In Source/JavaScriptCore/bytecode/CodeBlock.h the assertion: ASSERT(m_numParameters >= 0); is always true as m_numParameters is unsigned.
Created attachment 427891 [details] Patch
Committed r277153 (237440@main): <https://commits.webkit.org/237440@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 427891 [details].
<rdar://problem/77636798>