<html>
    <head>
      <base href="https://bugs.webkit.org/" />
    </head>
    <body>
      <p>
        <div>
            <b><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Bmalloc: Crash on 32-bit Linux at bmalloc::Heap::allocateLarge() -&gt; bmalloc::VMHeap::grow() ."
   href="https://bugs.webkit.org/show_bug.cgi?id=146598#c1">Comment # 1</a>
              on <a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Bmalloc: Crash on 32-bit Linux at bmalloc::Heap::allocateLarge() -&gt; bmalloc::VMHeap::grow() ."
   href="https://bugs.webkit.org/show_bug.cgi?id=146598">bug 146598</a>
              from <span class="vcard"><a class="email" href="mailto:clopez&#64;igalia.com" title="Carlos Alberto Lopez Perez &lt;clopez&#64;igalia.com&gt;"> <span class="fn">Carlos Alberto Lopez Perez</span></a>
</span></b>
        <pre>Created <span class=""><a href="attachment.cgi?id=256119" name="attach_256119" title="GDB Backtrace on the coredump generated.">attachment 256119</a> <a href="attachment.cgi?id=256119&amp;action=edit" title="GDB Backtrace on the coredump generated.">[details]</a></span>
GDB Backtrace on the coredump generated.

I'm attaching a GDB backtrace of the coredump when it crashes. The relevant parts:

#0  0xf4946f9c in bmalloc::VMHeap::grow() () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#1  0xf4943def in bmalloc::Heap::allocateLarge(std::lock_guard&lt;bmalloc::StaticMutex&gt;&amp;, unsigned int) () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#2  0xf4942007 in bmalloc::Allocator::allocateLarge(unsigned int) () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#3  0xf4942153 in bmalloc::Allocator::allocateSlowCase(unsigned int) () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#4  0xf4942243 in bmalloc::Allocator::tryAllocate(unsigned int) () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#5  0xf48fcfa7 in WTF::tryFastMalloc(unsigned int) () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#6  0xf675350f in WebCore::ImageFrame::setSize(int, int) () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#7  0xf6760602 in WebCore::PNGImageDecoder::rowAvailable(unsigned char*, unsigned int, int) () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#8  0xf6760c14 in WebCore::rowAvailable(png_struct_def*, unsigned char*, unsigned long, int) () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>