[Webkit-unassigned] [Bug 12382] New: Crash on AMD64 in dtoa.cpp

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=12382

           Summary: Crash on AMD64 in dtoa.cpp
           Product: WebKit
           Version: 420+ (nightly)
          Platform: PC
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: Camel at gmx.de


When trying out WebKit/Qt ( on my AMD64 machine I got various crashes in
kjs_dtoa at dtoa.cpp:3015
*s++ = '0' + (int)L;

The problem seems to that the containing loop does not terminate correctly, as
at the time of the crash the loop was in its 36021 iteration.

The kjs version in the KDE repository had a change applied:
http://websvn.kde.org/trunk/KDE/kdelibs/kjs/dtoa.cpp?rev=569434&r1=564344&r2=569434

Following the change in the WebKit "dtoa.cpp" version seems to fix the crash.

See also the comment in dtoa.cpp:
//#define Long int on machines with 32-bit ints and 64-bit longs.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.