[Webkit-unassigned] [Bug 25992] youtube.com crashes in qtlauncher

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=25992





------- Comment #1 from robert at roberthogan.net  2009-05-26 11:14 PDT -------
The bt doesn't show it but the failure occurs in JSCell.h at:

    ALWAYS_INLINE JSCell* JSValue::asCell() const
    {
        ASSERT(isCell());
        return m_ptr;
    }

when attempting to return m_ptr. As far as I can see m_ptr is fine and contains
a value.

The caller of the above is:

// this method is here to be after the inline declaration of JSCell::isObject
inline bool JSValue::isObject(const ClassInfo* classInfo) const
{
    return isCell() && asCell()->isObject(classInfo);
}

As a sidenote, doesn't the ASSERT(isCell()) in JSCell.h make the check in
isObject() redundant? Seems a shame to have to call it twice.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.