[Webkit-unassigned] [Bug 40875] segfault from invalid write in JSC::JIT::unlinkCall

Sun Jun 20 23:40:40 PDT 2010

https://bugs.webkit.org/show_bug.cgi?id=40875

Zoltan Herczeg <zherczeg at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |zherczeg at webkit.org

--- Comment #3 from Zoltan Herczeg <zherczeg at webkit.org>  2010-06-20 23:40:39 PST ---
I have checked your log, and it says:

Invalid write of size 8
   - blah blah
Address 0x1fd44f16 is not stack'd, malloc'd or (recently) free'd

Thus, the pointer contains an invalid value, instead of pointing a free memory chunk.

Similar to what they say for gsplice in the original bug, it is likely that something override the memory, and unrealted to both gsplice and unlinkCall.

You should also know, that Valigrind and JIT compilers don't like each other  (at least none of the 3 compilers I used before), so the vg crash can even be unrelated to your bug.

Ok, you're next question is probably how to proceed... I would give a shot to compile webkit with interpreter, and see the error still persists. Depending on your answer, we can decide what to do. It will probably be a difficult bug, and will take time. I will try to help you even if the bug is unrelated to webkit.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.