Bug 39484

Summary: REGRESSION (r59821-r59902): Crash in JSValue
Product: WebKit Reporter: Kevin M. Dean <kevin>
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Critical CC: ap, cyberskull, ggaren, loki
Priority: P2 Keywords: Regression
Version: 528+ (Nightly build)   
Hardware: Mac (PowerPC)   
OS: OS X 10.5   
Attachments:
Description Flags
Several crash logs none

Kevin M. Dean
Reported 2010-05-21 06:38:40 PDT
Crashes when opening webkit and loading the start page. Exception Type: EXC_BAD_ACCESS (SIGBUS) Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000004 Crashed Thread: 9 Thread 9 Crashed: 0 com.apple.JavaScriptCore 0x0057fd30 JSC::JSValue::get(JSC::ExecState*, JSC::Identifier const&, JSC::PropertySlot&) const + 944 1 com.apple.JavaScriptCore 0x0057130c JSC::Interpreter::privateExecute(JSC::Interpreter::ExecutionFlag, JSC::RegisterFile*, JSC::ExecState*, JSC::JSValue*) + 27052 2 com.apple.JavaScriptCore 0x0057e178 JSC::Interpreter::executeCall(JSC::FunctionExecutable*, JSC::ExecState*, JSC::JSFunction*, JSC::JSObject*, JSC::ArgList const&, JSC::ScopeChainNode*, JSC::JSValue*) + 1080 3 com.apple.JavaScriptCore 0x0059b06c JSC::JSFunction::call(JSC::ExecState*, JSC::JSValue, JSC::ArgList const&) + 172 4 com.apple.JavaScriptCore 0x00517f5c JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 156 5 com.apple.JavaScriptCore 0x005b2e20 JSObjectCallAsFunction + 576 6 com.apple.CFNetwork 0x93002e4c CallFindProxyForURL + 272 7 com.apple.CFNetwork 0x9300485c executionContextPerform(void*) + 184 8 com.apple.CoreFoundation 0x932e10d0 CFRunLoopRunSpecific + 1104 9 com.apple.Foundation 0x9355cd50 +[NSURLConnection(NSURLConnectionReallyInternal) _resourceLoadLoop:] + 280 10 com.apple.Foundation 0x93505d84 __NSThread__main__ + 1004 11 libSystem.B.dylib 0x940f80d0 _pthread_start + 316
Attachments
Several crash logs (43.87 KB, application/zip)
2010-05-22 23:10 PDT, Trevor Downs 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Alexey Proskuryakov
Comment 1 2010-05-21 15:05:40 PDT
Duplicate of bug 39480?
Trevor Downs
Comment 2 2010-05-22 23:04:32 PDT
I'm getting lots of JavaScript related crashes in r59902.
Trevor Downs
Comment 3 2010-05-22 23:10:16 PDT
Created attachment 56810 [details] Several crash logs Several crash logs zipped up from r59902.
Alexey Proskuryakov
Comment 4 2010-05-23 00:06:37 PDT
A fix for bug 39480 was landed in r59975.
Kevin M. Dean
Comment 5 2010-05-23 05:21:20 PDT
I no longer have the crash on startup as initially reported with r60027, so I'm closing this one.
Trevor Downs
Comment 6 2010-05-23 05:32:48 PDT
I'm not getting any immediate crashes on pages with JavaScript now either in r60027.
Alexey Proskuryakov
Comment 7 2010-05-23 10:38:05 PDT
*** This bug has been marked as a duplicate of bug 39480 ***
Note You need to log in before you can comment on or make changes to this bug.