[Webkit-unassigned] [Bug 185738] Atomics.load() resulting in segmentation fault

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=185738

--- Comment #1 from Alexey Proskuryakov <ap at webkit.org> ---
DFG ASSERTION FAILED: AI-clobberize disagreement; AI says ClobberedStructures while clobberize says (Direct:[TypedArrayProperties], Super:[World, Heap])
./dfg/DFGCFAPhase.cpp(185) : void JSC::DFG::CFAPhase::performBlockCFA(JSC::DFG::BasicBlock *)
1   0x105e715e9 WTFCrash
2   0x105e733bb WTFCrashWithInfo(int, char const*, char const*, int)
3   0x1065a2515 JSC::DFG::CFAPhase::performBlockCFA(JSC::DFG::BasicBlock*)
4   0x1065a1d72 JSC::DFG::CFAPhase::performForwardCFA()
5   0x1065a17f7 JSC::DFG::CFAPhase::run()
6   0x1065a0fde bool JSC::DFG::runAndLog<JSC::DFG::CFAPhase>(JSC::DFG::CFAPhase&)
7   0x106544b7e bool JSC::DFG::runPhase<JSC::DFG::CFAPhase>(JSC::DFG::Graph&)
8   0x106544b45 JSC::DFG::performCFA(JSC::DFG::Graph&)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180517/a86fcb2a/attachment.html>