[Webkit-unassigned] [Bug 48178] New: ASSERT running the fast/js/kde tests in a row
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Sat Oct 23 03:22:16 PDT 2010
https://bugs.webkit.org/show_bug.cgi?id=48178
Summary: ASSERT running the fast/js/kde tests in a row
Product: WebKit
Version: 528+ (Nightly build)
Platform: PC
OS/Version: Mac OS X 10.5
Status: NEW
Severity: Normal
Priority: P2
Component: JavaScriptCore
AssignedTo: webkit-unassigned at lists.webkit.org
ReportedBy: xan.lopez at gmail.com
CC: oliver at apple.com
When running all the tests in fast/js/kde, I get an ASSERT right after function-length.html is finished, so I believe the crash comes from garbage-n.html.
SHOULD NEVER BE REACHED
(../../JavaScriptCore/runtime/JSCell.cpp:195 virtual bool JSC::JSCell::toBoolean(JSC::ExecState*) const)
Program received signal SIGSEGV, Segmentation fault.
0x01248961 in JSC::JSCell::toBoolean (this=0xb6756580) at ../../JavaScriptCore/runtime/JSCell.cpp:195
195 ASSERT_NOT_REACHED();
(gdb) bt
#0 0x01248961 in JSC::JSCell::toBoolean (this=0xb6756580) at ../../JavaScriptCore/runtime/JSCell.cpp:195
#1 0x004c3f36 in JSC::JSValue::toBoolean (this=0xbfffd4d4, exec=0xb6200038) at ../../JavaScriptCore/runtime/JSCell.h:296
#2 0x011cce00 in JSC::cti_op_jtrue (args=0xbfffd500) at ../../JavaScriptCore/jit/JITStubs.cpp:2878
#3 0x011c431a in JSC::JITThunks::tryCacheGetByID (callFrame=0xb6756580, codeBlock=0xfffffffe, returnAddress=..., baseValue=..., propertyName=...,
slot=..., stubInfo=0xbfffd55c) at ../../JavaScriptCore/jit/JITStubs.cpp:999
#4 0x00000000 in ?? ()
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list