[Webkit-unassigned] [Bug 10093] New: Warnings from MallocDebug and crash under libgMalloc related to ListMarkerBox

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=10093

           Summary: Warnings from MallocDebug and crash under libgMalloc
                    related to ListMarkerBox
           Product: WebKit
           Version: 420+ (nightly)
          Platform: Macintosh
               URL: http://flickr.com/photos/agentdero/173537169/
        OS/Version: Mac OS X 10.4
            Status: NEW
          Severity: normal
          Priority: P2
         Component: New Bugs
        AssignedTo: webkit-unassigned at opendarwin.org
        ReportedBy: opendarwin.org at bdash.net.nz


Steps to reproduce:
The warnings under MallocDebug were 100% reproducible for me last night, but
now they only happen occasionally.  No clean build or anything in between.

1) Load the given URL.
2) Hit refresh.
3) Observe the MallocDebug warnings printed to the controlling terminal.

After noticing this issue, I reproduced it with a copy of the relevant files
saved to disk.  I then had run-webkit-tests test this save paged twice in
succession while running under libgmalloc.  It crashed in code related to
WebCore::ListMarkerBox::destroy.

I can only observe this when building Debug, but I guess that is due to the
custom allocator used for Release builds.  As I mentioned above, it used to be
100% reproducible but is now much more sporadic.


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.