Summary: | REGRESSION (r245064): ASSERTION FAILED: m_ptr seen with wasm.yaml/wasm/js-api/test_Data.js.wasm-slow-memory | ||||||
---|---|---|---|---|---|---|---|
Product: | WebKit | Reporter: | Ryan Haddad <ryanhaddad> | ||||
Component: | JavaScriptCore | Assignee: | Keith Miller <keith_miller> | ||||
Status: | RESOLVED FIXED | ||||||
Severity: | Normal | CC: | ews-watchlist, keith_miller, mark.lam, msaboff, saam, webkit-bot-watchers-bugzilla, webkit-bug-importer | ||||
Priority: | P2 | Keywords: | InRadar | ||||
Version: | WebKit Nightly Build | ||||||
Hardware: | Unspecified | ||||||
OS: | Unspecified | ||||||
See Also: | https://bugs.webkit.org/show_bug.cgi?id=197110 | ||||||
Attachments: |
|
Description
Ryan Haddad
2019-05-09 09:30:17 PDT
Likely caused by "Remove Gigacage from arm64 and use PAC for arm64e instead" https://trac.webkit.org/changeset/245064/webkit Looking now. Created attachment 369496 [details]
Patch
Comment on attachment 369496 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=369496&action=review > Source/JavaScriptCore/runtime/JSArrayBufferView.h:138 > + void* vector() const { return m_vector.getMayBeNull(m_length); } Worth saying why this can be null now in changelog Comment on attachment 369496 [details]
Patch
Sure, for reference it's because you can construct a typed array with length 0.
Committed r245145: <https://trac.webkit.org/changeset/245145> |