Bug 136162

Summary: [JSC] ASSERTION FAILED: imm26 == (imm26 << 6) >> 6 in JSC::ARM64Assembler::unconditionalBranchImmediate
Product: WebKit Reporter: Akos Kiss <akiss>
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: benjamin, cmarcelo, commit-queue, fpizlo, gyuyoung.kim, msaboff, ossy
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 108645    
Attachments:
Description Flags
Proposed patch. none

Akos Kiss
Reported 2014-08-22 11:09:27 PDT
When running tests on EFL/ARM64, jsc sporadically segfaults with "ASSERTION FAILED: imm26 == (imm26 << 6) >> 6" in JSC::ARM64Assembler::unconditionalBranchImmediate (e.g., when linking a call from 0x7fa76df114 to 0x7fb0728a20). The error is non-deterministic, it depends on where the executable allocator allocates chunks of memory.
Attachments
Proposed patch. (2.07 KB, patch)
2014-08-22 11:13 PDT, Akos Kiss 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Akos Kiss
Comment 1 2014-08-22 11:13:47 PDT
Created attachment 236992 [details] Proposed patch.
Michael Saboff
Comment 2 2014-08-22 11:22:29 PDT
Comment on attachment 236992 [details] Proposed patch. r=me
WebKit Commit Bot
Comment 3 2014-08-22 12:00:02 PDT
Comment on attachment 236992 [details] Proposed patch. Clearing flags on attachment: 236992 Committed r172863: <http://trac.webkit.org/changeset/172863>
WebKit Commit Bot
Comment 4 2014-08-22 12:00:06 PDT
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.