[Webkit-unassigned] [Bug 97328] REGRESSION (r128400): Opening Google Web Fonts page hangs or crashes

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=97328


Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|unable to open google       |REGRESSION (r128400):
                   |webfonts in SnowLeopard     |Opening Google Web Fonts
                   |                            |page hangs or crashes
             Status|UNCONFIRMED                 |NEW
           Keywords|                            |Regression
           Priority|P2                          |P1
          Component|New Bugs                    |JavaScriptCore
                 CC|                            |fpizlo at apple.com
     Ever Confirmed|0                           |1




--- Comment #1 from Alexey Proskuryakov <ap at webkit.org>  2012-09-21 09:23:21 PST ---
I can reproduce on 10.8. I'm getting either a hang or a crash, seemingly randomly:

r128267 works
r128393 works
r128397 works
r128399 works
r128400 hang
r128403 crash
r128413 hang
r128434 crash
r128479 hang
r128602 crash

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore          0x00000001024b4a1b JSC::JSObject::putByIndexBeyondVectorLengthWithArrayStorage(JSC::ExecState*, unsigned int, JSC::JSValue, bool, JSC::ArrayStorage*) + 635
1   com.apple.JavaScriptCore          0x00000001024b1467 JSC::JSObject::putByIndex(JSC::JSCell*, JSC::ExecState*, unsigned int, JSC::JSValue, bool) + 215
2   com.apple.JavaScriptCore          0x000000010241ace2 operationPutByValBeyondArrayBoundsNonStrict + 82
3   ???                               0x0000592ac968966a 0 + 98040302573162
4   com.apple.JavaScriptCore          0x000000010248475a JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::JSObject*) + 3482

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.