[Webkit-unassigned] [Bug 70433] REGRESSION: Crash in JSC::WriteBarrierBase<JSC::Structure>::operator->() due to assert failure

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=70433





--- Comment #2 from Oliver Hunt <oliver at apple.com>  2011-10-19 15:08:26 PST ---
(In reply to comment #1)
> Could be the same as bug 70201.

Seems highly likely.

A quick look in the debugger claims that we're trying to get the default value of a ScopeChainNode which means either a GC bug (so scope chain got allocated in place of an object that should be live) or a jit bug

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.