[Webkit-unassigned] [Bug 173643] [GTK][Stable] Crash in JSC::DFG::operationParseIntGeneric

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sat Jun 24 05:38:13 PDT 2017


https://bugs.webkit.org/show_bug.cgi?id=173643

--- Comment #8 from Michael Catanzaro <mcatanzaro at igalia.com> ---
>From the duplicates above, this can also be triggered by scrolling on http://joeduffyblog.com/2016/02/07/the-error-model/ or http://www.francetvinfo.fr/politique/la-france-insoumise/vous-ne-pouvez-pas-dire-vive-la-france-une-interview-d-une-deputee-insoumise-suscite-la-polemique_2250759.html. Probably better to test with the reproducers I posted before, which work by just loading the page.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170624/479e0c07/attachment.html>


More information about the webkit-unassigned mailing list