We are crashing loading airbnb.com with a back trace like: > 1 com.apple.JavaScriptCore 0x7fff8ce0c7ee JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) + 0x9e 2 com.apple.JavaScriptCore 0x7fff8c92616b JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 0x1bb 3 com.apple.JavaScriptCore 0x7fff8c925f9e JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 0x3e 4 com.apple.JavaScriptCore 0x7fff8ca569da JSC::boundFunctionCall(JSC::ExecState*) + 0x27a 5 0x00003851da001028 0 + 61924200943656 6 com.apple.JavaScriptCore 0x7fff8cf12941 llint_entry + 0x5ae9 7 com.apple.JavaScriptCore 0x7fff8cf12941 llint_entry + 0x5ae9 8 com.apple.JavaScriptCore 0x7fff8cf12941 llint_entry + 0x5ae9 9 com.apple.JavaScriptCore 0x7fff8cf12941 llint_entry + 0x5ae9 10 com.apple.JavaScriptCore 0x7fff8cf12941 llint_entry + 0x5ae9 ... <rdar://problem/23484769>
Created attachment 265542 [details] Patch
Comment on attachment 265542 [details] Patch Clearing flags on attachment: 265542 Committed r192457: <http://trac.webkit.org/changeset/192457>
All reviewed patches have been landed. Closing bug.