[Webkit-unassigned] [Bug 114328] REGRESSION (r148032-r148044): Reproducible crash in JSC::JSObject

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Apr 10 15:41:18 PDT 2013


https://bugs.webkit.org/show_bug.cgi?id=114328


Mark Hahnenberg <mhahnenberg at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED




--- Comment #10 from Mark Hahnenberg <mhahnenberg at apple.com>  2013-04-10 15:39:33 PST ---
(In reply to comment #9)
> Mark, is <http://trac.webkit.org/changeset/148142> expected to fix this too?

I believe it should. I tested with and without the patch using Kevin's repro steps and it no longer crashes with the fix.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list