Bug 18750

Summary:

SQUIRRELFISH: crashes likely caused by incorrect garbage collection

Product:

WebKit

Reporter:

Cameron Zwarich (cpst) <zwarich>

Component:

JavaScriptCore

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED INVALID

Severity:

Normal

Priority:

Version:

528+ (Nightly build)

Hardware:

All

OS:

All

Bug Depends on:

Bug Blocks:

18631

Attachments:

Description	Flags
Stack trace	none

Description Cameron Zwarich (cpst) 2008-04-25 18:56:14 PDT

The layout test fast/js/exec-state-marking crashes in a few places, depending on how it is run, but it seems to be caused by incorrect garbage collection. There are similar issues using the web inspector on many pages.

Comment 1 Cameron Zwarich (cpst) 2008-04-25 21:31:14 PDT

Created attachment 20828 [details]
Stack trace

Here is a stack trace from gdb for fast/js/exec-state-marking. I made it GC every allocation.

Comment 2 Maciej Stachowiak 2008-05-03 01:24:34 PDT

This test no longer crashes.