[Webkit-unassigned] [Bug 21057] New: Crash in RegisterID::deref() running fast/canvas/canvas-putImageData.html

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Sep 24 06:48:05 PDT 2008


https://bugs.webkit.org/show_bug.cgi?id=21057

           Summary: Crash in RegisterID::deref() running fast/canvas/canvas-
                    putImageData.html
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Normal
          Priority: P1
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ap at webkit.org
                CC: oliver at apple.com


Reliably crashes under GuardMalloc:

run-webkit-tests -g fast/canvas/canvas-putImageData.html

Thread 0 Crashed:
0   com.apple.JavaScriptCore            0x004569c8 JSC::RegisterID::deref() +
16 (RegisterID.h:91)
1   com.apple.JavaScriptCore            0x00459ad9
WTF::RefPtr<JSC::RegisterID>::~RefPtr() + 31
2   com.apple.JavaScriptCore            0x00490b8e
JSC::CodeGenerator::~CodeGenerator() + 194
3   com.apple.JavaScriptCore            0x00446098
JSC::ProgramNode::generateCode(JSC::ScopeChainNode*) + 430 (nodes.cpp:1851)
4   com.apple.JavaScriptCore            0x004ca159
JSC::ProgramNode::byteCode(JSC::ScopeChainNode*) + 43 (nodes.h:2205)
5   com.apple.JavaScriptCore            0x004b7a52
JSC::Machine::execute(JSC::ProgramNode*, JSC::ExecState*, JSC::ScopeChainNode*,
JSC::JSObject*, JSC::JSValue**) + 62 (Machine.cpp:885)
6   com.apple.JavaScriptCore            0x00442927
JSC::Interpreter::evaluate(JSC::ExecState*, JSC::ScopeChain&, JSC::UString
const&, int, WTF::PassRefPtr<JSC::SourceProvider>, JSC::JSValue*) + 427
(interpreter.cpp:83)


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list