Bug 206797

Summary:

REGRESSION (r250009): testair crashes in (anonymous namespace)::matchAll

Product:

WebKit

Reporter:

David Kilzer (:ddkilzer) <ddkilzer>

Component:

JavaScriptCore

Assignee:

David Kilzer (:ddkilzer) <ddkilzer>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

commit-queue, ews-watchlist, keith_miller, mark.lam, msaboff, saam, tzagallo, webkit-bug-importer, ysuzuki

Priority:

Keywords:

InRadar

Version:

WebKit Nightly Build

Hardware:

Unspecified

OS:

Unspecified

Bug Depends on:

201703

Bug Blocks:

Attachments:

Description	Flags
Patch v1	none

Description David Kilzer (:ddkilzer) 2020-01-25 04:42:53 PST

testair crashes in (anonymous namespace)::matchAll when compiled with Address Sanitizer.

This regressed with the following change:

    Elide unnecessary moves in Air O0
    <https://bugs.webkit.org/show_bug.cgi?id=201703>
    <https://trac.webkit.org/changeset/250009>

Comment 1 David Kilzer (:ddkilzer) 2020-01-25 04:43:12 PST

<rdar://problem/58893221>

Comment 2 David Kilzer (:ddkilzer) 2020-01-25 04:49:24 PST

Created attachment 388768 [details]
Patch v1

Comment 3 Yusuke Suzuki 2020-01-27 13:12:57 PST

Comment on attachment 388768 [details]
Patch v1

r=me

Comment 4 WebKit Commit Bot 2020-01-27 13:46:40 PST

Comment on attachment 388768 [details]
Patch v1

Clearing flags on attachment: 388768

Committed r255171: <https://trac.webkit.org/changeset/255171>

Comment 5 WebKit Commit Bot 2020-01-27 13:46:41 PST

All reviewed patches have been landed.  Closing bug.