Bug 28169 - REGRESSION: Hang/crash in BytecodeGenerator::constRegisterFor loading simple page
Summary: REGRESSION: Hang/crash in BytecodeGenerator::constRegisterFor loading simple ...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: Mac (Intel) OS X 10.5
: P1 Blocker
Assignee: Nobody
URL:
Keywords: HasReduction
Depends on:
Blocks:
 
Reported: 2009-08-10 17:36 PDT by Timothy Hatcher
Modified: 2009-08-11 14:30 PDT (History)
2 users (show)

See Also:


Attachments
Reduction (84 bytes, text/html)
2009-08-10 17:36 PDT, Timothy Hatcher
no flags Details
Sample (11.25 KB, text/plain)
2009-08-10 17:37 PDT, Timothy Hatcher
no flags Details
Patch v1 (4.34 KB, patch)
2009-08-11 14:12 PDT, Oliver Hunt
ggaren: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Timothy Hatcher 2009-08-10 17:36:34 PDT
Created attachment 34529 [details]
Reduction

Loading the attached page will produce a hang then eventual crash in BytecodeGenerator::constRegisterFor.
Comment 1 Timothy Hatcher 2009-08-10 17:37:23 PDT
Created attachment 34530 [details]
Sample
Comment 2 Oliver Hunt 2009-08-11 14:12:49 PDT
Created attachment 34591 [details]
Patch v1
Comment 3 Geoffrey Garen 2009-08-11 14:26:02 PDT
Comment on attachment 34591 [details]
Patch v1

r=me
Comment 4 Oliver Hunt 2009-08-11 14:30:31 PDT
Committed r47062