[Webkit-unassigned] [Bug 229235] REGRESSION(r??????): Crash in JSC::FTL::saveAllRegisters

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Aug 18 08:46:45 PDT 2021


--- Comment #4 from Michael Catanzaro <mcatanzaro at gnome.org> ---
Oh and there is this console output:

/usr/include/c++/11.1.0/array:196: constexpr const value_type& std::array<_Tp, _Nm>::operator[](std::array<_Tp, _Nm>::size_type) const [with _Tp = unsigned int; long unsigned int _Nm = 1; std::array<_Tp, _Nm>::const_reference = const unsigned int&; std::array<_Tp, _Nm>::size_type = long unsigned int]: Assertion '__n < this->size()' failed.

We can see from the backtrace that __n is 0, so presumably the array's size must be 0 as well.

You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210818/12980114/attachment-0001.htm>

More information about the webkit-unassigned mailing list