[Webkit-unassigned] [Bug 77146] REGRESSION (r105576-r105582): Web Inspector Crash in JSC::JSValue::toString(JSC::ExecState*) const

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=77146





--- Comment #15 from Filip Pizlo <fpizlo at apple.com>  2012-01-29 18:42:49 PST ---
(In reply to comment #11)
> (In reply to comment #7)
> > 1) debug build or release build, or both?
> > 
> > 2) does it still happen in tip of tree, or is r105582 the latest revision you tested?
> > 
> > 3) do you know for sure that it works prior to r105576?
> 
> 
> 1) nightlies only
> 
> 2) It happens 105582 forward to latest with random spot checks inbetween as I was narrowing that gap on when it started crashing.
> 
> 3) Yes, in the few versions I tried when finding the range. I feel like good old Conflict Catcher when finding the range.

Hey Kevin,

I think I fixed it.  I was only ever able to repro on macworld.com.  With this fix, I can't repro at all.  But please do reopen this bug if you still see this crash, since it's possible that the other scenarios you were pointing to (amazon.com, etc) are actually due to different bugs.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.