Bug 95364 – Resizing HTML5 spec in Safari crashes in JavaScriptCore

• Status: RESOLVED
• Resolution: WORKSFORME
• Component: JavaScriptCore

[Eric Seidel (no email)]

Resizing HTML5 spec in Safari crashes in JavaScriptCore

http://www.whatwg.org/specs/web-apps/current-work/

Crashed Thread:  0  Dispatch queue: com.apple.main-thread

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000008

VM Regions Near 0x8:
--> 
    __TEXT                 0000000109099000-000000010909a000 [    4K] r-x/rwx SM=COW  /Projects/*/WebKit2.framework/WebProcess.app/Contents/MacOS/WebProcess

Application Specific Information:
objc[59356]: garbage collection is OFF
Bundle controller class:
BrowserBundleController
 

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   ???                           	0x0000288cf781c958 0 + 44585913010520
1   com.apple.JavaScriptCore      	0x00000001097a9959 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 921 (JITCode.h:133)
2   com.apple.JavaScriptCore      	0x00000001096fe894 JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 52 (CallData.cpp:39)
3   com.apple.WebCore             	0x000000010a59556f WebCore::ScheduledAction::executeFunctionInContext(JSC::JSGlobalObject*, JSC::JSValue, WebCore::ScriptExecutionContext*) + 511 (JSMainThreadExecState.h:92)

[Eric Seidel (no email)]

Created attachment 161282 [details]
crash report

[Eric Seidel (no email)]

I'm synced to r126928.

[Alexey Proskuryakov]

> I'm synced to r126928.

I think that this is exactly the revision where this started. It has been rolled out yesterday, so please try updating again.