[Webkit-unassigned] [Bug 6398] New: REGRESSION (TOT): crash in KWQKHTMLPart::generateFrameName due to nil _bridge

bugzilla-daemon at opendarwin.org bugzilla-daemon at opendarwin.org
Fri Jan 6 10:28:12 PST 2006


http://bugzilla.opendarwin.org/show_bug.cgi?id=6398

           Summary: REGRESSION (TOT): crash in
                    KWQKHTMLPart::generateFrameName due to nil _bridge
           Product: WebKit
           Version: 412+
          Platform: Macintosh
               URL: http://www.the-lizard-lounge.com/
        OS/Version: Mac OS X 10.4
            Status: NEW
          Severity: normal
          Priority: P1
         Component: Frames
        AssignedTo: webkit-unassigned at opendarwin.org
        ReportedBy: sullivan at apple.com


To reproduce:

1. Go to http://www.the-lizard-lounge.com/
2. Click "Web Design" link at bottom of page

This crashes with the following abbreviated backtrace:

#0  0x01d46d70 in KWQKHTMLPart::generateFrameName (this=0x0) at /Volumes/Big/johnsullivan/
Projects/Labyrinth/WebCore/kwq/KWQKHTMLPart.mm:205
#1  0x01dbc4e8 in KHTMLPart::requestFrameName (this=0x0) at /Volumes/Big/johnsullivan/Projects/
Labyrinth/WebCore/khtml/khtml_part.cpp:1742
#2  0x01d59780 in KWQKHTMLPart::setName (this=0xd96fe00, name=@0xbfffcfd0) at /Volumes/Big/
johnsullivan/Projects/Labyrinth/WebCore/kwq/KWQKHTMLPart.mm:3830
#3  0x01daf4a8 in -[WebCoreBridge setName:] (self=0x22d13490, _cmd=0x90a31188, 
name=0x22de2c60) at /Volumes/Big/johnsullivan/Projects/Labyrinth/WebCore/kwq/
WebCoreBridge.mm:1627
#4  0x01257880 in -[WebFrame(WebPrivate) 
_continueLoadRequestAfterNewWindowPolicy:frameName:formState:] (self=0xe132e10, 
_cmd=0x909da6e8, request=0x22dec3e0, frameName=0x22de2c60, formState=0x0) at /Volumes/
Big/johnsullivan/Projects/Labyrinth/WebKit/WebView.subproj/WebFrame.m:1825
#5  0x0125011c in -[NSObject(WebExtraPerformMethod) 
performSelector:withObject:withObject:withObject:] (self=0xe132e10, _cmd=0x90a253d0, 
aSelector=0x909da6e8, object1=0x22dec3e0, object2=0x22de2c60, object3=0x0) at /Volumes/Big/
johnsullivan/Projects/Labyrinth/WebKit/WebView.subproj/WebFrame.m:125
#6  0x01256be8 in -[WebFrame(WebPrivate) _continueAfterNewWindowPolicy:] (self=0xe132e10, 
_cmd=0x909da638, policy=WebPolicyUse) at /Volumes/Big/johnsullivan/Projects/Labyrinth/WebKit/
WebView.subproj/WebFrame.m:1660
#7  0x012a0af4 in -[WebPolicyDecisionListener _usePolicy:] (self=0x22d82c20, _cmd=0x909feba8, 
policy=WebPolicyUse) at /Volumes/Big/johnsullivan/Projects/Labyrinth/WebKit/WebView.subproj/
WebPolicyDelegate.m:90
#8  0x012a0bcc in -[WebPolicyDecisionListener use] (self=0x22d82c20, _cmd=0x90a3aa70) at /
Volumes/Big/johnsullivan/Projects/Labyrinth/WebKit/WebView.subproj/WebPolicyDelegate.m:106
#9  0x00133268 in -[BrowserWebView informDecisionListener:ofPolicyDecision:] (self=0xe166100, 
_cmd=0x18fd68, listener=0x22d82c20, decision=PolicyUse) at /Volumes/Big/johnsullivan/Projects/
Labyrinth/WebBrowser/BrowserWebView.m:1435

The immediate cause of the crash is that _bridge is nil in KWQKHTMLPart::generateFrameName. This 
causes [_bridge generateFrameName] to return nil, which then causes QString::fromNSString() to choke.

This seems likely to be fallout from Maciej's recent refactoring of where the frame traversal code lives.

-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list