Bug 19150 - Utilizing CSS reflections eventually leads to crash inside "free"
Summary: Utilizing CSS reflections eventually leads to crash inside "free"
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: Macintosh OS X 10.5
: P2 Normal
Assignee: Nobody
Depends on:
Reported: 2008-05-20 12:16 PDT by Kay Summers
Modified: 2009-01-04 12:09 PST (History)
3 users (show)

See Also:


Note You need to log in before you can comment on or make changes to this bug.
Description Kay Summers 2008-05-20 12:16:31 PDT
After loading a page which makes use of the newfangled CSS reflections, gradients and transitions, WebKit will consistently crash in:

0   com.apple.JavaScriptCore      	0x0031790c WTF::fastFree(void*) + 508

The rest of the stack trace differs from crash to crash, but it's always in WTF::fastFree and always after loading a reflection laden page.
Comment 1 Mark Rowe (bdash) 2008-05-20 12:50:15 PDT
Can you please provide a crash log, and a page on which you can reproduce the crash?  Simply mentioning that the crash is inside "free" does not provide enough useful information to debug the problem.
Comment 2 Robert Blaut 2009-01-04 12:09:04 PST
Kay, as Mark said, we need full crash log and exact steps to reproduce the problem. Without these informations we unable to proceed with this bug report. I have to close this bug. Feel free to reopen it if you provide requested details.