<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>38491</bug_id>
          
          <creation_ts>2010-05-03 15:04:12 -0700</creation_ts>
          <short_desc>Interpreter crashes due to incorrect refcounting of cached structures.</short_desc>
          <delta_ts>2010-05-03 15:19:15 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Other</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Oliver Hunt">oliver</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>mjs</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>220313</commentid>
    <comment_count>0</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2010-05-03 15:04:12 -0700</bug_when>
    <thetext>Interpreter crashes due to incorrect refcounting of cached structures.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>220314</commentid>
    <comment_count>1</comment_count>
      <attachid>54964</attachid>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2010-05-03 15:06:05 -0700</bug_when>
    <thetext>Created attachment 54964
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>220317</commentid>
    <comment_count>2</comment_count>
    <who name="Maciej Stachowiak">mjs</who>
    <bug_when>2010-05-03 15:11:27 -0700</bug_when>
    <thetext>&lt;rdar://problem/7926160&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>220318</commentid>
    <comment_count>3</comment_count>
      <attachid>54964</attachid>
    <who name="Maciej Stachowiak">mjs</who>
    <bug_when>2010-05-03 15:12:54 -0700</bug_when>
    <thetext>Comment on attachment 54964
Patch

r=me

Please mention the Radar bug number in the ChangeLog.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>220324</commentid>
    <comment_count>4</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2010-05-03 15:19:15 -0700</bug_when>
    <thetext>Committed r58705: &lt;http://trac.webkit.org/changeset/58705&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>54964</attachid>
            <date>2010-05-03 15:06:05 -0700</date>
            <delta_ts>2010-05-03 15:12:53 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-38491-20100503150604.patch</filename>
            <type>text/plain</type>
            <size>5694</size>
            <attacher name="Oliver Hunt">oliver</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZyBiL0phdmFTY3JpcHRDb3JlL0No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</data>
<flag name="review"
          id="39050"
          type_id="1"
          status="+"
          setter="mjs"
    />
          </attachment>
      

    </bug>

</bugzilla>