<html>
<head>
<base href="https://bugs.webkit.org/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - [ARM] ASSERTION FAILED: linkBuffer.isValid() in InlineAccess.cpp:291"
href="https://bugs.webkit.org/show_bug.cgi?id=159720">159720</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>[ARM] ASSERTION FAILED: linkBuffer.isValid() in InlineAccess.cpp:291
</td>
</tr>
<tr>
<th>Classification</th>
<td>Unclassified
</td>
</tr>
<tr>
<th>Product</th>
<td>WebKit
</td>
</tr>
<tr>
<th>Version</th>
<td>Other
</td>
</tr>
<tr>
<th>Hardware</th>
<td>Unspecified
</td>
</tr>
<tr>
<th>OS</th>
<td>Unspecified
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>Normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>P2
</td>
</tr>
<tr>
<th>Component</th>
<td>JavaScriptCore
</td>
</tr>
<tr>
<th>Assignee</th>
<td>webkit-unassigned@lists.webkit.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>ossy@webkit.org
</td>
</tr>
<tr>
<th>Blocks</th>
<td>159408
</td>
</tr></table>
<p>
<div>
<pre>jsc-stress-results/.tests/cdjs-tests.yaml/cdjs$ ./../../.vm/JavaScriptCore.framework/Resources/jsc main.js
Program received signal SIGSEGV, Segmentation fault.
0xb64880b4 in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:323
323 *(int *)(uintptr_t)0xbbadbeef = 0;
(gdb) bt
#0 0xb64880b4 in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:323
#1 0xb5909240 in JSC::InlineAccess::rewireStubAsJump (vm=..., stubInfo=..., target=...)
at ../../Source/JavaScriptCore/bytecode/InlineAccess.cpp:291
#2 0xb5fc087c in JSC::tryCachePutByID (exec=0xbeffe968, baseValue=..., structure=0xb21a7220, ident=..., slot=..., stubInfo=...,
putKind=JSC::NotDirect) at ../../Source/JavaScriptCore/jit/Repatch.cpp:452
#3 0xb5fc0a80 in JSC::repatchPutByID (exec=0xbeffe968, baseValue=..., structure=0xb21a7220, propertyName=..., slot=..., stubInfo=...,
putKind=JSC::NotDirect) at ../../Source/JavaScriptCore/jit/Repatch.cpp:463
#4 0xb5f88ca8 in JSC::operationPutByIdNonStrictOptimize (exec=0xbeffe968, stubInfo=0xb258dd80, encodedValue=-18486637472,
encodedBase=-18486456960, uid=0xb25aedf8) at ../../Source/JavaScriptCore/jit/JITOperations.cpp:421
#5 0xb27ca8ec in ?? ()
Backtrace stopped: previous frame identical to this frame (corrupt stack?)</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>