[Webkit-unassigned] [Bug 40858] Reproducible crash in com.apple.JavaScriptCore 0x005d7164 JSC::JSObject::defaultValue(JSC::ExecState*, JSC::PreferredPrimitiveType) const + 1764

Fri Jun 18 14:26:47 PDT 2010

https://bugs.webkit.org/show_bug.cgi?id=40858

Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ap at webkit.org,
                   |                            |oliver at apple.com

--- Comment #2 from Alexey Proskuryakov <ap at webkit.org>  2010-06-18 14:26:47 PST ---
With a local debug build of r61268, I'm getting an assertion failure:

ASSERTION FAILED: this[RegisterFile::ScopeChain].Register::scopeChain()
(/Users/ap/Safari/OpenSource/JavaScriptCore/interpreter/CallFrame.h:45 JSC::ScopeChainNode* JSC::ExecState::scopeChain() const)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.