[Webkit-unassigned] [Bug 23204] Profiling news.google.com crashes WebKit nightly.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Jan 28 01:35:30 PST 2009


https://bugs.webkit.org/show_bug.cgi?id=23204


cwzwarich at uwaterloo.ca changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|webkit-                     |cwzwarich at uwaterloo.ca
                   |unassigned at lists.webkit.org |




------- Comment #5 from cwzwarich at uwaterloo.ca  2009-01-28 01:35 PDT -------
This is caused (at least for me) by a garbage value for
exec->lexicalGlobalObject() in Profiler::didExecute(ExecState*, JSValuePtr). It
is always called by Interpreter::execute(FunctionBodyNode*, ...). Since
lexicalGlobalObject() works by walking the ScopeChainNode's up to the top, this
implies that there is some wonky ScopeChainNode business going on.

I'll take this bug and see what I can do.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list