157524 2016-05-10 09:50:31 -0700 [JSC] Assertion failure in JSC::JSObject::putInline (super-property-access.js) 2016-05-11 12:14:02 -0700 1 1 1 Unclassified WebKit JavaScriptCore WebKit Local Build Unspecified Unspecified RESOLVED DUPLICATE 157548 P2 Normal --- 147064 1 caitp webkit-unassigned fpizlo mark.lam ossy saam oldest_to_newest 1191548 0 caitp 2016-05-10 09:50:31 -0700 Failure in ftl-eager variants of super-property-access.js (introduced in http://trac.webkit.org/changeset/200586) ``` 56 ALWAYS_INLINE bool JSObject::putInline(JSCell* cell, ExecState* exec, PropertyName propertyName, JSValue value, PutPropertySlot& slot) 57 { 58 JSObject* thisObject = jsCast<JSObject*>(cell); -> 59 ASSERT(value); 60 ASSERT(!Heap::heap(value) || Heap::heap(value) == Heap::heap(thisObject)); 61 VM& vm = exec->vm(); 62 ``` reached via operationPutByValWithThisStrict 1192028 1 saam 2016-05-11 12:14:02 -0700 *** This bug has been marked as a duplicate of bug 157548 ***