Bug 196708

Summary: ASSERTION FAILED: !scope.exception() || !hasProperty in JSObject::get
Product: WebKit Reporter: Tadeu Zagallo <tzagallo>
Component: JavaScriptCoreAssignee: Tadeu Zagallo <tzagallo>
Status: RESOLVED FIXED    
Severity: Normal CC: commit-queue, ews-watchlist, keith_miller, mark.lam, msaboff, saam, webkit-bug-importer, ysuzuki
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch
none
Patch for landing none

Description Tadeu Zagallo 2019-04-08 14:34:37 PDT 
...
Comment 1 Tadeu Zagallo 2019-04-08 14:35:31 PDT 
<rdar://problem/49556803>
Comment 2 Tadeu Zagallo 2019-04-08 14:46:54 PDT 
Created attachment 366984 [details]
Patch
Comment 3 Yusuke Suzuki 2019-04-08 19:00:06 PDT 
Comment on attachment 366984 [details]
Patch

r=me
Comment 4 Yusuke Suzuki 2019-04-08 19:00:19 PDT 
Comment on attachment 366984 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=366984&action=review

> Source/JavaScriptCore/jit/JITOperations.cpp:2375
>      EXCEPTION_ASSERT(!throwScope.exception() || !hasProperty);

You can remove this line.
Comment 5 Tadeu Zagallo 2019-04-09 00:16:20 PDT 
Created attachment 367031 [details]
Patch for landing
Comment 6 WebKit Commit Bot 2019-04-09 00:54:23 PDT 
Comment on attachment 367031 [details]
Patch for landing

Clearing flags on attachment: 367031

Committed r244069: <https://trac.webkit.org/changeset/244069>
Comment 7 WebKit Commit Bot 2019-04-09 00:54:25 PDT 
All reviewed patches have been landed.  Closing bug.