Summary: | REGRESSION (r138921): Crash in JSC::Arguments::create | ||||||
---|---|---|---|---|---|---|---|
Product: | WebKit | Reporter: | Kevin M. Dean <kevin> | ||||
Component: | JavaScriptCore | Assignee: | Filip Pizlo <fpizlo> | ||||
Status: | RESOLVED FIXED | ||||||
Severity: | Critical | CC: | ap, fpizlo | ||||
Priority: | P1 | Keywords: | InRadar, Regression | ||||
Version: | 528+ (Nightly build) | ||||||
Hardware: | Mac (Intel) | ||||||
OS: | OS X 10.8 | ||||||
URL: | http://www.warcaststudios.com/atom-icon-gallery | ||||||
Bug Depends on: | 106459 | ||||||
Bug Blocks: | 105845 | ||||||
Attachments: |
|
Description
Kevin M. Dean
2013-01-08 08:47:25 PST
For me, this is a little tricky to reproduce - sometimes, I have to click multiple thumbnails before crashing. But it looks like this started with <http://trac.webkit.org/changeset/138921>. Ooops, this is a really silly regression. I will have a patch shortly. Created attachment 181752 [details]
the patch
Comment on attachment 181752 [details]
the patch
r=me
Landed in http://trac.webkit.org/changeset/139109 |