245657 2022-09-25 23:29:35 -0700 crash in javascriptcore 2023-01-26 14:22:52 -0800 1 1 1 Unclassified WebKit JavaScriptCore WebKit Local Build Unspecified Unspecified RESOLVED DUPLICATE 245066 https://bugs.webkit.org/show_bug.cgi?id=225094 InRadar P2 Normal --- 1 zhunkibatu webkit-unassigned mark.lam serakeri webkit-bug-importer ysuzuki oldest_to_newest 1901098 0 462613 zhunkibatu 2022-09-25 23:29:35 -0700 Created attachment 462613 the minimal poc The following poc cause latest JavaScriptCore to crash. function main() { class a { g = [] 'a'(){} } } 1901291 1 ap 2022-09-26 14:16:35 -0700 Similar stack trace to bug 225094. 1901292 2 webkit-bug-importer 2022-09-26 14:17:00 -0700 <rdar://problem/100427854> 1928699 3 serakeri 2023-01-26 14:01:06 -0800 I believe this may have been fixed. I'm unable to reproduce this on Safari 16.3 or on a jsc build with the latest commits. 1928707 4 ysuzuki 2023-01-26 14:22:52 -0800 Yeah, this is fixed in bug 245066. Thanks! *** This bug has been marked as a duplicate of bug 245066 *** 462613 2022-09-25 23:29:35 -0700 2022-09-25 23:29:35 -0700 the minimal poc 1.js text/javascript 72 zhunkibatu ZnVuY3Rpb24gbWFpbigpIHsKICAgIGNsYXNzIGEgewogICAgICAgIGcgPSAgW10gCiAgICAgICAg J2EnKCl7fQogICAgfQp9