[Webkit-unassigned] [Bug 175168] [GTK] Crash when loading the WebAssembly demo at http://webassembly.org/demo with the MiniBrowser

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=175168

Yusuke Suzuki <utatane.tea at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|webkit-unassigned at lists.web |utatane.tea at gmail.com
                   |kit.org                     |

--- Comment #4 from Yusuke Suzuki <utatane.tea at gmail.com> ---
(In reply to Carlos Alberto Lopez Perez from comment #3)
> I have attached backtraces of the crash (both in Debug and Release mode).
> 
> When running in Debug mode it takes a bit longer to crash than on Release
> (somehow expected). But it seems it crashes on a different part.
> 
> 
> On Debug https://bugs.webkit.org/attachment.cgi?id=317188 :
> 
> Program terminated with signal SIGSEGV, Segmentation fault.
> #0  0x00007f88b1628fb1 in bmalloc::FixedVector<bmalloc::BumpRange,
> 3ul>::pop() (this=0x7f88bdca20f0) at
> /home/clopez/webkit/webkit/Source/bmalloc/bmalloc/FixedVector.h:101
> 101	    return m_buffer[--m_size];
> [Current thread is 1 (Thread 0x7f889f0d2ac0 (LWP 25691))]
> 
> 
> On Release https://bugs.webkit.org/attachment.cgi?id=317189 :
> 
> Program terminated with signal SIGSEGV, Segmentation fault.
> #0  0x00007f66dac1f51e in
> WTF::PriorityQueue<JSC::Wasm::Worklist::QueueElement,
> &JSC::Wasm::Worklist::isHigherPriority, 10ul>::siftUp(unsigned long) () from
> /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.
> so.18
> [Current thread is 1 (Thread 0x7f66c9fadac0 (LWP 18001))]

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170804/db1f3938/attachment.html>