[Webkit-unassigned] [Bug 18816] ASSERTION FAILED: !vb->isUndefined() loading unl.edu

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=18816


webkit at mattlilek.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
          Component|Page Loading                |JavaScriptCore
     Ever Confirmed|0                           |1
           Keywords|                            |NeedsReduction, Regression
           Priority|P2                          |P1
            Summary|Crash when loading page     |ASSERTION FAILED: !vb-
                   |                            |>isUndefined() loading
                   |                            |unl.edu




------- Comment #1 from webkit at mattlilek.com  2008-04-30 12:59 PDT -------
Confirmed with r32736; regression from Safari 3.1.1 (5525.18)

ASSERTION FAILED: !vb->isUndefined()
(/Users/matt/Code/WebKit/JavaScriptCore/kjs/array_instance.cpp:496 bool
KJS::CompareWithCompareFunctionArguments::operator()(KJS::JSValue*,
KJS::JSValue*))

Thread 0 Crashed:
0   com.apple.JavaScriptCore            0x004a3b99
KJS::CompareWithCompareFunctionArguments::operator()(KJS::JSValue*,
KJS::JSValue*) + 145 (array_instance.cpp:496)
1   com.apple.JavaScriptCore            0x004a429b void
std::__unguarded_linear_insert<KJS::JSValue**, KJS::JSValue*,
KJS::CompareWithCompareFunctionArguments>(KJS::JSValue**, KJS::JSValue*,
KJS::CompareWithCompareFunctionArguments) + 69 (stl_algo.h:2108)
2   com.apple.JavaScriptCore            0x004a4383 void
std::__insertion_sort<KJS::JSValue**,
KJS::CompareWithCompareFunctionArguments>(KJS::JSValue**, KJS::JSValue**,
KJS::CompareWithCompareFunctionArguments) + 145 (stl_algo.h:2156)
3   com.apple.JavaScriptCore            0x004a4428 void
std::__final_insertion_sort<KJS::JSValue**,
KJS::CompareWithCompareFunctionArguments>(KJS::JSValue**, KJS::JSValue**,
KJS::CompareWithCompareFunctionArguments) + 144 (stl_algo.h:2240)
4   com.apple.JavaScriptCore            0x004a44a4 void
std::sort<KJS::JSValue**,
KJS::CompareWithCompareFunctionArguments>(KJS::JSValue**, KJS::JSValue**,
KJS::CompareWithCompareFunctionArguments) + 122 (stl_algo.h:2608)
5   com.apple.JavaScriptCore            0x00448c14
KJS::ArrayInstance::sort(KJS::ExecState*, KJS::JSObject*) + 104
(array_instance.cpp:518)
6   com.apple.JavaScriptCore            0x004490be
KJS::arrayProtoFuncSort(KJS::ExecState*, KJS::JSObject*, KJS::List const&) +
194 (array_object.cpp:371)
7   com.apple.JavaScriptCore            0x00426650
KJS::PrototypeFunction::callAsFunction(KJS::ExecState*, KJS::JSObject*,
KJS::List const&) + 34 (function.cpp:906)
8   com.apple.JavaScriptCore            0x004484b6
KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 222
(object.cpp:99)
9   com.apple.JavaScriptCore            0x004a6940
KJS::FunctionCallDotNode::inlineEvaluate(KJS::ExecState*) + 802
(nodes.cpp:1495)
10  com.apple.JavaScriptCore            0x0045edca
KJS::FunctionCallDotNode::evaluate(KJS::ExecState*) + 30 (nodes.cpp:1501)


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.