[Webkit-unassigned] [Bug 92397] Crash in JSWeakObjectMapGet called from Safari::JSWrapper::disconnectAllWrappers

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Aug 9 13:55:21 PDT 2012


https://bugs.webkit.org/show_bug.cgi?id=92397





--- Comment #14 from Fabian Mailinator <fabian at mailinator.com>  2012-08-09 13:55:46 PST ---
Here is a 1-click reduction of the bug:

Using webkit version 6.0 (7536.25, 537+)

In safari->preferences->tabs set the top checkbox so that
 "command-click opens a link in a new tab"

now hold down the command key and click the following link:

   http://mashable.com/2012/08/09/mars-rover-landing-stats/

your browser should crash.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list