WebKit crashes when you send speechSynthesis.speak() a string value instead of a SpeechSynthesisUtterance object. speechSynthesis.speak('Hello World'); * BACKTRACE ('>' indicates stack frame used for CrashTracer aggregation) > 1 com.apple.WebCore 0x7fff84612eb2 WebCore::SpeechSynthesis::speak(WebCore::SpeechSynthesisUtterance*) + 0x92 2 com.apple.WebCore 0x7fff8435a91e WebCore::jsSpeechSynthesisPrototypeFunctionSpeak(JSC::ExecState*) + 0xce 3 0x00004830df601045 0 + 79374743244869 4 com.apple.JavaScriptCore 0x7fff902fda78 JSC::Interpreter::execute(JSC::EvalExecutable*, JSC::ExecState*, JSC::JSValue, JSC::JSScope*) + 0x5a8 5 com.apple.JavaScriptCore 0x7fff901e363f JSC::globalFuncEval(JSC::ExecState*) + 0x41f 6 com.apple.JavaScriptCore 0x7fff9016e1e1 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 0x241
Created attachment 196481 [details] patch
adding Tim to help with review.
Comment on attachment 196481 [details] patch Thanks!
Comment on attachment 196481 [details] patch Clearing flags on attachment: 196481 Committed r147800: <http://trac.webkit.org/changeset/147800>
All reviewed patches have been landed. Closing bug.
<rdar://problem/13572670>