Bug 262546 - REGRESSION (STP): Crash when visiting codemotion.com
Summary: REGRESSION (STP): Crash when visiting codemotion.com
Status: RESOLVED DUPLICATE of bug 262228
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: Safari Technology Preview
Hardware: Mac (Apple Silicon) macOS 14
: P2 Normal
Assignee: Nobody
URL: https://www.codemotion.com
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2023-10-03 08:31 PDT by laiz+webkit
Modified: 2023-10-03 11:07 PDT (History)
3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description laiz+webkit 2023-10-03 08:31:13 PDT 
Overview:
Visiting https://www.codemotion.com causes the Safari TP tab to quickly refresh the page and then present "A problem repeatedly occurred with 'https://www.codemotion.com'" and prompting the user to reload the webpage

Steps to reproduce:
1. Open https://www.codemotion.com using Safari Technology Preview Release 179 

Actual result:
"A problem repeatedly occurred with 'https://www.codemotion.com'" and a prompt urging the user to reload the webpage

Expected result:
The website should open normally.

Build Date & Hardware:
Safari Technology Preview Release 179 (Safari 17.0, WebKit 19617.1.8.1)
MacBook Air M1, 2020
macOS Sonoma 14.0

Additional Builds and Platforms:
I am unable to reproduce this issue on Safari Version 17.0 (19616.1.27.211.1)
Comment 1 Alexey Proskuryakov 2023-10-03 09:54:13 PDT 
Thread 0 Crashed::  Dispatch queue: com.apple.main-thread
0   JavaScriptCore                	       0x19e22a46c WTFCrashWithInfo(int, char const*, char const*, int) + 20
1   JavaScriptCore                	       0x19eff8ebc JSC::GetterSetter::getOwnPropertySlot(JSC::JSObject*, JSC::JSGlobalObject*, JSC::PropertyName, JSC::PropertySlot&) + 40
2   JavaScriptCore                	       0x19f0f66b4 JSC::JSObject::toPrimitive(JSC::JSGlobalObject*, JSC::PreferredPrimitiveType) const + 4012
3   JavaScriptCore                	       0x19f1c98ec JSC::jsAddSlowCase(JSC::JSGlobalObject*, JSC::JSValue, JSC::JSValue) + 3484
4   JavaScriptCore                	       0x19efb183c slow_path_add + 1072
5   JavaScriptCore                	       0x19e585918 llint_function_for_construct_arity_checkTagGateAfter + 15704
Comment 2 Radar WebKit Bug Importer 2023-10-03 09:54:26 PDT 
<rdar://problem/116406769>
Comment 3 Mark Lam 2023-10-03 11:07:43 PDT 

*** This bug has been marked as a duplicate of bug 262228 ***