Bug 133250 - js/primitive-property-access-edge-cases.html crashes in Structure:: checkOffsetConsistency
Summary: js/primitive-property-access-edge-cases.html crashes in Structure:: checkOffs...
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Geoffrey Garen
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-05-23 19:11 PDT by Mark Hahnenberg
Modified: 2014-05-23 19:23 PDT (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Mark Hahnenberg 2014-05-23 19:11:57 PDT 
Seems like a real bug. 

For an example crash log, see http://build.webkit.org/results/Apple%20MountainLion%20Debug%20WK2%20(Tests)/r169282%20(17813)/js/primitive-property-access-edge-cases-crash-log.txt

It looks like it's crashing on all the flavors of debug Mac bots. For test history, see: http://webkit-test-results.appspot.com/dashboards/flakiness_dashboard.html#showAllRuns=true&tests=js%2Fprimitive-property-access-edge-cases.html

No clear revision when the crashes started. Giving it to Geoff first to assign to the appropriate JSC person.