Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 4bfd6c750726a25617c844de7be79c4400f3c088
      
https://github.com/WebKit/WebKit/commit/4bfd6c750726a25617c844de7be79c4400f3c088
  Author: Sergey Rubanov <[email protected]>
  Date:   2026-07-23 (Thu, 23 Jul 2026)

  Changed paths:
    A JSTests/wasm/stress/nested-inline-stacktrace-omg.js
    M Source/JavaScriptCore/wasm/WasmCallee.cpp

  Log Message:
  -----------
  [JSC][Wasm] Fix OMG inlined stack origin lookup skipping deeper frames
https://bugs.webkit.org/show_bug.cgi?id=270832

Reviewed by Yusuke Suzuki.

getCodeOrigin used a broken lower_bound comparator on lastInlineCSI
(integer subtraction coerced to bool), so it could start mid-list and
skip deeper postorder origins that still contain the call site.
Error.stack then dropped nested inlined frames (seen as a flaky wasm
stress failure on x86/EWS). Use a proper lower_bound for the first
origin with lastInlineCSI >= csi, then walk only that suffix matching
firstInlineCSI and depth.

Add a focused OMG-inlining stress test for nested catch/throw stacks.

* Source/JavaScriptCore/wasm/WasmCallee.cpp:
(JSC::Wasm::OptimizingJITCallee::getCodeOrigin):
* JSTests/wasm/stress/nested-inline-stacktrace-omg.js: Added.

Canonical link: https://commits.webkit.org/317800@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications

Reply via email to