[Webkit-unassigned] [Bug 156487] Crash in JSC::Register::codeBlock on http://detexify.kirelabs.org/symbols.html

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=156487

Jérémy Lal <kapouer at melix.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kapouer at melix.org

--- Comment #1 from Jérémy Lal <kapouer at melix.org> ---
Hello,
I noticed it doesn't crash the first time it is loaded with inspector opened.


It crashes here too
http://gexpertise.fr/activites/metiers/stockage

and the stack trace is similar:

Program received signal SIGSEGV, Segmentation fault.
JSC::StackVisitor::readFrame (this=0x7ffdf68ef990, callFrame=0xffff000000000002) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/interpreter/StackVisitor.cpp:100
100    /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/interpreter/StackVisitor.cpp: Aucun fichier ou dossier de ce type.
(gdb) bt
#0  JSC::StackVisitor::readFrame (this=0x7ffdf68ef990, callFrame=0xffff000000000002) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/interpreter/StackVisitor.cpp:100
#1  0x00007f0d72f5a0c6 in JSC::StackVisitor::visit<JSC::RecursionCheckFunctor> (functor=<synthetic pointer>, startFrame=<optimized out>) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/interpreter/StackVisitor.h:128
#2  JSC::ExecState::iterate<JSC::RecursionCheckFunctor> (functor=<synthetic pointer>, this=<optimized out>) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/interpreter/CallFrame.h:252
#3  JSC::CodeBlock::noticeIncomingCall (this=this at entry=0x7f0d02505200, callerFrame=0x7ffdf68efc00) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/bytecode/CodeBlock.cpp:3472
#4  0x00007f0d72f5a1f1 in JSC::CodeBlock::linkIncomingCall (this=this at entry=0x7f0d02505200, callerFrame=<optimized out>, incoming=incoming at entry=0x7f0d0217a100) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/bytecode/CodeBlock.cpp:3173
#5  0x00007f0d732e680e in JSC::linkFor (exec=exec at entry=0x7ffdf68efb40, callLinkInfo=..., calleeCodeBlock=calleeCodeBlock at entry=0x7f0d02505200, callee=callee at entry=0x7f0d02443d00, codePtr=..., codePtr at entry=...)
    at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/jit/Repatch.cpp:571
#6  0x00007f0d732cd998 in JSC::operationLinkCall (execCallee=0x7ffdf68efb40, callLinkInfo=0x7f0d0217a100) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/jit/JITOperations.cpp:819

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160417/10eb6f97/attachment-0001.html>