[Webkit-unassigned] [Bug 96184] [GTK][Stable] Crash in JSC::DFG::SpeculativeJIT::speculateArray(JSC::DFG::Array::Mode, JSC::DFG::Edge, JSC::X86Registers::RegisterID)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=96184





--- Comment #3 from Priit Laes (IRC: plaes) <plaes at plaes.org>  2012-09-11 01:43:21 PST ---
Red herring seems to be 7aed8d8263a38a669db87eea22e6946516541d09 (where this function was added). Will check whether next patch that touches this code fixes that.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.