<html>
<head>
<base href="https://bugs.webkit.org/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - pageoverlay/overlay-remove-reinsert-view.html crashes in WK1"
href="https://bugs.webkit.org/show_bug.cgi?id=167857">167857</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>pageoverlay/overlay-remove-reinsert-view.html crashes in WK1
</td>
</tr>
<tr>
<th>Classification</th>
<td>Unclassified
</td>
</tr>
<tr>
<th>Product</th>
<td>WebKit
</td>
</tr>
<tr>
<th>Version</th>
<td>WebKit Nightly Build
</td>
</tr>
<tr>
<th>Hardware</th>
<td>Unspecified
</td>
</tr>
<tr>
<th>OS</th>
<td>Unspecified
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>Normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>P2
</td>
</tr>
<tr>
<th>Component</th>
<td>Tools / Tests
</td>
</tr>
<tr>
<th>Assignee</th>
<td>webkit-unassigned@lists.webkit.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>simon.fraser@apple.com
</td>
</tr>
<tr>
<th>CC</th>
<td>lforschler@apple.com
</td>
</tr></table>
<p>
<div>
<pre>Can't reproduce locally.
Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0 libobjc.A.dylib 0x00007fff9654c4dd objc_msgSend + 29
1 DumpRenderTree 0x00000001003d8d49 WTR::JSUIScriptController::addViewToWindow(OpaqueJSContext const*, OpaqueJSValue*, OpaqueJSValue*, unsigned long, OpaqueJSValue const* const*, OpaqueJSValue const**) + 65 (JSUIScriptController.cpp:565)
2 com.apple.JavaScriptCore 0x0000000100e0fe3d long long JSC::APICallbackFunction::call<JSC::JSCallbackFunction>(JSC::ExecState*) + 525 (APICallbackFunction.h:63)
3 com.apple.JavaScriptCore 0x0000000100f2b785 JSC::LLInt::setUpCall(JSC::ExecState*, JSC::Instruction*, JSC::CodeSpecializationKind, JSC::JSValue, JSC::LLIntCallLinkInfo*) + 533 (LLIntSlowPaths.cpp:1240)
4 com.apple.JavaScriptCore 0x0000000100f331e5 llint_entry + 26695
5 com.apple.JavaScriptCore 0x0000000100f331f3 llint_entry + 26709
6 com.apple.JavaScriptCore 0x0000000100f2c7bb vmEntryToJavaScript + 299
7 com.apple.JavaScriptCore 0x0000000100dbc4df JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) + 127 (JITCode.cpp:82)
8 com.apple.JavaScriptCore 0x0000000100d83279 JSC::Interpreter::executeProgram(JSC::SourceCode const&, JSC::ExecState*, JSC::JSObject*) + 14873 (Interpreter.cpp:875)
9 com.apple.JavaScriptCore 0x00000001009ceaf2 JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) + 354 (Completion.cpp:102)
10 com.apple.JavaScriptCore 0x0000000100e0e336 JSEvaluateScript + 422 (NakedPtr.h:54)
11 DumpRenderTree 0x00000001003eb4b2 WTR::UIScriptContext::runUIScript(WTF::String const&, unsigned int) + 122 (UIScriptContext.cpp:68)</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>