Bug 187060

Summary:

ASSERTION FAILED: length > butterfly->vectorLength() in JSObject::ensureLengthSlow().

Product:

WebKit

Reporter:

Mark Lam <mark.lam>

Component:

JavaScriptCore

Assignee:

Mark Lam <mark.lam>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

commit-queue, fpizlo, keith_miller, msaboff, rmorisset, saam, tzagallo, webkit-bug-importer

Priority:

Keywords:

InRadar

Version:

WebKit Nightly Build

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
proposed patch.	none

Description Mark Lam 2018-06-26 12:30:15 PDT

<rdar://problem/41452767>

Comment 1 Mark Lam 2018-06-26 12:35:58 PDT

Created attachment 343630 [details]
proposed patch.

Comment 2 Keith Miller 2018-06-26 12:38:35 PDT

Comment on attachment 343630 [details]
proposed patch.

r=me.

Comment 3 Mark Lam 2018-06-26 13:10:34 PDT

Comment on attachment 343630 [details]
proposed patch.

Thanks for the review.  Landing.

Comment 4 WebKit Commit Bot 2018-06-26 13:37:36 PDT

Comment on attachment 343630 [details]
proposed patch.

Clearing flags on attachment: 343630

Committed r233217: <https://trac.webkit.org/changeset/233217>

Comment 5 WebKit Commit Bot 2018-06-26 13:37:38 PDT

All reviewed patches have been landed.  Closing bug.