[Webkit-unassigned] [Bug 208642] REGRESSION: (r257905) [ Mac wk2 Debug ] ASSERTION FAILED: !m_isolatedWorld->isNormal() || m_wrapper || !m_jsFunction

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=208642

--- Comment #12 from Yusuke Suzuki <ysuzuki at apple.com> ---
Currently, I'm checking two possibilities,

1. My patch had a bug. And this allows m_wrapper collected by GC. I'm now checking this possibility.
2. This was pre-existing bug. We are not hitting the crash just because m_jsFunction was dead too.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200306/c7d9f798/attachment.htm>