[Webkit-unassigned] [Bug 139856] AX: Hidden aria table crash

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=139856

Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ap at webkit.org

--- Comment #5 from Alexey Proskuryakov <ap at webkit.org> ---
A test added in r177824 crashes on Mac with a RELEASE_ASSERT: https://build.webkit.org/results/Apple%20Yosemite%20Release%20WK2%20(Tests)/r177825%20(1624)/plugins/large-plugin-crash-crash-log.txt

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore          0x000000010867bc32 bmalloc::Heap::allocateXLarge(std::__1::lock_guard<bmalloc::StaticMutex>&, unsigned long) + 98
1   com.apple.JavaScriptCore          0x000000010867a7e7 bmalloc::Allocator::allocateXLarge(unsigned long) + 71
2   com.apple.JavaScriptCore          0x000000010865a537 WTF::fastMalloc(unsigned long) + 151
3   com.apple.JavaScriptCore          0x000000010865a5b1 WTF::tryFastMalloc(unsigned long) + 17

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20141230/1f7b276b/attachment-0002.html>