[webkit-reviews] review requested: [Bug 187060] ASSERTION FAILED: length > butterfly->vectorLength() in JSObject::ensureLengthSlow(). : [Attachment 343630] proposed patch.

[bugzilla-daemon at webkit.org]

Mark Lam <mark.lam at apple.com> has asked  for review:
Bug 187060: ASSERTION FAILED: length > butterfly->vectorLength() in
JSObject::ensureLengthSlow().
https://bugs.webkit.org/show_bug.cgi?id=187060

Attachment 343630: proposed patch.

https://bugs.webkit.org/attachment.cgi?id=343630&action=review




--- Comment #1 from Mark Lam <mark.lam at apple.com> ---
Created attachment 343630

  --> https://bugs.webkit.org/attachment.cgi?id=343630&action=review

proposed patch.