[Webkit-unassigned] [Bug 87183] Web Inspector: CodeGeneratorInspector.py: protect typed API from C++ implicit float to int cast

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue May 29 14:15:04 PDT 2012


https://bugs.webkit.org/show_bug.cgi?id=87183





--- Comment #19 from Peter Rybin <prybin at chromium.org>  2012-05-29 14:15:03 PST ---
I looked further and found more: in various builds the crash is reported at different methods (but all crashes within one build point to the method).

The method is always called "setName" and is from types called Builder<int i>. Line is always "inspectortypebuilder.h @ 625", which corresponds to Memory::MemoryBlock::Builder (coincidentally a first method "setName" in InspectorTypeBuilder.h source file).

Here's a table of method changes with build:
r118742   Database::Database::Builder<3>::setName
r118747   Database::Database::Builder<3>::setName
r118801   Memory::MemoryBlock::Builder<0>::setName
r118804   Database::Database::Builder<3>::setName
r118806   Database::Database::Builder<3>::setName
r118809   CSS::CSSProperty::Builder<0>::setName

This looks as if each the method changes chaotically with any change to build offsets.

Still it doesn't explain why it crashes.

Here's a snippet from the call site:

    m_frontend->isolatedContextCreated(ExecutionContextDescription::create()
        .setId(static_cast<int>(executionContextId))  <<<***** a changed line
        .setIsPageContext(isPageContext)
        .setName(name)
        .setFrameId(frameId)
        .release());

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list