[Webkit-unassigned] [Bug 127508] New: REGRESSION: crash when evaluating JavaScript expression in breakpoint action

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=127508

           Summary: REGRESSION: crash when evaluating JavaScript
                    expression in breakpoint action
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
               URL: http://www.nihilogic.dk/labs/tetris/
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Web Inspector
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: bburg at apple.com
                CC: timothy at apple.com, joepeck at webkit.org,
                    webkit-bug-importer at group.apple.com,
                    mark.lam at apple.com, graouts at apple.com
            Blocks: 127117


Steps to reproduce:

1. Set a breakpoint in the linked page, on tetris.js:95.
2. Edit the breakpoint and add the action "Evaluate Scritp" with expression = "e" (or anything)
3. Press a key in the game

This will crash inside ScriptDebugServer::evaluateBreakpointAction(), in the call to evaluate the expression. This seems to be a recent regression; perhaps the call frame is getting stale somehow.

This blocks further upstreaming of probes backend and UI, since it leaves no way to test probes functionality (which evaluates expressions using the same evaluation code).

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.