[Webkit-unassigned] [Bug 40858] Reproducible crash in com.apple.JavaScriptCore 0x005d7164 JSC::JSObject::defaultValue(JSC::ExecState*, JSC::PreferredPrimitiveType) const + 1764

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=40858


Oliver Hunt <oliver at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #59201|                            |review?
               Flag|                            |




--- Comment #15 from Oliver Hunt <oliver at apple.com>  2010-06-20 11:15:40 PST ---
Created an attachment (id=59201)
 --> (https://bugs.webkit.org/attachment.cgi?id=59201)
Patch

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.