See title, in Source/WebCore/platform/cf/BinaryPropertyList.cpp, line 95: WTF::StringHasher::createBlobHash(array.integers(), array.size()); which passes the size of integer array, i.e., how many integers the array has. However, StringHasher::createBlobHash(const void* data, unsigned size) (wtf/StringHasher.h:144) expects size to be the byte array's size. For example, if the integer array has 1 integer, we would get an assertion failure in wtf/StringHasher.h:146: ASSERT(!(size % 2));
Oops, I didn’t see this bug. Already fixed it.
*** This bug has been marked as a duplicate of bug 56193 ***
*** This bug has been marked as a duplicate of bug 56258 ***