[Webkit-unassigned] [Bug 19834] Failed assertion in JavaScriptCore/VM/SegmentedVector.h:82

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=19834





------- Comment #3 from david.hansen at gmx.net  2008-07-01 07:17 PDT -------
(In reply to comment #2)
> Feels more like a bug though, confirming.
> 

I should have added some more words...  Was a bit tired.

This is just the shortest test case I came up with.  It doesn't depend on
the implementation of the getter / setters.

w/o assertions enabled it produces the weirdest things (I discovered this
when I managed to define `undefined' to some function) but usually it just
segfaults.

Linking against electric fence (w/ disabled assertions) results in a seg fault
in the hash table code.  I suspect the symbol table of the global object is
completely foobared.

This started after updating from SVN yesterday, didn't happen before (about 1
week old version from svn).  Hope this helps a bit to narrow it down.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.