[Webkit-unassigned] [Bug 229594] [ Win EWS] js/dfg-int16array.html is a flaky crash under WebCore::LayoutIntegration::LineLayout::constructContent

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=229594

--- Comment #8 from Eric Hutchison <ehutchison at apple.com> ---
js/dfg-int32array-overflow-values.html also affected:

History: https://results.webkit.org/?suite=layout-tests&test=js/dfg-int32array-overflow-values.html

Crash Log: https://ews-build.s3-us-west-2.amazonaws.com/Windows-EWS/r438420-105169/js/dfg-int32array-overflow-values-crash-log.txt

Update test expectations: http://trac.webkit.org/changeset/282695/webkit

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210917/e36f5faa/attachment-0001.htm>