[Webkit-unassigned] [Bug 40874] Crash in JavaScriptCore when viewing page with image frame from Google

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=40874


Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
           Priority|P2                          |P1
                 CC|                            |ggaren at apple.com,
                   |                            |oliver at apple.com
     Ever Confirmed|0                           |1




--- Comment #1 from Alexey Proskuryakov <ap at webkit.org>  2010-06-19 13:22:13 PST ---
In debug build:

ASSERTION FAILED: this[RegisterFile::ScopeChain].Register::scopeChain()
(/Users/ap/Safari/OpenSource/JavaScriptCore/interpreter/CallFrame.h:45 JSC::ScopeChainNode* JSC::ExecState::scopeChain() const)

Probably a duplicate of bug 40874, even though that one is on PowerPC.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.