[Webkit-unassigned] [Bug 35730] New: Crashes after delete Array.prototype

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=35730

           Summary: Crashes after delete Array.prototype
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh Intel
               URL: http://lib.programica.ru/lib/tests/crash-safari.html
        OS/Version: Mac OS X 10.6
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: gojpeg at gmail.com


This simplified test case crashes Safari 4.0.4 on my old Intel Mac (Core Duo,
iMac 4,1) with all updates installed.
In the latest nightly build all is OK. On a new iMac with Core 2 Duo Safari
does not crash at all ;)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.