[Webkit-unassigned] [Bug 123778] New: internal-js-tests.yaml/Octane/stress-tests/pdfjs.js.default: ASSERTION FAILED: m_state.forNode(child).m_futurePossibleStructure.isSubsetOf(StructureSet(structure)) at DFGConstantFoldingPhase.cpp:249

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Nov 4 20:12:24 PST 2013


           Summary: internal-js-tests.yaml/Octane/stress-tests/pdfjs.js.de
                    fault: ASSERTION FAILED:
                    setOf(StructureSet(structure)) at
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: fpizlo at apple.com
                CC: sam at webkit.org, ggaren at apple.com, oliver at apple.com,
                    barraclough at apple.com, msaboff at apple.com,
                    mhahnenberg at apple.com, mark.lam at apple.com

This is likely to be an overzealous assertion.

Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

More information about the webkit-unassigned mailing list