[Webkit-unassigned] [Bug 77146] New: REGRESSION (r105576-r105582): Web Inspector Crash in JSC::JSValue::toString(JSC::ExecState*) const

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=77146

           Summary: REGRESSION (r105576-r105582): Web Inspector Crash in
                    JSC::JSValue::toString(JSC::ExecState*) const
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh Intel
               URL: http://www.amazon.com/
        OS/Version: Mac OS X 10.7
            Status: UNCONFIRMED
          Severity: Critical
          Priority: P1
         Component: Web Inspector
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: kevin at rhubarbproductions.com


Created an attachment (id=124183)
 --> (https://bugs.webkit.org/attachment.cgi?id=124183&action=review)
Crash Log

Go to Amazon.com. Open Web Inspector. Switch to Resources tab. Crash... or crash if Resources was already selected. Other sites don't crash.


Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore                 0x0000000106ba07f0 JSC::JSValue::toString(JSC::ExecState*) const + 32
1   com.apple.WebCore                 0x0000000107020a74 WebCore::valueToStringWithNullCheck(JSC::ExecState*, JSC::JSValue) + 52
2   com.apple.WebCore                 0x00000001070ed34c WebCore::setJSHTMLImageElementSrc(JSC::ExecState*, JSC::JSObject*, JSC::JSValue) + 28
3   com.apple.WebCore                 0x00000001070edd6b bool JSC::lookupPut<WebCore::JSHTMLImageElement>(JSC::ExecState*, JSC::Identifier const&, JSC::JSValue, JSC::HashTable const*, WebCore::JSHTMLImageElement*, bool) + 251
4   com.apple.WebCore                 0x00000001070ec68e WebCore::JSHTMLImageElement::put(JSC::JSCell*, JSC::ExecState*, JSC::Identifier const&, JSC::JSValue, JSC::PutPropertySlot&) + 62
5   com.apple.JavaScriptCore          0x0000000106928169 cti_op_put_by_id_generic + 137
6   ???                               0x00000001083c61d4 0 + 4433142228
7   com.apple.JavaScriptCore          0x00000001068f82c0 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 912
8   com.apple.JavaScriptCore          0x000000010685ff6a JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 42
9   com.apple.JavaScriptCore          0x000000010693a36e JSC::boundFunctionCall(JSC::ExecState*) + 366
10  ???                               0x00000001083a9218 0 + 4433023512
11  com.apple.JavaScriptCore          0x00000001068f82c0 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 912
12  com.apple.JavaScriptCore          0x000000010685ff6a JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 42
13  com.apple.JavaScriptCore          0x000000010693a36e JSC::boundFunctionCall(JSC::ExecState*) + 366
14  ???                               0x00000001083a9218 0 + 4433023512
15  com.apple.JavaScriptCore          0x00000001068f82c0 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 912
16  com.apple.JavaScriptCore          0x000000010685ff6a JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 42
17  com.apple.WebCore                 0x000000010747d445 WebCore::ScheduledAction::executeFunctionInContext(JSC::JSGlobalObject*, JSC::JSValue, WebCore::ScriptExecutionContext*) + 453
18  com.apple.WebCore                 0x000000010747d00c WebCore::ScheduledAction::execute(WebCore::Document*) + 156
19  com.apple.WebCore                 0x0000000106d80658 WebCore::DOMTimer::fired() + 328
20  com.apple.WebCore                 0x00000001075bf7e4 WebCore::ThreadTimers::sharedTimerFiredInternal() + 148
21  com.apple.WebCore                 0x00000001074b6ae3 _ZN7WebCoreL10timerFiredEP16__CFRunLoopTimerPv + 51
22  com.apple.CoreFoundation          0x00007fff9400df84 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20
23  com.apple.CoreFoundation          0x00007fff9400dad6 __CFRunLoopDoTimer + 534
24  com.apple.CoreFoundation          0x00007fff93fee471 __CFRunLoopRun + 1617
25  com.apple.CoreFoundation          0x00007fff93fedae6 CFRunLoopRunSpecific + 230
26  com.apple.HIToolbox               0x00007fff9816f3d3 RunCurrentEventLoopInMode + 277
27  com.apple.HIToolbox               0x00007fff9817663d ReceiveNextEventCommon + 355
28  com.apple.HIToolbox               0x00007fff981764ca BlockUntilNextEventMatchingListInMode + 62
29  com.apple.AppKit                  0x00007fff902fe3f1 _DPSNextEvent + 659
30  com.apple.AppKit                  0x00007fff902fdcf5 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 135
31  com.apple.AppKit                  0x00007fff902fa62d -[NSApplication run] + 470
32  com.apple.WebCore                 0x000000010747832f WebCore::RunLoop::run() + 63
33  com.apple.WebKit2                 0x00000001066077f0 WebKit::WebProcessMain(WebKit::CommandLine const&) + 2538
34  com.apple.WebKit2                 0x00000001065be55b WebKitMain + 285
35  com.apple.WebProcess              0x00000001064f1e5f main + 219
36  com.apple.WebProcess              0x00000001064f1d7c start + 52

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.