[Webkit-unassigned] [Bug 172434] Crash when IndexedDB's getAll is used inside a Web Worker

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=172434

Brady Eidson <beidson at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |beidson at apple.com

--- Comment #1 from Brady Eidson <beidson at apple.com> ---
Whoa...  it's not a WebCore crash at all, but rather a bmalloc crash:

Thread 9 Crashed:: WebCore: Worker
0   com.apple.JavaScriptCore            0x00000001070cf95b bmalloc::Heap::splitAndAllocate(bmalloc::LargeRange&, unsigned long, unsigned long) + 27
1   com.apple.JavaScriptCore            0x00000001070cfd7d bmalloc::Heap::tryAllocateLarge(std::__1::lock_guard<bmalloc::StaticMutex>&, unsigned long, unsigned long) + 253
2   com.apple.JavaScriptCore            0x00000001070cfda9 bmalloc::Heap::allocateLarge(std::__1::lock_guard<bmalloc::StaticMutex>&, unsigned long, unsigned long) + 9
3   com.apple.JavaScriptCore            0x00000001070cd164 bmalloc::Allocator::allocateLarge(unsigned long) + 68
4   com.apple.JavaScriptCore            0x000000010662277f WTF::fastMalloc(unsigned long) + 111
5   com.apple.WebCore                   0x0000000104d03d6b WebCore::IDBValue::IDBValue(WebCore::IDBValue const&) + 107
6   ???                                 0x000070000e6ceb80 0 + 123145544330112

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170522/de67bdd8/attachment.html>