[Webkit-unassigned] [Bug 75388] New: Crash in JSC::JSValue::get(JSC::ExecState*, unsigned int, JSC::PropertySlot&)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=75388

           Summary: Crash in JSC::JSValue::get(JSC::ExecState*, unsigned
                    int, JSC::PropertySlot&)
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh Intel
               URL: https://my.withings.com/en/
        OS/Version: Mac OS X 10.7
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: rex_4539 at yahoo.com


Created an attachment (id=120803)
 --> (https://bugs.webkit.org/attachment.cgi?id=120803&action=review)
Crash log.

r103834

Reproducibility: always

Pre-steps:
Create a free account at https://my.withings.com/en/

Steps:
https://my.withings.com/en/

What happened:
Crash while the graphs are loading.

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore          0x00000001041f29bf JSC::JSValue::get(JSC::ExecState*, unsigned int, JSC::PropertySlot&) const + 127
1   com.apple.JavaScriptCore          0x000000010425e304 cti_op_get_by_val + 708
2   ???                               0x00002e0517fb5966 0 + 50599412062566
3   com.apple.JavaScriptCore          0x0000000104222c80 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 912
4   com.apple.JavaScriptCore          0x00000001041c749a JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 42
5   com.apple.WebCore                 0x00000001049e7731 WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext*, WebCore::Event*) + 881
6   com.apple.WebCore                 0x00000001047315d5 WebCore::EventTarget::fireEventListeners(WebCore::Event*, WebCore::EventTargetData*, WTF::Vector<WebCore::RegisteredEventListener, 1ul>&) + 213
7   com.apple.WebCore                 0x000000010473146d WebCore::EventTarget::dispatchEvent(WTF::PassRefPtr<WebCore::Event>) + 141
8   com.apple.WebCore                 0x0000000104f4856d WebCore::XMLHttpRequestProgressEventThrottle::dispatchEvent(WTF::PassRefPtr<WebCore::Event>, WebCore::ProgressEventAction) + 61
9   com.apple.WebCore                 0x0000000104f43f53 WebCore::XMLHttpRequest::callReadyStateChangeListener() + 339
10  com.apple.WebCore                 0x0000000104f477a7 WebCore::XMLHttpRequest::didFinishLoading(unsigned long, double) + 407
11  com.apple.WebCore                 0x000000010464696a WebCore::DocumentThreadableLoader::notifyFinished(WebCore::CachedResource*) + 426
12  com.apple.WebCore                 0x000000010451845c WebCore::CachedResource::checkNotify() + 92
13  com.apple.WebCore                 0x00000001045177f8 WebCore::CachedRawResource::data(WTF::PassRefPtr<WebCore::SharedBuffer>, bool) + 456
14  com.apple.WebCore                 0x0000000104e01f06 WebCore::SubresourceLoader::didFinishLoading(double) + 150
15  com.apple.Foundation              0x00007fff99a65662 ___NSURLConnectionDidFinishLoading_block_invoke_1 + 122
16  com.apple.Foundation              0x00007fff99a655e2 _NSURLConnectionDidFinishLoading + 81
17  com.apple.CFNetwork               0x00007fff8e1f6c7e URLConnectionClient::_clientDidFinishLoading(URLConnectionClient::ClientConnectionEventQueue*) + 296
18  com.apple.CFNetwork               0x00007fff8e2a6c7e URLConnectionClient::ClientConnectionEventQueue::processAllEventsAndConsumePayload(XConnectionEventInfo<XClientEvent, XClientEventParams>*, long) + 862
19  com.apple.CFNetwork               0x00007fff8e1d1b49 URLConnectionClient::processEvents() + 185
20  com.apple.CFNetwork               0x00007fff8e1d19ee MultiplexerSource::perform() + 212
21  com.apple.CoreFoundation          0x00007fff98994921 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
22  com.apple.CoreFoundation          0x00007fff9899418d __CFRunLoopDoSources0 + 253
23  com.apple.CoreFoundation          0x00007fff989baf79 __CFRunLoopRun + 905
24  com.apple.CoreFoundation          0x00007fff989ba8b6 CFRunLoopRunSpecific + 230
25  com.apple.HIToolbox               0x00007fff8f97731f RunCurrentEventLoopInMode + 277
26  com.apple.HIToolbox               0x00007fff8f97e5c9 ReceiveNextEventCommon + 355
27  com.apple.HIToolbox               0x00007fff8f97e456 BlockUntilNextEventMatchingListInMode + 62
28  com.apple.AppKit                  0x00007fff90262ef9 _DPSNextEvent + 659
29  com.apple.AppKit                  0x00007fff902627fd -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 135
30  com.apple.AppKit                  0x00007fff9025f139 -[NSApplication run] + 470
31  com.apple.WebKit2                 0x0000000103eb4f89 RunLoop::run() + 67
32  com.apple.WebKit2                 0x0000000103efd855 WebKit::WebProcessMain(WebKit::CommandLine const&) + 673
33  com.apple.WebKit2                 0x0000000103ecf909 WebKitMain + 285
34  com.apple.WebProcess              0x0000000103e60e5f main + 219
35  com.apple.WebProcess              0x0000000103e60d7c start + 52

Expected result:
WebKit does not crash.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.