[Webkit-unassigned] [Bug 149473] EBay listing pages "A problem repeatedly occurred with..."

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=149473

Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |fpizlo at apple.com,
                   |                            |ggaren at apple.com,
                   |                            |webkit-bug-importer at group.a
                   |                            |pple.com
           Priority|P2                          |P1
          Component|Page Loading                |JavaScriptCore

--- Comment #1 from Alexey Proskuryakov <ap at webkit.org> ---
I can reproduce.

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore          0x000000010ede2b3e WTFCrash + 62
1   com.apple.JavaScriptCore          0x000000010ed2d963 JSC::AccessCase::generate(JSC::AccessGenerationState&) + 2483
2   com.apple.JavaScriptCore          0x000000010ed31080 JSC::PolymorphicAccess::regenerate(JSC::VM&, JSC::CodeBlock*, JSC::StructureStubInfo&, JSC::Identifier const&, WTF::Vector<std::__1::unique_ptr<JSC::AccessCase, std::__1::default_delete<JSC::AccessCase> >, 2ul, WTF::CrashOnOverflow, 16ul>&) + 1792
3   com.apple.JavaScriptCore          0x000000010ed308c9 JSC::PolymorphicAccess::regenerateWithCases(JSC::VM&, JSC::CodeBlock*, JSC::StructureStubInfo&, JSC::Identifier const&, WTF::Vector<std::__1::unique_ptr<JSC::AccessCase, std::__1::default_delete<JSC::AccessCase> >, 0ul, WTF::CrashOnOverflow, 16ul>) + 985
4   com.apple.JavaScriptCore          0x000000010ed31d59 JSC::PolymorphicAccess::regenerateWithCase(JSC::VM&, JSC::CodeBlock*, JSC::StructureStubInfo&, JSC::Identifier const&, std::__1::unique_ptr<JSC::AccessCase, std::__1::default_delete<JSC::AccessCase> >) + 137
5   com.apple.JavaScriptCore          0x000000010ed84429 JSC::StructureStubInfo::addAccessCase(JSC::VM&, JSC::CodeBlock*, JSC::Identifier const&, std::__1::unique_ptr<JSC::AccessCase, std::__1::default_delete<JSC::AccessCase> >) + 89
6   com.apple.JavaScriptCore          0x000000010ed4b4f0 JSC::repatchGetByID(JSC::ExecState*, JSC::JSValue, JSC::Identifier const&, JSC::PropertySlot const&, JSC::StructureStubInfo&) + 624

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150923/66b60d6e/attachment-0001.html>