Comment #3 on issue 2476 by [email protected]: document.write(i) broken on 3rd loop on WebKit's WinCE(arm) port integreted with V8 engine
http://code.google.com/p/v8/issues/detail?id=2476

The crash breakpoint is:

v8\include\v8.h:
Local<Object> Arguments::Holder() const {
  return Local<Object>(reinterpret_cast<Object*>(
      &implicit_args_[kHolderIndex]));
}

Source\WebCore\bindings\v8\custom\V8HTMLDocumentCustom.cpp:
v8::Handle<v8::Value> V8HTMLDocument::writelnCallback(const v8::Arguments& args)
{
    INC_STATS("DOM.HTMLDocument.writeln()");
    HTMLDocument* htmlDocument = V8HTMLDocument::toNative(args.Holder());
htmlDocument->writeln(writeHelperGetString(args), activeDOMWindow(BindingState::instance())->document());
    return v8::Undefined();
}

I can not provide the full call stack, this 2 nearest stack trace is only deferred from crash log.

--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev

Reply via email to