[Webkit-unassigned] [Bug 131919] New: REGRESSION (r167530?): js/dom/JSON-stringify.html is frequently crashing

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=131919

           Summary: REGRESSION (r167530?): js/dom/JSON-stringify.html is
                    frequently crashing
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ap at webkit.org
                CC: timothy at apple.com, ggaren at apple.com


js/dom/JSON-stringify.html started to ASSERT very frequently after <http://trac.webkit.org/r167530>:

0   com.apple.JavaScriptCore          0x000000010abc44ea WTFCrash + 42 (Assertions.cpp:333)
1   com.apple.JavaScriptCore          0x000000010aadb068 JSC::ProfileNode::stopProfiling() + 360 (ProfileNode.cpp:133)
2   com.apple.JavaScriptCore          0x000000010aad46d8 JSC::Profile::forEach(void (JSC::ProfileNode::*)()) + 328 (Profile.cpp:65)
3   com.apple.JavaScriptCore          0x000000010aad958a JSC::ProfileGenerator::stopProfiling() + 74 (ProfileGenerator.cpp:162)
4   com.apple.JavaScriptCore          0x000000010a993c5d JSC::LegacyProfiler::stopProfiling(JSC::JSGlobalObject*) + 109 (LegacyProfiler.cpp:112)
5   com.apple.JavaScriptCore          0x000000010a8d70f9 JSC::JSGlobalObject::~JSGlobalObject() + 121 (JSGlobalObject.cpp:188)
6   com.apple.WebCore                 0x000000010d4513b5 WebCore::JSDOMGlobalObject::~JSDOMGlobalObject() + 85 (JSDOMGlobalObject.h:43)
7   com.apple.WebCore                 0x000000010d4e7c11 WebCore::JSDOMWindowBase::~JSDOMWindowBase() + 49 (JSDOMWindowBase.h:37)
8   com.apple.WebCore                 0x000000010d4e4615 WebCore::JSDOMWindowBase::~JSDOMWindowBase() + 21 (JSDOMWindowBase.h:37)
9   com.apple.WebCore                 0x000000010d4e3885 WebCore::JSDOMWindowBase::destroy(JSC::JSCell*) + 21 (JSDOMWindowBase.cpp:84)
10  com.apple.JavaScriptCore          0x000000010a7df626 JSC::Heap::FinalizerOwner::finalize(JSC::Handle<JSC::Unknown>, void*) + 70 (Heap.cpp:1309)
11  com.apple.JavaScriptCore          0x000000010ab7f1ed JSC::WeakBlock::finalize(JSC::WeakImpl*) + 189 (WeakSetInlines.h:52)
12  com.apple.JavaScriptCore          0x000000010ab7eb6e JSC::WeakBlock::sweep() + 158 (WeakBlock.cpp:77)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.