Bug 196684 – REGRESSION (r243642): Crash in reddit.com page

• Status: RESOLVED
• Resolution: FIXED
• Component: JavaScriptCore

[Michael Saboff]

Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x0000000705e35260
Exception Note:        EXC_CORPSE_NOTIFY

Termination Signal:    Segmentation fault: 11
Termination Reason:    Namespace SIGNAL, Code 0xb
Terminating Process:   exc handler [2522]

VM Regions Near 0x705e35260:
    WebKit Malloc          0000000627e00000-0000000627f00000 [ 1024K] rw-/rwx SM=PRV  
--> 
    WebAssembly memory (re 0000000800000000-0000001000000000 [ 32.0G] rw-/rwx SM=NUL  reserved VM address space (unallocated)

Application Specific Information:
Bundle controller class:
BrowserBundleController
 
Enabled App Extensions:
com.apple.ist.ds.appleconnect2.SafariExtension (APPLEBNISIGNED) (Version: 1288 - Display Version: 3.2.2) AppleConnect Safari Extension
 

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   ???                           	0x000054c664c2e2eb 0 + 93211070751467
1   com.apple.JavaScriptCore      	0x00007fff35f6b09f JSC::RegExpObject::execInline(JSC::ExecState*, JSC::JSGlobalObject*, JSC::JSString*) + 943
2   ???                           	0x000054c664c0116b 0 + 93211070566763
3   com.apple.JavaScriptCore      	0x00007fff35bbaee5 llint_entry + 61970
4   com.apple.JavaScriptCore      	0x00007fff35bbaee5 llint_entry + 61970
5   com.apple.JavaScriptCore      	0x00007fff35bbb852 llint_entry + 64383
6   com.apple.JavaScriptCore      	0x00007fff35bbaee5 llint_entry + 61970
7   com.apple.JavaScriptCore      	0x00007fff35bbaee5 llint_entry + 61970
8   com.apple.JavaScriptCore      	0x00007fff35bbaf57 llint_entry + 62084
9   com.apple.JavaScriptCore      	0x00007fff35bbaee5 llint_entry + 61970
10  com.apple.JavaScriptCore      	0x00007fff35bbaee5 llint_entry + 61970
11  com.apple.JavaScriptCore      	0x00007fff35bbaf57 llint_entry + 62084
12  com.apple.JavaScriptCore      	0x00007fff35bbaee5 llint_entry + 61970
13  com.apple.JavaScriptCore      	0x00007fff35bbaee5 llint_entry + 61970
14  com.apple.JavaScriptCore      	0x00007fff35bbb852 llint_entry + 64383
15  com.apple.JavaScriptCore      	0x00007fff35bbaee5 llint_entry + 61970
...

[Michael Saboff]

<rdar://problem/49589308>

[Michael Saboff]

This page crashes: https://www.reddit.com/r/unpopularopinion/comments/b9pvhv/splitting_5050_after_a_divorce_is_not_fair/

[Michael Saboff]

Created attachment 366905 [details]
Patch

[Geoffrey Garen]

Comment on attachment 366905 [details]
Patch

r=me

[Michael Saboff]

Committed r243967: <https://trac.webkit.org/changeset/243967>