[Webkit-unassigned] [Bug 38535] WebKit crashes at DebuggerCallFrame::functionName() if m_callFrame is the top global callframe.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Dec 22 20:30:30 PST 2010


https://bugs.webkit.org/show_bug.cgi?id=38535


Yongjun Zhang <yongjun_zhang at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |yongjun_zhang at apple.com




--- Comment #8 from Yongjun Zhang <yongjun_zhang at apple.com>  2010-12-22 20:30:30 PST ---
It crashes only in the case when the exception is throw from the second most top frame, aka. its caller frame is the top most frame, AND the top most frame is an anonymous function (like an eventHandler).  In this case, m_callFrame->callee() in JSC::debuggerCallFrame::functionName() returns 0x2.  We need to check if this callFrame is top callFrame in [WebScriptCallFrame functionName].

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list