Bug 161797 - REGRESSION (r205658): Crash in JSC::MarkedBlock::vm() const + 12
Summary: REGRESSION (r205658): Crash in JSC::MarkedBlock::vm() const + 12
Status: RESOLVED DUPLICATE of bug 161796
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2016-09-09 09:01 PDT by Ryan Haddad
Modified: 2016-09-09 09:02 PDT (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Ryan Haddad 2016-09-09 09:01:45 PDT 
Crash in JSC::MarkedBlock::vm() const + 12

Seen with imported/w3c/canvas/2d.fillRect.clip.html
https://build.webkit.org/results/Apple%20Yosemite%20Debug%20WK2%20(Tests)/r205740%20(14897)/results.html

fast/layers/zindex-inherit.html
https://build.webkit.org/results/Apple%20El%20Capitan%20Debug%20WK1%20(Tests)/r205729%20(8250)/results.html
Comment 1 Ryan Haddad 2016-09-09 09:02:26 PDT 

*** This bug has been marked as a duplicate of bug 161796 ***