[Webkit-unassigned] [Bug 54382] New: REGRESSION (r78451): WTF::StringBuffer::shrink() asserts

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=54382

           Summary: REGRESSION (r78451): WTF::StringBuffer::shrink()
                    asserts
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Critical
          Priority: P1
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ossy at webkit.org
            Blocks: 53898


After r78451 4 http tests assert:
http/tests/security/xssAuditor/img-onerror-non-ASCII-char2-default-encoding.html
http/tests/security/xssAuditor/img-onerror-non-ASCII-char2.html
http/tests/security/xssAuditor/img-onerror-non-ASCII-char-default-encoding.html
http/tests/security/xssAuditor/img-onerror-non-ASCII-char.html

ASSERTION FAILED: newLength <= m_length
../../../Source/JavaScriptCore/wtf/text/StringBuffer.h(56) : void WTF::StringBuffer::shrink(unsigned int)

I saw this assert on GTK and Qt debug bots.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.