[Webkit-unassigned] [Bug 128766] New: Web Inspector: CRASH when evaluating in console of JSContext RWI with disabled breakpoints

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Feb 13 14:27:19 PST 2014


https://bugs.webkit.org/show_bug.cgi?id=128766

           Summary: Web Inspector: CRASH when evaluating in console of
                    JSContext RWI with disabled breakpoints
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Web Inspector
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: joepeck at webkit.org
                CC: timothy at apple.com, joepeck at webkit.org,
                    webkit-bug-importer at group.apple.com,
                    mark.lam at apple.com, graouts at apple.com


* STEPS TO REPRODUCE:
1. Build and Run JSPong
2. Open JSContext RWI
3. Add breakpoint to nextMove
4. Disable all breakpoints
5. Ensure the specific breakpoint is "enabled" (click if needed)
6. Evaluate "1+1" in console
  => CRASH

* CRASH:
ASSERTION FAILED: vm().entryScope
/Volumes/Data/Code/safari/OpenSource/Source/JavaScriptCore/interpreter/CallFrame.cpp(134) : JSC::JSGlobalObject *JSC::ExecState::vmEntryGlobalObject()
1   0x100719120 WTFCrash
2   0x1000943ee JSC::ExecState::vmEntryGlobalObject()
3   0x1003983cc JSC::Interpreter::debug(JSC::ExecState*, JSC::DebugHookID)
4   0x1003c21d4 operationDebug
5   0x2c3082002a97
6   0x10050c854 callToJavaScript
7   0x1003b223d JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*)
8   0x1003976c9 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&)
9   0x100093f0e JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&)
10  0x100469fcc JSObjectCallAsFunction
11  0x100004f05 -[PongAI nextMove]
12  0x100003cb6 -[PongController update]
13  0x7fff915700f4 __NSFireTimer
14  0x7fff8ead2564 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__
15  0x7fff8ead209f __CFRunLoopDoTimer
16  0x7fff8eb435aa __CFRunLoopDoTimers
17  0x7fff8ea8d8e5 __CFRunLoopRun
18  0x7fff8ea8d0b5 CFRunLoopRunSpecific
19  0x7fff8dae5a0d RunCurrentEventLoopInMode
20  0x7fff8dae57b7 ReceiveNextEventCommon
21  0x7fff8dae55bc _BlockUntilNextEventMatchingListInModeWithFilter
22  0x7fff94dfb3de _DPSNextEvent
23  0x7fff94dfaa2b -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:]
24  0x7fff94deeb2c -[NSApplication run]
25  0x7fff94dd9913 NSApplicationMain
26  0x100001522 main
27  0x7fff8c9f85fd start
28  0x3

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list