[Webkit-unassigned] [Bug 112954] REGRESSION: Crash under createNotAnObjectError visiting SES test page

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=112954


Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Crashing bug visiting SES   |REGRESSION: Crash under
                   |test page                   |createNotAnObjectError
                   |                            |visiting SES test page
                 CC|                            |ap at webkit.org,
                   |                            |fpizlo at apple.com,
                   |                            |ggaren at apple.com,
                   |                            |oliver at apple.com




--- Comment #1 from Alexey Proskuryakov <ap at webkit.org>  2013-03-22 15:53:46 PST ---
0   com.apple.JavaScriptCore          0x0000000108f91ad5 JSC::JSCell::toPrimitive(JSC::ExecState*, JSC::PreferredPrimitiveType) const + 21
1   com.apple.JavaScriptCore          0x0000000108f928d6 JSC::JSValue::toStringSlowCase(JSC::ExecState*) const + 886
2   com.apple.JavaScriptCore          0x0000000108dfc049 JSC::createNotAnObjectError(JSC::ExecState*, JSC::JSValue) + 57
3   com.apple.JavaScriptCore          0x0000000108df9854 JSC::JSValue::synthesizePrototype(JSC::ExecState*) const + 132
4   com.apple.JavaScriptCore          0x0000000108e55795 JSC::JSValue::get(JSC::ExecState*, JSC::PropertyName, JSC::PropertySlot&) const + 53
5   com.apple.JavaScriptCore          0x0000000108de0910 cti_op_get_by_id_generic + 80

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.