[Webkit-unassigned] [Bug 48311] New: [CRASH] While using the Web Inspector on zimbra.com

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=48311

           Summary: [CRASH] While using the Web Inspector on zimbra.com
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: abarth at webkit.org
                CC: oliver at apple.com


I was enabling resource tracking and clicking around the inspector tabs.  The value of |this| in the top frame is 0x3f00000046.

#0    0x10077eabc in JSC::TypeInfo::type at JSTypeInfo.h:62
#1    0x1007b4f05 in JSC::MarkStack::drain at JSArray.h:247
#2    0x1007aceeb in JSC::Heap::markConservatively at Collector.cpp:688
#3    0x100845405 in JSC::RegisterFile::markGlobals at RegisterFile.h:134
#4    0x1008406d5 in JSC::JSGlobalObject::markChildren at JSGlobalObject.cpp:354
#5    0x101b261b8 in WebCore::JSDOMGlobalObject::markChildren at JSDOMGlobalObject.cpp:52
#6    0x101b59d5d in WebCore::JSDOMWindow::markChildren at JSDOMWindowCustom.cpp:97
#7    0x1007b4cdc in JSC::MarkStack::markChildren at JSArray.h:220
#8    0x1007b4fd7 in JSC::MarkStack::drain at JSArray.h:261
#9    0x1007aceeb in JSC::Heap::markConservatively at Collector.cpp:688
#10    0x1007ad232 in JSC::Heap::markCurrentThreadConservativelyInternal at Collector.cpp:699
#11    0x1007ad26c in JSC::Heap::markCurrentThreadConservatively at Collector.cpp:721
#12    0x1007ad28b in JSC::Heap::markStackObjectsConservatively at Collector.cpp:873
#13    0x1007ad442 in JSC::Heap::markRoots at Collector.cpp:1043
#14    0x1007ae22f in JSC::Heap::reset at Collector.cpp:1179
#15    0x1007ae57c in JSC::Heap::allocate at Collector.cpp:344
#16    0x10078e092 in JSC::JSCell::operator new at JSCell.h:177
#17    0x100813b2a in cti_op_push_activation at JITStubs.cpp:2166
#18    0x10080bb11 in WTF::doubleHash at HashTable.h:447
#19    0x1007ea5c6 in JSC::JITCode::execute at JITCode.h:77
#20    0x1007e5916 in JSC::Interpreter::executeCall at Interpreter.cpp:825
#21    0x10079cdf3 in JSC::call at CallData.cpp:38
#22    0x101ad0df5 in WebCore::JSMainThreadExecState::call at JSMainThreadExecState.h:48
#23    0x101b6d396 in WebCore::JSEventListener::handleEvent at JSEventListener.cpp:124
#24    0x10181fbcc in WebCore::EventTarget::fireEventListeners at EventTarget.cpp:335
#25    0x101820236 in WebCore::EventTarget::fireEventListeners at EventTarget.cpp:304
#26    0x101dc3573 in WebCore::Node::handleLocalEvents at Node.cpp:2484
#27    0x101dc3c1f in WebCore::Node::dispatchGenericEvent at Node.cpp:2602
#28    0x101dc40cd in WebCore::Node::dispatchEvent at Node.cpp:2547
#29    0x101985d9e in WebCore::HTMLScriptElement::dispatchLoadEvent at HTMLScriptElement.cpp:189
#30    0x101fc0842 in WebCore::ScriptElementData::execute at ScriptElement.cpp:223
#31    0x101506ede in WebCore::AsyncScriptRunner::timerFired at AsyncScriptRunner.cpp:87
#32    0x1015075c3 in WebCore::Timer<WebCore::AsyncScriptRunner>::fired at Timer.h:98
#33    0x10212ee56 in WebCore::ThreadTimers::sharedTimerFiredInternal at ThreadTimers.cpp:112
#34    0x10212efe5 in WebCore::ThreadTimers::sharedTimerFired at ThreadTimers.cpp:90
#35    0x10200000b in WebCore::timerFired at SharedTimerMac.mm:166
#36    0x7fff800aa678 in __CFRunLoopRun
#37    0x7fff800a884f in CFRunLoopRunSpecific
#38    0x7fff815ed91a in RunCurrentEventLoopInMode
#39    0x7fff815ed71f in ReceiveNextEventCommon
#40    0x7fff815ed5d8 in BlockUntilNextEventMatchingListInMode
#41    0x7fff869c229e in _DPSNextEvent
#42    0x7fff869c1bed in -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:]
#43    0x1000165d8 in ??
#44    0x7fff869878d3 in -[NSApplication run]
#45    0x7fff869805f8 in NSApplicationMain
#46    0x10000a4a4 in ??

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.