Bug 63732

Summary:

IE Web Workers demo crashes in JSC::SlotVisitor::visitChildren()

Product:

WebKit

Reporter:

Simon Fraser (smfr) <simon.fraser>

Component:

JavaScriptCore

Assignee:

Oliver Hunt <oliver>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

oliver, simon.fraser

Priority:

Keywords:

InRadar

Version:

528+ (Nightly build)

Hardware:

Unspecified

OS:

Unspecified

URL:

http://ie.microsoft.com/testdrive/Graphics/WorkerFountains/Default.html

Attachments:

Description	Flags
Crash log	none
Patch	barraclough: review+

Description Simon Fraser (smfr) 2011-06-30 09:43:52 PDT

This demo crashes in TOT (e.g. nightly r89812) on SL.

Comment 1 Simon Fraser (smfr) 2011-06-30 09:44:10 PDT

Created attachment 99316 [details]
Crash log

Comment 2 Simon Fraser (smfr) 2011-06-30 09:44:46 PDT

<rdar://problem/9704692>

Comment 3 Oliver Hunt 2011-07-01 14:53:04 PDT

Created attachment 99527 [details]
Patch

Comment 4 Oliver Hunt 2011-07-01 15:03:10 PDT

Committed r90282: <http://trac.webkit.org/changeset/90282>

Comment 5 Simon Fraser (smfr) 2011-07-01 15:12:17 PDT

No testcase?

Comment 6 Oliver Hunt 2011-07-01 15:14:28 PDT

(In reply to comment #5)
> No testcase?

Not feasible -- the most reliable testcase i could create took 20 seconds to run, and even then didn't fire all that often.  In the past i've been told off for tests that took 5 seconds so 20 seemed excessive.