Comment 3 for bug 1648891

I’ve managed to reproduce the crash on my M10 running a vivid armhf image, and captured the following stacktrace:

Program received signal SIGBUS, Bus error.
__fill_a<v8::internal::compiler::InstructionOperand*, v8::internal::compiler::InstructionOperand> () at /usr/include/c++/4.9/bits/stl_algobase.h:693
693 /usr/include/c++/4.9/bits/stl_algobase.h: No such file or directory.
(gdb) bt
#0 __fill_a<v8::internal::compiler::InstructionOperand*, v8::internal::compiler::InstructionOperand> () at /usr/include/c++/4.9/bits/stl_algobase.h:693
#1 fill<v8::internal::compiler::InstructionOperand*, v8::internal::compiler::InstructionOperand> () at /usr/include/c++/4.9/bits/stl_algobase.h:739
#2 EmitTableSwitch () at ../../v8/src/compiler/instruction-selector.cc:1491
#3 0xf47c0abc in VisitSwitch ()
    at ../../v8/src/compiler/arm/instruction-selector-arm.cc:2036
#4 0xf435ef9c in VisitControl ()
    at ../../v8/src/compiler/instruction-selector.cc:907
#5 0xf435f074 in VisitBlock ()
    at ../../v8/src/compiler/instruction-selector.cc:812
#6 0xf435f266 in SelectInstructions ()
    at ../../v8/src/compiler/instruction-selector.cc:69
#7 0xf43b1232 in Run () at ../../v8/src/compiler/pipeline.cc:1244
#8 Run<v8::internal::compiler::InstructionSelectionPhase, v8::internal::compiler::Linkage*> () at ../../v8/src/compiler/pipeline.cc:719
#9 0xf43b350a in ScheduleAndSelectInstructions ()
    at ../../v8/src/compiler/pipeline.cc:1773
#10 0xf43b442e in ScheduleAndGenerateCode ()
    at ../../v8/src/compiler/pipeline.cc:1874
#11 GenerateCodeForCodeStub () at ../../v8/src/compiler/pipeline.cc:1669
#12 0xf43330e8 in GenerateCode () at ../../v8/src/compiler/code-assembler.cc:73
#13 0xf42ffc00 in GenerateCode () at ../../v8/src/code-stubs.cc:419
#14 0xf430c2f8 in GetCode () at ../../v8/src/code-stubs.cc:155
#15 0xf42e4c26 in make_callable<v8::internal::EqualStub> ()
    at ../../v8/src/code-factory.cc:19
#16 Equal () at ../../v8/src/code-factory.cc:365
#17 0xf436f690 in LowerJSEqual ()
    at ../../v8/src/compiler/js-generic-lowering.cc:73
#18 0xf437217c in Reduce () at ../../v8/src/compiler/js-generic-lowering.cc:42
#19 0xf4352c7a in Reduce () at ../../v8/src/compiler/graph-reducer.cc:83
#20 ReduceTop () at ../../v8/src/compiler/graph-reducer.cc:133
#21 0xf4352e22 in ReduceNode () at ../../v8/src/compiler/graph-reducer.cc:54
#22 0xf43b4a70 in Run () at ../../v8/src/compiler/pipeline.cc:1008
#23 Run<v8::internal::compiler::GenericLoweringPhase> ()
    at ../../v8/src/compiler/pipeline.cc:712
#24 0xf43b58ba in CreateGraph () at ../../v8/src/compiler/pipeline.cc:1586
#25 0xf43b605c in PrepareJobImpl () at ../../v8/src/compiler/pipeline.cc:628
#26 0xf4313aea in PrepareJob () at ../../v8/src/compiler.cc:89
#27 0xf43173d8 in GetOptimizedCodeLater () at ../../v8/src/compiler.cc:633
#28 GetOptimizedCode () at ../../v8/src/compiler.cc:755
#29 0xf4317cc8 in CompileOptimized () at ../../v8/src/compiler.cc:1240
#30 0xf466dc9c in __RT_impl_Runtime_CompileOptimized_Concurrent ()
    at ../../v8/src/runtime/runtime-compiler.cc:64
#31 Runtime_CompileOptimized_Concurrent ()
    at ../../v8/src/runtime/runtime-compiler.cc:58
#32 0x2238633c in ?? ()
Backtrace stopped: previous frame identical to this frame (corrupt stack?)