[Webkit-unassigned] [Bug 37661] [v8] Bail out if fetching of Object.prototype fails

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=37661


anton muhin <antonm at chromium.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Platform|Other                       |All
         OS/Version|Mac OS X 10.5               |All
          Component|New Bugs                    |WebCore Misc.




--- Comment #1 from anton muhin <antonm at chromium.org>  2010-04-15 10:16:11 PST ---
Most probably that's due to empty handle of the value to set---receiver and
keys are checked many times on the path so we would die earlier.

I don't know exact reason why fetching Object.prototype fails.  Most probably
some exception is thrown (if it were due to IsDeadCheck, we shouldn't get past
first line of v8::SetHiddenPrototype).

If we have some logging mechanism, we could try to see if it's indeed the case:
we could add TryCatch and store exception somewhere on the stack to have a
chance to read it from minidump.

For now adding some more bailout checks, let's see if it could help.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.