[Webkit-unassigned] [Bug 164252] New: DFG ASSERTION FAILED: m_plan.weakReferences.contains(structure)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=164252

            Bug ID: 164252
           Summary: DFG ASSERTION FAILED:
                    m_plan.weakReferences.contains(structure)
    Classification: Unclassified
           Product: WebKit
           Version: Other
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mcatanzaro at igalia.com

Created attachment 293482
  --> https://bugs.webkit.org/attachment.cgi?id=293482&action=review
Debug info

This occured with WebKit trunk built a couple days ago at most, so it's not a duplicate of bug #151952. I think it happened on the google.com homepage:

DFG ASSERTION FAILED: m_plan.weakReferences.contains(structure)
../../Source/JavaScriptCore/dfg/DFGGraph.cpp(1521) : void JSC::DFG::Graph::assertIsRegistered(JSC::Structure*)

Debug info attached. Thanks for making it print a huge amount of debug automatically. :)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20161031/6ff504d2/attachment-0001.html>