Bug 28169

Summary:

REGRESSION: Hang/crash in BytecodeGenerator::constRegisterFor loading simple page

Product:

WebKit

Reporter:

Timothy Hatcher <timothy>

Component:

JavaScriptCore

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Blocker

CC:

mjs, oliver

Priority:

Keywords:

HasReduction

Version:

528+ (Nightly build)

Hardware:

Mac (Intel)

OS:

OS X 10.5

Attachments:

Description	Flags
Reduction	none
Sample	none
Patch v1	ggaren: review+

Timothy Hatcher

Reported 2009-08-10 17:36:34 PDT

Created attachment 34529 [details] Reduction Loading the attached page will produce a hang then eventual crash in BytecodeGenerator::constRegisterFor.

Attachments
Reduction (84 bytes, text/html) 2009-08-10 17:36 PDT, Timothy Hatcher	no flags	Details
Sample (11.25 KB, text/plain) 2009-08-10 17:37 PDT, Timothy Hatcher	no flags	Details
Patch v1 (4.34 KB, patch) 2009-08-11 14:12 PDT, Oliver Hunt	ggaren: review+	Details Formatted Diff Diff
View All Add attachment proposed patch, testcase, etc.

Timothy Hatcher

Comment 1 2009-08-10 17:37:23 PDT

Created attachment 34530 [details] Sample

Oliver Hunt

Comment 2 2009-08-11 14:12:49 PDT

Created attachment 34591 [details] Patch v1

Geoffrey Garen

Comment 3 2009-08-11 14:26:02 PDT

Comment on attachment 34591 [details] Patch v1 r=me

Oliver Hunt

Comment 4 2009-08-11 14:30:31 PDT

Committed r47062

Note You need to log in before you can comment on or make changes to this bug.