[Webkit-unassigned] [Bug 120077] New: Crash on page load unless Web Inspector is open

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=120077

           Summary: Crash on page load unless Web Inspector is open
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh Intel
               URL: http://nodejs.org/api/child_process.html
        OS/Version: Mac OS X 10.8
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P1
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: jason at jasonrm.net


WebKit r154332

# Steps to reproduce crash
1. Open WebKit to any page
2. Navigate to http://nodejs.org/api/child_process.html

# Steps to avoid crash
1. Open WebKit to any page
2. Show Web Inspector
3. Navigate to http://nodejs.org/api/child_process.html

# Two full crash logs
https://gist.github.com/jasonrm/6285684

# Excerpt of crashed thread
Thread 14 Crashed:: JSC Compilation Thread
0   com.apple.JavaScriptCore          0x0000000108a445ac WTFCrash + 76
1   com.apple.JavaScriptCore          0x0000000108750029 WTF::CrashOnOverflow::overflowed() + 9
2   com.apple.JavaScriptCore          0x00000001087f7af6 JSC::DFG::JITCompiler::link(JSC::LinkBuffer&) + 4870
3   com.apple.JavaScriptCore          0x00000001087f8680 JSC::DFG::JITCompiler::linkFunction() + 240
4   com.apple.JavaScriptCore          0x000000010880992a JSC::DFG::Plan::compileInThreadImpl(JSC::DFG::LongLivedState&) + 938
5   com.apple.JavaScriptCore          0x00000001088093f4 JSC::DFG::Plan::compileInThread(JSC::DFG::LongLivedState&) + 228
6   com.apple.JavaScriptCore          0x000000010887e33b JSC::DFG::Worklist::runThread() + 251
7   com.apple.JavaScriptCore          0x0000000108a716af WTF::wtfThreadEntryPoint(void*) + 15
8   libsystem_c.dylib                 0x00007fff83e6b7a2 _pthread_start + 327
9   libsystem_c.dylib                 0x00007fff83e581e1 thread_start + 13

Thread 14 crashed with X86 Thread State (64-bit):
  rax: 0x00000000bbadbeef  rbx: 0x0000000000000002  rcx: 0x0000000110a4dc50  rdx: 0x00007fff72d9b9d0
  rdi: 0x0000000000000000  rsi: 0x0000080000000800  rbp: 0x0000000110a4e4e0  rsp: 0x0000000110a4e3d0
   r8: 0x0000000000002060   r9: 0x0000000110a4dc50  r10: 0x0000000000000008  r11: 0x0000000000000246
  r12: 0x000000010fda11a4  r13: 0x0000000110a4e620  r14: 0x00000000ffffffff  r15: 0x000000010fda1198
  rip: 0x0000000108a445ac  rfl: 0x0000000000010202  cr2: 0x00000000bbadbeef
Logical CPU: 1

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.