WebKit Bugzilla
New
Browse
Search+
Log In
×
Sign in with GitHub
or
Remember my login
Create Account
·
Forgot Password
Forgotten password account recovery
NEW
207572
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler a flakey failure
https://bugs.webkit.org/show_bug.cgi?id=207572
Summary
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sam...
Jonathan Bedard
Reported
2020-02-11 12:00:06 PST
This test flakily fails in automation:
https://results.webkit.org/?suite=javascriptcore-tests&test=stress%2Fdfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler
Added by Mark Lam in
r240616
.
Attachments
Add attachment
proposed patch, testcase, etc.
Alexey Proskuryakov
Comment 1
2020-02-11 15:23:15 PST
stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: Timed out after 587.000000 sec seconds! stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 1 0x10ff662b9 WTFCrash stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 2 0x10e7fd057 timeoutCheckCallback(JSC::VM&) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 3 0x11194fb00 JSC::VMTraps::handleTraps(JSC::JSGlobalObject*, JSC::CallFrame*, JSC::VMTraps::Mask) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 4 0x111276626 JSC::VM::handleTraps(JSC::JSGlobalObject*, JSC::CallFrame*, JSC::VMTraps::Mask) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 5 0x111276db4 JSC::Interpreter::executeCall(JSC::JSGlobalObject*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 6 0x111592dec JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 7 0x11179a0ab JSC::JSValue JSC::callToPrimitiveFunction<(JSC::TypeHintMode)1>(JSC::JSGlobalObject*, JSC::JSObject const*, JSC::PropertyName, JSC::PreferredPrimitiveType) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 8 0x11179994f JSC::JSObject::ordinaryToPrimitive(JSC::JSGlobalObject*, JSC::PreferredPrimitiveType) const stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 9 0x111783c53 JSC::JSObject::defaultValue(JSC::JSObject const*, JSC::JSGlobalObject*, JSC::PreferredPrimitiveType) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 10 0x11179a460 JSC::JSObject::toPrimitive(JSC::JSGlobalObject*, JSC::PreferredPrimitiveType) const stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 11 0x1116d9463 JSC::JSCell::toPrimitive(JSC::JSGlobalObject*, JSC::PreferredPrimitiveType) const stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 12 0x1104b4138 JSC::JSValue::toPrimitive(JSC::JSGlobalObject*, JSC::PreferredPrimitiveType) const stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 13 0x11131c423 JSC::JSValue::equalSlowCaseInline(JSC::JSGlobalObject*, JSC::JSValue, JSC::JSValue) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 14 0x11130a4c3 operationCompareEq stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 15 0x5159e7400ed9 stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 16 0x110462f03 vmEntryToJavaScript stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 17 0x111276887 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 18 0x111275f0c JSC::Interpreter::executeProgram(JSC::SourceCode const&, JSC::JSGlobalObject*, JSC::JSObject*) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 19 0x1115f3e9c JSC::evaluate(JSC::JSGlobalObject*, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 20 0x10e8342df runWithOptions(GlobalObject*, CommandLine&, bool&) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 21 0x10e805a1a jscmain(int, char**)::$_6::operator()(JSC::VM&, GlobalObject*, bool&) const stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 22 0x10e7e0d6b int runJSC<jscmain(int, char**)::$_6>(CommandLine const&, bool, jscmain(int, char**)::$_6 const&) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 23 0x10e7df7f8 jscmain(int, char**) stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 24 0x10e7df5ce main stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 25 0x7fff719c87fd start stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: 26 0x16 stress/dfg-to-string-on-string-object-does-not-gc.js.ftl-no-cjit-validate-sampling-profiler: test_script_11672: line 2: 4976 Segmentation fault: 11 ( "$@" ../../.vm/JavaScriptCore.framework/Helpers/jsc --useFTLJIT\=false --useFunctionDotArguments\=true --validateExceptionChecks\=true --useDollarVM\=true --maxPerThreadStackUsage\=1572864 --exceptionStackTraceLimit\=0 --defaultErrorStackTraceLimit\=0 --forceRAMSize\=1000000 --forceDebuggerBytecodeGeneration\=1 --useZombieMode\=1 --jitPolicyScale\=0 --collectContinuously\=1 --useConcurrentJIT\=0 --validateGraph\=true --useSamplingProfiler\=true --airForceIRCAllocator\=true --useFTLJIT\=true --useConcurrentJIT\=false --thresholdForJITAfterWarmUp\=100 --scribbleFreeCells\=true dfg-to-string-on-string-object-does-not-gc.js )
Note
You need to
log in
before you can comment on or make changes to this bug.
Top of Page
Format For Printing
XML
Clone This Bug