Bug 116052

Summary: Crash in JSC::JSCell::toNumber()
Product: WebKit Reporter: BJ Homer <bjhomer>
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal CC: ap, dieter, msaboff, oliver
Priority: P2 Keywords: InRadar
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
URL: http://gmailblog.blogspot.com/2013/05/bringing-it-all-together-15-gb-now.html
Attachments:
Description Flags
crash log
none
r150579 crash log none

BJ Homer
Reported 2013-05-13 12:02:11 PDT
Go to the linked URL. Watch the nightly Webkit build crash. Wheeeee!!!
Attachments
crash log (62.34 KB, text/plain)
2013-05-13 12:02 PDT, BJ Homer 		no flags
Details
r150579 crash log (57.91 KB, text/plain)
2013-05-24 10:20 PDT, BJ Homer 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
BJ Homer
Comment 1 2013-05-13 12:02:27 PDT
Created attachment 201596 [details] crash log
Alexey Proskuryakov
Comment 2 2013-05-17 22:29:56 PDT
Are you still seeing this? I could not reproduce with r150284 nightly.
Dieter Komendera
Comment 3 2013-05-24 02:56:15 PDT
I can still reproduce this reliably with that url with nightly r150579 on 10.8.3 with Safari Version 6.0.4
Alexey Proskuryakov
Comment 4 2013-05-24 09:41:59 PDT
Hmm. Do you have any extensions installed? Does this happen without extensions? <rdar://problem/13548820>
Dieter Komendera
Comment 5 2013-05-24 09:54:52 PDT
Interesting, it doesn't reproduce here on my MacBook Air, only on my (work) MacBook Pro. I will have to double check after the weekend, but I don't think I have any extensions installed.
Dieter Komendera
Comment 6 2013-05-24 10:02:23 PDT
Got it: To reproduce the crash, an instance of the Web Inspector needs to be open when going to the URL.
Dieter Komendera
Comment 7 2013-05-24 10:08:47 PDT
And it only seems to crash with the "WebKit Web Inspector". (Yeah, I'm one of those guys...)
BJ Homer
Comment 8 2013-05-24 10:20:15 PDT
Created attachment 202833 [details] r150579 crash log
Alexey Proskuryakov
Comment 9 2013-06-06 15:51:31 PDT
Looks like this got re-filed as bug 117280 and fixed there. *** This bug has been marked as a duplicate of bug 117280 ***
Note You need to log in before you can comment on or make changes to this bug.