[Webkit-unassigned] [Bug 106329] REGRESSION (r138921): Crash in JSC::Arguments::create

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=106329


Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|REGRESSION                  |REGRESSION (r138921): Crash
                   |(r138892-r139024): Crash in |in JSC::Arguments::create
                   |JSC::Arguments::create      |
             Status|UNCONFIRMED                 |NEW
                 CC|                            |fpizlo at apple.com
     Ever Confirmed|0                           |1




--- Comment #1 from Alexey Proskuryakov <ap at webkit.org>  2013-01-08 10:21:57 PST ---
For me, this is a little tricky to reproduce - sometimes, I have to click multiple thumbnails before crashing. But it looks like this started with <http://trac.webkit.org/changeset/138921>.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.