[Webkit-unassigned] [Bug 139868] Too large plugins are crashing

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=139868

--- Comment #8 from Alexey Proskuryakov <ap at webkit.org> ---
The new test crashes on Mac with a RELEASE_ASSERT: https://build.webkit.org/results/Apple%20Yosemite%20Release%20WK2%20(Tests)/r177825%20(1624)/plugins/large-plugin-crash-crash-log.txt

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore          0x000000010867bc32 bmalloc::Heap::allocateXLarge(std::__1::lock_guard<bmalloc::StaticMutex>&, unsigned long) + 98
1   com.apple.JavaScriptCore          0x000000010867a7e7 bmalloc::Allocator::allocateXLarge(unsigned long) + 71
2   com.apple.JavaScriptCore          0x000000010865a537 WTF::fastMalloc(unsigned long) + 151
3   com.apple.JavaScriptCore          0x000000010865a5b1 WTF::tryFastMalloc(unsigned long) + 17

EWS did see the problem, but the patch got landed before the bubble turned red.

What's the next step here, should the patch be rolled out?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20141231/81993f29/attachment-0002.html>