Bug 22924

Summary:

JSC::JIT::privateCompilePutByIdTransition crash on gmail

Product:

WebKit

Reporter:

Andrew Wellington <andrew>

Component:

JavaScriptCore

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

barraclough, d235j.1

Priority:

Version:

528+ (Nightly build)

Hardware:

Mac

OS:

OS X 10.5

URL:

http://gmail.com

Attachments:

Description	Flags
Crash report	none

Andrew Wellington

Reported 2008-12-18 15:28:34 PST

Reproducible in r39370 Nightly. STEPS TO REPRODUCE 1. Login to Gmail at http://gmail.com/ 2. Immediately upon mailbox list appearing start scrolling the page up and down with scrollwheel. RESULT Crash. Crash report to be attached.

Attachments
Crash report (30.43 KB, text/plain) 2008-12-18 15:29 PST, Andrew Wellington	no flags	Details
View All Add attachment proposed patch, testcase, etc.

Andrew Wellington

Comment 1 2008-12-18 15:29:17 PST

Created attachment 26130 [details] Crash report

d235j.1

Comment 2 2008-12-19 10:10:36 PST

I can confirm this.

Gavin Barraclough

Comment 3 2008-12-22 23:15:06 PST

I couldn't repro this bug on X, but I think this dupes a Windows bug fixed by: https://bugs.webkit.org/show_bug.cgi?id=22974 Since I can't repro I'll assume this is fixed in the same change, please reopen if you continue to experience the problem after r39450. Cheers, G.

Note You need to log in before you can comment on or make changes to this bug.