[Webkit-unassigned] [Bug 18369] New: Crash during sunspider date-format-tofte

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=18369

           Summary: Crash during sunspider date-format-tofte
           Product: WebKit
           Version: 526+ (Nightly build)
          Platform: PC
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: Major
          Priority: P2
         Component: WebKit Gtk
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: mh+webkit at glandium.org


I spotted a crash during sunspider string-unpack-code test
(http://webkit.org/perf/sunspider-0.9/date-format-tofte.html) on amd64 (not
tested anywhere else), confirmed on r31722.

The full backtrace is as follows:
[Thread debugging using libthread_db enabled]
[New Thread 0x2b1458c8bec0 (LWP 3910)]
0x00002b144f5caea5 in waitpid () from /lib/libpthread.so.0
#0  0x00002b144f5caea5 in waitpid () from /lib/libpthread.so.0
#1  0x00002b14503894f6 in g_spawn_sync () from /usr/lib/libglib-2.0.so.0
#2  0x00002b1450389808 in g_spawn_command_line_sync () from
/usr/lib/libglib-2.0.so.0
#3  0x00002b14596054b3 in ?? () from
/usr/lib/gtk-2.0/modules/libgnomebreakpad.so
#4  <signal handler called>
#5  0x00002b144f1a7a4a in KJS::PropertyMap::insert () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#6  0x00002b144f1ae25c in KJS::PropertyMap::createTable () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#7  0x00002b144f1b8764 in KJS::PropertyMap::put () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#8  0x00002b144f1fa5c8 in KJS::FunctionBodyNode::execute () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#9  0x00002b144f1fa94f in KJS::FunctionImp::callAsFunction () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#10 0x00002b144f1d0e49 in KJS::JSObject::call () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#11 0x00002b144f1e4ae3 in KJS::FunctionCallDotNode::evaluate () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#12 0x00002b144f1dbe2e in KJS::AssignLocalVarNode::evaluate () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#13 0x00002b144f1d8d8e in KJS::VarStatementNode::execute () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#14 0x00002b144f1a746a in KJS::BlockNode::execute () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#15 0x00002b144f1d89b9 in KJS::ForNode::execute () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#16 0x00002b144f1a746a in KJS::BlockNode::execute () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#17 0x00002b144f1fa2c0 in KJS::ProgramNode::execute () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#18 0x00002b144f1fb9c3 in KJS::Interpreter::evaluate () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#19 0x00002b144ee9e7b3 in WebCore::KJSProxy::evaluate () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#20 0x00002b144f02d8f1 in WebCore::FrameLoader::executeScript () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#21 0x00002b144eff65c9 in WebCore::HTMLTokenizer::scriptExecution () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#22 0x00002b144eff7685 in WebCore::HTMLTokenizer::scriptHandler () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#23 0x00002b144eff84e2 in WebCore::HTMLTokenizer::parseSpecial () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#24 0x00002b144effa3e2 in WebCore::HTMLTokenizer::parseTag () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#25 0x00002b144effb20f in WebCore::HTMLTokenizer::write () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#26 0x00002b144effb715 in WebCore::HTMLTokenizer::notifyFinished () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#27 0x00002b144f00b60c in WebCore::CachedScript::checkNotify () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#28 0x00002b144f00b942 in WebCore::CachedScript::data () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#29 0x00002b144f03bd7c in WebCore::Loader::Host::didFinishLoading () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#30 0x00002b144f047213 in WebCore::SubresourceLoader::didFinishLoading () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#31 0x00002b144f15ef24 in WebCore::ResourceHandleManager::downloadTimerCallback
() from /home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#32 0x00002b144f0b9493 in WebCore::TimerBase::fireTimers () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#33 0x00002b144f0b954b in WebCore::TimerBase::sharedTimerFired () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#34 0x00002b144edddba2 in WebCore::timeout_cb () from
/home/mh/git/webkit/.libs/libwebkit-1.0.so.1
#35 0x00002b14503560b2 in g_main_context_dispatch () from
/usr/lib/libglib-2.0.so.0
#36 0x00002b1450359356 in ?? () from /usr/lib/libglib-2.0.so.0
#37 0x00002b1450359617 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#38 0x00002b144fc66b63 in IA__gtk_main () at
/build/buildd/gtk+2.0-2.12.9/gtk/gtkmain.c:1163
#39 0x0000000000401eab in main ()


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.