[Webkit-unassigned] [Bug 164411] New: [Win32] Crash in layout tests.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Nov 4 06:11:16 PDT 2016


https://bugs.webkit.org/show_bug.cgi?id=164411

            Bug ID: 164411
           Summary: [Win32] Crash in layout tests.
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: pvollan at apple.com

I am seeing an access violation crash during layout tests under the function unsafeJsElementPrototypeFunctionGetAttribute.

This crashes because the JSC code that emits the call assumes that the function is using the cdecl calling convention (JIT_OPERATION), but it is using the fastcall calling convention (JSC_HOST_CALL).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20161104/44825aab/attachment.html>


More information about the webkit-unassigned mailing list