[Webkit-unassigned] [Bug 23085] [jsfunfuzz] gc crash

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Jan 2 23:41:51 PST 2009


https://bugs.webkit.org/show_bug.cgi?id=23085





------- Comment #2 from oliver at apple.com  2009-01-02 23:41 PDT -------
Okay, here we go:
function tryRunning(f){
    try{
        f()
    }catch(r){
    }
}
function tryItOut(){
    function f() {
        try {
            throw "";
        } catch(y) {
            this(function(){})
        } finally {
        }
    };
    v = tryRunning(f)
}
tryItOut();
gc();


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list