[Webkit-unassigned] [Bug 202624] New: Aborted (core dumped)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=202624

            Bug ID: 202624
           Summary: Aborted (core dumped)
           Product: WebKit
           Version: WebKit Local Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Critical
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: hexiaoyu at iie.ac.cn

Created attachment 380307

  --> https://bugs.webkit.org/attachment.cgi?id=380307&action=review

poc

This is not a dupe of 202342
=======================================
ASSERTION FAILED: this->prototypeChainMayInterceptStoreTo(vm, propertyName) || obj == this
../../Source/JavaScriptCore/runtime/JSObject.cpp(797) : bool JSC::JSObject::putInlineSlow(JSC::ExecState *, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot &)
Aborted (core dumped)

=======================================

OS: ubuntu 16.04

Configuration:

--jsc-only --debug --cmakeargs="-DENABLE_STATIC_JSC=ON -DCMAKE_C_COMPILER='/usr/bin/clang' -DCMAKE_CXX_COMPILER='/usr/bin/clang++' -DCMAKE_CXX_FLAGS='-fsanitize-coverage=trace-pc-guard -O3 -lrt'

git log:
=======================================
commit 9188d0222391c558277ed74d037b7c9ef5719405
Author: commit-queue at webkit.org <commit-queue at webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
commit 9188d0222391c558277ed74d037b7c9ef5719405
Author: commit-queue at webkit.org <commit-queue at webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Date:   Wed May 29 06:00:40 2019 +0000

    [MSE][GStreamer] update the readyState correctly in MediaPlayerPrivateGStreamerMSE
    https://bugs.webkit.org/show_bug.cgi?id=197834

    Patch by Yacine Bandou <yacine.bandou at softathome.com> on 2019-05-28
    Reviewed by Xabier Rodriguez-Calvar.
====================
pass parameters：
jsc poc

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20191007/6228a310/attachment.html>