[Webkit-unassigned] [Bug 26055] New: Webkit crash in JIT-ed JavaScript

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=26055

           Summary: Webkit crash in JIT-ed JavaScript
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
               URL: http://dominionofawesome.com/cryptobox/
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: bytex64 at bytex64.net


On r44174, WebKit crashes on http://dominionofawesome.com/cryptobox/ when the
"Encrypt" button is clicked. When I compile WebKit without JIT support, output
appears in the Ciphertext box (and obviously it doesn't crash). I've tried to
track down the bug, but with or without debugging enabled, every backtrace
looks like this:

#0  0xb768ec63 in ctiVMThrowTrampoline () from /usr/lib/libwebkit-1.0.so.2
#1  0xb52c4100 in ?? ()
#2  0xbfd2c07c in ?? ()
#3  0xc5c00000 in ?? ()
#4  0xb768e8ee in ctiVMThrowTrampoline () from /usr/lib/libwebkit-1.0.so.2
#5  0xb3bfb6e0 in ?? ()
#6  0x00000000 in ?? ()

I'm hoping you guys can figure it out, because it's inscrutable to me. :)  I've
tested this inside of both uzbl and Midori, and it crashes in both.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.