[Webkit-unassigned] [Bug 157933] The baseline JIT crashes when compiling "(1, 1)/1"

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=157933

Saam Barati <sbarati at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Incorrect handling of       |The baseline JIT crashes
                   |constant LHS *comma*        |when compiling "(1,1)/1"
                   |expression in divide logic  |

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160523/f9a7fe61/attachment.html>