Bug 109838 - A crash in llint_slow_path_resolve_base on news.cnet.com and other sites
Summary: A crash in llint_slow_path_resolve_base on news.cnet.com and other sites
Status: RESOLVED DUPLICATE of bug 110017
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: Mac (Intel) OS X 10.8
: P1 Normal
Assignee: Nobody
URL: http://news.cnet.com/8301-1023_3-5756...
Keywords: InRadar
: 109852 109936 (view as bug list)
Depends on:
Blocks:
 
Reported: 2013-02-14 09:01 PST by Sanford Selznick
Modified: 2013-03-08 16:53 PST (History)
5 users (show)

See Also:

Attachments
Crash report (51.97 KB, text/plain)
2013-02-14 09:01 PST, Sanford Selznick 		no flags Details
Crash Report r143103 after a period of use. (68.48 KB, text/rtf)
2013-02-16 18:12 PST, Jim Oase 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sanford Selznick 2013-02-14 09:01:46 PST 
Created attachment 188366 [details]
Crash report

The irony of the link is unintentional.  Crash report attached.  Please let me know if I can be of further assistance.  10.8.2.  WebKit r142854.
Comment 1 Alexey Proskuryakov 2013-02-14 14:22:36 PST 
ASSERTION FAILED: !globalData.exception
/Users/ap/Safari/OpenSource/Source/JavaScriptCore/interpreter/Interpreter.cpp(837) : JSC::JSValue JSC::Interpreter::execute(JSC::ProgramExecutable *, CallFrame *, JSC::JSObject *)
1   0x107dbd7e7 JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::JSObject*)
2   0x107c35477 JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&, JSC::JSValue, JSC::JSValue*)
3   0x109a62082 WebCore::JSMainThreadExecState::evaluate(JSC::ExecState*, JSC::SourceCode const&, JSC::JSValue, JSC::JSValue*)
4   0x10a2e3503 WebCore::ScriptController::evaluateInWorld(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld*)
Comment 2 Alexey Proskuryakov 2013-02-14 14:22:57 PST 
<rdar://problem/13219405>
Comment 3 Sanford Selznick 2013-02-14 21:04:58 PST 
Another URL that causes the same crash report: http://azstarnet.com, but a little later in the load.
Comment 4 Alexey Proskuryakov 2013-02-15 10:55:31 PST 
*** Bug 109936 has been marked as a duplicate of this bug. ***
Comment 5 Sanford Selznick 2013-02-16 08:59:55 PST 
One more URL that crashes the same way:  http://finance.yahoo.com/currency-converter/#from=USD;to=EUR;amt=1

Hope this helps.
Comment 6 Alexey Proskuryakov 2013-02-16 10:20:12 PST 
Geoff, is bug 110017 expected to fix this? Oliver suspected another change.
Comment 7 Geoffrey Garen 2013-02-16 14:19:44 PST 
(In reply to comment #6)
> Geoff, is bug 110017 expected to fix this? Oliver suspected another change.

The release symptom of bug 110017 is attachment 188366 [details]. I didn't test the debug symptom, but an ASSERT about an exception is consistent with the patch I rolled out.
Comment 8 Geoffrey Garen 2013-02-16 14:26:52 PST 

*** This bug has been marked as a duplicate of bug 110017 ***
Comment 9 Jim Oase 2013-02-16 18:12:17 PST 
Created attachment 188749 [details]
Crash Report r143103 after a period of use.
Comment 10 Kevin M. Dean 2013-02-16 21:11:50 PST 
(In reply to comment #9)
> Created an attachment (id=188749) [details]
> Crash Report r143103 after a period of use.

The rollout was in 143104, so you'll need to try a later build.
Comment 11 Sanford Selznick 2013-02-16 21:17:21 PST 
This appears to be fixed for me now.  Thank you!
Comment 12 adrongardner 2013-02-16 21:23:47 PST 
r143119 is stable on this for me also.  Excellent work!
Comment 13 Alexey Proskuryakov 2013-03-08 16:53:08 PST 
*** Bug 109852 has been marked as a duplicate of this bug. ***