[Webkit-unassigned] [Bug 96184] [GTK][Stable] Crash in JSC::DFG::SpeculativeJIT::speculateArray(JSC::DFG::Array::Mode, JSC::DFG::Edge, JSC::X86Registers::RegisterID)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=96184





--- Comment #8 from Nick Heer <nick at nickheer.com>  2013-05-29 10:45:13 PST ---
Created an attachment (id=203214)
 --> (https://bugs.webkit.org/attachment.cgi?id=203214&action=review)
Crash log

I'm seeing this on almost all Blogspot domains. Crash log attached.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.