[Webkit-unassigned] [Bug 13963] Reproducible crash playing SVG space invaders in JS code

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Jun 1 02:15:16 PDT 2007


http://bugs.webkit.org/show_bug.cgi?id=13963





------- Comment #3 from oliver at apple.com  2007-06-01 02:15 PDT -------
Looks like badness

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_INVALID_ADDRESS at address: 0xc5d7bd67
0x017bdd23 in WebCore::JSSVGPODTypeWrapperCreator<WebCore::SVGLength,
WebCore::SVGAnimatedTemplate<WebCore::SVGLength> >::commitChange
(this=0x181e6e30, exec=0xbfffdc5c) at JSSVGPODTypeWrapper.h:75
75              (m_creator->*m_setter)((PODType&)(*this));
(gdb) p m_creator
$1 = (SVGAnimatedLength *) 0x17583ad0
Current language:  auto; currently c++
(gdb) p *m_creator
$2 = {
  <WebCore::Shared<WebCore::SVGAnimatedTemplate<WebCore::SVGLength> >> = {
    <WTFNoncopyable::Noncopyable> = {<No data fields>}, 
    members of WebCore::Shared<WebCore::SVGAnimatedTemplate<WebCore::SVGLength>
>: 
    m_refCount = -975824033, 
    m_inDestructor = true
  }, 
  members of WebCore::SVGAnimatedTemplate<WebCore::SVGLength>: 
  _vptr$SVGAnimatedTemplate = 0xc5d7bd5b
}
(gdb) 


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list