[webkit-dev] Crasher debug

Peter Speck speck at vitality.dk
Wed Jun 15 10:17:06 PDT 2005


Hi,

I have a page which uses a lot of synchronized XmlHttpRequests, and  
which sometimes crashes JavascriptCore. It is not reproducible in the  
sense that it crashes at after the same set/number of GUI actions,  
but it is reproducible in that it crashes sooner or later.   
Therefore, I don't have any idea of how I can make a simple test case.

The symptoms are always the same. Some function in KJS calls  
something in DOM (often attrId) which produces a bus error.
Dumps below are from the code from CVS from a couple of hours ago.

How do I proceed with debugging this problem?  It seems like it  
crashes when accessing the dom of the xml document returned by  
xmlhttprequest, but how do I find out more specific what js it  
executes when it crashes?


Safari in 10.4.0 had the problem, and crashed very often.
CVS version and Safari in (latest osx not to be disclosed) crashes  
less often, but still.

Date/Time:      2005-06-15 18:59:19.062 +0200
OS Version:     10.4.2 (Build 8C29)
Report Version: 3

Command: Safari
Path:    /Applications/Safari.app/Contents/MacOS/Safari
Parent:  bash [10185]

Version:        2.0 (412.2)
Build Version:  1
Project Name:   WebBrowser
Source Version: 4120200

PID:    15646
Thread: 0

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x0000019c

Thread 0 Crashed:
0   com.apple.WebCore            0x01e67220  
DOM::DocumentImpl::htmlMode() const + 16 (dom_docimpl.h:368)
1   com.apple.WebCore            0x01cd1fb0 DOM::DocumentImpl::attrId 
(DOM::DOMStringImpl*, DOM::DOMStringImpl*, bool) + 240  
(dom_docimpl.cpp:2097)
2   com.apple.WebCore            0x01cdd864  
DOM::ElementImpl::getAttributeNS(DOM::DOMString const&,  
DOM::DOMString const&) const + 100 (dom_elementimpl.cpp:284)
3   com.apple.WebCore            0x01e4f8ec  
DOM::ElementImpl::getAttribute(DOM::DOMString const&) const + 52  
(dom_elementimpl.h:174)
4   com.apple.WebCore            0x01bd9f88  
KJS::DOMElementProtoFunc::tryCall(KJS::ExecState*, KJS::Object&,  
KJS::List const&) + 440 (kjs_dom.cpp:1227)
5   com.apple.WebCore            0x01bcad64 KJS::DOMFunction::call 
(KJS::ExecState*, KJS::Object&, KJS::List const&) + 84  
(kjs_binding.cpp:76)
6   com.apple.JavaScriptCore     0x01533b40  
KJS::FunctionCallNode::evaluate(KJS::ExecState*) + 932 (nodes.cpp:754)
7   com.apple.JavaScriptCore     0x01532d4c  
KJS::ArgumentListNode::evaluateList(KJS::ExecState*) + 112 (nodes.cpp: 
610)
8   com.apple.JavaScriptCore     0x01533004  
KJS::ArgumentsNode::evaluateList(KJS::ExecState*) + 92 (nodes.cpp:647)
9   com.apple.JavaScriptCore     0x01533888  
KJS::FunctionCallNode::evaluate(KJS::ExecState*) + 236 (nodes.cpp:724)
10  com.apple.JavaScriptCore     0x0153a658  
KJS::ExprStatementNode::execute(KJS::ExecState*) + 96 (nodes.cpp:1793)
11  com.apple.JavaScriptCore     0x0154281c  
KJS::SourceElementsNode::execute(KJS::ExecState*) + 644 (nodes.cpp:2871)
12  com.apple.JavaScriptCore     0x0153a3b8 KJS::BlockNode::execute 
(KJS::ExecState*) + 196 (nodes.cpp:1756)
13  com.apple.JavaScriptCore     0x01520e8c  
KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 84 (function.cpp: 
303)
14  com.apple.JavaScriptCore     0x01520100 KJS::FunctionImp::call 
(KJS::ExecState*, KJS::Object&, KJS::List const&) + 728 (function.cpp: 
111)
15  com.apple.JavaScriptCore     0x01533b40  
KJS::FunctionCallNode::evaluate(KJS::ExecState*) + 932 (nodes.cpp:754)
16  com.apple.JavaScriptCore     0x0153a658  
KJS::ExprStatementNode::execute(KJS::ExecState*) + 96 (nodes.cpp:1793)
17  com.apple.JavaScriptCore     0x01538ed4 KJS::StatListNode::execute 
(KJS::ExecState*) + 88 (nodes.cpp:1529)
18  com.apple.JavaScriptCore     0x0153e8ec  
KJS::CaseClauseNode::evalStatements(KJS::ExecState*) + 104 (nodes.cpp: 
2281)
19  com.apple.JavaScriptCore     0x0153f414  
KJS::CaseBlockNode::evalBlock(KJS::ExecState*, KJS::Value const&) +  
616 (nodes.cpp:2400)
20  com.apple.JavaScriptCore     0x0153fd64 KJS::SwitchNode::execute 
(KJS::ExecState*) + 344 (nodes.cpp:2483)
21  com.apple.JavaScriptCore     0x0154281c  
KJS::SourceElementsNode::execute(KJS::ExecState*) + 644 (nodes.cpp:2871)
22  com.apple.JavaScriptCore     0x0153a3b8 KJS::BlockNode::execute 
(KJS::ExecState*) + 196 (nodes.cpp:1756)
23  com.apple.JavaScriptCore     0x01520e8c  
KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 84 (function.cpp: 
303)
24  com.apple.JavaScriptCore     0x01520100 KJS::FunctionImp::call 
(KJS::ExecState*, KJS::Object&, KJS::List const&) + 728 (function.cpp: 
111)
25  com.apple.JavaScriptCore     0x01533b40  
KJS::FunctionCallNode::evaluate(KJS::ExecState*) + 932 (nodes.cpp:754)
26  com.apple.JavaScriptCore     0x0153a658  
KJS::ExprStatementNode::execute(KJS::ExecState*) + 96 (nodes.cpp:1793)
27  com.apple.JavaScriptCore     0x015426c4  
KJS::SourceElementsNode::execute(KJS::ExecState*) + 300 (nodes.cpp:2865)
28  com.apple.JavaScriptCore     0x0153a3b8 KJS::BlockNode::execute 
(KJS::ExecState*) + 196 (nodes.cpp:1756)
29  com.apple.JavaScriptCore     0x01520e8c  
KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 84 (function.cpp: 
303)
30  com.apple.JavaScriptCore     0x01520100 KJS::FunctionImp::call 
(KJS::ExecState*, KJS::Object&, KJS::List const&) + 728 (function.cpp: 
111)
31  com.apple.JavaScriptCore     0x01548290 KJS::Object::call 
(KJS::ExecState*, KJS::Object&, KJS::List const&) + 764 (object.cpp:105)
32  com.apple.WebCore            0x01be4f34  
KJS::JSAbstractEventListener::handleEvent(DOM::EventImpl*, bool) +  
656 (kjs_events.cpp:109)
33  com.apple.WebCore            0x01be5320  
KJS::JSLazyEventListener::handleEvent(DOM::EventImpl*, bool) + 92  
(kjs_events.cpp:247)
34  com.apple.WebCore            0x01bcaa40  
DOM::EventListener::handleEventImpl(DOM::EventImpl*, bool) + 68  
(dom2_events.cpp:61)
35  com.apple.WebCore            0x01cec360  
DOM::NodeImpl::handleLocalEvents(DOM::EventImpl*, bool) + 352  
(dom_nodeimpl.cpp:909)
36  com.apple.WebCore            0x01cecf48  
DOM::NodeImpl::dispatchGenericEvent(DOM::EventImpl*, int&) + 516  
(dom_nodeimpl.cpp:532)
37  com.apple.WebCore            0x01ced680  
DOM::NodeImpl::dispatchEvent(DOM::EventImpl*, int&, bool) + 264  
(dom_nodeimpl.cpp:481)
38  com.apple.WebCore            0x01b9e09c  
KHTMLView::dispatchMouseEvent(int, DOM::NodeImpl*, bool, int,  
QMouseEvent*, bool, int) + 2340 (khtmlview.cpp:1924)
39  com.apple.WebCore            0x01b9f5d0  
KHTMLView::viewportMouseDoubleClickEvent(QMouseEvent*) + 600  
(khtmlview.cpp:850)
40  com.apple.WebCore            0x01b25670 KWQKHTMLPart::mouseUp 
(NSEvent*) + 316 (KWQKHTMLPart.mm:2662)
41  com.apple.WebCore            0x01b81a54 -[WebCoreBridge mouseUp:]  
+ 52 (WebCoreBridge.mm:874)
42  com.apple.WebKit             0x0107f768 -[WebHTMLView mouseUp:] +  
160 (WebHTMLView.m:2943)
43  com.apple.AppKit             0x93679d98 -[NSWindow sendEvent:] +  
4728
44  com.apple.Safari             0x0001d6bc 0x1000 + 116412
45  com.apple.AppKit             0x93622f5c -[NSApplication  
sendEvent:] + 4172
46  com.apple.Safari             0x0001a6a4 0x1000 + 104100
47  com.apple.AppKit             0x9361a3f0 -[NSApplication run] + 508
48  com.apple.AppKit             0x9370ac1c NSApplicationMain + 452
49  com.apple.Safari             0x00002700 0x1000 + 5888
50  com.apple.Safari             0x00057190 0x1000 + 352656

Thread 1:
0   libSystem.B.dylib            0x9000a778 mach_msg_trap + 8
1   libSystem.B.dylib            0x9000a6bc mach_msg + 60
2   com.apple.CoreFoundation     0x9074b3d8 __CFRunLoopRun + 832
3   com.apple.CoreFoundation     0x9074acdc CFRunLoopRunSpecific + 268
4   com.apple.Foundation         0x9288c164 -[NSRunLoop  
runMode:beforeDate:] + 172
5   com.apple.Foundation         0x9288c09c -[NSRunLoop run] + 76
6   com.apple.WebKit             0x010c0620 +[WebFileDatabase  
_syncLoop:] + 400 (WebFileDatabase.m:295)
7   com.apple.Foundation         0x9287d1d4 forkThreadForFunction + 108
8   libSystem.B.dylib            0x9002c3d4 _pthread_body + 96

Thread 2:
0   libSystem.B.dylib            0x9000a778 mach_msg_trap + 8
1   libSystem.B.dylib            0x9000a6bc mach_msg + 60
2   com.apple.CoreFoundation     0x9074b3d8 __CFRunLoopRun + 832
3   com.apple.CoreFoundation     0x9074acdc CFRunLoopRunSpecific + 268
4   com.apple.Foundation         0x928a4680 +[NSURLConnection 
(NSURLConnectionInternal) _resourceLoadLoop:] + 264
5   com.apple.Foundation         0x9287d1d4 forkThreadForFunction + 108
6   libSystem.B.dylib            0x9002c3d4 _pthread_body + 96

Thread 3:
0   libSystem.B.dylib            0x9000a778 mach_msg_trap + 8
1   libSystem.B.dylib            0x9000a6bc mach_msg + 60
2   com.apple.CoreFoundation     0x9074b3d8 __CFRunLoopRun + 832
3   com.apple.CoreFoundation     0x9074acdc CFRunLoopRunSpecific + 268
4   com.apple.Foundation         0x928a57c0 +[NSURLCache  
_diskCacheSyncLoop:] + 152
5   com.apple.Foundation         0x9287d1d4 forkThreadForFunction + 108
6   libSystem.B.dylib            0x9002c3d4 _pthread_body + 96

Thread 4:
0   libSystem.B.dylib            0x9002ca98  
semaphore_wait_signal_trap + 8
1   libSystem.B.dylib            0x9003127c pthread_cond_wait + 508
2   com.apple.Foundation         0x92884340 -[NSConditionLock  
lockWhenCondition:] + 68
3   com.apple.Syndication        0x9aca2ab0 -[AsyncDB _run:] + 192
4   com.apple.Foundation         0x9287d1d4 forkThreadForFunction + 108
5   libSystem.B.dylib            0x9002c3d4 _pthread_body + 96

Thread 5:
0   libSystem.B.dylib            0x9001efec select + 12
1   com.apple.CoreFoundation     0x9075dc6c __CFSocketManager + 472
2   libSystem.B.dylib            0x9002c3d4 _pthread_body + 96

Thread 0 crashed with PPC Thread State 64:
   srr0: 0x0000000001e67220 srr1:  
0x000000000200f030                        vrsave: 0x0000000000000000
     cr: 0x44000244          xer: 0x0000000000000002   lr:  
0x0000000001cd1fb0  ctr: 0x00000000900040fc
     r0: 0x0000000000000001   r1: 0x00000000bfffcd70   r2:  
0x0000000000000000   r3: 0x0000000000000000
     r4: 0x000000000ca8b130   r5: 0x0000000000000001   r6:  
0x000000000000000d   r7: 0x0000000000000006
     r8: 0x0000000000000004   r9: 0x0000000000000001  r10:  
0x000000000cb01162  r11: 0x0000000000000000
    r12: 0x0000000090003abc  r13: 0x0000000000000000  r14:  
0x0000000000000100  r15: 0x0000000000000000
    r16: 0x0000000000000000  r17: 0x0000000000000000  r18:  
0x0000000000000000  r19: 0x0000000000000000
    r20: 0x0000000000000000  r21: 0x0000000000000000  r22:  
0x0000000000000000  r23: 0x0000000000000000
    r24: 0x0000000000000000  r25: 0x000000000ca9e480  r26:  
0x0000000000000000  r27: 0x0000000000000000
    r28: 0x0000000000000000  r29: 0x0000000000000000  r30:  
0x00000000bfffcd70  r31: 0x0000000001cd1ed8

Binary Images Description:
     0x1000 -    0xd7fff com.apple.Safari 2.0 (412.2)    / 
Applications/Safari.app/Contents/MacOS/Safari
0x1008000 -  0x110efff com.apple.WebKit 412+    /Volumes/storage/unix- 
stuff/webkit/cvs-head.tmp/WebKitBuild/WebKit.framework/Versions/A/WebKit
0x1510000 -  0x1618fff com.apple.JavaScriptCore 412.1    /Volumes/ 
storage/unix-stuff/webkit/cvs-head.tmp/WebKitBuild/ 
JavaScriptCore.framework/Versions/A/JavaScriptCore
0x1b0a000 -  0x1e98fff com.apple.WebCore 413.1    /Volumes/storage/ 
unix-stuff/webkit/cvs-head.tmp/WebKitBuild/WebCore.framework/Versions/ 
A/WebCore
0xb205000 -  0xb207fff com.apple.textencoding.unicode 2.0    /System/ 
Library/TextEncodings/Unicode Encodings.bundle/Contents/MacOS/Unicode  
Encodings
0xc505000 -  0xc50bfff com.apple.DictionaryServiceComponent 1.0.0    / 
System/Library/Components/DictionaryService.component/Contents/MacOS/ 
DictionaryService
0x8fe00000 - 0x8fe51fff dyld 43.1    /usr/lib/dyld
0x90000000 - 0x901a6fff libSystem.B.dylib     /usr/lib/libSystem.B.dylib
0x901fe000 - 0x90202fff libmathCommon.A.dylib     /usr/lib/system/ 
libmathCommon.A.dylib
0x90204000 - 0x90257fff com.apple.CoreText 1.0.0 (???)    /System/ 
Library/Frameworks/ApplicationServices.framework/Versions/A/ 
Frameworks/CoreText.framework/Versions/A/CoreText
0x90284000 - 0x90335fff ATS     /System/Library/Frameworks/ 
ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/ 
Versions/A/ATS
0x90364000 - 0x9069dfff com.apple.CoreGraphics 1.256.10 (???)    / 
System/Library/Frameworks/ApplicationServices.framework/Versions/A/ 
Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x90728000 - 0x90801fff com.apple.CoreFoundation 6.4.2 (368.11)    / 
System/Library/Frameworks/CoreFoundation.framework/Versions/A/ 
CoreFoundation
0x9084a000 - 0x9084afff com.apple.CoreServices 10.4 (???)    /System/ 
Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x9084c000 - 0x9094efff libicucore.A.dylib     /usr/lib/ 
libicucore.A.dylib
0x909a8000 - 0x90a2cfff libobjc.A.dylib     /usr/lib/libobjc.A.dylib
0x90a56000 - 0x90acafff com.apple.framework.IOKit 1.4 (???)    / 
System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x90ae4000 - 0x90af6fff libauto.dylib     /usr/lib/libauto.dylib
0x90afd000 - 0x90dc2fff com.apple.CoreServices.CarbonCore 10.4.1  
(611.1)    /System/Library/Frameworks/CoreServices.framework/Versions/ 
A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x90e25000 - 0x90ea5fff com.apple.CoreServices.OSServices 4.0  
(4.0.0)    /System/Library/Frameworks/CoreServices.framework/Versions/ 
A/Frameworks/OSServices.framework/Versions/A/OSServices
0x90eef000 - 0x90f2ffff com.apple.CFNetwork 4.0 (80)    /System/ 
Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/ 
CFNetwork.framework/Versions/A/CFNetwork
0x90f44000 - 0x90f5cfff com.apple.WebServices 1.1.2 (1.1.0)    / 
System/Library/Frameworks/CoreServices.framework/Versions/A/ 
Frameworks/WebServicesCore.framework/Versions/A/WebServicesCore
0x90f6c000 - 0x90feafff com.apple.SearchKit 1.0.3    /System/Library/ 
Frameworks/CoreServices.framework/Versions/A/Frameworks/ 
SearchKit.framework/Versions/A/SearchKit
0x9102f000 - 0x91056fff com.apple.Metadata 1.1 (121.4)    /System/ 
Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/ 
Metadata.framework/Versions/A/Metadata
0x91066000 - 0x91073fff libz.1.dylib     /usr/lib/libz.1.dylib
0x91076000 - 0x91238fff com.apple.security 4.0.1 (223)    /System/ 
Library/Frameworks/Security.framework/Versions/A/Security
0x9133a000 - 0x91343fff com.apple.DiskArbitration 2.1    /System/ 
Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x9134a000 - 0x91371fff com.apple.SystemConfiguration 1.8.0    / 
System/Library/Frameworks/SystemConfiguration.framework/Versions/A/ 
SystemConfiguration
0x91384000 - 0x9138cfff libbsm.dylib     /usr/lib/libbsm.dylib
0x91390000 - 0x9140efff com.apple.audio.CoreAudio 3.0.1    /System/ 
Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x9144c000 - 0x9144cfff com.apple.ApplicationServices 10.4 (???)    / 
System/Library/Frameworks/ApplicationServices.framework/Versions/A/ 
ApplicationServices
0x9144e000 - 0x91486fff com.apple.AE 1.5 (297)    /System/Library/ 
Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ 
AE.framework/Versions/A/AE
0x914a1000 - 0x9156cfff com.apple.ColorSync 4.4    /System/Library/ 
Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ 
ColorSync.framework/Versions/A/ColorSync
0x915c1000 - 0x91654fff com.apple.print.framework.PrintCore 4.0  
(172.1)    /System/Library/Frameworks/ApplicationServices.framework/ 
Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x9169a000 - 0x91757fff com.apple.QD 3.8.6 (???)    /System/Library/ 
Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ 
QD.framework/Versions/A/QD
0x91795000 - 0x917f3fff com.apple.HIServices 1.5.0 (???)    /System/ 
Library/Frameworks/ApplicationServices.framework/Versions/A/ 
Frameworks/HIServices.framework/Versions/A/HIServices
0x91821000 - 0x91844fff com.apple.LangAnalysis 1.6    /System/Library/ 
Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ 
LangAnalysis.framework/Versions/A/LangAnalysis
0x91858000 - 0x9187dfff com.apple.FindByContent 1.5    /System/ 
Library/Frameworks/ApplicationServices.framework/Versions/A/ 
Frameworks/FindByContent.framework/Versions/A/FindByContent
0x91890000 - 0x918d1fff com.apple.LaunchServices 10.4.3 (157)    / 
System/Library/Frameworks/ApplicationServices.framework/Versions/A/ 
Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x918ec000 - 0x91900fff com.apple.speech.synthesis.framework 3.3    / 
System/Library/Frameworks/ApplicationServices.framework/Versions/A/ 
Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x9190e000 - 0x91944fff com.apple.ImageIO.framework 1.0.2    /System/ 
Library/Frameworks/ApplicationServices.framework/Versions/A/ 
Frameworks/ImageIO.framework/Versions/A/ImageIO
0x91958000 - 0x91a1afff libcrypto.0.9.7.dylib     /usr/lib/libcrypto. 
0.9.7.dylib
0x91a66000 - 0x91a7bfff libcups.2.dylib     /usr/lib/libcups.2.dylib
0x91a80000 - 0x91a9cfff libJPEG.dylib     /System/Library/Frameworks/ 
ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/ 
Versions/A/Resources/libJPEG.dylib
0x91aa1000 - 0x91b10fff libJP2.dylib     /System/Library/Frameworks/ 
ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/ 
Versions/A/Resources/libJP2.dylib
0x91b27000 - 0x91b2bfff libGIF.dylib     /System/Library/Frameworks/ 
ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/ 
Versions/A/Resources/libGIF.dylib
0x91b2d000 - 0x91b45fff libRaw.dylib     /System/Library/Frameworks/ 
ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/ 
Versions/A/Resources/libRaw.dylib
0x91b48000 - 0x91b8bfff libTIFF.dylib     /System/Library/Frameworks/ 
ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/ 
Versions/A/Resources/libTIFF.dylib
0x91b92000 - 0x91babfff libPng.dylib     /System/Library/Frameworks/ 
ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/ 
Versions/A/Resources/libPng.dylib
0x91bb0000 - 0x91bb3fff libRadiance.dylib     /System/Library/ 
Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ 
ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x91bb5000 - 0x91bb5fff com.apple.Accelerate 1.1.1 (Accelerate  
1.1.1)    /System/Library/Frameworks/Accelerate.framework/Versions/A/ 
Accelerate
0x91bb7000 - 0x91ca1fff com.apple.vImage 2.0    /System/Library/ 
Frameworks/Accelerate.framework/Versions/A/Frameworks/ 
vImage.framework/Versions/A/vImage
0x91ca9000 - 0x91cc8fff com.apple.Accelerate.vecLib 3.1.1 (vecLib  
3.1.1)    /System/Library/Frameworks/Accelerate.framework/Versions/A/ 
Frameworks/vecLib.framework/Versions/A/vecLib
0x91d34000 - 0x91d54fff libmx.A.dylib     /usr/lib/libmx.A.dylib
0x91d5a000 - 0x91dbffff libvMisc.dylib     /System/Library/Frameworks/ 
Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/ 
A/libvMisc.dylib
0x91dc9000 - 0x91e5bfff libvDSP.dylib     /System/Library/Frameworks/ 
Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/ 
A/libvDSP.dylib
0x91e75000 - 0x92405fff libBLAS.dylib     /System/Library/Frameworks/ 
Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/ 
A/libBLAS.dylib
0x9244d000 - 0x9275dfff libLAPACK.dylib     /System/Library/ 
Frameworks/Accelerate.framework/Versions/A/Frameworks/ 
vecLib.framework/Versions/A/libLAPACK.dylib
0x9278a000 - 0x92815fff com.apple.DesktopServices 1.3    /System/ 
Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/ 
DesktopServicesPriv
0x92857000 - 0x92a80fff com.apple.Foundation 6.4.1 (567.1)    /System/ 
Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x92b9e000 - 0x92c7cfff libxml2.2.dylib     /usr/lib/libxml2.2.dylib
0x92c9c000 - 0x92d8afff libiconv.2.dylib     /usr/lib/libiconv.2.dylib
0x92d9c000 - 0x92dbafff libGL.dylib     /System/Library/Frameworks/ 
OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x92dc5000 - 0x92e1ffff libGLU.dylib     /System/Library/Frameworks/ 
OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x92e3d000 - 0x92e3dfff com.apple.Carbon 10.4 (???)    /System/ 
Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x92e3f000 - 0x92e53fff com.apple.ImageCapture 3.0    /System/Library/ 
Frameworks/Carbon.framework/Versions/A/Frameworks/ 
ImageCapture.framework/Versions/A/ImageCapture
0x92e6b000 - 0x92e7bfff com.apple.speech.recognition.framework  
3.4    /System/Library/Frameworks/Carbon.framework/Versions/A/ 
Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x92e87000 - 0x92e9cfff com.apple.securityhi 2.0 (203)    /System/ 
Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ 
SecurityHI.framework/Versions/A/SecurityHI
0x92eae000 - 0x92f35fff com.apple.ink.framework 101.2 (69)    /System/ 
Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ 
Ink.framework/Versions/A/Ink
0x92f49000 - 0x92f54fff com.apple.help 1.0.3 (32)    /System/Library/ 
Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/ 
Versions/A/Help
0x92f5e000 - 0x92f8bfff com.apple.openscripting 1.2.2 (???)    / 
System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ 
OpenScripting.framework/Versions/A/OpenScripting
0x92fa5000 - 0x92fb5fff com.apple.print.framework.Print 4.0 (187)    / 
System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ 
Print.framework/Versions/A/Print
0x92fc1000 - 0x93027fff com.apple.htmlrendering 1.1.2    /System/ 
Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ 
HTMLRendering.framework/Versions/A/HTMLRendering
0x93058000 - 0x930aafff com.apple.NavigationServices 3.4.1 (3.4)    / 
System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ 
NavigationServices.framework/Versions/A/NavigationServices
0x930d6000 - 0x930f3fff com.apple.audio.SoundManager 3.9    /System/ 
Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ 
CarbonSound.framework/Versions/A/CarbonSound
0x93105000 - 0x93112fff com.apple.CommonPanels 1.2.2 (73)    /System/ 
Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ 
CommonPanels.framework/Versions/A/CommonPanels
0x9311b000 - 0x9342bfff com.apple.HIToolbox 1.4.2 (???)    /System/ 
Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ 
HIToolbox.framework/Versions/A/HIToolbox
0x93576000 - 0x93582fff com.apple.opengl 1.4.0    /System/Library/ 
Frameworks/OpenGL.framework/Versions/A/OpenGL
0x93587000 - 0x935a9fff com.apple.DirectoryService.Framework 2.0    / 
System/Library/Frameworks/DirectoryService.framework/Versions/A/ 
DirectoryService
0x93614000 - 0x93614fff com.apple.Cocoa 6.4 (???)    /System/Library/ 
Frameworks/Cocoa.framework/Versions/A/Cocoa
0x93616000 - 0x93c47fff com.apple.AppKit 6.4.1 (824.1)    /System/ 
Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x93fd3000 - 0x9403dfff com.apple.CoreData 1.0 (46)    /System/ 
Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x94075000 - 0x9413ffff com.apple.audio.toolbox.AudioToolbox  
1.4.1    /System/Library/Frameworks/AudioToolbox.framework/Versions/A/ 
AudioToolbox
0x94193000 - 0x94193fff com.apple.audio.units.AudioUnit 1.4    / 
System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x94195000 - 0x942f4fff com.apple.QuartzCore 1.4.1    /System/Library/ 
Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x9433c000 - 0x94379fff libsqlite3.0.dylib     /usr/lib/ 
libsqlite3.0.dylib
0x94381000 - 0x943ccfff libGLImage.dylib     /System/Library/ 
Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x9445a000 - 0x94492fff com.apple.vmutils 4.0.0 (85)    /System/ 
Library/PrivateFrameworks/vmutils.framework/Versions/A/vmutils
0x944d5000 - 0x944f1fff com.apple.securityfoundation 2.0 (262)    / 
System/Library/Frameworks/SecurityFoundation.framework/Versions/A/ 
SecurityFoundation
0x94505000 - 0x94548fff com.apple.securityinterface 2.0 (256)    / 
System/Library/Frameworks/SecurityInterface.framework/Versions/A/ 
SecurityInterface
0x9456c000 - 0x9457bfff libCGATS.A.dylib     /System/Library/ 
Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ 
CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib
0x94583000 - 0x9458ffff libCSync.A.dylib     /System/Library/ 
Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ 
CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x945d4000 - 0x945e8fff libRIP.A.dylib     /System/Library/Frameworks/ 
ApplicationServices.framework/Versions/A/Frameworks/ 
CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x94ab0000 - 0x94bddfff com.apple.AddressBook.framework 4.0.2  
(474)    /System/Library/Frameworks/AddressBook.framework/Versions/A/ 
AddressBook
0x94c6e000 - 0x94c7dfff com.apple.DSObjCWrappers.Framework 1.1    / 
System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/ 
DSObjCWrappers
0x94c85000 - 0x94cacfff com.apple.LDAPFramework 1.4 (68)    /System/ 
Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x94cb2000 - 0x94cc2fff libsasl2.2.dylib     /usr/lib/libsasl2.2.dylib
0x94cc6000 - 0x94cf4fff libssl.0.9.7.dylib     /usr/lib/libssl. 
0.9.7.dylib
0x94d04000 - 0x94d21fff libresolv.9.dylib     /usr/lib/libresolv.9.dylib
0x95485000 - 0x95508fff libstdc++.6.dylib     /usr/lib/libstdc++.6.dylib
0x95586000 - 0x9558efff libgcc_s.1.dylib     /usr/lib/libgcc_s.1.dylib
0x95fdf000 - 0x96008fff libxslt.1.dylib     /usr/lib/libxslt.1.dylib
0x9aca0000 - 0x9acd3fff com.apple.Syndication 1.0.1 (38)    /System/ 
Library/PrivateFrameworks/Syndication.framework/Versions/A/Syndication
0x9acee000 - 0x9acfefff com.apple.SyndicationUI 1.0.1 (38)    /System/ 
Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/ 
SyndicationUI



Running under gdb:

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_PROTECTION_FAILURE at address: 0x0000019c
DOM::DocumentImpl::htmlMode (this=0x0) at /Volumes/storage/unix-stuff/ 
webkit/cvs-head.tmp/WebCore/khtml/xml/dom_docimpl.h:368
368         HTMLMode htmlMode() const { return hMode; }
(gdb) where
#0  DOM::DocumentImpl::htmlMode (this=0x0) at /Volumes/storage/unix- 
stuff/webkit/cvs-head.tmp/WebCore/khtml/xml/dom_docimpl.h:368
#1  0x01cd1fb0 in DOM::DocumentImpl::attrId (this=<incomplete type>,  
_namespaceURI=0x0, _name=0xc9e0e90, readonly=true) at /Volumes/ 
storage/unix-stuff/webkit/cvs-head.tmp/WebCore/khtml/xml/ 
dom_docimpl.cpp:2097
#2  0x01cdd864 in DOM::ElementImpl::getAttributeNS (this=0xc9cb3d0,  
namespaceURI=@0xbfffd078, localName=@0xbfffd25c) at /Volumes/storage/ 
unix-stuff/webkit/cvs-head.tmp/WebCore/khtml/xml/dom_elementimpl.cpp:284
#3  0x01e4f8ec in DOM::ElementImpl::getAttribute (this=0xc9cb3d0,  
name=@0xbfffd25c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
WebCore/khtml/xml/dom_elementimpl.h:174
#4  0x01bd9f88 in KJS::DOMElementProtoFunc::tryCall (this=0xb181b48,  
exec=0xbfffd74c, thisObj=@0xbfffd3bc, args=@0xbfffd3b0) at /Volumes/ 
storage/unix-stuff/webkit/cvs-head.tmp/WebCore/khtml/ecma/kjs_dom.cpp: 
1227
#5  0x01bcad64 in KJS::DOMFunction::call (this=0x1, exec=0xbfffd74c,  
thisObj=@0xbfffd3bc, args=@0xbfffd3b0) at /Volumes/storage/unix-stuff/ 
webkit/cvs-head.tmp/WebCore/khtml/ecma/kjs_binding.cpp:76
#6  0x01533b40 in KJS::FunctionCallNode::evaluate (this=0xc9b25b0,  
exec=0xbfffd74c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/nodes.cpp:754
#7  0x01537ee4 in KJS::AssignNode::evaluate (this=0xc9b25d0,  
exec=0xbfffd74c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/nodes.cpp:1385
#8  0x0153a658 in KJS::ExprStatementNode::execute (this=0xc9b25f0,  
exec=0xbfffd74c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/nodes.cpp:1793
#9  0x0154281c in KJS::SourceElementsNode::execute (this=0xc9b1180,  
exec=0xbfffd74c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/nodes.cpp:2870
#10 0x0153a3b8 in KJS::BlockNode::execute (this=0xc9b45c0,  
exec=0xbfffd74c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/nodes.cpp:1755
#11 0x01520e8c in KJS::DeclaredFunctionImp::execute (this=0x1,  
exec=0xbfffd74c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/function.cpp:301
#12 0x01520100 in KJS::FunctionImp::call (this=0xb181170,  
exec=0xbfffdd0c, thisObj=@0xbfffd82c, args=@0xbfffd820) at /Volumes/ 
storage/unix-stuff/webkit/cvs-head.tmp/JavaScriptCore/kjs/ 
function.cpp:108
#13 0x01533b40 in KJS::FunctionCallNode::evaluate (this=0xc9a4f70,  
exec=0xbfffdd0c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/nodes.cpp:754
#14 0x0153a658 in KJS::ExprStatementNode::execute (this=0xc9a4f90,  
exec=0xbfffdd0c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/nodes.cpp:1793
#15 0x01538ed4 in KJS::StatListNode::execute (this=0xc9a4fc0,  
exec=0xbfffdd0c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/nodes.cpp:1527
#16 0x0153e8ec in KJS::CaseClauseNode::evalStatements  
(this=0xc9a5050, exec=0xbfffdd0c) at /Volumes/storage/unix-stuff/ 
webkit/cvs-head.tmp/JavaScriptCore/kjs/nodes.cpp:2281
#17 0x0153f414 in KJS::CaseBlockNode::evalBlock (this=0xc9a5400,  
exec=0xbfffdd0c, input=@0xbfffdb08) at /Volumes/storage/unix-stuff/ 
webkit/cvs-head.tmp/JavaScriptCore/kjs/nodes.cpp:2400
#18 0x0153fd64 in KJS::SwitchNode::execute (this=0xc9a5420,  
exec=0xbfffdd0c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/nodes.cpp:2481
#19 0x0154281c in KJS::SourceElementsNode::execute (this=0xc9a4dc0,  
exec=0xbfffdd0c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/nodes.cpp:2870
#20 0x0153a3b8 in KJS::BlockNode::execute (this=0xc9a5480,  
exec=0xbfffdd0c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/nodes.cpp:1755
#21 0x01520e8c in KJS::DeclaredFunctionImp::execute (this=0x1,  
exec=0xbfffdd0c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/function.cpp:301
#22 0x01520100 in KJS::FunctionImp::call (this=0xb181020,  
exec=0xbfffe05c, thisObj=@0xbfffddec, args=@0xbfffdde0) at /Volumes/ 
storage/unix-stuff/webkit/cvs-head.tmp/JavaScriptCore/kjs/ 
function.cpp:108
#23 0x01533b40 in KJS::FunctionCallNode::evaluate (this=0xc989340,  
exec=0xbfffe05c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/nodes.cpp:754
#24 0x0153a658 in KJS::ExprStatementNode::execute (this=0xc9db3a0,  
exec=0xbfffe05c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/nodes.cpp:1793
#25 0x015426c4 in KJS::SourceElementsNode::execute (this=0xc984c50,  
exec=0xbfffe05c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/nodes.cpp:2864
#26 0x0153a3b8 in KJS::BlockNode::execute (this=0xc984140,  
exec=0xbfffe05c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/nodes.cpp:1755
#27 0x01520e8c in KJS::DeclaredFunctionImp::execute (this=0x1,  
exec=0xbfffe05c) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
JavaScriptCore/kjs/function.cpp:301
#28 0x01520100 in KJS::FunctionImp::call (this=0xc82bf28,  
exec=0xa1cc130, thisObj=@0xbfffe280, args=@0xbfffe278) at /Volumes/ 
storage/unix-stuff/webkit/cvs-head.tmp/JavaScriptCore/kjs/ 
function.cpp:108
#29 0x01548290 in KJS::Object::call (this=0xbfffe270, exec=0xa1cc130,  
thisObj=@0xbfffe280, args=@0xbfffe278) at /Volumes/storage/unix-stuff/ 
webkit/cvs-head.tmp/JavaScriptCore/kjs/object.cpp:105
#30 0x01be4f34 in KJS::JSAbstractEventListener::handleEvent  
(this=0xc95e980, ele=0xc98f7c0, isWindowEvent=false) at /Volumes/ 
storage/unix-stuff/webkit/cvs-head.tmp/WebCore/khtml/ecma/ 
kjs_events.cpp:109
#31 0x01be5320 in KJS::JSLazyEventListener::handleEvent  
(this=0xc95e980, evt=0xc98f7c0, isWindowEvent=false) at /Volumes/ 
storage/unix-stuff/webkit/cvs-head.tmp/WebCore/khtml/ecma/ 
kjs_events.cpp:245
#32 0x01bcaa40 in DOM::EventListener::handleEventImpl (this=0x1,  
evt=0xc98f7c0, isWindowEvent=false) at /Volumes/storage/unix-stuff/ 
webkit/cvs-head.tmp/WebCore/khtml/dom/dom2_events.cpp:56
#33 0x01cec360 in DOM::NodeImpl::handleLocalEvents (this=0xc95e890,  
evt=0xc98f7c0, useCapture=<incomplete type>) at /Volumes/storage/unix- 
stuff/webkit/cvs-head.tmp/WebCore/khtml/xml/dom_nodeimpl.cpp:911
#34 0x01cecf48 in DOM::NodeImpl::dispatchGenericEvent  
(this=0xc95e890, evt=0xc98f7c0) at /Volumes/storage/unix-stuff/webkit/ 
cvs-head.tmp/WebCore/khtml/xml/dom_nodeimpl.cpp:530
#35 0x01ced680 in DOM::NodeImpl::dispatchEvent (this=0xc95e890,  
evt=0xc98f7c0, exceptioncode=@0xbfffe5ec, tempEvent=<incomplete  
type>) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/WebCore/ 
khtml/xml/dom_nodeimpl.cpp:481
#36 0x01b9e09c in KHTMLView::dispatchMouseEvent (this=0xc944ed0,  
eventId=4, targetNode=0xc95e890, cancelable=true, detail=4,  
_mouse=0xbfffe774, setUnder=true, mouseEventType=1) at /Volumes/ 
storage/unix-stuff/webkit/cvs-head.tmp/WebCore/khtml/khtmlview.cpp:1923
#37 0x01b9f5d0 in KHTMLView::viewportMouseDoubleClickEvent  
(this=0xc944ed0, _mouse=0xbfffe774) at /Volumes/storage/unix-stuff/ 
webkit/cvs-head.tmp/WebCore/khtml/khtmlview.cpp:847
#38 0x01b25670 in KWQKHTMLPart::mouseUp (this=0x7025600,  
event=0xc9f63f0) at /Volumes/storage/unix-stuff/webkit/cvs-head.tmp/ 
WebCore/kwq/KWQKHTMLPart.mm:2662
#39 0x01b81a54 in -[WebCoreBridge mouseUp:] (self=<incomplete type>,  
_cmd=0x90a0f5e0, event=0xc9f63f0) at /Volumes/storage/unix-stuff/ 
webkit/cvs-head.tmp/WebCore/kwq/WebCoreBridge.mm:873
#40 0x0107f768 in -[WebHTMLView mouseUp:] (self=0xc944a50,  
_cmd=0x90a0f5e0, event=0xc9f63f0) at /Volumes/storage/unix-stuff/ 
webkit/cvs-head.tmp/WebKit/WebView.subproj/WebHTMLView.m:2942
#41 0x93679d98 in -[NSWindow sendEvent:] ()
#42 0x0001d6bc in ?? ()
#43 0x93622f5c in -[NSApplication sendEvent:] ()
#44 0x0001a6a4 in ?? ()
#45 0x9361a3f0 in -[NSApplication run] ()
#46 0x9370ac1c in NSApplicationMain ()
#47 0x00002700 in ?? ()
#48 0x00057190 in ?? ()
Current language:  auto; currently c++

(gdb) print *(ElementImpl*)0xc9cb3d0
warning: RTTI symbol not found for class 'DOM::XMLElementImpl'
$3 = {
   <ContainerNodeImpl> = {
     <NodeImpl> = {
       <TreeShared<DOM::NodeImpl>> = {
         _ref = 1,
         m_parent = 0xc9c9740
       },
       members of NodeImpl:
       _vptr$NodeImpl = 0x1eb9c88,
       document = 0xc9d15c0,
       m_previous = 0xc9d6030,
       m_next = 0xc9f4b40,
       m_render = 0x0,
       m_regdListeners = 0x0,
       m_nodeLists = 0x0,
       m_tabIndex = 0,
       m_hasTabIndex = <incomplete type>,
       m_hasId = <incomplete type>,
       m_hasClass = <incomplete type>,
       m_hasStyle = <incomplete type>,
       m_attached = <incomplete type>,
       m_changed = <incomplete type>,
       m_hasChangedChild = <incomplete type>,
       m_inDocument = <incomplete type>,
       m_isLink = <incomplete type>,
       m_specified = <incomplete type>,
       m_focused = <incomplete type>,
       m_active = <incomplete type>,
       m_styleElement = <incomplete type>,
       m_implicit = <incomplete type>
     },
     members of ContainerNodeImpl:
     _first = 0xc9c9710,
     _last = 0xc9d5840
   },
   members of ElementImpl:
   namedAttrMap = 0xc9cab80,
   m_prefix = 0x0
}
(gdb)

----
    - Peter Speck




More information about the webkit-dev mailing list