JSC::gcProtect / gcUnprotect are APIs designed for JavaScriptCore.framework. It has JSLocker check and the crash in DataCue is happening now. We should use JSValueInWrappedObject instead.
<rdar://problem/54733619>
Created attachment 377318 [details] Patch
Created attachment 377319 [details] Patch
Comment on attachment 377319 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=377319&action=review r=me > Source/WebCore/ChangeLog:17 > + As a first step, this patch just converts raw JSValue + gcProtect/gcUnprotect with JSC::Strong<>. I suggest /converts/replaces/.
Comment on attachment 377319 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=377319&action=review >> Source/WebCore/ChangeLog:17 >> + As a first step, this patch just converts raw JSValue + gcProtect/gcUnprotect with JSC::Strong<>. > > I suggest /converts/replaces/. Thanks, fixed.
Committed r249133: <https://trac.webkit.org/changeset/249133>
*** Bug 199340 has been marked as a duplicate of this bug. ***