[Webkit-unassigned] [Bug 136391] ASSERTION FAILED: cell->isObject() in JSC::asObject(JSCell*)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=136391


Michael Saboff <msaboff at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #237381|review?                     |review-
               Flag|                            |




--- Comment #2 from Michael Saboff <msaboff at apple.com>  2014-08-29 15:38:56 PST ---
(From update of attachment 237381)
r-

This should only be needed for calls from vmEntryToNative to native code.  Move the "storep cfr, [sp]" outside of the various if block to always happen in the makeHostFunctionCall macros in both LowLevelInterpreter{32_64,64}.asm

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.