Bug 32158

Summary:	REGRESSION (r51670-51675): Two fast/js tests are crashing on Windows
Product:	WebKit	Reporter:	Adam Roben (:aroben) <aroben>
Component:	JavaScriptCore	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	barraclough, oliver, zimmermann
Priority:	P2	Keywords:	InRadar, LayoutTestFailure, PlatformOnly
Version:	528+ (Nightly build)
Hardware:	PC
OS:	Windows XP
URL:	http://build.webkit.org/results/Windows%20Release%20(Tests)/r51675%20(6688)/results.html

Description Adam Roben (:aroben) 2009-12-04 07:30:52 PST

To reproduce:

1. run-webkit-tests

Two fast/js tests crash: fast/js/excessive-comma-usage.html and fast/js/math-transforms.html. See <http://build.webkit.org/results/Windows%20Release%20(Tests)/r51675%20(6688)/results.html> for an example of the crashes.

This started happening between r51670 and r51675. The new "rope" JS string representation landed in this range, and seems likely to be the culprit.

Comment 1 Adam Roben (:aroben) 2009-12-04 07:31:22 PST

<rdar://problem/7444149>

Comment 2 Adam Roben (:aroben) 2009-12-07 22:19:42 PST

*** Bug 32228 has been marked as a duplicate of this bug. ***

Comment 3 Gavin Barraclough 2009-12-09 17:45:10 PST

Sending        JavaScriptCore/ChangeLog
Sending        JavaScriptCore/runtime/JSString.cpp
Sending        JavaScriptCore/runtime/JSString.h
Sending        JavaScriptCore/runtime/Operations.h
Sending        LayoutTests/ChangeLog
Sending        LayoutTests/platform/win/Skipped
Transmitting file data ......
Committed revision 51933.

Comment 4 David Kilzer (:ddkilzer) 2010-01-03 14:40:44 PST

<http://trac.webkit.org/changeset/51933>