Bug 54382
| Summary: | REGRESSION (r78451): WTF::StringBuffer::shrink() asserts | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Csaba Osztrogonác <ossy> |
| Component: | New Bugs | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | Critical | CC: | ap, darin, mrobinson, xan.lopez |
| Priority: | P1 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | All | ||
| OS: | All | ||
| Bug Depends on: | |||
| Bug Blocks: | 53898 | ||
Csaba Osztrogonác
After r78451 4 http tests assert:
http/tests/security/xssAuditor/img-onerror-non-ASCII-char2-default-encoding.html
http/tests/security/xssAuditor/img-onerror-non-ASCII-char2.html
http/tests/security/xssAuditor/img-onerror-non-ASCII-char-default-encoding.html
http/tests/security/xssAuditor/img-onerror-non-ASCII-char.html
ASSERTION FAILED: newLength <= m_length
../../../Source/JavaScriptCore/wtf/text/StringBuffer.h(56) : void WTF::StringBuffer::shrink(unsigned int)
I saw this assert on GTK and Qt debug bots.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Alexey Proskuryakov
*** This bug has been marked as a duplicate of bug 54386 ***