[Webkit-unassigned] [Bug 229594] [ Win EWS] js/dfg-int16array.html is a flaky crash under WebCore::LayoutIntegration::LineLayout::constructContent

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=229594

--- Comment #10 from Eric Hutchison <ehutchison at apple.com> ---
js/dfg-uint32array-overflow-values.html is affected.

History: https://results.webkit.org/?suite=layout-tests&test=js/dfg-uint32array-overflow-values.html

Results: https://ews-build.s3-us-west-2.amazonaws.com/Windows-EWS/r438649-105405/results.html

Crash Log: https://ews-build.s3-us-west-2.amazonaws.com/Windows-EWS/r438649-105405/js/dfg-uint32array-overflow-values-crash-log.txt

Update test expectations: https://trac.webkit.org/changeset/282781/webkit

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210920/01735dfe/attachment.htm>