[Webkit-unassigned] [Bug 222453] REGRESSION(r273225) [GLIB] imported/w3c/web-platform-tests/html/semantics/scripting-1/the-script-element/module/evaluation-order-4-tla.html is crashing in release builds

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=222453

--- Comment #2 from Lauro Moura <lmoura at igalia.com> ---
(In reply to Keith Miller from comment #1)
> Interesting... this crash doesn't seem to happen on the Mac port. I'm not
> sure what would be different about the GTK build? Is it possible to  figure
> out what line in mapProtoFuncSet we are crashing on?

I could not get a proper backtrace, but it's consistently crashing accessing the string content in the first iter->key() when rehashing a map right after inserting the key "http://localhost:8800/html/semantics/scripting-1/the-script-element/module/evaluation-order-4.2.mjs". (e.g. asString(iter->key())->length() is enough to crash).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210301/89c98b20/attachment.htm>