[Webkit-unassigned] [Bug 136391] ASSERTION FAILED: cell->isObject() in JSC::asObject(JSCell*)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=136391


Akos Kiss <akiss at inf.u-szeged.hu> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #237381|0                           |1
        is obsolete|                            |
 Attachment #237381|commit-queue?               |
               Flag|                            |
 Attachment #237388|                            |review?, commit-queue?
               Flag|                            |




--- Comment #3 from Akos Kiss <akiss at inf.u-szeged.hu>  2014-08-29 16:33:28 PST ---
Created an attachment (id=237388)
 --> (https://bugs.webkit.org/attachment.cgi?id=237388&action=review)
Proposed patch, v2

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.