Skip to content

Instantly share code, notes, and snippets.

@Zekiah-A
Created February 22, 2024 20:55
Show Gist options
  • Select an option

  • Save Zekiah-A/2130eef5984a842bf80ced38d5fa1ab0 to your computer and use it in GitHub Desktop.

Select an option

Save Zekiah-A/2130eef5984a842bf80ced38d5fa1ab0 to your computer and use it in GitHub Desktop.
BunJs 1.0.28, JSC possibly native FII-related segmentation fault
DFG ASSERTION FAILED: Edge verification error: D@64->Check:Untyped:D@63 was expected to have type BytecodeTop but has type Int52Any (51539607552)
/webkit/Source/JavaScriptCore/dfg/DFGAbstractInterpreterInlines.h(187) : void JSC::DFG::AbstractInterpreter<JSC::DFG::InPlaceAbstractState>::verifyEdge(Node *, Edge) [AbstractStateType = JSC::DFG::InPlaceAbstra
ctState]
While handling node D@64
Graph at time of failure:
10: DFG for decodeGenResult#<no-hash>:[0x7f7a177189a0->0x7f7a17693790->0x7f7a178c2100, DFGFunctionCall, 347 (StrictMode)]:
10: Fixpoint state: FixpointNotConverged; Form: ThreadedCPS; Unification state: GloballyUnified; Ref count state: EverythingIsLive
10: Arguments for block#0: D@0, D@1
0 10: Block #0 (bc#0): (OSR target)
0 10: Execution count: 1.000000
0 10: Predecessors:
0 10: Successors:
0 10: Dominated by: #root #0
0 10: Dominates: #0
0 10: Dominance Frontier:
0 10: Iterated Dominance Frontier:
0 10: States: StructuresAreWatched
0 10: Vars Before: arg1:(BytecodeTop, TOP, TOP, none:StructuresAreClobbered) arg0:(BytecodeTop, TOP, TOP, none:StructuresAreClobbered)
0 10: Intersected Vars Before: arg1:(FullTop, TOP, TOP, none:StructuresAreClobbered) arg0:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc0:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc1:(Full
Top, TOP, TOP, none:StructuresAreClobbered) loc2:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc3:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc4:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc5
:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc6:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc7:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc8:(FullTop, TOP, TOP, none:StructuresAreClobbered
) loc9:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc10:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc11:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc12:(FullTop, TOP, TOP, none:StructuresAre
Clobbered) loc13:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc14:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc15:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc16:(FullTop, TOP, TOP, none:Str
ucturesAreClobbered) loc17:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc18:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc19:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc20:(FullTop, TOP, TOP
, none:StructuresAreClobbered) loc21:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc22:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc23:(FullTop, TOP, TOP, none:StructuresAreClobbered) loc24:(FullTop
, TOP, TOP, none:StructuresAreClobbered) loc25:(FullTop, TOP, TOP, none:StructuresAreClobbered)
0 10: Var Links: arg1:D@1 arg0:D@0
0 0 10: D@0:< 1:-> SetArgumentDefinitely(IsFlushed, this(A~<Object>/FlushedJSValue), W:SideState, bc#0, ExitValid) predicting OtherObj
1 0 10: D@1:< 1:-> SetArgumentDefinitely(IsFlushed, arg1(B~<AnyIntAsDouble>/FlushedJSValue), W:SideState, bc#0, ExitValid) predicting AnyIntAsDouble
2 0 10: D@2:< 1:-> JSConstant(JS|PureInt, Other, Undefined, bc#0, ExitValid)
3 0 10: D@3:<!0:-> MovHint(Check:Untyped:D@2, MustGen, loc0, W:SideState, ClobbersExit, bc#0, ExitValid)
4 0 10: D@4:< 1:-> SetLocal(Check:Untyped:D@2, loc0(C~<Other>/FlushedJSValue), W:Stack(loc0), bc#0, ExitInvalid) predicting Other
5 0 10: D@5:<!0:-> MovHint(Check:Untyped:D@2, MustGen, loc1, W:SideState, ClobbersExit, bc#0, ExitInvalid)
6 0 10: D@6:< 1:-> SetLocal(Check:Untyped:D@2, loc1(D~<Other>/FlushedJSValue), W:Stack(loc1), bc#0, ExitInvalid) predicting Other
7 0 10: D@7:<!0:-> MovHint(Check:Untyped:D@2, MustGen, loc2, W:SideState, ClobbersExit, bc#0, ExitInvalid)
8 0 10: D@8:< 1:-> SetLocal(Check:Untyped:D@2, loc2(E~<Other>/FlushedJSValue), W:Stack(loc2), bc#0, ExitInvalid) predicting Other
9 0 10: D@9:<!0:-> MovHint(Check:Untyped:D@2, MustGen, loc3, W:SideState, ClobbersExit, bc#0, ExitInvalid)
10 0 10: D@10:< 1:-> SetLocal(Check:Untyped:D@2, loc3(F~<Other>/FlushedJSValue), W:Stack(loc3), bc#0, ExitInvalid) predicting Other
11 0 10: D@11:<!0:-> MovHint(Check:Untyped:D@2, MustGen, loc4, W:SideState, ClobbersExit, bc#0, ExitInvalid)
12 0 10: D@12:< 1:-> SetLocal(Check:Untyped:D@2, loc4(G~<Other>/FlushedJSValue), W:Stack(loc4), bc#0, ExitInvalid) predicting Other
13 0 10: D@13:< 1:-> JSConstant(JS|PureInt, Function, Weak:Object: 0x7f7a17892e20 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %CJ:Function), StructureID: 39968, bc#0, ExitInvalid)
14 0 10: D@14:< 1:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, OtherObj, Weak:Object: 0x7f7a1768cfe0 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %CJy:JSModuleEnvi
ronment), StructureID: 75200, bc#0, ExitInvalid)
15 0 10: D@15:<!0:-> MovHint(Check:Untyped:D@14, MustGen, loc4, W:SideState, ClobbersExit, bc#0, ExitInvalid)
16 0 10: D@16:<!0:-> ExitOK(MustGen, W:SideState, bc#0, ExitValid)
17 0 10: D@17:<!0:-> InvalidationPoint(MustGen, W:SideState, Exits, bc#0, ExitValid)
18 0 10: D@18:< 1:-> SetLocal(Check:Untyped:D@14, loc4(H~<Object>/FlushedJSValue), W:Stack(loc4), bc#0, exit: bc#1, ExitValid) predicting OtherObj
19 0 10: D@19:< 1:-> JSConstant(JS|PureInt, Empty, <JSValue()>, bc#1, ExitValid)
20 0 10: D@20:<!0:-> MovHint(Check:Untyped:D@19, MustGen, loc5, W:SideState, ClobbersExit, bc#1, ExitValid)
21 0 10: D@21:< 1:-> SetLocal(Check:Untyped:D@19, loc5(I~/FlushedJSValue), W:Stack(loc5), bc#1, exit: bc#4, ExitValid) predicting Empty
22 0 10: D@22:<!0:-> MovHint(Check:Untyped:D@19, MustGen, loc6, W:SideState, ClobbersExit, bc#4, ExitValid)
23 0 10: D@23:< 1:-> SetLocal(Check:Untyped:D@19, loc6(J~/FlushedJSValue), W:Stack(loc6), bc#4, exit: bc#7, ExitValid) predicting Empty
24 0 10: D@24:<!0:-> MovHint(Check:Untyped:D@19, MustGen, loc7, W:SideState, ClobbersExit, bc#7, ExitValid)
25 0 10: D@25:< 1:-> SetLocal(Check:Untyped:D@19, loc7(K~/FlushedJSValue), W:Stack(loc7), bc#7, exit: bc#10, ExitValid) predicting Empty
26 0 10: D@26:<!0:-> MovHint(Check:Untyped:D@19, MustGen, loc8, W:SideState, ClobbersExit, bc#10, ExitValid)
27 0 10: D@27:< 1:-> SetLocal(Check:Untyped:D@19, loc8(L~/FlushedJSValue), W:Stack(loc8), bc#10, exit: bc#13, ExitValid) predicting Empty
28 0 10: D@28:<!0:-> MovHint(Check:Untyped:D@19, MustGen, loc9, W:SideState, ClobbersExit, bc#13, ExitValid)
29 0 10: D@29:< 1:-> SetLocal(Check:Untyped:D@19, loc9(M~/FlushedJSValue), W:Stack(loc9), bc#13, exit: bc#16, ExitValid) predicting Empty
30 0 10: D@30:< 1:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, OtherObj, Weak:Object: 0x7f7a1768cea0 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %CJy:JSModuleEnvi
ronment), StructureID: 75200, bc#16, ExitValid)
31 0 10: D@31:<!0:-> MovHint(Check:Untyped:D@30, MustGen, loc10, W:SideState, ClobbersExit, bc#16, ExitValid)
32 0 10: D@32:< 1:-> SetLocal(Check:Untyped:D@30, loc10(N~<Object>/FlushedJSValue), W:Stack(loc10), bc#16, exit: bc#23, ExitValid) predicting OtherObj
33 0 10: D@33:<!0:-> Check(MustGen, bc#23, ExitValid)
34 0 10: D@34:< 1:-> GetClosureVar(KnownCell:D@30, JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Function, scope2, R:ScopeProperties(2), bc#23, ExitValid) predicting Function
35 0 10: D@35:<!0:-> MovHint(Check:Untyped:D@34, MustGen, loc11, W:SideState, ClobbersExit, bc#23, ExitValid)
36 0 10: D@36:< 1:-> SetLocal(Check:Untyped:D@34, loc11(O~<Function>/FlushedJSValue), W:Stack(loc11), bc#23, exit: bc#32, ExitValid) predicting Function
37 0 10: D@37:<!0:-> CheckNotEmpty(Check:Untyped:D@34, MustGen, Exits, bc#32, ExitValid)
38 0 10: D@38:< 1:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, OtherObj, Weak:Object: 0x7f7a1768cea0 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %CJy:JSModuleEnvi
ronment), StructureID: 75200, bc#34, ExitValid)
39 0 10: D@39:<!0:-> MovHint(Check:Untyped:D@38, MustGen, loc18, W:SideState, ClobbersExit, bc#34, ExitValid)
40 0 10: D@40:< 1:-> SetLocal(Check:Untyped:D@38, loc18(P~<Object>/FlushedJSValue), W:Stack(loc18), bc#34, exit: bc#41, ExitValid) predicting OtherObj
41 0 10: D@41:<!0:-> Check(MustGen, bc#41, ExitValid)
42 0 10: D@42:< 1:-> GetClosureVar(KnownCell:D@38, JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Final, scope9, R:ScopeProperties(9), bc#41, ExitValid) predicting Final
43 0 10: D@43:<!0:-> MovHint(Check:Untyped:D@42, MustGen, loc19, W:SideState, ClobbersExit, bc#41, ExitValid)
44 0 10: D@44:< 1:-> SetLocal(Check:Untyped:D@42, loc19(Q~<Final>/FlushedJSValue), W:Stack(loc19), bc#41, exit: bc#50, ExitValid) predicting Final
45 0 10: D@45:<!0:-> CheckNotEmpty(Check:Untyped:D@42, MustGen, Exits, bc#50, ExitValid)
46 0 10: D@46:<!0:-> MovHint(Check:Untyped:D@42, MustGen, loc18, W:SideState, ClobbersExit, bc#52, ExitValid)
47 0 10: D@47:< 1:-> SetLocal(Check:Untyped:D@42, loc18(R~<Final>/FlushedJSValue), W:Stack(loc18), bc#52, exit: bc#55, ExitValid) predicting Final
48 0 10: D@48:<!0:-> FilterGetByStatus(Check:Untyped:D@42, MustGen, (Simple, <id='uid:(ptr)', [0x7f7900078410:[0x78410/492560, Object, (12/12, 0/0){f64:11, f32:10, intptr:9, u64:8, i64:7, i32:6, i16:
5, i8:4, ptr:3, u32:2, u16:1, u8:0}, NonArray, Proto:0x7f7a174e4280, Leaf]], [], offset = 3>, seenInJIT = true), W:SideState, bc#55, ExitValid)
49 0 10: D@49:<!0:-> Check(MustGen, bc#55, ExitValid)
50 0 10: D@50:<!0:-> CheckStructure(Check:Cell:D@42, MustGen, [%CG:Object], R:JSCell_structureID, Exits, bc#55, ExitValid)
51 0 10: D@51:< 1:-> GetByOffset(KnownCell:D@42, KnownCell:D@42, JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Function, id2{ptr}, 3, R:NamedProperties(2), bc#55, ExitValid) predicting Func
tion
52 0 10: D@52:<!0:-> MovHint(Check:Untyped:D@51, MustGen, loc13, W:SideState, ClobbersExit, bc#55, ExitValid)
53 0 10: D@53:< 1:-> SetLocal(Check:Untyped:D@51, loc13(S~<Function>/FlushedJSValue), W:Stack(loc13), bc#55, exit: bc#61, ExitValid) predicting Function
54 0 10: D@54:<!0:-> GetLocal(Check:Untyped:D@1, JS|MustGen|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, AnyIntAsDouble, arg1(B~<AnyIntAsDouble>/FlushedJSValue), R:Stack(arg1), bc#61, ExitVali
d) predicting AnyIntAsDouble
55 0 10: D@55:<!0:-> MovHint(Check:Untyped:D@54, MustGen, loc17, W:SideState, ClobbersExit, bc#61, ExitValid)
56 0 10: D@56:< 1:-> SetLocal(Check:Untyped:D@54, loc17(T~<AnyIntAsDouble>/FlushedJSValue), W:Stack(loc17), bc#61, exit: bc#64, ExitValid) predicting AnyIntAsDouble
57 0 10: D@57:< 1:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, BoolInt32, Int32: 0, bc#64, ExitValid)
58 0 10: D@58:<!0:-> MovHint(Check:Untyped:D@57, MustGen, loc16, W:SideState, ClobbersExit, bc#64, ExitValid)
59 0 10: D@59:< 1:-> SetLocal(Check:Untyped:D@57, loc16(U~<BoolInt32>/FlushedJSValue), W:Stack(loc16), bc#64, exit: bc#67, ExitValid) predicting BoolInt32
60 0 10: D@60:<!0:-> FilterCallLinkStatus(Check:Untyped:D@51, MustGen, (Function: Object: 0x7f7a178923e0 with butterfly 0x7f605308fba8(base=0x7f605308fb80) (Structure 0x7f7900009e50:[0x9e50/40528, Fu
nction, (0/0, 2/4){name:65, length:64}, NonArray, Proto:0x7f7a174e8370]), StructureID: 40528; Executable: NativeExecutable:0x563007786870/0x563007786870), W:SideState, bc#67, ExitValid)
61 0 10: D@61:<!0:-> CheckIsConstant(Check:Cell:D@51, MustGen, <0x7f7a178923e0, Function>, <host function>, Exits, bc#67, ExitValid)
62 0 10: D@62:<!0:-> Check(MustGen, bc#67, ExitValid)
63 0 10: D@264:<!0:-> CheckJSCast(Cell:D@42, MustGen, 0x563008fc76a0:[Object], Exits, bc#67, ExitValid)
64 0 10: D@268:< 1:-> Int52Rep(Check:AnyInt:D@54, Int52|PureInt, Int52Any, Exits, bc#67, ExitValid)
65 0 10: D@63:<!0:-> CallDOM(Cell:D@42, Int52Rep:D@268<Int52>, Int32:D@57, JS|MustGen|PureInt, AnyIntAsDouble, R:World, W:Heap, Exits, ClobbersExit, bc#67, ExitValid) predicting AnyIntAsDouble
66 0 10: D@64:<!0:-> MovHint(Check:Untyped:D@63, MustGen, loc13, W:SideState, ClobbersExit, bc#67, ExitInvalid)
67 0 10: D@65:<!0:-> Check(MustGen, bc#67, ExitInvalid)
68 0 10: D@66:<!0:-> Check(MustGen, bc#67, ExitInvalid)
69 0 10: D@67:<!0:-> Check(MustGen, bc#67, ExitInvalid)
70 0 10: D@68:<!0:-> Check(MustGen, bc#67, ExitInvalid)
71 0 10: D@272:<!0:-> InvalidationPoint(MustGen, W:SideState, Exits, bc#67, exit: bc#74, ExitValid)
72 0 10: D@69:< 1:-> SetLocal(Check:Untyped:D@63, loc13(V~<AnyIntAsDouble>/FlushedJSValue), W:Stack(loc13), bc#67, exit: bc#74, ExitValid) predicting AnyIntAsDouble
73 0 10: D@70:<!0:-> MovHint(Check:Untyped:D@34, MustGen, loc14, W:SideState, ClobbersExit, bc#74, ExitValid)
74 0 10: D@71:< 1:-> SetLocal(Check:Untyped:D@34, loc14(W~<Function>/FlushedJSValue), W:Stack(loc14), bc#74, exit: bc#77, ExitValid) predicting Function
75 0 10: D@72:<!0:-> FilterCallLinkStatus(Check:Untyped:D@34, MustGen, (Function: Object: 0x7f7a178925c0 with butterfly 0x7f605308fd68(base=0x7f605308fd40) (Structure 0x7f7900078aa0:[0x78aa0/494240,
Function, (0/0, 3/4){instanceFieldInitializer:66, prototype:65, homeObject:64}, NonArray, Proto:0x7f7a1744e860, Leaf]), StructureID: 494240; Executable: CString#<no-hash>:[0x7f7a17693880->0x7f7a178c1180, Baseli
neFunctionConstruct, 219 (StrictMode)]), W:SideState, bc#77, ExitValid)
76 0 10: D@73:<!0:-> Construct(Check:Untyped:D@34, Check:Untyped:D@34, Check:Untyped:D@63, JS|MustGen|VarArgs|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, StringObject, R:World, W:Heap, ExitsF
orExceptions, ClobbersExit, bc#77, ExitValid) predicting StringObject
77 0 10: D@74:<!0:-> MovHint(Check:Untyped:D@73, MustGen, loc9, W:SideState, ClobbersExit, bc#77, ExitInvalid)
78 0 10: D@273:<!0:-> InvalidationPoint(MustGen, W:SideState, Exits, bc#77, exit: bc#84, ExitValid)
79 0 10: D@75:< 1:-> SetLocal(Check:Untyped:D@73, loc9(X~<StringObject>/FlushedJSValue), W:Stack(loc9), bc#77, exit: bc#84, ExitValid) predicting StringObject
80 0 10: D@76:< 1:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, OtherObj, Weak:Object: 0x7f7a1768cea0 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %CJy:JSModuleEnvi
ronment), StructureID: 75200, bc#84, ExitValid)
81 0 10: D@77:<!0:-> MovHint(Check:Untyped:D@76, MustGen, loc10, W:SideState, ClobbersExit, bc#84, ExitValid)
82 0 10: D@78:< 1:-> SetLocal(Check:Untyped:D@76, loc10(Y~<Object>/FlushedJSValue), W:Stack(loc10), bc#84, exit: bc#91, ExitValid) predicting OtherObj
83 0 10: D@79:<!0:-> Check(MustGen, bc#91, ExitValid)
84 0 10: D@80:< 1:-> GetClosureVar(Check:KnownCell:D@76, JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Function, scope2, R:ScopeProperties(2), bc#91, ExitValid) predicting Function
85 0 10: D@81:<!0:-> MovHint(Check:Untyped:D@80, MustGen, loc11, W:SideState, ClobbersExit, bc#91, ExitValid)
86 0 10: D@82:< 1:-> SetLocal(Check:Untyped:D@80, loc11(Z~<Function>/FlushedJSValue), W:Stack(loc11), bc#91, exit: bc#100, ExitValid) predicting Function
87 0 10: D@83:<!0:-> CheckNotEmpty(Check:Untyped:D@80, MustGen, Exits, bc#100, ExitValid)
88 0 10: D@84:< 1:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, OtherObj, Weak:Object: 0x7f7a1768cea0 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %CJy:JSModuleEnvi
ronment), StructureID: 75200, bc#102, ExitValid)
89 0 10: D@85:<!0:-> MovHint(Check:Untyped:D@84, MustGen, loc18, W:SideState, ClobbersExit, bc#102, ExitValid)
90 0 10: D@86:< 1:-> SetLocal(Check:Untyped:D@84, loc18(AB~<Object>/FlushedJSValue), W:Stack(loc18), bc#102, exit: bc#109, ExitValid) predicting OtherObj
91 0 10: D@87:<!0:-> Check(MustGen, bc#109, ExitValid)
92 0 10: D@88:< 1:-> GetClosureVar(Check:KnownCell:D@84, JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Final, scope9, R:ScopeProperties(9), bc#109, ExitValid) predicting Final
93 0 10: D@89:<!0:-> MovHint(Check:Untyped:D@88, MustGen, loc19, W:SideState, ClobbersExit, bc#109, ExitValid)
94 0 10: D@90:< 1:-> SetLocal(Check:Untyped:D@88, loc19(BB~<Final>/FlushedJSValue), W:Stack(loc19), bc#109, exit: bc#118, ExitValid) predicting Final
95 0 10: D@91:<!0:-> CheckNotEmpty(Check:Untyped:D@88, MustGen, Exits, bc#118, ExitValid)
96 0 10: D@92:<!0:-> MovHint(Check:Untyped:D@88, MustGen, loc18, W:SideState, ClobbersExit, bc#120, ExitValid)
97 0 10: D@93:< 1:-> SetLocal(Check:Untyped:D@88, loc18(CB~<Final>/FlushedJSValue), W:Stack(loc18), bc#120, exit: bc#123, ExitValid) predicting Final
98 0 10: D@94:<!0:-> FilterGetByStatus(Check:Untyped:D@88, MustGen, (Simple, <id='uid:(ptr)', [0x7f7900078410:[0x78410/492560, Object, (12/12, 0/0){f64:11, f32:10, intptr:9, u64:8, i64:7, i32:6, i16:
5, i8:4, ptr:3, u32:2, u16:1, u8:0}, NonArray, Proto:0x7f7a174e4280, Leaf]], [], offset = 3>, seenInJIT = true), W:SideState, bc#123, ExitValid)
99 0 10: D@95:<!0:-> Check(MustGen, bc#123, ExitValid)
100 0 10: D@96:<!0:-> CheckStructure(Check:Cell:D@88, MustGen, [%CG:Object], R:JSCell_structureID, Exits, bc#123, ExitValid)
101 0 10: D@97:< 1:-> GetByOffset(Check:KnownCell:D@88, Check:KnownCell:D@88, JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Function, id2{ptr}, 3, R:NamedProperties(2), bc#123, ExitValid) pr
edicting Function
102 0 10: D@98:<!0:-> MovHint(Check:Untyped:D@97, MustGen, loc13, W:SideState, ClobbersExit, bc#123, ExitValid)
103 0 10: D@99:< 1:-> SetLocal(Check:Untyped:D@97, loc13(DB~<Function>/FlushedJSValue), W:Stack(loc13), bc#123, exit: bc#129, ExitValid) predicting Function
104 0 10: D@100:<!0:-> MovHint(Check:Untyped:D@54, MustGen, loc17, W:SideState, ClobbersExit, bc#129, ExitValid)
105 0 10: D@101:< 1:-> SetLocal(Check:Untyped:D@54, loc17(EB~<AnyIntAsDouble>/FlushedJSValue), W:Stack(loc17), bc#129, exit: bc#132, ExitValid) predicting AnyIntAsDouble
106 0 10: D@102:< 1:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, NonBoolInt32, Int32: 8, bc#132, ExitValid)
107 0 10: D@103:<!0:-> MovHint(Check:Untyped:D@102, MustGen, loc16, W:SideState, ClobbersExit, bc#132, ExitValid)
108 0 10: D@104:< 1:-> SetLocal(Check:Untyped:D@102, loc16(FB~<Int32>/FlushedJSValue), W:Stack(loc16), bc#132, exit: bc#135, ExitValid) predicting NonBoolInt32
109 0 10: D@105:<!0:-> FilterCallLinkStatus(Check:Untyped:D@97, MustGen, (Function: Object: 0x7f7a178923e0 with butterfly 0x7f605308fba8(base=0x7f605308fb80) (Structure 0x7f7900009e50:[0x9e50/40528, Fu
nction, (0/0, 2/4){name:65, length:64}, NonArray, Proto:0x7f7a174e8370]), StructureID: 40528; Executable: NativeExecutable:0x563007786870/0x563007786870), W:SideState, bc#135, ExitValid)
110 0 10: D@106:<!0:-> CheckIsConstant(Check:Cell:D@97, MustGen, <0x7f7a178923e0, Function>, <host function>, Exits, bc#135, ExitValid)
111 0 10: D@107:<!0:-> Check(MustGen, bc#135, ExitValid)
112 0 10: D@265:<!0:-> CheckJSCast(Check:Cell:D@88, MustGen, 0x563008fc76a0:[Object], Exits, bc#135, ExitValid)
113 0 10: D@269:< 1:-> Int52Rep(Check:AnyInt:D@54, Int52|PureInt, Int52Any, Exits, bc#135, ExitValid)
114 0 10: D@108:<!0:-> CallDOM(Check:Cell:D@88, Check:Int52Rep:D@269<Int52>, Check:Int32:D@102, JS|MustGen|PureInt, AnyIntAsDouble, R:World, W:Heap, Exits, ClobbersExit, bc#135, ExitValid) predicting
AnyIntAsDouble
115 0 10: D@109:<!0:-> MovHint(Check:Untyped:D@108, MustGen, loc13, W:SideState, ClobbersExit, bc#135, ExitInvalid)
116 0 10: D@110:<!0:-> Check(MustGen, bc#135, ExitInvalid)
117 0 10: D@111:<!0:-> Check(MustGen, bc#135, ExitInvalid)
118 0 10: D@112:<!0:-> Check(MustGen, bc#135, ExitInvalid)
119 0 10: D@113:<!0:-> Check(MustGen, bc#135, ExitInvalid)
120 0 10: D@274:<!0:-> InvalidationPoint(MustGen, W:SideState, Exits, bc#135, exit: bc#142, ExitValid)
121 0 10: D@114:< 1:-> SetLocal(Check:Untyped:D@108, loc13(GB~<AnyIntAsDouble>/FlushedJSValue), W:Stack(loc13), bc#135, exit: bc#142, ExitValid) predicting AnyIntAsDouble
122 0 10: D@115:<!0:-> MovHint(Check:Untyped:D@80, MustGen, loc14, W:SideState, ClobbersExit, bc#142, ExitValid)
123 0 10: D@116:< 1:-> SetLocal(Check:Untyped:D@80, loc14(HB~<Function>/FlushedJSValue), W:Stack(loc14), bc#142, exit: bc#145, ExitValid) predicting Function
124 0 10: D@117:<!0:-> FilterCallLinkStatus(Check:Untyped:D@80, MustGen, (Function: Object: 0x7f7a178925c0 with butterfly 0x7f605308fd68(base=0x7f605308fd40) (Structure 0x7f7900078aa0:[0x78aa0/494240,
Function, (0/0, 3/4){instanceFieldInitializer:66, prototype:65, homeObject:64}, NonArray, Proto:0x7f7a1744e860, Leaf]), StructureID: 494240; Executable: CString#<no-hash>:[0x7f7a17693880->0x7f7a178c1180, Baseli
neFunctionConstruct, 219 (StrictMode)]), W:SideState, bc#145, ExitValid)
125 0 10: D@118:<!0:-> Construct(Check:Untyped:D@80, Check:Untyped:D@80, Check:Untyped:D@108, JS|MustGen|VarArgs|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, StringObject, R:World, W:Heap, Exit$
125 0 10: D@118:<!0:-> Construct(Check:Untyped:D@80, Check:Untyped:D@80, Check:Untyped:D@108, JS|MustGen|VarArgs|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, StringObject, R:World, W:Heap, Exits
ForExceptions, ClobbersExit, bc#145, ExitValid) predicting StringObject
126 0 10: D@119:<!0:-> MovHint(Check:Untyped:D@118, MustGen, loc8, W:SideState, ClobbersExit, bc#145, ExitInvalid)
127 0 10: D@275:<!0:-> InvalidationPoint(MustGen, W:SideState, Exits, bc#145, exit: bc#152, ExitValid)
128 0 10: D@120:< 1:-> SetLocal(Check:Untyped:D@118, loc8(IB~<StringObject>/FlushedJSValue), W:Stack(loc8), bc#145, exit: bc#152, ExitValid) predicting StringObject
129 0 10: D@121:< 1:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, OtherObj, Weak:Object: 0x7f7a1768cea0 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %CJy:JSModuleEnvi
ronment), StructureID: 75200, bc#152, ExitValid)
130 0 10: D@122:<!0:-> MovHint(Check:Untyped:D@121, MustGen, loc14, W:SideState, ClobbersExit, bc#152, ExitValid)
131 0 10: D@123:< 1:-> SetLocal(Check:Untyped:D@121, loc14(JB~<Object>/FlushedJSValue), W:Stack(loc14), bc#152, exit: bc#159, ExitValid) predicting OtherObj
132 0 10: D@124:<!0:-> Check(MustGen, bc#159, ExitValid)
133 0 10: D@125:< 1:-> GetClosureVar(Check:KnownCell:D@121, JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Final, scope9, R:ScopeProperties(9), bc#159, ExitValid) predicting Final
134 0 10: D@126:<!0:-> MovHint(Check:Untyped:D@125, MustGen, loc15, W:SideState, ClobbersExit, bc#159, ExitValid)
135 0 10: D@127:< 1:-> SetLocal(Check:Untyped:D@125, loc15(KB~<Final>/FlushedJSValue), W:Stack(loc15), bc#159, exit: bc#168, ExitValid) predicting Final
136 0 10: D@128:<!0:-> CheckNotEmpty(Check:Untyped:D@125, MustGen, Exits, bc#168, ExitValid)
137 0 10: D@129:<!0:-> MovHint(Check:Untyped:D@125, MustGen, loc14, W:SideState, ClobbersExit, bc#170, ExitValid)
138 0 10: D@130:< 1:-> SetLocal(Check:Untyped:D@125, loc14(LB~<Final>/FlushedJSValue), W:Stack(loc14), bc#170, exit: bc#173, ExitValid) predicting Final
139 0 10: D@131:<!0:-> FilterGetByStatus(Check:Untyped:D@125, MustGen, (Simple, <id='uid:(ptr)', [0x7f7900078410:[0x78410/492560, Object, (12/12, 0/0){f64:11, f32:10, intptr:9, u64:8, i64:7, i32:6, i16
:5, i8:4, ptr:3, u32:2, u16:1, u8:0}, NonArray, Proto:0x7f7a174e4280, Leaf]], [], offset = 3>, seenInJIT = true), W:SideState, bc#173, ExitValid)
140 0 10: D@132:<!0:-> Check(MustGen, bc#173, ExitValid)
141 0 10: D@133:<!0:-> CheckStructure(Check:Cell:D@125, MustGen, [%CG:Object], R:JSCell_structureID, Exits, bc#173, ExitValid)
142 0 10: D@134:< 1:-> GetByOffset(Check:KnownCell:D@125, Check:KnownCell:D@125, JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Function, id2{ptr}, 3, R:NamedProperties(2), bc#173, ExitValid)
predicting Function
143 0 10: D@135:<!0:-> MovHint(Check:Untyped:D@134, MustGen, loc10, W:SideState, ClobbersExit, bc#173, ExitValid)
144 0 10: D@136:< 1:-> SetLocal(Check:Untyped:D@134, loc10(MB~<Function>/FlushedJSValue), W:Stack(loc10), bc#173, exit: bc#179, ExitValid) predicting Function
145 0 10: D@137:<!0:-> MovHint(Check:Untyped:D@54, MustGen, loc13, W:SideState, ClobbersExit, bc#179, ExitValid)
146 0 10: D@138:< 1:-> SetLocal(Check:Untyped:D@54, loc13(NB~<AnyIntAsDouble>/FlushedJSValue), W:Stack(loc13), bc#179, exit: bc#182, ExitValid) predicting AnyIntAsDouble
147 0 10: D@139:< 1:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, NonBoolInt32, Int32: 16, bc#182, ExitValid)
148 0 10: D@140:<!0:-> MovHint(Check:Untyped:D@139, MustGen, loc12, W:SideState, ClobbersExit, bc#182, ExitValid)
149 0 10: D@141:< 1:-> SetLocal(Check:Untyped:D@139, loc12(OB~<Int32>/FlushedJSValue), W:Stack(loc12), bc#182, exit: bc#185, ExitValid) predicting NonBoolInt32
150 0 10: D@142:<!0:-> FilterCallLinkStatus(Check:Untyped:D@134, MustGen, (Function: Object: 0x7f7a178923e0 with butterfly 0x7f605308fba8(base=0x7f605308fb80) (Structure 0x7f7900009e50:[0x9e50/40528, F
unction, (0/0, 2/4){name:65, length:64}, NonArray, Proto:0x7f7a174e8370]), StructureID: 40528; Executable: NativeExecutable:0x563007786870/0x563007786870), W:SideState, bc#185, ExitValid)
151 0 10: D@143:<!0:-> CheckIsConstant(Check:Cell:D@134, MustGen, <0x7f7a178923e0, Function>, <host function>, Exits, bc#185, ExitValid)
152 0 10: D@144:<!0:-> Check(MustGen, bc#185, ExitValid)
153 0 10: D@266:<!0:-> CheckJSCast(Check:Cell:D@125, MustGen, 0x563008fc76a0:[Object], Exits, bc#185, ExitValid)
154 0 10: D@270:< 1:-> Int52Rep(Check:AnyInt:D@54, Int52|PureInt, Int52Any, Exits, bc#185, ExitValid)
155 0 10: D@145:<!0:-> CallDOM(Check:Cell:D@125, Check:Int52Rep:D@270<Int52>, Check:Int32:D@139, JS|MustGen|PureInt, AnyIntAsDouble, R:World, W:Heap, Exits, ClobbersExit, bc#185, ExitValid) predicting
AnyIntAsDouble
156 0 10: D@146:<!0:-> MovHint(Check:Untyped:D@145, MustGen, loc5, W:SideState, ClobbersExit, bc#185, ExitInvalid)
157 0 10: D@147:<!0:-> Check(MustGen, bc#185, ExitInvalid)
158 0 10: D@148:<!0:-> Check(MustGen, bc#185, ExitInvalid)
159 0 10: D@149:<!0:-> Check(MustGen, bc#185, ExitInvalid)
160 0 10: D@150:<!0:-> Check(MustGen, bc#185, ExitInvalid)
161 0 10: D@276:<!0:-> InvalidationPoint(MustGen, W:SideState, Exits, bc#185, exit: bc#192, ExitValid)
162 0 10: D@151:< 1:-> SetLocal(Check:Untyped:D@145, loc5(PB~<AnyIntAsDouble>/FlushedJSValue), W:Stack(loc5), bc#185, exit: bc#192, ExitValid) predicting AnyIntAsDouble
163 0 10: D@152:< 1:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, OtherObj, Weak:Object: 0x7f7a1768cea0 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %CJy:JSModuleEnvi
ronment), StructureID: 75200, bc#192, ExitValid)
164 0 10: D@153:<!0:-> MovHint(Check:Untyped:D@152, MustGen, loc14, W:SideState, ClobbersExit, bc#192, ExitValid)
165 0 10: D@154:< 1:-> SetLocal(Check:Untyped:D@152, loc14(QB~<Object>/FlushedJSValue), W:Stack(loc14), bc#192, exit: bc#199, ExitValid) predicting OtherObj
166 0 10: D@155:<!0:-> Check(MustGen, bc#199, ExitValid)
167 0 10: D@156:< 1:-> GetClosureVar(Check:KnownCell:D@152, JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Final, scope9, R:ScopeProperties(9), bc#199, ExitValid) predicting Final [210/1698]
168 0 10: D@157:<!0:-> MovHint(Check:Untyped:D@156, MustGen, loc15, W:SideState, ClobbersExit, bc#199, ExitValid)
169 0 10: D@158:< 1:-> SetLocal(Check:Untyped:D@156, loc15(RB~<Final>/FlushedJSValue), W:Stack(loc15), bc#199, exit: bc#208, ExitValid) predicting Final
170 0 10: D@159:<!0:-> CheckNotEmpty(Check:Untyped:D@156, MustGen, Exits, bc#208, ExitValid)
171 0 10: D@160:<!0:-> MovHint(Check:Untyped:D@156, MustGen, loc14, W:SideState, ClobbersExit, bc#210, ExitValid)
172 0 10: D@161:< 1:-> SetLocal(Check:Untyped:D@156, loc14(SB~<Final>/FlushedJSValue), W:Stack(loc14), bc#210, exit: bc#213, ExitValid) predicting Final
173 0 10: D@162:<!0:-> FilterGetByStatus(Check:Untyped:D@156, MustGen, (Simple, <id='uid:(u32)', [0x7f7900078410:[0x78410/492560, Object, (12/12, 0/0){f64:11, f32:10, intptr:9, u64:8, i64:7, i32:6, i16
:5, i8:4, ptr:3, u32:2, u16:1, u8:0}, NonArray, Proto:0x7f7a174e4280, Leaf]], [], offset = 2>, seenInJIT = true), W:SideState, bc#213, ExitValid)
174 0 10: D@163:<!0:-> Check(MustGen, bc#213, ExitValid)
175 0 10: D@164:<!0:-> CheckStructure(Check:Cell:D@156, MustGen, [%CG:Object], R:JSCell_structureID, Exits, bc#213, ExitValid)
176 0 10: D@165:< 1:-> GetByOffset(Check:KnownCell:D@156, Check:KnownCell:D@156, JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Function, id3{u32}, 2, R:NamedProperties(3), bc#213, ExitValid)
predicting Function
177 0 10: D@166:<!0:-> MovHint(Check:Untyped:D@165, MustGen, loc10, W:SideState, ClobbersExit, bc#213, ExitValid)
178 0 10: D@167:< 1:-> SetLocal(Check:Untyped:D@165, loc10(TB~<Function>/FlushedJSValue), W:Stack(loc10), bc#213, exit: bc#219, ExitValid) predicting Function
179 0 10: D@168:<!0:-> MovHint(Check:Untyped:D@54, MustGen, loc13, W:SideState, ClobbersExit, bc#219, ExitValid)
180 0 10: D@169:< 1:-> SetLocal(Check:Untyped:D@54, loc13(UB~<AnyIntAsDouble>/FlushedJSValue), W:Stack(loc13), bc#219, exit: bc#222, ExitValid) predicting AnyIntAsDouble
181 0 10: D@170:< 1:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, NonBoolInt32, Int32: 24, bc#222, ExitValid)
182 0 10: D@171:<!0:-> MovHint(Check:Untyped:D@170, MustGen, loc12, W:SideState, ClobbersExit, bc#222, ExitValid)
183 0 10: D@172:< 1:-> SetLocal(Check:Untyped:D@170, loc12(VB~<Int32>/FlushedJSValue), W:Stack(loc12), bc#222, exit: bc#225, ExitValid) predicting NonBoolInt32
184 0 10: D@173:<!0:-> FilterCallLinkStatus(Check:Untyped:D@165, MustGen, (Function: Object: 0x7f7a178923c0 with butterfly 0x7f605308fb88(base=0x7f605308fb60) (Structure 0x7f7900009e50:[0x9e50/40528, F
unction, (0/0, 2/4){name:65, length:64}, NonArray, Proto:0x7f7a174e8370]), StructureID: 40528; Executable: NativeExecutable:0x5630077866a0/0x5630077866a0), W:SideState, bc#225, ExitValid)
185 0 10: D@174:<!0:-> CheckIsConstant(Check:Cell:D@165, MustGen, <0x7f7a178923c0, Function>, <host function>, Exits, bc#225, ExitValid)
186 0 10: D@175:<!0:-> Check(MustGen, bc#225, ExitValid)
187 0 10: D@267:<!0:-> CheckJSCast(Check:Cell:D@156, MustGen, 0x563008fc76a0:[Object], Exits, bc#225, ExitValid)
188 0 10: D@271:< 1:-> Int52Rep(Check:AnyInt:D@54, Int52|PureInt, Int52Any, Exits, bc#225, ExitValid)
189 0 10: D@176:<!0:-> CallDOM(Check:Cell:D@156, Check:Int52Rep:D@271<Int52>, Check:Int32:D@170, JS|MustGen|PureInt, NonBoolInt32, R:World, W:Heap, Exits, ClobbersExit, bc#225, ExitValid) predicting N
onBoolInt32
190 0 10: D@177:<!0:-> MovHint(Check:Untyped:D@176, MustGen, loc6, W:SideState, ClobbersExit, bc#225, ExitInvalid)
191 0 10: D@178:<!0:-> Check(MustGen, bc#225, ExitInvalid)
192 0 10: D@179:<!0:-> Check(MustGen, bc#225, ExitInvalid)
193 0 10: D@180:<!0:-> Check(MustGen, bc#225, ExitInvalid)
194 0 10: D@181:<!0:-> Check(MustGen, bc#225, ExitInvalid)
195 0 10: D@277:<!0:-> InvalidationPoint(MustGen, W:SideState, Exits, bc#225, exit: bc#232, ExitValid)
196 0 10: D@182:< 1:-> SetLocal(Check:Untyped:D@176, loc6(WB~<Int32>/FlushedJSValue), W:Stack(loc6), bc#225, exit: bc#232, ExitValid) predicting NonBoolInt32
197 0 10: D@183:<!0:-> Check(MustGen, bc#232, ExitValid)
198 0 10: D@184:< 1:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, OtherObj, Weak:Object: 0x7f7a1768cfe0 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %CJy:JSModuleEnvi
ronment), StructureID: 75200, bc#232, ExitValid)
199 0 10: D@185:<!0:-> MovHint(Check:Untyped:D@184, MustGen, loc14, W:SideState, ClobbersExit, bc#232, ExitValid)
200 0 10: D@186:< 1:-> SetLocal(Check:Untyped:D@184, loc14(XB~<Object>/FlushedJSValue), W:Stack(loc14), bc#232, exit: bc#239, ExitValid) predicting OtherObj
201 0 10: D@187:<!0:-> Check(MustGen, bc#239, ExitValid)
202 0 10: D@188:< 1:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Function, Weak:Object: 0x7f7a17892e00 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %CJ:Function), St
ructureID: 39968, bc#239, ExitValid)
203 0 10: D@189:<!0:-> MovHint(Check:Untyped:D@188, MustGen, loc10, W:SideState, ClobbersExit, bc#239, ExitValid)
204 0 10: D@190:< 1:-> SetLocal(Check:Untyped:D@188, loc10(YB~<Function>/FlushedJSValue), W:Stack(loc10), bc#239, exit: bc#248, ExitValid) predicting Function
205 0 10: D@191:<!0:-> CheckNotEmpty(Check:Untyped:D@188, MustGen, Exits, bc#248, ExitValid)
206 0 10: D@192:< 1:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, OtherObj, Weak:Object: 0x7f7a1768cea0 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %CJy:JSModuleEnvi
ronment), StructureID: 75200, bc#250, ExitValid)
207 0 10: D@193:<!0:-> MovHint(Check:Untyped:D@192, MustGen, loc20, W:SideState, ClobbersExit, bc#250, ExitValid)
208 0 10: D@194:< 1:-> SetLocal(Check:Untyped:D@192, loc20(ZB~<Object>/FlushedJSValue), W:Stack(loc20), bc#250, exit: bc#257, ExitValid) predicting OtherObj
209 0 10: D@195:<!0:-> Check(MustGen, bc#257, ExitValid)
210 0 10: D@196:< 1:-> GetClosureVar(Check:KnownCell:D@192, JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Function, scope11, R:ScopeProperties(11), bc#257, ExitValid) predicting Function
211 0 10: D@197:<!0:-> MovHint(Check:Untyped:D@196, MustGen, loc13, W:SideState, ClobbersExit, bc#257, ExitValid)
212 0 10: D@198:< 1:-> SetLocal(Check:Untyped:D@196, loc13(AC~<Function>/FlushedJSValue), W:Stack(loc13), bc#257, exit: bc#266, ExitValid) predicting Function
213 0 10: D@199:<!0:-> CheckNotEmpty(Check:Untyped:D@196, MustGen, Exits, bc#266, ExitValid)
214 0 10: D@200:<!0:-> MovHint(Check:Untyped:D@145, MustGen, loc19, W:SideState, ClobbersExit, bc#268, ExitValid)
215 0 10: D@201:< 1:-> SetLocal(Check:Untyped:D@145, loc19(BC~<AnyIntAsDouble>/FlushedJSValue), W:Stack(loc19), bc#268, exit: bc#271, ExitValid) predicting AnyIntAsDouble
216 0 10: D@202:<!0:-> MovHint(Check:Untyped:D@57, MustGen, loc18, W:SideState, ClobbersExit, bc#271, ExitValid)
217 0 10: D@203:< 1:-> SetLocal(Check:Untyped:D@57, loc18(CC~<BoolInt32>/FlushedJSValue), W:Stack(loc18), bc#271, exit: bc#274, ExitValid) predicting BoolInt32
218 0 10: D@204:<!0:-> MovHint(Check:Untyped:D@176, MustGen, loc17, W:SideState, ClobbersExit, bc#274, ExitValid)
219 0 10: D@205:< 1:-> SetLocal(Check:Untyped:D@176, loc17(DC~<Int32>/FlushedJSValue), W:Stack(loc17), bc#274, exit: bc#277, ExitValid) predicting NonBoolInt32
220 0 10: D@206:<!0:-> FilterCallLinkStatus(Check:Untyped:D@196, MustGen, (Function: Object: 0x7f7a178c4580 with butterfly 0x7f605308fac8(base=0x7f605308faa0) (Structure 0x7f790006f9e0:[0x6f9e0/457184,
Function, (0/0, 2/4){name:65, length:64}, NonArray, Proto:0x7f7a174e8370]), StructureID: 457184; Executable: NativeExecutable:0x5630068b0a40/0x5630068b0a40), W:SideState, bc#277, ExitValid)
221 0 10: D@207:<!0:-> Call(Check:Untyped:D@196, Check:Untyped:D@192, Check:Untyped:D@145, Check:Untyped:D@57, Check:Untyped:D@176, JS|MustGen|VarArgs|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther
, OtherObj, R:World, W:Heap, ExitsForExceptions, ClobbersExit, bc#277, ExitValid) predicting OtherObj
222 0 10: D@208:<!0:-> MovHint(Check:Untyped:D@207, MustGen, loc13, W:SideState, ClobbersExit, bc#277, ExitInvalid)
223 0 10: D@278:<!0:-> InvalidationPoint(MustGen, W:SideState, Exits, bc#277, exit: bc#284, ExitValid)
224 0 10: D@209:< 1:-> SetLocal(Check:Untyped:D@207, loc13(EC~<Object>/FlushedJSValue), W:Stack(loc13), bc#277, exit: bc#284, ExitValid) predicting OtherObj
225 0 10: D@210:<!0:-> FilterCallLinkStatus(Check:Untyped:D@188, MustGen, Statically Proved, (Function: Object: 0x7f7a17892e00 with butterfly (nil)(base=0xfffffffffffffff8) (Structure 0x7f7900009c20:[0
x9c20/39968, Function, (0/0, 0/0){}, NonArray, Proto:0x7f7a174e8370]), StructureID: 39968; Executable: copy#<no-hash>:[0x7f7a177188b0->0x7f7a17693b50->0x7f7a178c2080, DFGFunctionCall, 104 (DidTryToEnterInLoop)
(StrictMode)]), W:SideState, bc#284, ExitValid)
226 0 10: D@211:<!0:-> DirectCall(Check:Untyped:D@188, Check:Untyped:D@184, Check:Untyped:D@207, JS|MustGen|VarArgs|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, OtherObj, <0x7f7a178c2080, Functi
onExecutable>, copy#<no-hash>/<nogen>:[0x7f7a178c2080], R:World, W:Heap, Exits, ClobbersExit, bc#284, ExitValid) predicting OtherObj
227 0 10: D@212:<!0:-> MovHint(Check:Untyped:D@211, MustGen, loc7, W:SideState, ClobbersExit, bc#284, ExitInvalid)
228 0 10: D@279:<!0:-> InvalidationPoint(MustGen, W:SideState, Exits, bc#284, exit: bc#291, ExitValid)
229 0 10: D@213:< 1:-> SetLocal(Check:Untyped:D@211, loc7(FC~<Object>/FlushedJSValue), W:Stack(loc7), bc#284, exit: bc#291, ExitValid) predicting OtherObj
230 0 10: D@214:< 1:-> NewObject(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Final, %Bs:Object, R:HeapObjectCount, W:HeapObjectCount, Exits, bc#291, ExitValid)
231 0 10: D@215:<!0:-> MovHint(Check:Untyped:D@214, MustGen, loc10, W:SideState, ClobbersExit, bc#291, ExitValid)
232 0 10: D@216:< 1:-> SetLocal(Check:Untyped:D@214, loc10(GC~<Final>/FlushedJSValue), W:Stack(loc10), bc#291, exit: bc#295, ExitValid) predicting Final
233 0 10: D@217:<!0:-> MovHint(Check:Untyped:D@73, MustGen, loc12, W:SideState, ClobbersExit, bc#295, ExitValid)
234 0 10: D@218:< 1:-> SetLocal(Check:Untyped:D@73, loc12(HC~<StringObject>/FlushedJSValue), W:Stack(loc12), bc#295, exit: bc#298, ExitValid) predicting StringObject
235 0 10: D@219:<!0:-> FilterGetByStatus(Check:Untyped:D@73, MustGen, (Simple, <id='uid:(toString)', [0x7f7900098870:[0x98870/624752, String, (0/0, 4/4){#cachedArrayBuffer:67, byteLength:66, byteOffset
:65, ptr:64}, NonArray, Proto:0x7f7a178642a0, Leaf (Watched)]], [<Object: 0x7f7a178642a0 with butterfly (nil)(base=0xfffffffffffffff8) (Structure 0x7f7900098480:[0x98480/623744, Object, (2/2, 0/0){arrayBuffer:1
, constructor:0}, NonArray, Proto:0x7f7a5901e9c8, Leaf (Watched)]), StructureID: 623744: Absence of toString with prototype Object: 0x7f7a5901e9c8 with butterfly 0x7f6053010b68(base=0x7f6053010960) (Structure 0
x7f79000648e0:[0x648e0/411872, String, (0/0, 42/64){replaceAll:105, replace:104, repeat:103, padStart:102, padEnd:101, match:100, split:99, toString:64, valueOf:65, charAt:66, charCodeAt:67, codePointAt:68, ind
exOf:69, lastIndexOf:70, replaceUsingRegExp:71, replaceUsingStringSearch:72, replaceAllUsingStringSearch:73, slice:74, substr:75, substring:76, toLowerCase:77, toUpperCase:78, localeCompare:79, toLocaleLowerCas
e:80, toLocaleUpperCase:81, trim:82, startsWith:83, endsWith:84, includes:85, normalize:86, charCodeAt:87, at:88, trimStart:89, trimLeft:90, trimEnd:91, trimRight:92, Symbol.iterator:93, substr:94, endsWith:95,
isWellFormed:96, toWellFormed:97, constructor:98}, NonArray, Proto:0x7f7a174e4280, Leaf (Watched)]), StructureID: 411872>, <Object: 0x7f7a5901e9c8 with butterfly 0x7f6053010b68(base=0x7f6053010960) (Structure
0x7f79000648e0:[0x648e0/411872, String, (0/0, 42/64){replaceAll:105, replace:104, repeat:103, padStart:102, padEnd:101, match:100, split:99, toString:64, valueOf:65, charAt:66, charCodeAt:67, codePointAt:68, in
dexOf:69, lastIndexOf:70, replaceUsingRegExp:71, replaceUsingStringSearch:72, replaceAllUsingStringSearch:73, slice:74, substr:75, substring:76, toLowerCase:77, toUpperCase:78, localeCompare:79, toLocaleLowerCa
se:80, toLocaleUpperCase:81, trim:82, startsWith:83, endsWith:84, includes:85, normalize:86, charCodeAt:87, at:88, trimStart:89, trimLeft:90, trimEnd:91, trimRight:92, Symbol.iterator:93, substr:94, endsWith:95
, isWellFormed:96, toWellFormed:97, constructor:98}, NonArray, Proto:0x7f7a174e4280, Leaf (Watched)]), StructureID: 411872: Presence of toString at 64 with attributes 4>], offset = 64>, seenInJIT = true), W:Sid
eState, bc#298, ExitValid)
236 0 10: D@220:<!0:-> Check(MustGen, bc#298, ExitValid)
237 0 10: D@221:<!0:-> CheckStructure(Check:Cell:D@73, MustGen, [%BF:String], R:JSCell_structureID, Exits, bc#298, ExitValid)
238 0 10: D@222:< 1:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Function, Weak:Object: 0x7f7a1744e200 with butterfly 0x7f6053001f08(base=0x7f6053001ee0) (Structure %B1:Function
), StructureID: 40528, bc#298, ExitValid)
239 0 10: D@223:<!0:-> MovHint(Check:Untyped:D@222, MustGen, loc11, W:SideState, ClobbersExit, bc#298, ExitValid)
240 0 10: D@224:< 1:-> SetLocal(Check:Untyped:D@222, loc11(IC~<Function>/FlushedJSValue), W:Stack(loc11), bc#298, exit: bc#304, ExitValid) predicting Function
241 0 10: D@225:<!0:-> FilterCallLinkStatus(Check:Untyped:D@222, MustGen, Statically Proved, (Function: Object: 0x7f7a1744e200 with butterfly 0x7f6053001f08(base=0x7f6053001ee0) (Structure 0x[112/1698]
50:[0x9e50/40528, Function, (0/0, 2/4){name:65, length:64}, NonArray, Proto:0x7f7a174e8370]), StructureID: 40528; Executable: NativeExecutable:0x56300897d310/0x563008700fb0), W:SideState, bc#304, ExitValid)
242 0 10: D@226:<!0:-> CheckIsConstant(Check:Cell:D@222, MustGen, <0x7f7a1744e200, Function>, <host function>, Exits, bc#304, ExitValid)
243 0 10: D@227:<!0:-> Check(MustGen, bc#304, ExitValid)
244 0 10: D@228:< 1:-> ToString(Check:StringObject:D@73, JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, String, Exits, bc#304, ExitValid)
245 0 10: D@229:<!0:-> MovHint(Check:Untyped:D@228, MustGen, loc11, W:SideState, ClobbersExit, bc#304, ExitInvalid)
246 0 10: D@230:<!0:-> Check(MustGen, bc#304, ExitInvalid)
247 0 10: D@231:<!0:-> Check(MustGen, bc#304, ExitInvalid)
248 0 10: D@232:< 1:-> SetLocal(Check:Untyped:D@228, loc11(JC~<String>/FlushedJSValue), W:Stack(loc11), bc#304, exit: bc#311, ExitValid) predicting String
249 0 10: D@233:<!0:-> FilterPutByStatus(Check:Untyped:D@214, MustGen, (Simple, <id='uid:(answer)', Transition: [0x7f790000ec50:[0xec50/60496, Object, (0/4, 0/0){}, NonArray, Proto:0x7f7a174e4280]] to
0x7f79000988e0:[0x988e0/624864, Object, (1/4, 0/0){answer:0}, NonArray, Proto:0x7f7a174e4280], [[]], offset = 0, >), W:SideState, bc#311, ExitValid)
250 0 10: D@234:<!0:-> CheckStructure(Check:Cell:D@214, MustGen, [%Bs:Object], R:JSCell_structureID, Exits, bc#311, ExitValid)
251 0 10: D@235:<!0:-> PutByOffset(Check:KnownCell:D@214, Check:KnownCell:D@214, Check:Untyped:D@228, MustGen, id7{answer}, 0, W:NamedProperties(7), ClobbersExit, bc#311, ExitValid)
252 0 10: D@236:<!0:-> PutStructure(Check:KnownCell:D@214, MustGen, %Bs:Object -> %EU:Object, ID:624864, R:JSObject_butterfly, W:JSCell_indexingType,JSCell_structureID,JSCell_typeInfoFlags, ClobbersExi
t, bc#311, ExitInvalid)
253 0 10: D@237:<!0:-> MovHint(Check:Untyped:D@118, MustGen, loc12, W:SideState, ClobbersExit, bc#317, ExitValid)
254 0 10: D@238:< 1:-> SetLocal(Check:Untyped:D@118, loc12(KC~<StringObject>/FlushedJSValue), W:Stack(loc12), bc#317, exit: bc#320, ExitValid) predicting StringObject
255 0 10: D@239:<!0:-> FilterGetByStatus(Check:Untyped:D@118, MustGen, (Simple, <id='uid:(toString)', [0x7f7900098870:[0x98870/624752, String, (0/0, 4/4){#cachedArrayBuffer:67, byteLength:66, byteOffse
t:65, ptr:64}, NonArray, Proto:0x7f7a178642a0, Leaf (Watched)]], [<Object: 0x7f7a178642a0 with butterfly (nil)(base=0xfffffffffffffff8) (Structure 0x7f7900098480:[0x98480/623744, Object, (2/2, 0/0){arrayBuffer:
1, constructor:0}, NonArray, Proto:0x7f7a5901e9c8, Leaf (Watched)]), StructureID: 623744: Absence of toString with prototype Object: 0x7f7a5901e9c8 with butterfly 0x7f6053010b68(base=0x7f6053010960) (Structure
0x7f79000648e0:[0x648e0/411872, String, (0/0, 42/64){replaceAll:105, replace:104, repeat:103, padStart:102, padEnd:101, match:100, split:99, toString:64, valueOf:65, charAt:66, charCodeAt:67, codePointAt:68, in
dexOf:69, lastIndexOf:70, replaceUsingRegExp:71, replaceUsingStringSearch:72, replaceAllUsingStringSearch:73, slice:74, substr:75, substring:76, toLowerCase:77, toUpperCase:78, localeCompare:79, toLocaleLowerCa
se:80, toLocaleUpperCase:81, trim:82, startsWith:83, endsWith:84, includes:85, normalize:86, charCodeAt:87, at:88, trimStart:89, trimLeft:90, trimEnd:91, trimRight:92, Symbol.iterator:93, substr:94, endsWith:95
, isWellFormed:96, toWellFormed:97, constructor:98}, NonArray, Proto:0x7f7a174e4280, Leaf (Watched)]), StructureID: 411872>, <Object: 0x7f7a5901e9c8 with butterfly 0x7f6053010b68(base=0x7f6053010960) (Structure
0x7f79000648e0:[0x648e0/411872, String, (0/0, 42/64){replaceAll:105, replace:104, repeat:103, padStart:102, padEnd:101, match:100, split:99, toString:64, valueOf:65, charAt:66, charCodeAt:67, codePointAt:68, i
ndexOf:69, lastIndexOf:70, replaceUsingRegExp:71, replaceUsingStringSearch:72, replaceAllUsingStringSearch:73, slice:74, substr:75, substring:76, toLowerCase:77, toUpperCase:78, localeCompare:79, toLocaleLowerC
ase:80, toLocaleUpperCase:81, trim:82, startsWith:83, endsWith:84, includes:85, normalize:86, charCodeAt:87, at:88, trimStart:89, trimLeft:90, trimEnd:91, trimRight:92, Symbol.iterator:93, substr:94, endsWith:9
5, isWellFormed:96, toWellFormed:97, constructor:98}, NonArray, Proto:0x7f7a174e4280, Leaf (Watched)]), StructureID: 411872: Presence of toString at 64 with attributes 4>], offset = 64>, seenInJIT = true), W:Si
deState, bc#320, ExitValid)
256 0 10: D@240:<!0:-> Check(MustGen, bc#320, ExitValid)
257 0 10: D@241:<!0:-> CheckStructure(Check:Cell:D@118, MustGen, [%BF:String], R:JSCell_structureID, Exits, bc#320, ExitValid)
258 0 10: D@242:< 1:-> JSConstant(JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, Function, Weak:Object: 0x7f7a1744e200 with butterfly 0x7f6053001f08(base=0x7f6053001ee0) (Structure %B1:Function
), StructureID: 40528, bc#320, ExitValid)
259 0 10: D@243:<!0:-> MovHint(Check:Untyped:D@242, MustGen, loc11, W:SideState, ClobbersExit, bc#320, ExitValid)
260 0 10: D@244:< 1:-> SetLocal(Check:Untyped:D@242, loc11(LC~<Function>/FlushedJSValue), W:Stack(loc11), bc#320, exit: bc#326, ExitValid) predicting Function
261 0 10: D@245:<!0:-> FilterCallLinkStatus(Check:Untyped:D@242, MustGen, Statically Proved, (Function: Object: 0x7f7a1744e200 with butterfly 0x7f6053001f08(base=0x7f6053001ee0) (Structure 0x7f7900009e
50:[0x9e50/40528, Function, (0/0, 2/4){name:65, length:64}, NonArray, Proto:0x7f7a174e8370]), StructureID: 40528; Executable: NativeExecutable:0x56300897d310/0x563008700fb0), W:SideState, bc#326, ExitValid)
262 0 10: D@246:<!0:-> CheckIsConstant(Check:Cell:D@242, MustGen, <0x7f7a1744e200, Function>, <host function>, Exits, bc#326, ExitValid)
263 0 10: D@247:<!0:-> Check(MustGen, bc#326, ExitValid)
264 0 10: D@248:< 1:-> ToString(Check:StringObject:D@118, JS|PureNum|NeedsNegZero|NeedsNaNOrInfinity|UseAsOther, String, Exits, bc#326, ExitValid)
265 0 10: D@249:<!0:-> MovHint(Check:Untyped:D@248, MustGen, loc11, W:SideState, ClobbersExit, bc#326, ExitInvalid)
266 0 10: D@250:<!0:-> Check(MustGen, bc#326, ExitInvalid)
267 0 10: D@251:<!0:-> Check(MustGen, bc#326, ExitInvalid)
268 0 10: D@252:< 1:-> SetLocal(Check:Untyped:D@248, loc11(MC~<String>/FlushedJSValue), W:Stack(loc11), bc#326, exit: bc#333, ExitValid) predicting String
269 0 10: D@253:<!0:-> FilterPutByStatus(Check:Untyped:D@214, MustGen, (Simple, <id='uid:(dummies)', Transition: [0x7f79000988e0:[0x988e0/624864, Object, (1/4, 0/0){answer:0}, NonArray, Proto:0x7f7a174
e4280]] to 0x7f7900098950:[0x98950/624976, Object, (2/4, 0/0){dummies:1, answer:0}, NonArray, Proto:0x7f7a174e4280], [[]], offset = 1, >), W:SideState, bc#333, ExitValid)
270 0 10: D@254:<!0:-> CheckStructure(Check:Cell:D@214, MustGen, [%EU:Object], R:JSCell_structureID, Exits, bc#333, ExitValid)
271 0 10: D@255:<!0:-> PutByOffset(Check:KnownCell:D@214, Check:KnownCell:D@214, Check:Untyped:D@248, MustGen, id8{dummies}, 1, W:NamedProperties(8), ClobbersExit, bc#333, ExitValid)
272 0 10: D@256:<!0:-> PutStructure(Check:KnownCell:D@214, MustGen, %EU:Object -> %Ae:Object, ID:624976, R:JSObject_butterfly, W:JSCell_indexingType,JSCell_structureID,JSCell_typeInfoFlags, ClobbersExi
t, bc#333, ExitInvalid)
273 0 10: D@257:<!0:-> FilterPutByStatus(Check:Untyped:D@214, MustGen, (Simple, <id='uid:(data)', Transition: [0x7f7900098950:[0x98950/624976, Object, (2/4, 0/0){dummies:1, answer:0}, NonArray, Proto:0
x7f7a174e4280]] to 0x7f79000989c0:[0x989c0/625088, Object, (3/4, 0/0){data:2, dummies:1, answer:0}, NonArray, Proto:0x7f7a174e4280, Leaf], [[]], offset = 2, >), W:SideState, bc#339, ExitValid)
274 0 10: D@258:<!0:-> CheckStructure(Check:Cell:D@214, MustGen, [%Ae:Object], R:JSCell_structureID, Exits, bc#339, ExitValid)
275 0 10: D@259:<!0:-> PutByOffset(Check:KnownCell:D@214, Check:KnownCell:D@214, Check:Untyped:D@211, MustGen, id9{data}, 2, W:NamedProperties(9), ClobbersExit, bc#339, ExitValid)
276 0 10: D@260:<!0:-> PutStructure(Check:KnownCell:D@214, MustGen, %Ae:Object -> %AR:Object, ID:625088, R:JSObject_butterfly, W:JSCell_indexingType,JSCell_structureID,JSCell_typeInfoFlags, ClobbersExi
t, bc#339, ExitInvalid)
277 0 10: D@261:<!0:-> Return(Check:Untyped:D@214, MustGen, W:SideState, Exits, bc#345, ExitValid)
278 0 10: D@262:<!0:-> Flush(Check:Untyped:D@1, MustGen|IsFlushed, arg1(B~<AnyIntAsDouble>/FlushedJSValue), R:Stack(arg1), W:SideState, bc#345, ExitValid) predicting AnyIntAsDouble
279 0 10: D@263:<!0:-> Flush(Check:Untyped:D@0, MustGen|IsFlushed, this(A~<Object>/FlushedJSValue), R:Stack(this), W:SideState, bc#345, ExitValid) predicting OtherObj
0 10: States: InvalidBranchDirection, StructuresAreWatched
0 10: Vars After:
0 10: Var Links: arg1:D@54 arg0:D@0 loc0:D@4 loc1:D@6 loc2:D@8 loc3:D@10 loc4:D@18 loc5:D@151 loc6:D@182 loc7:D@213 loc8:D@120 loc9:D@75 loc10:D@216 loc11:D@252 loc12:D@238 loc13:D@209 loc14:D@186 loc15:
D@158 loc16:D@104 loc17:D@205 loc18:D@203 loc19:D@201 loc20:D@194
10: GC Values:
10: Weak:Object: 0x7f7a17892e20 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %CJ:Function), StructureID: 39968
10: Weak:Object: 0x7f7a1768cfe0 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %CJy:JSModuleEnvironment), StructureID: 75200
10: Weak:Object: 0x7f7a1768cea0 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %CJy:JSModuleEnvironment), StructureID: 75200
10: Weak:Object: 0x7f7a178923e0 with butterfly 0x7f605308fba8(base=0x7f605308fb80) (Structure %B1:Function), StructureID: 40528
10: Weak:Object: 0x7f7a178923c0 with butterfly 0x7f605308fb88(base=0x7f605308fb60) (Structure %B1:Function), StructureID: 40528
10: Weak:Object: 0x7f7a17892e00 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %CJ:Function), StructureID: 39968
10: Weak:Object: 0x7f7a1744e200 with butterfly 0x7f6053001f08(base=0x7f6053001ee0) (Structure %B1:Function), StructureID: 40528
10: Weak:Cell: 0x7f7a178c2080 (%Di:FunctionExecutable), StructureID: 18096
10: Desired watchpoints:
10: Watchpoint sets: 0x7f7a5940e540
10: Inline watchpoint sets: 0x7f79000988d8, 0x7f7900004718, 0x7f7900078478, 0x7f7900004868, 0x7f79000041d8, 0x7f7900012628, 0x7f7900098a28, 0x7f79000042b8
10: SymbolTables: 0x7f7a1785aa00
10: FunctionExecutables: 0x7f7a178c2100
10: Buffer views:
10: Object property conditions: <Object: 0x7f7a178642a0 with butterfly (nil)(base=0xfffffffffffffff8) (Structure %Dn:Object), StructureID: 623744: Absence of toString with prototype Object: 0x7f7a590
1e9c8 with butterfly 0x7f6053010b68(base=0x7f6053010960) (Structure %Dk:String), StructureID: 411872>, <Object: 0x7f7a5901e9c8 with butterfly 0x7f6053010b68(base=0x7f6053010960) (Structure %Dk:String), Structur
eID: 411872: Equivalence of toString with Object: 0x7f7a1744e200 with butterfly 0x7f6053001f08(base=0x7f6053001ee0) (Structure %B1:Function), StructureID: 40528>
10: Structures:
10: %AR:Object = 0x7f79000989c0:[0x989c0/625088, Object, (3/4, 0/0){data:2, dummies:1, answer:0}, NonArray, Proto:0x7f7a174e4280, Leaf]
10: %Ae:Object = 0x7f7900098950:[0x98950/624976, Object, (2/4, 0/0){dummies:1, answer:0}, NonArray, Proto:0x7f7a174e4280]
10: %B1:Function = 0x7f7900009e50:[0x9e50/40528, Function, (0/0, 2/4){name:65, length:64}, NonArray, Proto:0x7f7a174e8370]
10: %BF:String = 0x7f7900098870:[0x98870/624752, String, (0/0, 4/4){#cachedArrayBuffer:67, byteLength:66, byteOffset:65, ptr:64}, NonArray, Proto:0x7f7a178642a0, Leaf (Watched)]
10: %Bs:Object = 0x7f790000ec50:[0xec50/60496, Object, (0/4, 0/0){}, NonArray, Proto:0x7f7a174e4280]
10: %CG:Object = 0x7f7900078410:[0x78410/492560, Object, (12/12, 0/0){f64:11, f32:10, intptr:9, u64:8, i64:7, i32:6, i16:5, i8:4, ptr:3, u32:2, u16:1, u8:0}, NonArray, Proto:0x7f7a174e4
280, Leaf]
10: %CJ:Function = 0x7f7900009c20:[0x9c20/39968, Function, (0/0, 0/0){}, NonArray, Proto:0x7f7a174e8370]
10: %CJy:JSModuleEnvironment = 0x7f79000125c0:[0x125c0/75200, JSModuleEnvironment, (0/0, 0/0){}, NonArray, Leaf (Watched)]
10: %Di:FunctionExecutable = 0x7f79000046b0:[0x46b0/18096, FunctionExecutable, (0/0, 0/0){}, NonArray, Leaf (Watched)]
10: %Dk:String = 0x7f79000648e0:[0x648e0/411872, String, (0/0, 42/64){replaceAll:105, replace:104, repeat:103, padStart:102, padEnd:101, match:100, split:99, toString:64, valueOf:65, c$
arAt:66, charCodeAt:67, codePointAt:68, indexOf:69, lastIndexOf:70, replaceUsingRegExp:71, replaceUsingStringSearch:72, replaceAllUsingStringSearch:73, slice:74, substr:75, substring:76, toLowerCase:77, toUpper
Case:78, localeCompare:79, toLocaleLowerCase:80, toLocaleUpperCase:81, trim:82, startsWith:83, endsWith:84, includes:85, normalize:86, charCodeAt:87, at:88, trimStart:89, trimLeft:90, trimEnd:91, trimRight:92,
Symbol.iterator:93, substr:94, endsWith:95, isWellFormed:96, toWellFormed:97, constructor:98}, NonArray, Proto:0x7f7a174e4280, Leaf (Watched)]
10: %Dn:Object = 0x7f7900098480:[0x98480/623744, Object, (2/2, 0/0){arrayBuffer:1, constructor:0}, NonArray, Proto:0x7f7a5901e9c8, Leaf (Watched)]
10: %EU:Object = 0x7f79000988e0:[0x988e0/624864, Object, (1/4, 0/0){answer:0}, NonArray, Proto:0x7f7a174e4280]
DFG ASSERTION FAILED: Edge verification error: D@64->Check:Untyped:D@63 was expected to have type BytecodeTop but has type Int52Any (51539607552)
/webkit/Source/JavaScriptCore/dfg/DFGAbstractInterpreterInlines.h(187) : void JSC::DFG::AbstractInterpreter<JSC::DFG::InPlaceAbstractState>::verifyEdge(Node *, Edge) [AbstractStateType = JSC::DFG::InPlaceAbstra
ctState]
Aborted (core dumped)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment