[Webkit-unassigned] [Bug 208642] REGRESSION: (r257905) [ Mac wk2 Debug ] ASSERTION FAILED: !m_isolatedWorld->isNormal() || m_wrapper || !m_jsFunction
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Thu Mar 5 13:22:00 PST 2020
https://bugs.webkit.org/show_bug.cgi?id=208642
Yusuke Suzuki <ysuzuki at apple.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |ysuzuki at apple.com
--- Comment #6 from Yusuke Suzuki <ysuzuki at apple.com> ---
This assertion looks wrong. It is assuming that, if m_wrapper goes away, m_jsFunction should go away too. That is not guaranteed by JSC GC.
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200305/972dee2d/attachment.htm>
More information about the webkit-unassigned
mailing list