[Webkit-unassigned] [Bug 126219] New: js/dom/dfg-custom-getter-throw.html and js/dom/dfg-custom-getter-throw-inlined.html hit assertions after r161051

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=126219

           Summary: js/dom/dfg-custom-getter-throw.html and
                    js/dom/dfg-custom-getter-throw-inlined.html hit
                    assertions after r161051
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Keywords: Regression
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: rniwa at webkit.org
                CC: ap at webkit.org, ggaren at apple.com, oliver at apple.com,
                    fpizlo at apple.com


js/dom/dfg-custom-getter-throw.html
and
js/dom/dfg-custom-getter-throw-inlined.html
have started hitting assertions after http://trac.webkit.org/changeset/161051

ASSERTION FAILED: exec == topCallFrame || exec == exec->lexicalGlobalObject()->globalExec() || exec == exec->vmEntryGlobalObject()->globalExec()
/Volumes/Data/slave/mavericks-debug/build/Source/JavaScriptCore/runtime/VM.cpp(634) : JSC::JSValue JSC::VM::throwException(JSC::ExecState *, JSC::JSValue)
1   0x10da505b0 WTFCrash
2   0x10d9f14af JSC::VM::throwException(JSC::ExecState*, JSC::JSValue)
3   0x10f6cb39f WebCore::setDOMException(JSC::ExecState*, int)
4   0x10fbe6119 WebCore::JSXMLHttpRequest::responseText(JSC::ExecState*) const
5   0x10fbe0d3f WebCore::jsXMLHttpRequestResponseText(JSC::ExecState*, long long, long long, JSC::PropertyName)
6   0x3ed880e68ffa

http://build.webkit.org/results/Apple%20Mavericks%20Debug%20WK2%20(Tests)/r161053%20(1201)/results.html

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.