[Webkit-unassigned] [Bug 98612] REGRESSION (r130584): Crashes in JSC::MarkedAllocator::allocateSlowCase, failing fast/dom/gc-dom-tree-lifetime.html

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=98612





--- Comment #1 from Geoffrey Garen <ggaren at apple.com>  2012-10-07 12:30:21 PST ---
Thanks for filing this, Zan.

The crash at

    <http://build.webkit.org/results/Apple%20MountainLion%20Debug%20WK2%20(Tests)/r130593%20(1942)/svg/custom/use-animation-in-fill-crash-log.txt>

is caused by a missing JSLock in WebCore. I'll start with that. I'm not sure whether the other issues you've mentioned are related.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.