DescriptionFix cluster-fuzz found regression with d8 Workers
This one occurred when serializing an object. When the property getter threw an
exception, that value was skipped, but the property count wasn't updated. The
deserializer then tried to deserialize the wrong value.
BUG=chromium:506549
R=jarin@chromium.org
LOG=n
Committed: https://crrev.com/54920cd2f08549130e363b5bc801424a8eecc7d2
Cr-Commit-Position: refs/heads/master@{#29541}
Patch Set 1 #Patch Set 2 : add assertThrows #Messages
Total messages: 6 (1 generated)
|