[Webkit-unassigned] [Bug 112263] New: Crash in JSC::CodeCacheMap::pruneSlowCase() running svg/css/scientific-numbers.html
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Wed Mar 13 09:09:54 PDT 2013
https://bugs.webkit.org/show_bug.cgi?id=112263
Summary: Crash in JSC::CodeCacheMap::pruneSlowCase() running
svg/css/scientific-numbers.html
Product: WebKit
Version: 528+ (Nightly build)
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: Normal
Priority: P2
Component: JavaScriptCore
AssignedTo: webkit-unassigned at lists.webkit.org
ReportedBy: simon.fraser at apple.com
CC: fpizlo at apple.com
http://build.webkit.org/results/Apple%20Lion%20Release%20WK2%20(Tests)/r145717%20(8825)/svg/css/scientific-numbers-crash-log.txt
Exception Type: EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x000000000000000c
VM Regions Near 0xc:
-->
__TEXT 000000010091a000-000000010091d000 [ 12K] r-x/rwx SM=COW /Volumes/VOLUME/*/WebKit2.framework/WebProcess.app/Contents/MacOS/WebProcess
Application Specific Information:
objc[63762]: garbage collection is OFF
CRASHING TEST: svg/css/scientific-numbers.html
Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0 com.apple.JavaScriptCore 0x000000010115c5dc JSC::CodeCacheMap::pruneSlowCase() + 140 (SourceCode.h:89)
1 com.apple.JavaScriptCore 0x000000010115daf1 JSC::CodeCacheMap::add(JSC::SourceCodeKey const&, JSC::SourceCodeValue const&) + 81 (HashMap.h:336)
2 com.apple.JavaScriptCore 0x000000010115cc97 JSC::UnlinkedProgramCodeBlock* JSC::CodeCache::getCodeBlock<JSC::UnlinkedProgramCodeBlock, JSC::ProgramExecutable>(JSC::JSGlobalData&, JSC::JSScope*, JSC::ProgramExecutable*, JSC::SourceCode const&, JSC::JSParserStrictness, JSC::DebuggerMode, JSC::ProfilerMode, JSC::ParserError&) + 151 (Handle.h:59)
3 com.apple.JavaScriptCore 0x000000010115c6f4 JSC::CodeCache::getProgramCodeBlock(JSC::JSGlobalData&, JSC::ProgramExecutable*, JSC::SourceCode const&, JSC::JSParserStrictness, JSC::DebuggerMode, JSC::ProfilerMode, JSC::ParserError&) + 52 (CodeCache.cpp:119)
4 com.apple.JavaScriptCore 0x00000001012bc4aa JSC::JSGlobalObject::createProgramCodeBlock(JSC::ExecState*, JSC::ProgramExecutable*, JSC::JSObject**) + 154 (JSGlobalObject.cpp:607)
5 com.apple.JavaScriptCore 0x000000010122cda3 JSC::ProgramExecutable::initializeGlobalProperties(JSC::JSGlobalData&, JSC::ExecState*, JSC::JSScope*) + 131 (Executable.cpp:384)
6 com.apple.JavaScriptCore 0x000000010123f89e JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::JSObject*) + 3758 (Interpreter.cpp:959)
7 com.apple.JavaScriptCore 0x0000000101162fcb JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&, JSC::JSValue, JSC::JSValue*) + 619 (Completion.cpp:75)
8 com.apple.WebCore 0x00000001021ee9ba WebCore::ScriptController::evaluateInWorld(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld*) + 442 (JSMainThreadExecState.h:77)
9 com.apple.WebCore 0x00000001021eeb49 WebCore::ScriptController::evaluate(WebCore::ScriptSourceCode const&) + 41 (ScriptController.cpp:158)
10 com.apple.WebCore 0x00000001021f7e04 WebCore::ScriptElement::executeScript(WebCore::ScriptSourceCode const&) + 500 (ScriptValue.h:52)
11 com.apple.WebCore 0x00000001021f8126 WebCore::ScriptElement::execute(WebCore::CachedScript*) + 86 (ScriptSourceCode.h:44)
12 com.apple.WebCore 0x00000001021feba6 WebCore::ScriptRunner::timerFired(WebCore::Timer<WebCore::ScriptRunner>*) + 454 (ScriptRunner.cpp:122)
13 com.apple.WebCore 0x00000001023b224f WebCore::ThreadTimers::sharedTimerFiredInternal() + 175 (ThreadTimers.cpp:132)
14 com.apple.WebCore 0x0000000102244143 _ZN7WebCoreL10timerFiredEP16__CFRunLoopTimerPv + 51 (SharedTimerMac.mm:166)
15 com.apple.CoreFoundation 0x00007fff98a02934 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list