RESOLVED FIXED 195858
REGRESSION: !vm.isInitializingObject() void* JSC::tryAllocateCellHelper<JSC::Structure> JSC::Structure::create 
https://bugs.webkit.org/show_bug.cgi?id=195858
Summary REGRESSION: !vm.isInitializingObject() void* JSC::tryAllocateCellHelper<JSC::...
Yusuke Suzuki
Reported 2019-03-16 20:27:50 PDT
Wasm structures should be passed to ::create functions.
Attachments
Patch (37.84 KB, patch)
2019-03-16 21:00 PDT, Yusuke Suzuki 		no flags
DetailsFormatted DiffDiff
Patch (39.60 KB, patch)
2019-03-16 21:12 PDT, Yusuke Suzuki 		no flags
DetailsFormatted DiffDiff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Yusuke Suzuki
Comment 1 2019-03-16 20:28:46 PDT
<rdar://problem/48954352>
Radar WebKit Bug Importer
Comment 2 2019-03-16 20:28:54 PDT
<rdar://problem/48958544>
Yusuke Suzuki
Comment 3 2019-03-16 21:00:10 PDT
Created attachment 364958 [details] Patch
Yusuke Suzuki
Comment 4 2019-03-16 21:12:48 PDT
Created attachment 364959 [details] Patch
Mark Lam
Comment 5 2019-03-16 22:14:19 PDT
Comment on attachment 364959 [details] Patch r=me
Mark Lam
Comment 6 2019-03-16 23:32:57 PDT
<rdar://problem/48954352>
Yusuke Suzuki
Comment 7 2019-03-17 00:20:40 PDT
Comment on attachment 364959 [details] Patch Thanks!
WebKit Commit Bot
Comment 8 2019-03-17 00:46:01 PDT
Comment on attachment 364959 [details] Patch Clearing flags on attachment: 364959 Committed r243051: <https://trac.webkit.org/changeset/243051>
WebKit Commit Bot
Comment 9 2019-03-17 00:46:03 PDT
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.