[Webkit-unassigned] [Bug 73886] REGRESSION(r101863-r102042): Assertion hit: m_verifier.isSafeToUse() in RefCountedBase::ref in FunctionCodeBlock

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=73886





--- Comment #5 from Ryosuke Niwa <rniwa at webkit.org>  2011-12-05 19:51:36 PST ---
com.apple.main-thread:
#0    0x1025dbefa in WebCore::JSNode::getOwnPropertySlot at JSNode.h:81
#1    0x1026cb777 in JSC::getStaticValueSlot<WebCore::JSElement, WebCore::JSNode> at Lookup.h:346
#2    0x1026cb8e7 in WebCore::JSElement::getOwnPropertySlot at JSElement.h:69
#3    0x1027254d3 in JSC::getStaticValueSlot<WebCore::JSHTMLElement, WebCore::JSElement> at Lookup.h:346
#4    0x10272485f in WebCore::JSHTMLElement::getOwnPropertySlot at JSHTMLElement.cpp:213
#5    0x10271e7c1 in JSC::getStaticValueSlot<WebCore::JSHTMLDivElement, WebCore::JSHTMLElement> at Lookup.h:346
#6    0x10271dc6d in WebCore::JSHTMLDivElement::getOwnPropertySlot at JSHTMLDivElement.cpp:148
#7    0x1000f46c8 in JSC::JSCell::fastGetOwnPropertySlot at JSObject.h:562
#8    0x1000f4889 in JSC::JSValue::get at JSObject.h:796
#9    0x1000b06e4 in operationGetById at DFGOperations.cpp:338
#10    0x56fc8d9b986a in ??
#11    0x1000f41a0 in JSC::JITCode::execute at JITCode.h:115
#12    0x1000ea0ca in JSC::Interpreter::executeCall at Interpreter.cpp:1075
#13    0x100062787 in JSC::call at CallData.cpp:39
#14    0x1026045dc in WebCore::JSMainThreadExecState::call at JSMainThreadExecState.h:52
#15    0x1026def8d in WebCore::JSEventListener::handleEvent at JSEventListener.cpp:124
#16    0x10231651a in WebCore::EventTarget::fireEventListeners at EventTarget.cpp:228
#17    0x102316a60 in WebCore::EventTarget::fireEventListeners at EventTarget.cpp:197
#18    0x102a44b61 in WebCore::Node::handleLocalEvents at Node.cpp:2842
#19    0x1022f80cc in WebCore::EventContext::handleLocalEvents at EventContext.cpp:48
#20    0x1022f9862 in WebCore::EventDispatcher::dispatchEvent at EventDispatcher.cpp:329
#21    0x102a30729 in WebCore::MouseEventDispatchMediator::dispatchEvent at MouseEvent.cpp:207
#22    0x1022f8b17 in WebCore::EventDispatcher::dispatchEvent at EventDispatcher.cpp:55
#23    0x102a44777 in WebCore::Node::dispatchMouseEvent at Node.cpp:2904
#24    0x102302c7d in WebCore::EventHandler::updateMouseEventTargetNode at EventHandler.cpp:2050
#25    0x102302dc8 in WebCore::EventHandler::dispatchMouseEvent at EventHandler.cpp:2067
#26    0x102305228 in WebCore::EventHandler::handleMouseMoveEvent at EventHandler.cpp:1675
#27    0x1023052de in WebCore::EventHandler::mouseMoved at EventHandler.cpp:1560
#28    0x10230b2fd in WebCore::EventHandler::mouseMoved at EventHandlerMac.mm:595
#29    0x100bfacf2 in -[WebHTMLView(WebPrivate) _updateMouseoverWithEvent:] at WebHTMLView.mm:1621
#30    0x100be3eaf in -[WebHTMLView mouseMovedNotification:] at WebHTMLView.mm:3711

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.