[Webkit-unassigned] [Bug 40874] Crash in JavaScriptCore when viewing page with image frame from Google

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=40874





--- Comment #5 from Dimitris Apostolou <rex_4539 at yahoo.com>  2010-08-21 07:37:30 PST ---
Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore          0x0000000100848057 JSC::JSObject::defaultValue(JSC::ExecState*, JSC::PreferredPrimitiveType) const + 4039
1   com.apple.JavaScriptCore          0x00000001007657dd JSC::JSObject::toPrimitive(JSC::ExecState*, JSC::PreferredPrimitiveType) const + 13
2   com.apple.JavaScriptCore          0x00000001008460e9 JSC::JSObject::toString(JSC::ExecState*) const + 57
3   com.apple.JavaScriptCore          0x00000001008ec43e JSC::stringProtoFuncSubstring(JSC::ExecState*) + 174
4   ???                               0x00002930cac001aa 0 + 45289536749994
5   com.apple.JavaScriptCore          0x00000001007d9199 JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::ScopeChainNode*, JSC::JSObject*, JSC::JSValue*) + 601

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.