[webkit-dev] crash in the webkit rev. 38550

[haithem rahmani]

Hi all,

after updating webkit to the  rev. 38550, the Gtklauncher crashes with
segmentation fault error, and here the output of GDB.


#0  0x299eb0a2 in WebCore::StringImpl::computeHash (data=0x497000,
length=749940800)
    at ./WebCore/platform/text/StringImpl.h:183
#1  0x2a038fa0 in WebCore::UCharBufferTranslator::hash (buf=@0x7b9d2f58) at
WebCore/platform/text/AtomicString.cpp:128
#2  0x2a0394fc in WTF::HashSetTranslatorAdapter<WebCore::StringImpl*,
WTF::HashTraits<WebCore::StringImpl*>, WebCore::UCharBuffer,
WebCore::UCharBufferTranslator>::hash (key=@0x7b9d2f58) at
./JavaScriptCore/wtf/HashSet.h:103
#3  0x2a03b45c in WTF::HashTable<WebCore::StringImpl*, WebCore::StringImpl*,
WTF::IdentityExtractor<WebCore::StringImpl*>, WebCore::StringHash,
WTF::HashTraits<WebCore::StringImpl*>, WTF::HashTraits<WebCore::StringImpl*>
>::fullLookupForWriting<WebCore::UCharBuffer,
WTF::HashSetTranslatorAdapter<WebCore::StringImpl*,
WTF::HashTraits<WebCore::StringImpl*>, WebCore::UCharBuffer,
WebCore::UCharBufferTranslator> > (this=0x463570, key=@0x7b9d2f58) at
./JavaScriptCore/wtf/HashTable.h:562
#4  0x2a03c962 in WTF::HashTable<WebCore::StringImpl*, WebCore::StringImpl*,
WTF::IdentityExtractor<WebCore::StringImpl*>, WebCore::StringHash,
WTF::HashTraits<WebCore::StringImpl*>, WTF::HashTraits<WebCore::StringImpl*>
>::addPassingHashCode<WebCore::UCharBuffer, WebCore::UCharBuffer,
WTF::HashSetTranslatorAdapter<WebCore::StringImpl*,
WTF::HashTraits<WebCore::StringImpl*>, WebCore::UCharBuffer,
WebCore::UCharBufferTranslator> > (this=0x463570, key=@0x7b9d2f58,
extra=@0x7b9d2f58)
    at ./JavaScriptCore/wtf/HashTable.h:702
#5  0x2a03cd9c in WTF::HashSet<WebCore::StringImpl*, WebCore::StringHash,
WTF::HashTraits<WebCore::StringImpl*> >::add<WebCore::UCharBuffer,
WebCore::UCharBufferTranslator> (this=0x463570, value=@0x7b9d2f58) at
./JavaScriptCore/wtf/HashSet.h:215
#6  0x2a03879c in WebCore::AtomicString::add (s=0x474c40, length=749940800)
at WebCore/platform/text/AtomicString.cpp:175
#7  0x29b941a4 in AtomicString (this=0x7b9d420c, s=0x474c40,
length=749940800) at ./WebCore/platform/text/AtomicString.h:37
#8  0x2a265d94 in WebCore::CSSParserString::operator WebCore::AtomicString
(this=0x7b9d3030)
    at ./WebCore/css/CSSParserValues.h:37
#9  0x2a262bdc in cssyyparse (parser=0x7b9d43e8) at
WebCore/css/CSSGrammar.y:979
#10 0x29ae1980 in WebCore::CSSParser::parseSheet (this=0x7b9d43e8,
sheet=0x479598, string=@0x7b9d44f0)
    at WebCore/css/CSSParser.cpp:225
#11 0x29b71b5a in WebCore::CSSStyleSheet::parseString (this=0x479598,
string=@0x7b9d44f0, strict=true)
    at WebCore/css/CSSStyleSheet.cpp:159
#12 0x29b3ceb4 in parseUASheet (
    characters=0x2a5fd020
"html,body,div{display:block}body{margin:8px}div:focus,span:focus{outline:auto
5px -webkit-focus-ring-color}", size=107) at
WebCore/css/CSSStyleSelector.cpp:478
#13 0x29b3f19a in loadSimpleDefaultStyle () at
WebCore/css/CSSStyleSelector.cpp:516
#14 0x29b403d4 in CSSStyleSelector (this=0x479198, doc=0x475458,
userStyleSheet=@0x7b9d45fc, styleSheets=0x474c40,
    mappedElementSheet=0x0, strictParsing=false,
matchAuthorAndUserStyles=true) at WebCore/css/CSSStyleSelector.cpp:398
#15 0x29bb2944 in WebCore::Document::attach (this=0x475458) at
WebCore/dom/Document.cpp:1244
#16 0x29f5a714 in WebCore::Frame::setDocument (this=0x463140,
newDoc=@0x7b9d46bc) at WebCore/page/Frame.cpp:238
#17 0x29eb052e in WebCore::FrameLoader::begin (this=0x464c04, url=@0x464d34,
dispatch=false, origin=0x0)
    at WebCore/loader/FrameLoader.cpp:942
#18 0x29eb5bc0 in WebCore::FrameLoader::receivedFirstData (this=0x464c04) at
WebCore/loader/FrameLoader.cpp:874
#19 0x29eb5ffa in WebCore::FrameLoader::setEncoding (this=0x464c04,
name=@0x7b9d47b4, userChosen=false)
    at WebCore/loader/FrameLoader.cpp:1878
#20 0x29992276 in WebKit::FrameLoaderClient::committedLoad (this=0x464770,
loader=0x46efd8, data=0x0, length=0)
    at WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:177
#21 0x29990d34 in WebKit::FrameLoaderClient::finishedLoading (this=0x464770,
documentLoader=0x46efd8)
    at WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:603
#22 0x29eba454 in WebCore::FrameLoader::finishedLoadingDocument
(this=0x464c04, loader=0x46efd8)

could you help me please.

regards.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-dev/attachments/20081119/0957d693/attachment.html>