<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>162988</bug_id>
          
          <creation_ts>2016-10-05 16:18:52 -0700</creation_ts>
          <short_desc>Bad ASSERT in ClonedArguments::createByCopyingFrom()</short_desc>
          <delta_ts>2016-10-05 16:50:07 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>Other</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Michael Saboff">msaboff</reporter>
          <assigned_to name="Michael Saboff">msaboff</assigned_to>
          <cc>commit-queue</cc>
    
    <cc>keith_miller</cc>
    
    <cc>mark.lam</cc>
    
    <cc>saam</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1236813</commentid>
    <comment_count>0</comment_count>
    <who name="Michael Saboff">msaboff</who>
    <bug_when>2016-10-05 16:18:52 -0700</bug_when>
    <thetext>The ASSERT:
    ASSERT(exec-&gt;lexicalGlobalObject()-&gt;clonedArgumentsStructure() == result-&gt;structure());
can erroneously fires when we inline a function with a different lexicalGlocalObject.

&lt;rdar://problem/28028373&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1236814</commentid>
    <comment_count>1</comment_count>
      <attachid>290757</attachid>
    <who name="Michael Saboff">msaboff</who>
    <bug_when>2016-10-05 16:20:28 -0700</bug_when>
    <thetext>Created attachment 290757
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1236817</commentid>
    <comment_count>2</comment_count>
      <attachid>290757</attachid>
    <who name="Keith Miller">keith_miller</who>
    <bug_when>2016-10-05 16:22:22 -0700</bug_when>
    <thetext>Comment on attachment 290757
Patch

r=me.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1236832</commentid>
    <comment_count>3</comment_count>
      <attachid>290757</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2016-10-05 16:50:04 -0700</bug_when>
    <thetext>Comment on attachment 290757
Patch

Clearing flags on attachment: 290757

Committed r206836: &lt;http://trac.webkit.org/changeset/206836&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1236833</commentid>
    <comment_count>4</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2016-10-05 16:50:07 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>290757</attachid>
            <date>2016-10-05 16:20:28 -0700</date>
            <delta_ts>2016-10-05 16:50:04 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>162988.patch</filename>
            <type>text/plain</type>
            <size>1248</size>
            <attacher name="Michael Saboff">msaboff</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09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</data>

          </attachment>
      

    </bug>

</bugzilla>