[Webkit-unassigned] [Bug 161797] New: REGRESSION (r205658): Crash in JSC::MarkedBlock::vm() const + 12

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=161797

            Bug ID: 161797
           Summary: REGRESSION (r205658): Crash in JSC::MarkedBlock::vm()
                    const + 12
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ryanhaddad at apple.com

Crash in JSC::MarkedBlock::vm() const + 12

Seen with imported/w3c/canvas/2d.fillRect.clip.html
https://build.webkit.org/results/Apple%20Yosemite%20Debug%20WK2%20(Tests)/r205740%20(14897)/results.html

fast/layers/zindex-inherit.html
https://build.webkit.org/results/Apple%20El%20Capitan%20Debug%20WK1%20(Tests)/r205729%20(8250)/results.html

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160909/7e75d960/attachment.html>