[Webkit-unassigned] [Bug 40858] New: Reproducible crash in com.apple.JavaScriptCore 0x005d7164 JSC::JSObject::defaultValue(JSC::ExecState*, JSC::PreferredPrimitiveType) const + 1764

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=40858

           Summary: Reproducible crash in com.apple.JavaScriptCore
                    0x005d7164
                    JSC::JSObject::defaultValue(JSC::ExecState*,
                    JSC::PreferredPrimitiveType) const + 1764
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh PowerPC
               URL: http://translate.google.com/translate?js=y&prev=_t&hl=
                    en&ie=UTF-8&layout=1&eotf=1&u=http%3A%2F%2Fjablickar.c
                    z%2Fcesky-uzivatel-testuje-iphone-4-ukazky-fotografii-
                    a-videa-z-iphone-4-v-clanku%2F&sl=auto&tl=en
        OS/Version: Mac OS X 10.4
            Status: NEW
          Severity: Critical
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: lars.sonchocky-helldorf at hamburg.de


I get a reproducible crash when visiting http://translate.google.com/translate?js=y&prev=_t&hl=en&ie=UTF-8&layout=1&eotf=1&u=http%3A%2F%2Fjablickar.cz%2Fcesky-uzivatel-testuje-iphone-4-ukazky-fotografii-a-videa-z-iphone-4-v-clanku%2F&sl=auto&tl=en with the current WebKit Nightly (Safari Version 4.1 (4533.16, r61351) on Mac OS X 10.4.11 PowerPC G4)

Date/Time:      2010-06-18 23:08:14.813 +0200
OS Version:     10.4.11 (Build 8S165)
Report Version: 4

Command: Safari
Path:    /Applications/Safari.app/Contents/MacOS/Safari
Parent:  WindowServer [60]

Version: r61351 (61351)

PID:    3409
Thread: 0

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000008

Thread 0 Crashed:
0   com.apple.JavaScriptCore     0x005d7164 JSC::JSObject::defaultValue(JSC::ExecState*, JSC::PreferredPrimitiveType) const + 1764
1   com.apple.JavaScriptCore     0x0050a85c JSC::JSObject::toPrimitive(JSC::ExecState*, JSC::PreferredPrimitiveType) const + 44
2   com.apple.JavaScriptCore     0x005d605c JSC::JSObject::toString(JSC::ExecState*) const + 60
3   com.apple.JavaScriptCore     0x0065258c JSC::stringProtoFuncSubstring(JSC::ExecState*) + 284
4   com.apple.JavaScriptCore     0x0059df04 JSC::Interpreter::privateExecute(JSC::Interpreter::ExecutionFlag, JSC::RegisterFile*, JSC::ExecState*, JSC::JSValue*) + 59252
5   com.apple.JavaScriptCore     0x005a4f70 JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::ScopeChainNode*, JSC::JSObject*, JSC::JSValue*) + 800
6   com.apple.JavaScriptCore     0x00543ef8 JSC::evaluate(JSC::ExecState*, JSC::ScopeChain&, JSC::SourceCode const&, JSC::JSValue) + 488

See attached crash log

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.