[Webkit-unassigned] [Bug 22542] Crash on reload when profiling switched on

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=22542


apl_bz at rjimlad.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #26588|0                           |1
        is obsolete|                            |




------- Comment #8 from apl_bz at rjimlad.org  2009-01-10 15:25 PDT -------
Created an attachment (id=26593)
 --> (https://bugs.webkit.org/attachment.cgi?id=26593&action=view)
Crash log (about:blank, hammering reload button)

Here are the top 10 lines of the stack dump: 

Exception Type:  EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000026
Crashed Thread:  0

Thread 0 Crashed:
0   com.apple.JavaScriptCore            0x004c83fb
JSC::Profiler::didExecute(JSC::ExecState*, JSC::JSValuePtr) + 59
1   com.apple.JavaScriptCore            0x00482ddf
JSC::Interpreter::execute(JSC::FunctionBodyNode*, JSC::ExecState*,
JSC::JSFunction*, JSC::JSObject*, JSC::ArgList const&, JSC::ScopeChainNode*,
JSC::JSValuePtr*) + 527
2   com.apple.JavaScriptCore            0x0040d215
__ZN3JSCL21functionProtoFuncCallEPNS_9ExecStateEPNS_8JSObjectENS_10JSValuePtrERKNS_7ArgListE
+ 341
3   com.apple.JavaScriptCore            0x0046a85a
JSC::Interpreter::cti_op_call_NotJSFunction(void*, ...) + 522
4   ???                                 0x18ffa712 0 + 419407634
5   com.apple.JavaScriptCore            0x00482db8
JSC::Interpreter::execute(JSC::FunctionBodyNode*, JSC::ExecState*,
JSC::JSFunction*, JSC::JSObject*, JSC::ArgList const&, JSC::ScopeChainNode*,
JSC::JSValuePtr*) + 488
6   com.apple.JavaScriptCore            0x0041a848
JSC::JSObject::put(JSC::ExecState*, JSC::Identifier const&, JSC::JSValuePtr,
JSC::PutPropertySlot&) + 936
7   com.apple.JavaScriptCore            0x0046d2d2
JSC::Interpreter::cti_op_put_by_id_generic(void*, ...) + 82
8   ???                                 0x184fdb23 0 + 407886627
9   com.apple.JavaScriptCore            0x00482db8
JSC::Interpreter::execute(JSC::FunctionBodyNode*, JSC::ExecState*,
JSC::JSFunction*, JSC::JSObject*, JSC::ArgList const&, JSC::ScopeChainNode*,
JSC::JSValuePtr*) + 488


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.