[Webkit-unassigned] [Bug 24738] New: Multiple crashes in JSDOMWindow::getOwnPropertySlot

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=24738

           Summary: Multiple crashes in JSDOMWindow::getOwnPropertySlot
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: xan.lopez at gmail.com


I'm getting this crash in many sites (reader.google.com, meneame.com,
reddit.com, ...) since updating to r41889 (I haven't bisected it, but it worked
fine two days ago). Building debug image now...

(gdb) bt
#0  0xb7c273e2 in WebCore::JSDOMWindow::getOwnPropertySlot ()
   from /home/xan/git/WebKit/build/normal/.libs/libwebkit-1.0.so
#1  0xb7b07827 in JSC::JITStubs::cti_op_resolve_with_base ()
   from /home/xan/git/WebKit/build/normal/.libs/libwebkit-1.0.so
#2  0xb29917ab in ?? ()
#3  0xb7b38515 in JSC::Interpreter::execute ()
   from /home/xan/git/WebKit/build/normal/.libs/libwebkit-1.0.so
#4  0xb7be5f18 in JSC::evaluate () from
/home/xan/git/WebKit/build/normal/.libs/libwebkit-1.0.so
#5  0xb7584729 in WebCore::ScriptController::evaluate ()
   from /home/xan/git/WebKit/build/normal/.libs/libwebkit-1.0.so
#6  0xb779cb56 in WebCore::FrameLoader::executeScript ()
   from /home/xan/git/WebKit/build/normal/.libs/libwebkit-1.0.so
#7  0xb77406f2 in WebCore::HTMLTokenizer::scriptExecution ()
   from /home/xan/git/WebKit/build/normal/.libs/libwebkit-1.0.so
#8  0xb77413ca in WebCore::HTMLTokenizer::notifyFinished ()
   from /home/xan/git/WebKit/build/normal/.libs/libwebkit-1.0.so
#9  0xb7772d3c in WebCore::CachedScript::checkNotify ()
   from /home/xan/git/WebKit/build/normal/.libs/libwebkit-1.0.so
#10 0xb77c189c in WebCore::Loader::Host::didFinishLoading ()
   from /home/xan/git/WebKit/build/normal/.libs/libwebkit-1.0.so
#11 0xb77b1110 in WebCore::SubresourceLoader::didFinishLoading ()
   from /home/xan/git/WebKit/build/normal/.libs/libwebkit-1.0.so
#12 0xb77ac0c1 in WebCore::ResourceLoader::didFinishLoading ()
   from /home/xan/git/WebKit/build/normal/.libs/libwebkit-1.0.so
#13 0xb794714f in WebCore::finishedCallback ()
   from /home/xan/git/WebKit/build/normal/.libs/libwebkit-1.0.so
#14 0xb61e25eb in final_finished (req=0xb264a200, user_data=0x935e180) at
soup-session-async.c:331
#15 0xb5c37704 in IA__g_cclosure_marshal_VOID__VOID (closure=0x93a6b40,
return_value=0x0, 
    n_param_values=1, param_values=0x8fa2cc0, invocation_hint=0xbfcd4ebc,
marshal_data=0xb61e2540)
    at gmarshal.c:77
#16 0xb5c29fdb in IA__g_closure_invoke (closure=0x93a6b40, return_value=0x0,
n_param_values=1, 
    param_values=0x8fa2cc0, invocation_hint=0xbfcd4ebc) at gclosure.c:767
#17 0xb5c40722 in signal_emit_unlocked_R (node=0x93f5680, detail=0,
instance=0x92da6b0, 
    emission_return=0x0, instance_and_params=0x8fa2cc0) at gsignal.c:3317
#18 0xb5c41809 in IA__g_signal_emit_valist (instance=0x92da6b0, signal_id=377,
detail=0, 
    var_args=0xbfcd505c "\034\021 �)B\035�\034\021
�\210PͿ;\220\035���-\t�&-\t�\"E\t�\217\035�\214!Ƶ�\226\035��PͿ\004wõ`�-\t��-\t")
at gsignal.c:2980


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.