Summary: | JSC's Bytecode dumping option causes segfault. | ||
---|---|---|---|
Product: | WebKit | Reporter: | Gabor Ballabas <gaborb> |
Component: | JavaScriptCore | Assignee: | Nobody <webkit-unassigned> |
Status: | RESOLVED FIXED | ||
Severity: | Normal | CC: | fpizlo, gaborb, oliver, ossy, zherczeg |
Priority: | P2 | ||
Version: | 528+ (Nightly build) | ||
Hardware: | Unspecified | ||
OS: | Unspecified |
Description
Gabor Ballabas
2012-11-15 01:39:27 PST
UnlinkedCodeBlock.h:465 UnlinkedCodeBlock::finishCreation If I put that #if 0 - #endif in the code the problem goes away but evidently that code didn't get there by accident so I think someone who knows this code better should take a look at it. Oliver? void finishCreation(JSGlobalData& globalData) { Base::finishCreation(globalData); #if 0 if (codeType() == GlobalCode) return; #endif m_symbolTable.set(globalData, this, SharedSymbolTable::create(globalData)); } Is this happening on ToT? I thought i had landed a fix for this (the fix is to check that you have a symbol table before using it, _not_ to give global code a symbol table, that is not allowed) (In reply to comment #2) > Is this happening on ToT? I thought i had landed a fix for this (the fix is to check that you have a symbol table before using it, _not_ to give global code a symbol table, that is not allowed) I've checked it with r134912 and unfortunately it still crashes. |