[Webkit-unassigned] [Bug 28438] Browser hangs on opening Web Inspector.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=28438





--- Comment #7 from Pavel Feldman <pfeldman at chromium.org>  2009-08-20 14:38:11 PDT ---
(In reply to comment #6)
> Still working on trying reproduce this issue, so we can debug.

Repeats in 100% cases for me, built from clean, on ToT. I am seeing the same
picture over and over: 

BytecodeGenerator.cpp:995
SymbolTableEntry entry =
currentVariableObject->symbolTable().get(property.ustring().rep());

ends up with infinite lookup in HashTable.h 485. That table object is
completely broken: negative size, tableSizeMask is not a valid bitmask (=5),
etc. as if symbolTable was pointing to deleted object.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.