[Webkit-unassigned] [Bug 117011] Nightlies crashing (memory smasher?)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=117011


Ricci Adams <webkit.org at ricciadams.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Nightlies crashing in       |Nightlies crashing (memory
                   |JSC::CodeBlock::visitAggreg |smasher?)
                   |ate()                       |




--- Comment #2 from Ricci Adams <webkit.org at ricciadams.com>  2013-05-29 17:29:41 PST ---
Changing title, it's not just in JSC::CodeBlock::visitAggregate() - it's different each time.

Let me know if you need me to turn on any flags.  (Is there a WebKit version of MallocScribble)?

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore          0x000000010b9b8af6 WTF::TCMalloc_Central_FreeList::FetchFromSpans() + 70
1   com.apple.JavaScriptCore          0x000000010b9b6c68 WTF::fastMalloc(unsigned long) + 1720


Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore                 0x000000010666ebb5 WebCore::ElementRuleCollector::ruleMatches(WebCore::RuleData const&, WebCore::ContainerNode const*, WebCore::PseudoId&) + 309
1   com.apple.WebCore                 0x000000010666e145 void WebCore::ElementRuleCollector::doCollectMatchingRulesForList<false>(WTF::Vector<WebCore::RuleData, 0ul, WTF::CrashOnOverflow> const*, WebCore::MatchRequest const&, WebCore::StyleResolver::RuleRange&) + 293


Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore          0x0000000107c487a2 JSC::StructureStubInfo::visitWeakReferences() + 274
1   com.apple.JavaScriptCore          0x0000000107a063b4 JSC::CodeBlock::finalizeUnconditionally() + 2980
2   com.apple.JavaScriptCore          0x0000000107c35899 JSC::SlotVisitor::finalizeUnconditionalFinalizers() + 57
3   com.apple.JavaScriptCore          0x0000000107add527 JSC::Heap::collect(JSC::Heap::SweepToggle) + 343

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.