--- src/3rdparty/webkit/Source/JavaScriptCore/runtime/JSGlobalData.cpp 2015-05-07 14:14:45.000000000 +0000 +++ src/3rdparty/webkit/Source/JavaScriptCore/runtime/JSGlobalData.cpp 2017-06-30 17:52:16.466554000 +0000 @@ -121,7 +121,7 @@ { // Enough storage to fit a JSArray, JSByteArray, JSString, or JSFunction. // COMPILE_ASSERTS below check that this is true. - char storage[64]; + char storage[128]; COMPILE_ASSERT(sizeof(JSArray) <= sizeof(storage), sizeof_JSArray_must_be_less_than_storage); JSCell* jsArray = new (storage) JSArray(JSArray::VPtrStealingHack);