Bug 97328

Summary: REGRESSION (r128400): Opening Google Web Fonts page hangs or crashes
Product: WebKit Reporter: trinler
Component: JavaScriptCoreAssignee: Filip Pizlo <fpizlo>
Status: RESOLVED FIXED    
Severity: Normal CC: fpizlo
Priority: P1 Keywords: InRadar, Regression
Version: 528+ (Nightly build)   
Hardware: Mac (Intel)   
OS: OS X 10.6   
Attachments:
Description Flags
the patch mhahnenberg: review+

trinler
Reported 2012-09-21 04:40:14 PDT
Since WebKit-SVN-r128500 up to actual r129183 I cannot open the google fontsite http://www.google.com/webfonts in SnowLeopard. From r128500 on I got a blank page and a spinnig beachball until force quit. Since r128854 the page content is shown (blinking 5 times) and then an error message ist shown (Seite kann nicht geladen werden). It worked up to r128168. Similar problem existed in r127699, was fixed in r127810.
Attachments
the patch (5.88 KB, patch)
2012-09-21 16:25 PDT, Filip Pizlo 		mhahnenberg: review+
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Alexey Proskuryakov
Comment 1 2012-09-21 09:23:21 PDT
I can reproduce on 10.8. I'm getting either a hang or a crash, seemingly randomly: r128267 works r128393 works r128397 works r128399 works r128400 hang r128403 crash r128413 hang r128434 crash r128479 hang r128602 crash Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.JavaScriptCore 0x00000001024b4a1b JSC::JSObject::putByIndexBeyondVectorLengthWithArrayStorage(JSC::ExecState*, unsigned int, JSC::JSValue, bool, JSC::ArrayStorage*) + 635 1 com.apple.JavaScriptCore 0x00000001024b1467 JSC::JSObject::putByIndex(JSC::JSCell*, JSC::ExecState*, unsigned int, JSC::JSValue, bool) + 215 2 com.apple.JavaScriptCore 0x000000010241ace2 operationPutByValBeyondArrayBoundsNonStrict + 82 3 ??? 0x0000592ac968966a 0 + 98040302573162 4 com.apple.JavaScriptCore 0x000000010248475a JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::JSObject*) + 3482
Alexey Proskuryakov
Comment 2 2012-09-21 09:23:52 PDT
<rdar://problem/12346666>
Filip Pizlo
Comment 3 2012-09-21 16:25:58 PDT
Created attachment 165222 [details] the patch
Mark Hahnenberg
Comment 4 2012-09-21 16:28:31 PDT
Comment on attachment 165222 [details] the patch r=me
Filip Pizlo
Comment 5 2012-09-21 16:29:18 PDT
Landed in http://trac.webkit.org/changeset/129272
trinler
Comment 6 2012-09-22 03:55:29 PDT
Confirmed. Fixed in r129297. Thank You.
Note You need to log in before you can comment on or make changes to this bug.