Bug 162988 - Bad ASSERT in ClonedArguments::createByCopyingFrom()
Summary: Bad ASSERT in ClonedArguments::createByCopyingFrom()
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: Other
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Michael Saboff
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2016-10-05 16:18 PDT by Michael Saboff
Modified: 2016-10-05 16:50 PDT (History)
4 users (show)

See Also:

Attachments
Patch (1.22 KB, patch)
2016-10-05 16:20 PDT, Michael Saboff 		no flags Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Saboff 2016-10-05 16:18:52 PDT 
The ASSERT:
    ASSERT(exec->lexicalGlobalObject()->clonedArgumentsStructure() == result->structure());
can erroneously fires when we inline a function with a different lexicalGlocalObject.

<rdar://problem/28028373>
Comment 1 Michael Saboff 2016-10-05 16:20:28 PDT 
Created attachment 290757 [details]
Patch
Comment 2 Keith Miller 2016-10-05 16:22:22 PDT 
Comment on attachment 290757 [details]
Patch

r=me.
Comment 3 WebKit Commit Bot 2016-10-05 16:50:04 PDT 
Comment on attachment 290757 [details]
Patch

Clearing flags on attachment: 290757

Committed r206836: <http://trac.webkit.org/changeset/206836>
Comment 4 WebKit Commit Bot 2016-10-05 16:50:07 PDT 
All reviewed patches have been landed.  Closing bug.