The crash happens in CharAccess(const UString& s) : m_buffer(0) { if (s.is8Bit()) { #if USE(JSC) m_charSize = Char8; unsigned length = s.length(); m_ptr.ptr8 = m_buffer = static_cast<char *>(fastMalloc(length)); memcpy(m_buffer, s.latin1().data(), length); #else ASSERT_NOT_REACHED(); <=== This line is crashing #endif } else { m_charSize = Char16; m_ptr.ptr16 = s.characters(); } }
Created attachment 115475 [details] Patch
Comment on attachment 115475 [details] Patch Looks good
Committed r100523: <http://trac.webkit.org/changeset/100523>