Bug 122587
| Summary: | Layout Test webgl/conformance/ogles/GL/array/array_001_to_006.html sometimes crashes in ExecState::frameExtentInternal | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Alexey Proskuryakov <ap> |
| Component: | Tools / Tests | Assignee: | Nobody <webkit-unassigned> |
| Status: | NEW | ||
| Severity: | Normal | CC: | dino, fpizlo, ggaren, mhahnenberg |
| Priority: | P2 | Keywords: | LayoutTestFailure |
| Version: | 528+ (Nightly build) | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Alexey Proskuryakov
The following layout test is sometimes crashing on Mac WK2:
webgl/conformance/ogles/GL/array/array_001_to_006.html
http://build.webkit.org/results/Apple%20MountainLion%20Debug%20WK2%20(Tests)/r157199%20(13255)/webgl/conformance/ogles/GL/array/array_001_to_006-crash-log.txt
0 com.apple.JavaScriptCore 0x000000010f52b46b JSC::ExecState::frameExtentInternal() + 107 (CallFrame.cpp:122)
1 com.apple.JavaScriptCore 0x000000010f7b64d0 JSC::ExecState::frameExtent() + 64 (CallFrame.h:183)
2 com.apple.JavaScriptCore 0x000000010f7b6446 JSC::JSStack::getTopOfFrame(JSC::ExecState*) + 86 (JSStackInlines.h:39)
3 com.apple.JavaScriptCore 0x000000010f7b66cc JSC::JSStack::getTopOfStack() + 28 (JSStackInlines.h:44)
4 com.apple.JavaScriptCore 0x000000010f89b08d JSC::JSStack::gatherConservativeRoots(JSC::ConservativeRoots&, JSC::JITStubRoutineSet&, JSC::CodeBlockSet&) + 61 (JSStack.cpp:101)
5 com.apple.JavaScriptCore 0x000000010f795827 JSC::Heap::markRoots() + 391 (Heap.cpp:472)
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |