[Webkit-unassigned] [Bug 154905] WebKit assert in WebCore::VisiblePosition::previous() displaying youtube video

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=154905

--- Comment #4 from Rich Coe <richcoe2 at gmail.com> ---
(gdb) where
#0  0x00007fa70a4bec76 in JSC::WriteBarrierBase<JSC::Structure>::operator->() const (this=0x0)
    at ../../Source/JavaScriptCore/runtime/WriteBarrier.h:123
#1  0x00007fa70a4d7dbe in JSC::JSCell::isString() const (this=0x0)
    at ../../Source/JavaScriptCore/runtime/JSCellInlines.h:124
#2  0x00007fa70a90da16 in JSC::JSCell::getPrimitiveNumber(JSC::ExecState*, double&, JSC::JSValue&) const (this=0x0, exec=0x7fa688ff8ae8, number=@0x7ffc6b7b1710: 6.9343542557821197e-310, value=...)
    at ../../Source/JavaScriptCore/runtime/JSCell.cpp:135
#3  0x00007fa70a7a02dd in JSC::JSValue::getPrimitiveNumber(JSC::ExecState*, double&, JSC::JSValue&) (this=0x7ffc6b7b1730, exec=0x7fa688ff8ae8, number=@0x7ffc6b7b1710: 6.9343542557821197e-310, value=...)
    at ../../Source/JavaScriptCore/runtime/JSCJSValueInlines.h:600
#4  0x00007fa70a79abf9 in JSC::operationCompareLess(JSC::ExecState*, JSC::EncodedJSValue, JSC::EncodedJSValue) (v2=..., v1=..., callFrame=0x7fa688ff8ae8) at ../../Source/JavaScriptCore/runtime/Operations.h:136
#5  0x00007fa70a79abf9 in JSC::operationCompareLess(JSC::ExecState*, JSC::EncodedJSValue, JSC::EncodedJSValue) (exec=0x7fa688ff8ae8, encodedOp1=-281474976710655, encodedOp2=0)
    at ../../Source/JavaScriptCore/jit/JITOperations.cpp:829
#6  0x00007fa6a42fcb37 in  ()
#7  0x00007fa6a43f1240 in  ()
#8  0x00007fa6f82ca2d0 in  ()
#9  0x00007ffc6b7b2350 in  ()
#10 0x00007ffc6b7b23b0 in  ()
#11 0x0000000000000000 in  ()

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160305/b14e3541/attachment.html>