<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>123551</bug_id>
          
          <creation_ts>2013-10-30 19:51:49 -0700</creation_ts>
          <short_desc>Assertion failure in js/dom/global-constructors-attributes-dedicated-worker.html</short_desc>
          <delta_ts>2013-10-30 20:59:33 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar, LayoutTestFailure</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Ryosuke Niwa">rniwa</reporter>
          <assigned_to name="Filip Pizlo">fpizlo</assigned_to>
          <cc>fpizlo</cc>
    
    <cc>ggaren</cc>
    
    <cc>mhahnenberg</cc>
    
    <cc>oliver</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>945318</commentid>
    <comment_count>0</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2013-10-30 19:51:49 -0700</bug_when>
    <thetext>e.g.

e.g. http://build.webkit.org/results/Apple%20MountainLion%20Debug%20WK2%20(Tests)/r158334%20(13791)/results.html

CRASHING TEST: js/dom/global-constructors-attributes-dedicated-worker.html

Thread 0:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore      	0x000000010f9e55e4 WTF::ThreadSpecific&lt;bool&gt;::isSet() + 36 (ThreadSpecific.h:251)
1   com.apple.JavaScriptCore      	0x000000010f9e54ae WTF::isCompilationThread() + 46 (CompilationThread.cpp:53)
2   com.apple.JavaScriptCore      	0x000000010f360a2a JSC::WriteBarrierBase&lt;JSC::Structure&gt;::set(JSC::VM&amp;, JSC::JSCell const*, JSC::Structure*) + 106 (WriteBarrier.h:77)
3   com.apple.JavaScriptCore      	0x000000010f3608d4 JSC::JSCell::setStructure(JSC::VM&amp;, JSC::Structure*) + 356 (JSCellInlines.h:150)
4   com.apple.JavaScriptCore      	0x000000010f36055c JSC::JSObject::setStructure(JSC::VM&amp;, JSC::Structure*) + 236 (JSObject.h:1146)
5   com.apple.JavaScriptCore      	0x000000010f360304 JSC::JSObject::setStructureAndButterfly(JSC::VM&amp;, JSC::Structure*, JSC::Butterfly*) + 52 (JSObject.h:1139)
6   com.apple.JavaScriptCore      	0x000000010f3606cc JSC::JSObject::setStructureAndReallocateStorageIfNecessary(JSC::VM&amp;, unsigned int, JSC::Structure*) + 236 (JSObject.h:1403)
7   com.apple.JavaScriptCore      	0x000000010f3605d7 JSC::JSObject::setStructureAndReallocateStorageIfNecessary(JSC::VM&amp;, JSC::Structure*) + 71 (JSObject.h:1410)
8   com.apple.JavaScriptCore      	0x000000010f35fe02 bool JSC::JSObject::putDirectInternal&lt;(JSC::JSObject::PutMode)1&gt;(JSC::VM&amp;, JSC::PropertyName, JSC::JSValue, unsigned int, JSC::PutPropertySlot&amp;, JSC::JSCell*) + 2194 (JSObject.h:1381)
9   com.apple.JavaScriptCore      	0x000000010f35da4b JSC::JSObject::putDirect(JSC::VM&amp;, JSC::PropertyName, JSC::JSValue, unsigned int) + 219 (JSObject.h:1426)
10  com.apple.JavaScriptCore      	0x000000010f657dbf JSC::InternalFunction::finishCreation(JSC::VM&amp;, WTF::String const&amp;) + 303 (InternalFunction.cpp:48)
11  com.apple.JavaScriptCore      	0x000000010f6ec9be JSC::JSGenericTypedArrayViewConstructor&lt;JSC::JSGenericTypedArrayView&lt;JSC::Float64Adaptor&gt; &gt;::finishCreation(JSC::VM&amp;, JSC::JSObject*, WTF::String const&amp;) + 62 (JSGenericTypedArrayViewConstructor.h:45)
12  com.apple.JavaScriptCore      	0x000000010f6eb403 JSC::JSGenericTypedArrayViewConstructor&lt;JSC::JSGenericTypedArrayView&lt;JSC::Float64Adaptor&gt; &gt;::create(JSC::VM&amp;, JSC::Structure*, JSC::JSObject*, WTF::String const&amp;) + 115 (JSGenericTypedArrayViewConstructorInlines.h:61)
13  com.apple.JavaScriptCore      	0x000000010f6e3204 JSC::JSGlobalObject::reset(JSC::JSValue) + 25476 (JSGlobalObject.cpp:410)
14  com.apple.JavaScriptCore      	0x000000010f6dce3f JSC::JSGlobalObject::init(JSC::JSObject*) + 223 (JSGlobalObject.cpp:182)
15  com.apple.WebCore             	0x00000001115db198 JSC::JSGlobalObject::finishCreation(JSC::VM&amp;, JSC::JSObject*) + 120 (JSGlobalObject.h:283)
16  com.apple.WebCore             	0x00000001115dacea WebCore::JSDOMGlobalObject::finishCreation(JSC::VM&amp;, JSC::JSObject*) + 58 (JSDOMGlobalObject.cpp:67)
17  com.apple.WebCore             	0x0000000111644c08 WebCore::JSDOMWindowBase::finishCreation(JSC::VM&amp;, WebCore::JSDOMWindowShell*) + 72 (JSDOMWindowBase.cpp:66)
18  com.apple.WebCore             	0x000000011164d214 WebCore::JSDOMWindow::create(JSC::VM&amp;, JSC::Structure*, WTF::PassRefPtr&lt;WebCore::DOMWindow&gt;, WebCore::JSDOMWindowShell*) + 164 (JSDOMWindow.h:41)
19  com.apple.WebCore             	0x000000011164cbf7 WebCore::JSDOMWindowShell::setWindow(WTF::PassRefPtr&lt;WebCore::DOMWindow&gt;) + 343 (JSDOMWindowShell.cpp:86)
20  com.apple.WebCore             	0x0000000111fa6f23 WebCore::ScriptController::clearWindowShell(WebCore::DOMWindow*, bool) + 323 (ScriptController.cpp:191)
21  com.apple.WebCore             	0x000000011109f0ce WebCore::FrameLoader::clear(WebCore::Document*, bool, bool, bool) + 430 (FrameLoader.cpp:595)
22  com.apple.WebCore             	0x0000000110e80a8f WebCore::DocumentWriter::begin(WebCore::URL const&amp;, bool, WebCore::Document*) + 495 (DocumentWriter.cpp:140)
23  com.apple.WebCore             	0x0000000110e50aea WebCore::DocumentLoader::commitData(char const*, unsigned long) + 106 (DocumentLoader.cpp:764)
24  com.apple.WebCore             	0x0000000110e5060b WebCore::DocumentLoader::finishedLoading(double) + 539 (DocumentLoader.cpp:405)
25  com.apple.WebCore             	0x0000000110e54c65 WebCore::DocumentLoader::maybeLoadEmpty() + 901 (DocumentLoader.cpp:1347)
26  com.apple.WebCore             	0x0000000110e54da2 WebCore::DocumentLoader::startLoadingMainResource() + 274 (DocumentLoader.cpp:1359)
27  com.apple.WebCore             	0x00000001110a8109 WebCore::FrameLoader::continueLoadAfterWillSubmitForm() + 185 (FrameLoader.cpp:2227)
28  com.apple.WebCore             	0x00000001110a4a42 WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, bool) + 978 (FrameLoader.cpp:2876)
29  com.apple.WebCore             	0x00000001110a4b57 WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy(void*, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, bool) + 87 (FrameLoader.cpp:2707)
30  com.apple.WebCore             	0x0000000111c2bd0c WebCore::PolicyCallback::call(bool) + 140 (PolicyCallback.cpp:103)
31  com.apple.WebCore             	0x0000000111c2cd3a WebCore::PolicyChecker::continueAfterNavigationPolicy(WebCore::PolicyAction) + 682 (PolicyChecker.cpp:183)
32  com.apple.WebCore             	0x0000000111c3283e WebCore::PolicyChecker::checkNavigationPolicy(WebCore::ResourceRequest const&amp;, WebCore::DocumentLoader*, WTF::PassRefPtr&lt;WebCore::FormState&gt;, void (*)(void*, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, bool), void*)::$_0::operator()(WebCore::PolicyAction) const + 30 (PolicyChecker.cpp:100)
33  com.apple.WebCore             	0x0000000111c3280e std::__1::__function::__func&lt;WebCore::PolicyChecker::checkNavigationPolicy(WebCore::ResourceRequest const&amp;, WebCore::DocumentLoader*, WTF::PassRefPtr&lt;WebCore::FormState&gt;, void (*)(void*, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, bool), void*)::$_0, std::__1::allocator&lt;WebCore::PolicyChecker::checkNavigationPolicy(WebCore::ResourceRequest const&amp;, WebCore::DocumentLoader*, WTF::PassRefPtr&lt;WebCore::FormState&gt;, void (*)(void*, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, bool), void*)::$_0&gt;, void (WebCore::PolicyAction)&gt;::operator()(WebCore::PolicyAction&amp;&amp;) + 94 (functional:1059)
34  com.apple.WebKit2             	0x000000010dce605c std::__1::function&lt;void (WebCore::PolicyAction)&gt;::operator()(WebCore::PolicyAction) const + 44 (functional:1435)
35  com.apple.WebKit2             	0x000000010dcec5cc WebKit::WebFrameLoaderClient::dispatchDecidePolicyForNavigationAction(WebCore::NavigationAction const&amp;, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, std::__1::function&lt;void (WebCore::PolicyAction)&gt;) + 380 (WebFrameLoaderClient.cpp:698)
36  com.apple.WebCore             	0x0000000111c2c7a9 WebCore::PolicyChecker::checkNavigationPolicy(WebCore::ResourceRequest const&amp;, WebCore::DocumentLoader*, WTF::PassRefPtr&lt;WebCore::FormState&gt;, void (*)(void*, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, bool), void*) + 1193 (PolicyChecker.cpp:98)
37  com.apple.WebCore             	0x00000001110a4487 WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::PassRefPtr&lt;WebCore::FormState&gt;) + 1495 (FrameLoader.cpp:1424)
38  com.apple.WebCore             	0x00000001110a1b3d WebCore::FrameLoader::load(WebCore::DocumentLoader*) + 429 (FrameLoader.cpp:1365)
39  com.apple.WebCore             	0x00000001110a3e63 WebCore::FrameLoader::load(WebCore::FrameLoadRequest const&amp;) + 1219 (FrameLoader.cpp:1315)
40  com.apple.WebKit2             	0x000000010dd70c7d WebKit::WebPage::loadURLRequest(WebCore::ResourceRequest const&amp;, WebKit::SandboxExtension::Handle const&amp;, CoreIPC::MessageDecoder&amp;) + 397 (WebPage.cpp:853)
41  com.apple.WebKit2             	0x000000010dd70aba WebKit::WebPage::loadURL(WTF::String const&amp;, WebKit::SandboxExtension::Handle const&amp;, CoreIPC::MessageDecoder&amp;) + 122 (WebPage.cpp:834)
42  com.apple.WebKit2             	0x000000010ddd052a void CoreIPC::callMemberFunction&lt;WebKit::WebPage, void (WebKit::WebPage::*)(WTF::String const&amp;, WebKit::SandboxExtension::Handle const&amp;, CoreIPC::MessageDecoder&amp;), WTF::String, WebKit::SandboxExtension::Handle&gt;(std::__1::tuple&lt;WTF::String, WebKit::SandboxExtension::Handle&gt;&amp;&amp;, CoreIPC::MessageDecoder&amp;, WebKit::WebPage*, void (WebKit::WebPage::*)(WTF::String const&amp;, WebKit::SandboxExtension::Handle const&amp;, CoreIPC::MessageDecoder&amp;)) + 186 (HandleMessage.h:315)
43  com.apple.WebKit2             	0x000000010ddbf30c void CoreIPC::handleMessageVariadic&lt;Messages::WebPage::LoadURL, WebKit::WebPage, void (WebKit::WebPage::*)(WTF::String const&amp;, WebKit::SandboxExtension::Handle const&amp;, CoreIPC::MessageDecoder&amp;)&gt;(CoreIPC::MessageDecoder&amp;, WebKit::WebPage*, void (WebKit::WebPage::*)(WTF::String const&amp;, WebKit::SandboxExtension::Handle const&amp;, CoreIPC::MessageDecoder&amp;)) + 220 (HandleMessage.h:416)
44  com.apple.WebKit2             	0x000000010ddb8e78 WebKit::WebPage::didReceiveWebPageMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&amp;) + 3592 (WebPageMessageReceiver.cpp:184)
45  com.apple.WebKit2             	0x000000010dd78309 WebKit::WebPage::didReceiveMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&amp;) + 537 (WebPage.cpp:3040)
46  com.apple.WebKit2             	0x000000010dd78357 non-virtual thunk to WebKit::WebPage::didReceiveMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&amp;) + 55 (WebPage.cpp:3040)
47  com.apple.WebKit2             	0x000000010da7caf0 CoreIPC::MessageReceiverMap::dispatchMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&amp;) + 496 (MessageReceiverMap.cpp:87)
48  com.apple.WebKit2             	0x000000010deaaaaa WebKit::WebProcess::didReceiveMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&amp;) + 58 (WebProcess.cpp:636)
49  com.apple.WebKit2             	0x000000010d9bd423 CoreIPC::Connection::dispatchMessage(CoreIPC::MessageDecoder&amp;) + 51 (Connection.cpp:789)
50  com.apple.WebKit2             	0x000000010d9b5ad0 CoreIPC::Connection::dispatchMessage(std::__1::unique_ptr&lt;CoreIPC::MessageDecoder, std::__1::default_delete&lt;CoreIPC::MessageDecoder&gt; &gt;) + 368 (Connection.cpp:809)
51  com.apple.WebKit2             	0x000000010d9bd1b1 CoreIPC::Connection::dispatchOneMessage() + 1377 (Connection.cpp:835)
52  com.apple.WebKit2             	0x000000010d9c9af2 WTF::FunctionWrapper&lt;void (CoreIPC::Connection::*)()&gt;::operator()(CoreIPC::Connection*) + 114 (Functional.h:218)
53  com.apple.WebKit2             	0x000000010d9c9a75 WTF::BoundFunctionImpl&lt;WTF::FunctionWrapper&lt;void (CoreIPC::Connection::*)()&gt;, void (CoreIPC::Connection*)&gt;::operator()() + 53 (Functional.h:496)
54  com.apple.WebKit2             	0x000000010d9d15f2 WTF::Function&lt;void ()&gt;::operator()() const + 114 (Functional.h:704)
55  com.apple.WebKit2             	0x000000010d9d156c std::__1::__function::__func&lt;WTF::Function&lt;void ()&gt;, std::__1::allocator&lt;WTF::Function&lt;void ()&gt; &gt;, void ()()&gt;::operator()() + 60 (functional:1059)
56  com.apple.WebCore             	0x0000000111f8b05a std::__1::function&lt;void ()&gt;::operator()() const + 26 (functional:1435)
57  com.apple.WebCore             	0x0000000111f8ace7 WebCore::RunLoop::performWork() + 519 (RunLoop.cpp:106)
58  com.apple.WebCore             	0x0000000111f8c224 WebCore::RunLoop::performWork(void*) + 36 (RunLoopCF.cpp:38)
59  com.apple.CoreFoundation      	0x00007fff892bcb31 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
60  com.apple.CoreFoundation      	0x00007fff892bc455 __CFRunLoopDoSources0 + 245
61  com.apple.CoreFoundation      	0x00007fff892df7f5 __CFRunLoopRun + 789
62  com.apple.CoreFoundation      	0x00007fff892df0e2 CFRunLoopRunSpecific + 290
63  com.apple.HIToolbox           	0x00007fff91955eb4 RunCurrentEventLoopInMode + 209
64  com.apple.HIToolbox           	0x00007fff91955c52 ReceiveNextEventCommon + 356
65  com.apple.HIToolbox           	0x00007fff91955ae3 BlockUntilNextEventMatchingListInMode + 62
66  com.apple.AppKit              	0x00007fff92698533 _DPSNextEvent + 685
67  com.apple.AppKit              	0x00007fff92697df2 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 128
68  com.apple.AppKit              	0x00007fff9268f1a3 -[NSApplication run] + 517
69  com.apple.WebKit2             	0x000000010dc7aeef WebKit::WebContentProcessMainDelegate::startRunLoop() + 95 (WebContentProcessMain.mm:172)
70  com.apple.WebKit2             	0x000000010dc79f2f int WebKit::ChildProcessMain&lt;WebKit::WebProcess, WebKit::WebContentProcessMainDelegate&gt;(int, char**) + 671 (ChildProcessEntryPoint.h:93)
71  com.apple.WebKit2             	0x000000010dc79c7b WebContentProcessMain + 27 (WebContentProcessMain.mm:183)
72  com.apple.WebProcess          	0x000000010d8e1d1d WebKit::BootstrapMain(int, char**) + 381
73  com.apple.WebProcess          	0x000000010d8e1b92 main + 34
74  libdyld.dylib                 	0x00007fff895a87e1 start + 1</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>945319</commentid>
    <comment_count>1</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2013-10-30 19:53:11 -0700</bug_when>
    <thetext>http://webkit-test-results.appspot.com/dashboards/flakiness_dashboard.html#tests=js%2Fdom%2Fglobal-constructors-attributes-shared-worker.html</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>945321</commentid>
    <comment_count>2</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2013-10-30 19:57:58 -0700</bug_when>
    <thetext>There are multiple tests that started hitting assertions around the same time as well:
http://webkit-test-results.appspot.com/dashboards/flakiness_dashboard.html#tests=fast%2Ffiles%2Fworkers%2Fworker-read-file-sync.html%2Cfast%2Fworkers%2Fworker-call.html%2Cjs%2Fdom%2Fglobal-constructors-attributes-shared-worker.html</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>945322</commentid>
    <comment_count>3</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2013-10-30 19:59:21 -0700</bug_when>
    <thetext>Given the blame list: http://trac.webkit.org/log/?verbose=on&amp;rev=158313&amp;stop_rev=158301

The most likely culprit is http://trac.webkit.org/changeset/158304</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>945325</commentid>
    <comment_count>4</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2013-10-30 20:02:25 -0700</bug_when>
    <thetext>I&apos;m investigating it.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>945333</commentid>
    <comment_count>5</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2013-10-30 20:33:16 -0700</bug_when>
    <thetext>(In reply to comment #0)
&gt; e.g.
&gt; 
&gt; e.g. http://build.webkit.org/results/Apple%20MountainLion%20Debug%20WK2%20(Tests)/r158334%20(13791)/results.html
&gt; 
&gt; CRASHING TEST: js/dom/global-constructors-attributes-dedicated-worker.html
&gt; 
&gt; Thread 0:: Dispatch queue: com.apple.main-thread
&gt; 0   com.apple.JavaScriptCore          0x000000010f9e55e4 WTF::ThreadSpecific&lt;bool&gt;::isSet() + 36 (ThreadSpecific.h:251)
&gt; 1   com.apple.JavaScriptCore          0x000000010f9e54ae WTF::isCompilationThread() + 46 (CompilationThread.cpp:53)
&gt; 2   com.apple.JavaScriptCore          0x000000010f360a2a JSC::WriteBarrierBase&lt;JSC::Structure&gt;::set(JSC::VM&amp;, JSC::JSCell const*, JSC::Structure*) + 106 (WriteBarrier.h:77)
&gt; 3   com.apple.JavaScriptCore          0x000000010f3608d4 JSC::JSCell::setStructure(JSC::VM&amp;, JSC::Structure*) + 356 (JSCellInlines.h:150)
&gt; 4   com.apple.JavaScriptCore          0x000000010f36055c JSC::JSObject::setStructure(JSC::VM&amp;, JSC::Structure*) + 236 (JSObject.h:1146)
&gt; 5   com.apple.JavaScriptCore          0x000000010f360304 JSC::JSObject::setStructureAndButterfly(JSC::VM&amp;, JSC::Structure*, JSC::Butterfly*) + 52 (JSObject.h:1139)
&gt; 6   com.apple.JavaScriptCore          0x000000010f3606cc JSC::JSObject::setStructureAndReallocateStorageIfNecessary(JSC::VM&amp;, unsigned int, JSC::Structure*) + 236 (JSObject.h:1403)
&gt; 7   com.apple.JavaScriptCore          0x000000010f3605d7 JSC::JSObject::setStructureAndReallocateStorageIfNecessary(JSC::VM&amp;, JSC::Structure*) + 71 (JSObject.h:1410)
&gt; 8   com.apple.JavaScriptCore          0x000000010f35fe02 bool JSC::JSObject::putDirectInternal&lt;(JSC::JSObject::PutMode)1&gt;(JSC::VM&amp;, JSC::PropertyName, JSC::JSValue, unsigned int, JSC::PutPropertySlot&amp;, JSC::JSCell*) + 2194 (JSObject.h:1381)
&gt; 9   com.apple.JavaScriptCore          0x000000010f35da4b JSC::JSObject::putDirect(JSC::VM&amp;, JSC::PropertyName, JSC::JSValue, unsigned int) + 219 (JSObject.h:1426)
&gt; 10  com.apple.JavaScriptCore          0x000000010f657dbf JSC::InternalFunction::finishCreation(JSC::VM&amp;, WTF::String const&amp;) + 303 (InternalFunction.cpp:48)
&gt; 11  com.apple.JavaScriptCore          0x000000010f6ec9be JSC::JSGenericTypedArrayViewConstructor&lt;JSC::JSGenericTypedArrayView&lt;JSC::Float64Adaptor&gt; &gt;::finishCreation(JSC::VM&amp;, JSC::JSObject*, WTF::String const&amp;) + 62 (JSGenericTypedArrayViewConstructor.h:45)
&gt; 12  com.apple.JavaScriptCore          0x000000010f6eb403 JSC::JSGenericTypedArrayViewConstructor&lt;JSC::JSGenericTypedArrayView&lt;JSC::Float64Adaptor&gt; &gt;::create(JSC::VM&amp;, JSC::Structure*, JSC::JSObject*, WTF::String const&amp;) + 115 (JSGenericTypedArrayViewConstructorInlines.h:61)
&gt; 13  com.apple.JavaScriptCore          0x000000010f6e3204 JSC::JSGlobalObject::reset(JSC::JSValue) + 25476 (JSGlobalObject.cpp:410)
&gt; 14  com.apple.JavaScriptCore          0x000000010f6dce3f JSC::JSGlobalObject::init(JSC::JSObject*) + 223 (JSGlobalObject.cpp:182)
&gt; 15  com.apple.WebCore                 0x00000001115db198 JSC::JSGlobalObject::finishCreation(JSC::VM&amp;, JSC::JSObject*) + 120 (JSGlobalObject.h:283)
&gt; 16  com.apple.WebCore                 0x00000001115dacea WebCore::JSDOMGlobalObject::finishCreation(JSC::VM&amp;, JSC::JSObject*) + 58 (JSDOMGlobalObject.cpp:67)
&gt; 17  com.apple.WebCore                 0x0000000111644c08 WebCore::JSDOMWindowBase::finishCreation(JSC::VM&amp;, WebCore::JSDOMWindowShell*) + 72 (JSDOMWindowBase.cpp:66)
&gt; 18  com.apple.WebCore                 0x000000011164d214 WebCore::JSDOMWindow::create(JSC::VM&amp;, JSC::Structure*, WTF::PassRefPtr&lt;WebCore::DOMWindow&gt;, WebCore::JSDOMWindowShell*) + 164 (JSDOMWindow.h:41)
&gt; 19  com.apple.WebCore                 0x000000011164cbf7 WebCore::JSDOMWindowShell::setWindow(WTF::PassRefPtr&lt;WebCore::DOMWindow&gt;) + 343 (JSDOMWindowShell.cpp:86)
&gt; 20  com.apple.WebCore                 0x0000000111fa6f23 WebCore::ScriptController::clearWindowShell(WebCore::DOMWindow*, bool) + 323 (ScriptController.cpp:191)
&gt; 21  com.apple.WebCore                 0x000000011109f0ce WebCore::FrameLoader::clear(WebCore::Document*, bool, bool, bool) + 430 (FrameLoader.cpp:595)
&gt; 22  com.apple.WebCore                 0x0000000110e80a8f WebCore::DocumentWriter::begin(WebCore::URL const&amp;, bool, WebCore::Document*) + 495 (DocumentWriter.cpp:140)
&gt; 23  com.apple.WebCore                 0x0000000110e50aea WebCore::DocumentLoader::commitData(char const*, unsigned long) + 106 (DocumentLoader.cpp:764)
&gt; 24  com.apple.WebCore                 0x0000000110e5060b WebCore::DocumentLoader::finishedLoading(double) + 539 (DocumentLoader.cpp:405)
&gt; 25  com.apple.WebCore                 0x0000000110e54c65 WebCore::DocumentLoader::maybeLoadEmpty() + 901 (DocumentLoader.cpp:1347)
&gt; 26  com.apple.WebCore                 0x0000000110e54da2 WebCore::DocumentLoader::startLoadingMainResource() + 274 (DocumentLoader.cpp:1359)
&gt; 27  com.apple.WebCore                 0x00000001110a8109 WebCore::FrameLoader::continueLoadAfterWillSubmitForm() + 185 (FrameLoader.cpp:2227)
&gt; 28  com.apple.WebCore                 0x00000001110a4a42 WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, bool) + 978 (FrameLoader.cpp:2876)
&gt; 29  com.apple.WebCore                 0x00000001110a4b57 WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy(void*, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, bool) + 87 (FrameLoader.cpp:2707)
&gt; 30  com.apple.WebCore                 0x0000000111c2bd0c WebCore::PolicyCallback::call(bool) + 140 (PolicyCallback.cpp:103)
&gt; 31  com.apple.WebCore                 0x0000000111c2cd3a WebCore::PolicyChecker::continueAfterNavigationPolicy(WebCore::PolicyAction) + 682 (PolicyChecker.cpp:183)
&gt; 32  com.apple.WebCore                 0x0000000111c3283e WebCore::PolicyChecker::checkNavigationPolicy(WebCore::ResourceRequest const&amp;, WebCore::DocumentLoader*, WTF::PassRefPtr&lt;WebCore::FormState&gt;, void (*)(void*, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, bool), void*)::$_0::operator()(WebCore::PolicyAction) const + 30 (PolicyChecker.cpp:100)
&gt; 33  com.apple.WebCore                 0x0000000111c3280e std::__1::__function::__func&lt;WebCore::PolicyChecker::checkNavigationPolicy(WebCore::ResourceRequest const&amp;, WebCore::DocumentLoader*, WTF::PassRefPtr&lt;WebCore::FormState&gt;, void (*)(void*, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, bool), void*)::$_0, std::__1::allocator&lt;WebCore::PolicyChecker::checkNavigationPolicy(WebCore::ResourceRequest const&amp;, WebCore::DocumentLoader*, WTF::PassRefPtr&lt;WebCore::FormState&gt;, void (*)(void*, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, bool), void*)::$_0&gt;, void (WebCore::PolicyAction)&gt;::operator()(WebCore::PolicyAction&amp;&amp;) + 94 (functional:1059)
&gt; 34  com.apple.WebKit2                 0x000000010dce605c std::__1::function&lt;void (WebCore::PolicyAction)&gt;::operator()(WebCore::PolicyAction) const + 44 (functional:1435)
&gt; 35  com.apple.WebKit2                 0x000000010dcec5cc WebKit::WebFrameLoaderClient::dispatchDecidePolicyForNavigationAction(WebCore::NavigationAction const&amp;, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, std::__1::function&lt;void (WebCore::PolicyAction)&gt;) + 380 (WebFrameLoaderClient.cpp:698)
&gt; 36  com.apple.WebCore                 0x0000000111c2c7a9 WebCore::PolicyChecker::checkNavigationPolicy(WebCore::ResourceRequest const&amp;, WebCore::DocumentLoader*, WTF::PassRefPtr&lt;WebCore::FormState&gt;, void (*)(void*, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, bool), void*) + 1193 (PolicyChecker.cpp:98)
&gt; 37  com.apple.WebCore                 0x00000001110a4487 WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::PassRefPtr&lt;WebCore::FormState&gt;) + 1495 (FrameLoader.cpp:1424)
&gt; 38  com.apple.WebCore                 0x00000001110a1b3d WebCore::FrameLoader::load(WebCore::DocumentLoader*) + 429 (FrameLoader.cpp:1365)
&gt; 39  com.apple.WebCore                 0x00000001110a3e63 WebCore::FrameLoader::load(WebCore::FrameLoadRequest const&amp;) + 1219 (FrameLoader.cpp:1315)
&gt; 40  com.apple.WebKit2                 0x000000010dd70c7d WebKit::WebPage::loadURLRequest(WebCore::ResourceRequest const&amp;, WebKit::SandboxExtension::Handle const&amp;, CoreIPC::MessageDecoder&amp;) + 397 (WebPage.cpp:853)
&gt; 41  com.apple.WebKit2                 0x000000010dd70aba WebKit::WebPage::loadURL(WTF::String const&amp;, WebKit::SandboxExtension::Handle const&amp;, CoreIPC::MessageDecoder&amp;) + 122 (WebPage.cpp:834)
&gt; 42  com.apple.WebKit2                 0x000000010ddd052a void CoreIPC::callMemberFunction&lt;WebKit::WebPage, void (WebKit::WebPage::*)(WTF::String const&amp;, WebKit::SandboxExtension::Handle const&amp;, CoreIPC::MessageDecoder&amp;), WTF::String, WebKit::SandboxExtension::Handle&gt;(std::__1::tuple&lt;WTF::String, WebKit::SandboxExtension::Handle&gt;&amp;&amp;, CoreIPC::MessageDecoder&amp;, WebKit::WebPage*, void (WebKit::WebPage::*)(WTF::String const&amp;, WebKit::SandboxExtension::Handle const&amp;, CoreIPC::MessageDecoder&amp;)) + 186 (HandleMessage.h:315)
&gt; 43  com.apple.WebKit2                 0x000000010ddbf30c void CoreIPC::handleMessageVariadic&lt;Messages::WebPage::LoadURL, WebKit::WebPage, void (WebKit::WebPage::*)(WTF::String const&amp;, WebKit::SandboxExtension::Handle const&amp;, CoreIPC::MessageDecoder&amp;)&gt;(CoreIPC::MessageDecoder&amp;, WebKit::WebPage*, void (WebKit::WebPage::*)(WTF::String const&amp;, WebKit::SandboxExtension::Handle const&amp;, CoreIPC::MessageDecoder&amp;)) + 220 (HandleMessage.h:416)
&gt; 44  com.apple.WebKit2                 0x000000010ddb8e78 WebKit::WebPage::didReceiveWebPageMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&amp;) + 3592 (WebPageMessageReceiver.cpp:184)
&gt; 45  com.apple.WebKit2                 0x000000010dd78309 WebKit::WebPage::didReceiveMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&amp;) + 537 (WebPage.cpp:3040)
&gt; 46  com.apple.WebKit2                 0x000000010dd78357 non-virtual thunk to WebKit::WebPage::didReceiveMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&amp;) + 55 (WebPage.cpp:3040)
&gt; 47  com.apple.WebKit2                 0x000000010da7caf0 CoreIPC::MessageReceiverMap::dispatchMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&amp;) + 496 (MessageReceiverMap.cpp:87)
&gt; 48  com.apple.WebKit2                 0x000000010deaaaaa WebKit::WebProcess::didReceiveMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&amp;) + 58 (WebProcess.cpp:636)
&gt; 49  com.apple.WebKit2                 0x000000010d9bd423 CoreIPC::Connection::dispatchMessage(CoreIPC::MessageDecoder&amp;) + 51 (Connection.cpp:789)
&gt; 50  com.apple.WebKit2                 0x000000010d9b5ad0 CoreIPC::Connection::dispatchMessage(std::__1::unique_ptr&lt;CoreIPC::MessageDecoder, std::__1::default_delete&lt;CoreIPC::MessageDecoder&gt; &gt;) + 368 (Connection.cpp:809)
&gt; 51  com.apple.WebKit2                 0x000000010d9bd1b1 CoreIPC::Connection::dispatchOneMessage() + 1377 (Connection.cpp:835)
&gt; 52  com.apple.WebKit2                 0x000000010d9c9af2 WTF::FunctionWrapper&lt;void (CoreIPC::Connection::*)()&gt;::operator()(CoreIPC::Connection*) + 114 (Functional.h:218)
&gt; 53  com.apple.WebKit2                 0x000000010d9c9a75 WTF::BoundFunctionImpl&lt;WTF::FunctionWrapper&lt;void (CoreIPC::Connection::*)()&gt;, void (CoreIPC::Connection*)&gt;::operator()() + 53 (Functional.h:496)
&gt; 54  com.apple.WebKit2                 0x000000010d9d15f2 WTF::Function&lt;void ()&gt;::operator()() const + 114 (Functional.h:704)
&gt; 55  com.apple.WebKit2                 0x000000010d9d156c std::__1::__function::__func&lt;WTF::Function&lt;void ()&gt;, std::__1::allocator&lt;WTF::Function&lt;void ()&gt; &gt;, void ()()&gt;::operator()() + 60 (functional:1059)
&gt; 56  com.apple.WebCore                 0x0000000111f8b05a std::__1::function&lt;void ()&gt;::operator()() const + 26 (functional:1435)
&gt; 57  com.apple.WebCore                 0x0000000111f8ace7 WebCore::RunLoop::performWork() + 519 (RunLoop.cpp:106)
&gt; 58  com.apple.WebCore                 0x0000000111f8c224 WebCore::RunLoop::performWork(void*) + 36 (RunLoopCF.cpp:38)
&gt; 59  com.apple.CoreFoundation          0x00007fff892bcb31 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
&gt; 60  com.apple.CoreFoundation          0x00007fff892bc455 __CFRunLoopDoSources0 + 245
&gt; 61  com.apple.CoreFoundation          0x00007fff892df7f5 __CFRunLoopRun + 789
&gt; 62  com.apple.CoreFoundation          0x00007fff892df0e2 CFRunLoopRunSpecific + 290
&gt; 63  com.apple.HIToolbox               0x00007fff91955eb4 RunCurrentEventLoopInMode + 209
&gt; 64  com.apple.HIToolbox               0x00007fff91955c52 ReceiveNextEventCommon + 356
&gt; 65  com.apple.HIToolbox               0x00007fff91955ae3 BlockUntilNextEventMatchingListInMode + 62
&gt; 66  com.apple.AppKit                  0x00007fff92698533 _DPSNextEvent + 685
&gt; 67  com.apple.AppKit                  0x00007fff92697df2 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 128
&gt; 68  com.apple.AppKit                  0x00007fff9268f1a3 -[NSApplication run] + 517
&gt; 69  com.apple.WebKit2                 0x000000010dc7aeef WebKit::WebContentProcessMainDelegate::startRunLoop() + 95 (WebContentProcessMain.mm:172)
&gt; 70  com.apple.WebKit2                 0x000000010dc79f2f int WebKit::ChildProcessMain&lt;WebKit::WebProcess, WebKit::WebContentProcessMainDelegate&gt;(int, char**) + 671 (ChildProcessEntryPoint.h:93)
&gt; 71  com.apple.WebKit2                 0x000000010dc79c7b WebContentProcessMain + 27 (WebContentProcessMain.mm:183)
&gt; 72  com.apple.WebProcess              0x000000010d8e1d1d WebKit::BootstrapMain(int, char**) + 381
&gt; 73  com.apple.WebProcess              0x000000010d8e1b92 main + 34
&gt; 74  libdyld.dylib                     0x00007fff895a87e1 start + 1

This isn&apos;t the crashing thread.

Please make sure that when you post a stack trace, you post either all of the stack traces for all of the threads, or you find the crashing thread and post that thread&apos;s stack trace.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>945335</commentid>
    <comment_count>6</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2013-10-30 20:34:50 -0700</bug_when>
    <thetext>(In reply to comment #5)
&gt;
&gt; This isn&apos;t the crashing thread.
&gt; 
&gt; Please make sure that when you post a stack trace, you post either all of the stack traces for all of the threads, or you find the crashing thread and post that thread&apos;s stack trace.

Oops, sorry, you&apos;re right.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>945337</commentid>
    <comment_count>7</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2013-10-30 20:35:29 -0700</bug_when>
    <thetext>Here&apos;s the crashing thread&apos;s stack trace:

Thread 18 Crashed:: WebCore: Worker
0   com.apple.JavaScriptCore      	0x000000010f362b2c JSC::WriteBarrierBase&lt;JSC::Structure&gt;::unvalidatedGet() const + 12 (WriteBarrier.h:145)
1   com.apple.JavaScriptCore      	0x000000010f35cc35 JSC::JSCell::unvalidatedStructure() + 21 (JSCell.h:149)
2   com.apple.JavaScriptCore      	0x000000010f6bf4d1 JSC::slowValidateCell(JSC::JSCell*) + 113 (JSCell.cpp:157)
3   com.apple.JavaScriptCore      	0x000000010f35a5e5 void JSC::validateCell&lt;JSC::JSCell*&gt;(JSC::JSCell*) + 21 (WriteBarrier.h:59)
4   com.apple.JavaScriptCore      	0x000000010f3619de JSC::WriteBarrierBase&lt;JSC::JSGlobalObject&gt;::get() const + 46 (WriteBarrier.h:110)
5   com.apple.JavaScriptCore      	0x000000010f36a9dc JSC::CodeBlock::globalObject() + 28 (CodeBlock.h:672)
6   com.apple.JavaScriptCore      	0x000000010f62ffe0 JSC::ExecutionCounter::setThreshold(JSC::CodeBlock*) + 304 (ExecutionCounter.cpp:153)
7   com.apple.JavaScriptCore      	0x000000010f630079 JSC::ExecutionCounter::setNewThreshold(int, JSC::CodeBlock*) + 57 (ExecutionCounter.cpp:61)
8   com.apple.JavaScriptCore      	0x000000010f3d58ef JSC::CodeBlock::optimizeAfterWarmUp() + 95 (CodeBlock.cpp:3099)
9   com.apple.JavaScriptCore      	0x000000010f3da310 JSC::CodeBlock::jettison(JSC::ReoptimizationMode) + 496 (CodeBlock.cpp:2854)
10  com.apple.JavaScriptCore      	0x000000010f4940b5 JSC::ProfiledCodeBlockJettisoningWatchpoint::fireInternal() + 245 (ProfiledCodeBlockJettisoningWatchpoint.cpp:51)
11  com.apple.JavaScriptCore      	0x000000010f995676 JSC::Watchpoint::fire() + 22 (Watchpoint.h:42)
12  com.apple.JavaScriptCore      	0x000000010f9950df JSC::WatchpointSet::fireAllWatchpoints() + 79 (Watchpoint.cpp:77)
13  com.apple.JavaScriptCore      	0x000000010f995085 JSC::WatchpointSet::~WatchpointSet() + 21 (Watchpoint.cpp:53)
14  com.apple.JavaScriptCore      	0x000000010f995065 JSC::WatchpointSet::~WatchpointSet() + 21 (Watchpoint.cpp:53)
15  com.apple.JavaScriptCore      	0x000000010f6f9bc9 WTF::ThreadSafeRefCounted&lt;JSC::WatchpointSet&gt;::deref() + 73 (ThreadSafeRefCounted.h:116)
16  com.apple.JavaScriptCore      	0x000000010f9953bb JSC::InlineWatchpointSet::freeFat() + 91 (Watchpoint.cpp:103)
17  com.apple.JavaScriptCore      	0x000000010f6b63b4 JSC::InlineWatchpointSet::~InlineWatchpointSet() + 52 (Watchpoint.h:137)
18  com.apple.JavaScriptCore      	0x000000010f6b6375 JSC::InlineWatchpointSet::~InlineWatchpointSet() + 21 (Watchpoint.h:138)
19  com.apple.JavaScriptCore      	0x000000010f962b65 JSC::Structure::~Structure() + 37 (Structure.h:73)
20  com.apple.JavaScriptCore      	0x000000010f9595c5 JSC::Structure::~Structure() + 21 (Structure.h:73)
21  com.apple.JavaScriptCore      	0x000000010f955065 JSC::Structure::destroy(JSC::JSCell*) + 21 (Structure.cpp:239)
22  com.apple.JavaScriptCore      	0x000000010f7caedd JSC::MarkedBlock::callDestructor(JSC::JSCell*) + 61 (MarkedBlock.cpp:67)
23  com.apple.JavaScriptCore      	0x000000010f7cb2b8 JSC::MarkedBlock::FreeList JSC::MarkedBlock::specializedSweep&lt;(JSC::MarkedBlock::BlockState)3, (JSC::MarkedBlock::SweepMode)0, (JSC::MarkedBlock::DestructorType)1&gt;() + 216 (MarkedBlock.cpp:81)
24  com.apple.JavaScriptCore      	0x000000010f7c9f3e JSC::MarkedBlock::FreeList JSC::MarkedBlock::sweepHelper&lt;(JSC::MarkedBlock::DestructorType)1&gt;(JSC::MarkedBlock::SweepMode) + 302 (MarkedBlock.cpp:140)
25  com.apple.JavaScriptCore      	0x000000010f7c9a37 JSC::MarkedBlock::sweep(JSC::MarkedBlock::SweepMode) + 119 (MarkedBlock.cpp:117)
26  com.apple.JavaScriptCore      	0x000000010f7cdc31 JSC::MarkedBlock::lastChanceToFinalize() + 65 (MarkedBlock.h:238)
27  com.apple.JavaScriptCore      	0x000000010f7cdbe9 JSC::LastChanceToFinalize::operator()(JSC::MarkedBlock*) + 25 (MarkedSpace.cpp:109)
28  com.apple.JavaScriptCore      	0x000000010f7cdbb2 void JSC::MarkedAllocator::forEachBlock&lt;JSC::LastChanceToFinalize&gt;(JSC::LastChanceToFinalize&amp;) + 82 (MarkedAllocator.h:140)
29  com.apple.JavaScriptCore      	0x000000010f7cda4b JSC::LastChanceToFinalize::ReturnType JSC::MarkedSpace::forEachBlock&lt;JSC::LastChanceToFinalize&gt;(JSC::LastChanceToFinalize&amp;) + 139 (MarkedSpace.h:226)
30  com.apple.JavaScriptCore      	0x000000010f7cc349 JSC::LastChanceToFinalize::ReturnType JSC::MarkedSpace::forEachBlock&lt;JSC::LastChanceToFinalize&gt;() + 25 (MarkedSpace.h:248)
31  com.apple.JavaScriptCore      	0x000000010f7cb7b2 JSC::MarkedSpace::lastChanceToFinalize() + 34 (MarkedSpace.cpp:116)
32  com.apple.JavaScriptCore      	0x000000010f641d81 JSC::Heap::lastChanceToFinalize() + 161 (Heap.cpp:302)
33  com.apple.JavaScriptCore      	0x000000010f983f1c JSC::VM::~VM() + 268 (VM.cpp:320)
34  com.apple.JavaScriptCore      	0x000000010f983e05 JSC::VM::~VM() + 21 (VM.cpp:364)
35  com.apple.JavaScriptCore      	0x000000010f634b99 WTF::ThreadSafeRefCounted&lt;JSC::VM&gt;::deref() + 73 (ThreadSafeRefCounted.h:116)
36  com.apple.JavaScriptCore      	0x000000010f634b49 void WTF::derefIfNotNull&lt;JSC::VM&gt;(JSC::VM*) + 57 (PassRefPtr.h:40)
37  com.apple.JavaScriptCore      	0x000000010f634a57 WTF::RefPtr&lt;JSC::VM&gt;::clear() + 39 (RefPtr.h:107)
38  com.apple.JavaScriptCore      	0x000000010f7054a8 JSC::JSLockHolder::~JSLockHolder() + 88 (JSLock.cpp:83)
39  com.apple.JavaScriptCore      	0x000000010f705445 JSC::JSLockHolder::~JSLockHolder() + 21 (JSLock.cpp:85)
40  com.apple.WebCore             	0x00000001124121e9 WebCore::WorkerScriptController::~WorkerScriptController() + 73 (WorkerScriptController.cpp:72)
41  com.apple.WebCore             	0x0000000112412195 WebCore::WorkerScriptController::~WorkerScriptController() + 21 (WorkerScriptController.cpp:72)
42  com.apple.WebCore             	0x00000001124041fa void WTF::deleteOwnedPtr&lt;WebCore::WorkerScriptController&gt;(WebCore::WorkerScriptController*) + 42 (OwnPtrCommon.h:53)
43  com.apple.WebCore             	0x000000011241a6f7 WTF::OwnPtr&lt;WebCore::WorkerScriptController&gt;::clear() + 39 (OwnPtr.h:99)
44  com.apple.WebCore             	0x000000011241a6bc WebCore::WorkerGlobalScope::clearScript() + 28 (WorkerGlobalScope.h:77)
45  com.apple.WebCore             	0x000000011241a670 WebCore::WorkerThreadShutdownFinishTask::performTask(WebCore::ScriptExecutionContext*) + 112 (WorkerThread.cpp:207)
46  com.apple.WebCore             	0x000000011240df03 WebCore::WorkerRunLoop::Task::performTask(WebCore::WorkerRunLoop const&amp;, WebCore::ScriptExecutionContext*) + 147 (WorkerRunLoop.cpp:224)
47  com.apple.WebCore             	0x000000011240dcd2 WebCore::WorkerRunLoop::runCleanupTasks(WebCore::WorkerGlobalScope*) + 466 (WorkerRunLoop.cpp:191)
48  com.apple.WebCore             	0x000000011240d756 WebCore::WorkerRunLoop::run(WebCore::WorkerGlobalScope*) + 118 (WorkerRunLoop.cpp:137)
49  com.apple.WebCore             	0x0000000112417285 WebCore::WorkerThread::runEventLoop() + 53 (WorkerThread.cpp:189)
50  com.apple.WebCore             	0x0000000110d7e959 WebCore::DedicatedWorkerThread::runEventLoop() + 89 (DedicatedWorkerThread.cpp:68)
51  com.apple.WebCore             	0x00000001124171a1 WebCore::WorkerThread::workerThread() + 1393 (WorkerThread.cpp:170)
52  com.apple.WebCore             	0x0000000112416c25 WebCore::WorkerThread::workerThreadStart(void*) + 21 (WorkerThread.cpp:143)
53  com.apple.JavaScriptCore      	0x000000010fa225a0 WTF::threadEntryPoint(void*) + 144 (Threading.cpp:70)
54  com.apple.JavaScriptCore      	0x000000010fa233a8 WTF::wtfThreadEntryPoint(void*) + 296 (ThreadingPthreads.cpp:195)
55  libsystem_c.dylib             	0x00007fff9158a772 _pthread_start + 327
56  libsystem_c.dylib             	0x00007fff915771a1 thread_start + 13</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>945340</commentid>
    <comment_count>8</comment_count>
      <attachid>215606</attachid>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2013-10-30 20:37:05 -0700</bug_when>
    <thetext>Created attachment 215606
the patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>945342</commentid>
    <comment_count>9</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2013-10-30 20:39:27 -0700</bug_when>
    <thetext>&lt;rdar://problem/15356238&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>945343</commentid>
    <comment_count>10</comment_count>
      <attachid>215606</attachid>
    <who name="Mark Hahnenberg">mhahnenberg</who>
    <bug_when>2013-10-30 20:39:57 -0700</bug_when>
    <thetext>Comment on attachment 215606
the patch

View in context: https://bugs.webkit.org/attachment.cgi?id=215606&amp;action=review

r=me

&gt; Source/JavaScriptCore/ChangeLog:25
&gt; +        - The WatchpointSet constructor would get invoked from finalization/destruction.

s/constructor/destructor/ ?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>945344</commentid>
    <comment_count>11</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2013-10-30 20:40:38 -0700</bug_when>
    <thetext>(In reply to comment #10)
&gt; (From update of attachment 215606 [details])
&gt; View in context: https://bugs.webkit.org/attachment.cgi?id=215606&amp;action=review
&gt; 
&gt; r=me
&gt; 
&gt; &gt; Source/JavaScriptCore/ChangeLog:25
&gt; &gt; +        - The WatchpointSet constructor would get invoked from finalization/destruction.
&gt; 
&gt; s/constructor/destructor/ ?

Yeah!</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>945348</commentid>
    <comment_count>12</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2013-10-30 20:51:17 -0700</bug_when>
    <thetext>Landed in http://trac.webkit.org/changeset/158341</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>945351</commentid>
    <comment_count>13</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2013-10-30 20:55:15 -0700</bug_when>
    <thetext>Thanks for the timely fix!</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>945354</commentid>
    <comment_count>14</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2013-10-30 20:59:33 -0700</bug_when>
    <thetext>(In reply to comment #13)
&gt; Thanks for the timely fix!

We should keep an eye on it - this is tricky stuff and I may have just broken more things than I fixed. ;-)</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>215606</attachid>
            <date>2013-10-30 20:37:05 -0700</date>
            <delta_ts>2013-10-30 20:39:57 -0700</delta_ts>
            <desc>the patch</desc>
            <filename>blah.patch</filename>
            <type>text/plain</type>
            <size>4586</size>
            <attacher name="Filip Pizlo">fpizlo</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="238375"
          type_id="1"
          status="+"
          setter="mhahnenberg"
    />
          </attachment>
      

    </bug>

</bugzilla>