[Webkit-unassigned] [Bug 126219] js/dom/dfg-custom-getter-throw.html and js/dom/dfg-custom-getter-throw-inlined.html hit assertions after r161051

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=126219





--- Comment #2 from Ryosuke Niwa <rniwa at webkit.org>  2013-12-24 12:53:20 PST ---
Created an attachment (id=219979)
 --> (https://bugs.webkit.org/attachment.cgi?id=219979&action=review)
The version of js/dom/dfg-custom-getter-throw.html that reproduces the assertion failure

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.