[Webkit-unassigned] [Bug 48485] Crash in Function.prototype.call.apply

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=48485


Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |NeedsRadar, Regression
           Priority|P2                          |P1
                 CC|                            |ap at webkit.org,
                   |                            |ggaren at apple.com,
                   |                            |oliver at apple.com




--- Comment #1 from Alexey Proskuryakov <ap at webkit.org>  2010-10-27 21:51:03 PST ---
Confirmed with a local debug build of r70400.

#0    0x101ccc9d0 in WTF::RefPtr<JSC::JSGlobalData>::get at RefPtr.h:59
#1    0x101d6cc95 in JSC::JSGlobalObject::globalData at JSGlobalObject.h:279
#2    0x101ce66e9 in JSC::Parser::parse<JSC::FunctionBodyNode> at Parser.h:87
#3    0x101cdee51 in JSC::FunctionExecutable::compileForCallInternal at Executable.cpp:181
#4    0x101c78d00 in JSC::FunctionExecutable::compileForCall at Executable.h:315
#5    0x101cf1bae in JSC::Interpreter::executeCall at Interpreter.cpp:795
#6    0x101ca909f in JSC::call at CallData.cpp:38
#7    0x101ceb580 in JSC::functionProtoFuncCall at FunctionPrototype.cpp:147
#8    0x5711998001aa in ??
#9    0x101cf6a86 in JSC::JITCode::execute at JITCode.h:77
#10    0x101cf2bf1 in JSC::Interpreter::execute at Interpreter.cpp:746
#11    0x101cc26c7 in JSC::evaluate at Completion.cpp:63
#12    0x10310b4a0 in WebCore::JSMainThreadExecState::evaluate at JSMainThreadExecState.h:54

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.