<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>97328</bug_id>
          
          <creation_ts>2012-09-21 04:40:14 -0700</creation_ts>
          <short_desc>REGRESSION (r128400): Opening Google Web Fonts page hangs or crashes</short_desc>
          <delta_ts>2012-09-22 03:55:29 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Mac (Intel)</rep_platform>
          <op_sys>OS X 10.6</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar, Regression</keywords>
          <priority>P1</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>trinler</reporter>
          <assigned_to name="Filip Pizlo">fpizlo</assigned_to>
          <cc>fpizlo</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>725421</commentid>
    <comment_count>0</comment_count>
    <who name="">trinler</who>
    <bug_when>2012-09-21 04:40:14 -0700</bug_when>
    <thetext>Since WebKit-SVN-r128500 up to actual r129183 I cannot open the google fontsite http://www.google.com/webfonts in SnowLeopard.
From r128500 on I got a blank page and a spinnig beachball until force quit.
Since r128854 the page content is shown (blinking 5 times) and then an error message ist shown (Seite kann nicht geladen werden).
It worked up to r128168.
Similar problem existed in r127699, was fixed in r127810.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>725565</commentid>
    <comment_count>1</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2012-09-21 09:23:21 -0700</bug_when>
    <thetext>I can reproduce on 10.8. I&apos;m getting either a hang or a crash, seemingly randomly:

r128267 works
r128393 works
r128397 works
r128399 works
r128400 hang
r128403 crash
r128413 hang
r128434 crash
r128479 hang
r128602 crash

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore      	0x00000001024b4a1b JSC::JSObject::putByIndexBeyondVectorLengthWithArrayStorage(JSC::ExecState*, unsigned int, JSC::JSValue, bool, JSC::ArrayStorage*) + 635
1   com.apple.JavaScriptCore      	0x00000001024b1467 JSC::JSObject::putByIndex(JSC::JSCell*, JSC::ExecState*, unsigned int, JSC::JSValue, bool) + 215
2   com.apple.JavaScriptCore      	0x000000010241ace2 operationPutByValBeyondArrayBoundsNonStrict + 82
3   ???                           	0x0000592ac968966a 0 + 98040302573162
4   com.apple.JavaScriptCore      	0x000000010248475a JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::JSObject*) + 3482</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>725566</commentid>
    <comment_count>2</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2012-09-21 09:23:52 -0700</bug_when>
    <thetext>&lt;rdar://problem/12346666&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>725947</commentid>
    <comment_count>3</comment_count>
      <attachid>165222</attachid>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2012-09-21 16:25:58 -0700</bug_when>
    <thetext>Created attachment 165222
the patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>725949</commentid>
    <comment_count>4</comment_count>
      <attachid>165222</attachid>
    <who name="Mark Hahnenberg">mhahnenberg</who>
    <bug_when>2012-09-21 16:28:31 -0700</bug_when>
    <thetext>Comment on attachment 165222
the patch

r=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>725951</commentid>
    <comment_count>5</comment_count>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2012-09-21 16:29:18 -0700</bug_when>
    <thetext>Landed in http://trac.webkit.org/changeset/129272</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>726113</commentid>
    <comment_count>6</comment_count>
    <who name="">trinler</who>
    <bug_when>2012-09-22 03:55:29 -0700</bug_when>
    <thetext>Confirmed. Fixed in r129297. Thank You.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>165222</attachid>
            <date>2012-09-21 16:25:58 -0700</date>
            <delta_ts>2012-09-21 16:28:30 -0700</delta_ts>
            <desc>the patch</desc>
            <filename>fonts.patch</filename>
            <type>text/plain</type>
            <size>6016</size>
            <attacher name="Filip Pizlo">fpizlo</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="177208"
          type_id="1"
          status="+"
          setter="mhahnenberg"
    />
          </attachment>
      

    </bug>

</bugzilla>