[Webkit-unassigned] [Bug 211881] JavascriptCore crashed cause of Inappropriate optimization

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=211881

Keith Miller <keith_miller at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |CONFIGURATION CHANGED

--- Comment #6 from Keith Miller <keith_miller at apple.com> ---
Hi! Thanks for the report. There have been a number of small fixes to our for-of code in the last week or so, which appear to have fixed your PoCs. I'm not exactly sure which one fixed your PoCs, though. 

Please let us know if you can still repro after https://trac.webkit.org/changeset/261824, which is the most recent fix.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200518/b4817885/attachment-0001.htm>