Bug 139194 - Add test for r176506 - ASSERT(!m_vector.isEmpty()) in IntendedStructureChain.cpp(143)
Summary: Add test for r176506 - ASSERT(!m_vector.isEmpty()) in IntendedStructureChain....
Status: ASSIGNED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Michael Saboff
URL:
Keywords:
Depends on: 139000
Blocks:
  Show dependency treegraph
 
Reported: 2014-12-02 13:43 PST by Michael Saboff
Modified: 2014-12-02 13:43 PST (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Saboff 2014-12-02 13:43:37 PST
A suggested test from https://bugs.webkit.org/show_bug.cgi?id=139000#c5:

var o1 = { __proto__: null, a: 0, b: 0 };
var o2 =  { __proto__: null, a: 0, c: 0 };
var o3 =  { __proto__: null, a: 0, d: 0 };

function access(o)
{
    return o.a;
}

do a lot:
access(o1)
access(o2)
access(o3)