RESOLVED DUPLICATE of bug 161796 161797
REGRESSION (r205658): Crash in JSC::MarkedBlock::vm() const + 12 
https://bugs.webkit.org/show_bug.cgi?id=161797
Summary REGRESSION (r205658): Crash in JSC::MarkedBlock::vm() const + 12
Ryan Haddad
Reported 2016-09-09 09:01:45 PDT
Crash in JSC::MarkedBlock::vm() const + 12 Seen with imported/w3c/canvas/2d.fillRect.clip.html https://build.webkit.org/results/Apple%20Yosemite%20Debug%20WK2%20(Tests)/r205740%20(14897)/results.html fast/layers/zindex-inherit.html https://build.webkit.org/results/Apple%20El%20Capitan%20Debug%20WK1%20(Tests)/r205729%20(8250)/results.html
Attachments
Add attachment proposed patch, testcase, etc.
Ryan Haddad
Comment 1 2016-09-09 09:02:26 PDT
*** This bug has been marked as a duplicate of bug 161796 ***
Note You need to log in before you can comment on or make changes to this bug.