[Webkit-unassigned] [Bug 151469] New: imported/w3c/html-templates/parsing-html-templates/creating-an-element-for-the-token/template-owner-document.html is flaky crasher

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=151469

            Bug ID: 151469
           Summary: imported/w3c/html-templates/parsing-html-templates/cre
                    ating-an-element-for-the-token/template-owner-document
                    .html is flaky crasher
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ryanhaddad at apple.com

imported/w3c/html-templates/parsing-html-templates/creating-an-element-for-the-token/template-owner-document.html is flaky crasher

Most recent crashing run:
<https://build.webkit.org/builders/Apple%20El%20Capitan%20Debug%20WK2%20(Tests)/builds/1234>

Full crashlog:
<https://build.webkit.org/results/Apple%20El%20Capitan%20Debug%20WK2%20(Tests)/r192665%20(1234)/imported/w3c/html-templates/parsing-html-templates/creating-an-element-for-the-token/template-owner-document-crash-log.txt>

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore          0x000000010b5c6eb0 JSC::WriteBarrierBase<JSC::JSString>::get() const + 16 (WriteBarrier.h:92)
1   com.apple.JavaScriptCore          0x000000010bcd85c4 void JSC::SlotVisitor::append<JSC::JSString>(JSC::WriteBarrierBase<JSC::JSString>*) + 36 (SlotVisitorInlines.h:69)
2   com.apple.JavaScriptCore          0x000000010bcd7d00 JSC::JSPropertyNameEnumerator::visitChildren(JSC::JSCell*, JSC::SlotVisitor&) + 176 (JSPropertyNameEnumerator.cpp:93)
3   com.apple.JavaScriptCore          0x000000010bf72476 JSC::SlotVisitor::visitChildren(JSC::JSCell const*) + 294 (SlotVisitor.cpp:183)
4   com.apple.JavaScriptCore          0x000000010bf712e1 JSC::SlotVisitor::drain() + 225 (SlotVisitor.cpp:217)
5   com.apple.JavaScriptCore          0x000000010bf71d62 JSC::SlotVisitor::donateAndDrain() + 34 (SlotVisitor.cpp:355)
6   com.apple.JavaScriptCore          0x000000010bacc1e2 JSC::Heap::visitConservativeRoots(JSC::ConservativeRoots&) + 114 (Heap.cpp:725)
7   com.apple.JavaScriptCore          0x000000010bacbcf0 JSC::Heap::markRoots(double, void*, void*, int (&) [37]) + 544 (Heap.cpp:578)
8   com.apple.JavaScriptCore          0x000000010bacdd4a JSC::Heap::collectImpl(JSC::HeapOperation, void*, void*, int (&) [37]) + 1082 (Heap.cpp:1075)
9   com.apple.JavaScriptCore          0x000000010bacd8cd JSC::Heap::collect(JSC::HeapOperation) + 141 (Heap.cpp:1026)
10  com.apple.JavaScriptCore          0x000000010b42a2b8 JSC::Heap::collectIfNecessaryOrDefer() + 56 (HeapInlines.h:285)
11  com.apple.JavaScriptCore          0x000000010b5e9a6f JSC::CopiedSpace::allocateBlock() + 31 (CopiedSpaceInlines.h:140)
12  com.apple.JavaScriptCore          0x000000010b5e866d JSC::CopiedSpace::tryAllocateSlowCase(unsigned long, void**) + 205 (CopiedSpace.cpp:93)
13  com.apple.JavaScriptCore          0x000000010b42b021 JSC::CopiedSpace::tryAllocate(unsigned long, void**) + 257 (CopiedSpaceInlines.h:156)
14  com.apple.JavaScriptCore          0x000000010b42ab4a JSC::Heap::tryAllocateStorage(JSC::JSCell*, unsigned long, void**) + 74 (HeapInlines.h:232)
15  com.apple.JavaScriptCore          0x000000010bcd8250 JSC::JSPropertyNameEnumerator::finishCreation(JSC::VM&, unsigned int, unsigned int, WTF::PassRefPtr<JSC::PropertyNameArrayData>) + 192 (JSPropertyNameEnumerator.cpp:77)
16  com.apple.JavaScriptCore          0x000000010bcd8145 JSC::JSPropertyNameEnumerator::create(JSC::VM&, JSC::Structure*, unsigned int, unsigned int, JSC::PropertyNameArray&) + 261 (JSPropertyNameEnumerator.cpp:53)
17  com.apple.JavaScriptCore          0x000000010b5c3e2e JSC::propertyNameEnumerator(JSC::ExecState*, JSC::JSObject*) + 734 (JSPropertyNameEnumerator.h:146)
18  com.apple.JavaScriptCore          0x000000010bbe0c2b operationGetPropertyEnumerator + 107 (JITOperations.cpp:2081)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20151120/67c575d7/attachment-0001.html>