[Webkit-unassigned] [Bug 145243] New: JIT bug - fails when inspector closed, works when open

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=145243

            Bug ID: 145243
           Summary: JIT bug - fails when inspector closed, works when open
    Classification: Unclassified
           Product: WebKit
           Version: 528+ (Nightly build)
          Hardware: Unspecified
               URL: http://rawgit.com/es-shims/es6-shim/master/test/index.
                    html
                OS: Unspecified
            Status: NEW
          Severity: Blocker
          Priority: P1
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ljharb at gmail.com
                CC: fpizlo at apple.com, utatane.tea at gmail.com

When accessing http://rawgit.com/es-shims/es6-shim/master/test/index.html on a current Nightly revision, it will fail with a bunch of `obj.__flags` errors (something in mocha/chai). However, when the dev inspector is *open*, they all/mostly pass as expected (some failures in older revisions are fine).

This appears to have been introduced by r182007, r182008, or r182009 - http://trac.webkit.org/changeset/182009 looks related perhaps?

Obviously this is super critical, and since I have no idea how it's broken I have no idea how many things this could break across the web :-)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150521/42f742e8/attachment.html>