[Webkit-unassigned] [Bug 20330] New: JSCore crash loading any filehurricane media page

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=20330

           Summary: JSCore crash loading any filehurricane media page
           Product: WebKit
           Version: 526+ (Nightly build)
          Platform: Macintosh
               URL: http://www.filehurricane.com/
        OS/Version: Mac OS X 10.5
            Status: NEW
          Keywords: NeedsReduction, Regression
          Severity: Normal
          Priority: P1
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: webkit at mattlilek.com
                CC: oliver at apple.com, cwzwarich at uwaterloo.ca


Loading any media page on <http://www.filehurricane.com/> (load the URL and
click any item on the homepage) hits an ASSERT coming from
<http://trac.webkit.org/browser/trunk/JavaScriptCore/VM/Machine.cpp?rev=35640#L2781>

ASSERTION FAILED: i < size()
(./wtf/Vector.h:439 T& WTF::Vector<T, inlineCapacity>::at(size_t) [with T =
KJS::JSValue*, long unsigned int inlineCapacity = 0ul])

Thread 0 Crashed:
0   com.apple.JavaScriptCore            0x004fe4bf WTF::Vector<KJS::JSValue*,
0ul>::at(unsigned long) + 81 (Vector.h:439)
1   com.apple.JavaScriptCore            0x004fe4fc WTF::Vector<KJS::JSValue*,
0ul>::operator[](unsigned long) + 24 (Vector.h:448)
2   com.apple.JavaScriptCore            0x004faab2
KJS::Machine::privateExecute(KJS::Machine::ExecutionFlag, KJS::ExecState*,
KJS::RegisterFile*, KJS::Register*, KJS::ScopeChainNode*, KJS::CodeBlock*,
KJS::JSValue**) + 34414 (Machine.cpp:2781)
3   com.apple.JavaScriptCore            0x004fbf22
KJS::Machine::execute(KJS::ProgramNode*, KJS::ExecState*, KJS::ScopeChainNode*,
KJS::JSObject*, KJS::JSValue**) + 698 (Machine.cpp:785)
4   com.apple.JavaScriptCore            0x00494bd9
KJS::Interpreter::evaluate(KJS::ExecState*, KJS::ScopeChain&, KJS::UString
const&, int, WTF::PassRefPtr<KJS::SourceProvider>, KJS::JSValue*) + 409
(interpreter.cpp:78)
5   com.apple.WebCore                   0x037f22a7
WebCore::ScriptController::evaluate(WebCore::String const&, int,
WebCore::String const&) + 249 (ScriptController.cpp:112)
6   com.apple.WebCore                   0x03383903
WebCore::FrameLoader::executeScript(WebCore::String const&, int,
WebCore::String const&) + 153 (FrameLoader.cpp:787)
7   com.apple.WebCore                   0x03415476
WebCore::HTMLTokenizer::scriptExecution(WebCore::String const&,
WebCore::HTMLTokenizer::State, WebCore::String const&, int) + 300
(HTMLTokenizer.cpp:547)
8   com.apple.WebCore                   0x034158c4
WebCore::HTMLTokenizer::notifyFinished(WebCore::CachedResource*) + 600
(HTMLTokenizer.cpp:1994)
9   com.apple.WebCore                   0x031c7088
WebCore::CachedScript::checkNotify() + 68 (CachedScript.cpp:92)
10  com.apple.WebCore                   0x031c71e9
WebCore::CachedScript::data(WTF::PassRefPtr<WebCore::SharedBuffer>, bool) + 279
(CachedScript.cpp:84)


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.