This is one of the top crashers on dev: http://code.google.com/p/chromium/issues/detail?id=29428
I can repro it on trunk and get a stack, but I don't understand V8 internals enough to know what's happening. In Debug, it's hitting the following ASSERT in handles-inl.h: ASSERT(reinterpret_cast<Address>(*location_) != kHandleZapValue); If anyone has some insight, or would be willing to try reproing it on their own machine, I'd appreciate the help. -- v8-dev mailing list [email protected] http://groups.google.com/group/v8-dev
