[Webkit-unassigned] [Bug 66010] REGRESSION(r92670-r92744): WebKit crashes when opening Gmail

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=66010





--- Comment #2 from Ryosuke Niwa <rniwa at webkit.org>  2011-08-10 14:10:00 PST ---
Stack trace:

Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore          0x00000001007daec5 JSC::DFG::JITCompiler::jumpFromSpeculativeToNonSpeculative(JSC::DFG::SpeculationCheck const&, JSC::DFG::EntryLocation const&, JSC::DFG::SpeculationRecovery*, JSC::DFG::NodeToRegisterMap&, JSC::DFG::NodeToRegisterMap&) + 5909
1   com.apple.JavaScriptCore          0x00000001007dc25a JSC::DFG::JITCompiler::linkSpeculationChecks(JSC::DFG::SpeculativeJIT&, JSC::DFG::NonSpeculativeJIT&) + 282
2   com.apple.JavaScriptCore          0x00000001007dcc87 JSC::DFG::JITCompiler::compileBody() + 2359
3   com.apple.JavaScriptCore          0x00000001007ddf04 JSC::DFG::JITCompiler::compileFunction(JSC::JITCode&, JSC::MacroAssemblerCodePtr&) + 788
4   com.apple.JavaScriptCore          0x0000000100817241 JSC::FunctionExecutable::compileForCallInternal(JSC::ExecState*, JSC::ScopeChainNode*, JSC::ExecState*) + 2193
5   com.apple.JavaScriptCore          0x00000001008324db JSC::Interpreter::prepareForRepeatCall(JSC::FunctionExecutable*, JSC::ExecState*, JSC::JSFunction*, int, JSC::ScopeChainNode*) + 523
6   com.apple.JavaScriptCore          0x000000010078a1af JSC::arrayProtoFuncForEach(JSC::ExecState*) + 2831
7   ???                               0x00003b3019e011e8 0 + 65077778584040
8   com.apple.JavaScriptCore          0x0000000100831245 JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::ScopeChainNode*, JSC::JSObject*) + 1573
9   ???                               0x0000000106f357a0 0 + 4411578272

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.