[Webkit-unassigned] [Bug 25785] New: Segfault in mark when using JSObjectMakeConstructor

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=25785

           Summary: Segfault in mark when using JSObjectMakeConstructor
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: racarr at gnome.org


Making two constructors of a class with JSObjectMakeConstructor, setting them
on an object, and then creating/releasing a context, reliably produces a
segfault in GC Mark with r43686 on Linux.

Not setting either of the constructs on the object, OR passing NULL as the
class argument to JSObjectMakeConstructor prevents the segfault from happening.

Attached is a test case which triggers the segfault.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.