RESOLVED DUPLICATE of bug 117280 116052
Crash in JSC::JSCell::toNumber() 
https://bugs.webkit.org/show_bug.cgi?id=116052
Summary Crash in JSC::JSCell::toNumber()
BJ Homer
Reported 2013-05-13 12:02:11 PDT
Go to the linked URL. Watch the nightly Webkit build crash. Wheeeee!!!
Attachments
crash log (62.34 KB, text/plain)
2013-05-13 12:02 PDT, BJ Homer 		no flags
Details
r150579 crash log (57.91 KB, text/plain)
2013-05-24 10:20 PDT, BJ Homer 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
BJ Homer
Comment 1 2013-05-13 12:02:27 PDT
Created attachment 201596 [details] crash log
Alexey Proskuryakov
Comment 2 2013-05-17 22:29:56 PDT
Are you still seeing this? I could not reproduce with r150284 nightly.
Dieter Komendera
Comment 3 2013-05-24 02:56:15 PDT
I can still reproduce this reliably with that url with nightly r150579 on 10.8.3 with Safari Version 6.0.4
Alexey Proskuryakov
Comment 4 2013-05-24 09:41:59 PDT
Hmm. Do you have any extensions installed? Does this happen without extensions? <rdar://problem/13548820>
Dieter Komendera
Comment 5 2013-05-24 09:54:52 PDT
Interesting, it doesn't reproduce here on my MacBook Air, only on my (work) MacBook Pro. I will have to double check after the weekend, but I don't think I have any extensions installed.
Dieter Komendera
Comment 6 2013-05-24 10:02:23 PDT
Got it: To reproduce the crash, an instance of the Web Inspector needs to be open when going to the URL.
Dieter Komendera
Comment 7 2013-05-24 10:08:47 PDT
And it only seems to crash with the "WebKit Web Inspector". (Yeah, I'm one of those guys...)
BJ Homer
Comment 8 2013-05-24 10:20:15 PDT
Created attachment 202833 [details] r150579 crash log
Alexey Proskuryakov
Comment 9 2013-06-06 15:51:31 PDT
Looks like this got re-filed as bug 117280 and fixed there. *** This bug has been marked as a duplicate of bug 117280 ***
Note You need to log in before you can comment on or make changes to this bug.