https://bugs.webkit.org/show_bug.cgi?id=152258#c11</a></pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>