[Webkit-unassigned] [Bug 9016] New: crash @ live.com in TreeShared::ref because accessing RenderTextField::text() can destroy the RenderTextField

bugzilla-daemon at opendarwin.org bugzilla-daemon at opendarwin.org
Sat May 20 14:00:56 PDT 2006


http://bugzilla.opendarwin.org/show_bug.cgi?id=9016

           Summary: crash @ live.com in TreeShared::ref because accessing
                    RenderTextField::text() can destroy the RenderTextField
           Product: WebKit
           Version: 420+ (nightly)
          Platform: Macintosh
               URL: http://www.live.com
        OS/Version: Mac OS X 10.4
            Status: NEW
          Severity: normal
          Priority: P1
         Component: Forms
        AssignedTo: webkit-unassigned at opendarwin.org
        ReportedBy: ggaren at apple.com
                CC: adele at apple.com


You can see the evolution of this crash most clearly if you set a  breakpoint
on ~RenderTextField. You'll notice that RenderTextField::text() ends up calling
RenderTextField:~RenderTextField, so the RenderTextField destroys itself.

The issue here is that the RenderTextField accesses innerText() on its
associated HTMLElement. That access can force a recalcStyle, which can destroy
the renderer.

(gdb) c
Continuing.
Program received signal:  "EXC_BAD_ACCESS".
(gdb) frame
#0  0x01b81cc0 in WebCore::TreeShared<WebCore::Node>::ref (this=0x55555555)
51          void ref() { ++m_refCount;  }
(gdb) bt
#0  0x01b81cc0 in WebCore::TreeShared<WebCore::Node>::ref (this=0x55555555)
#1  0x01b8fab8 in WTF::RefPtr<WebCore::Document>::RefPtr (this=0x132452d4,
ptr=0x55555555)
#2  0x01793478 in WebCore::Range::Range (this=0x132452d0,
ownerDocument=0x55555555)
#3  0x01796758 in WebCore::rangeOfContents (node=0x184ab050)
#4  0x01775d3c in WebCore::HTMLElement::innerText (this=0x184ab050)
#5  0x0199d988 in WebCore::RenderTextField::text (this=0x184aaf9c)
#6  0x0199e2dc in WebCore::RenderTextField::updateFromElement (this=0x184aaf9c)
#7  0x0185b6dc in WebCore::HTMLGenericFormElement::attach (this=0x184aad50)
#8  0x01859e6c in WebCore::HTMLInputElement::attach (this=0x184aad50)
#9  0x018af478 in WebCore::ContainerNode::appendChild (this=0x184aa590,
newChild=@0xbfff6c94, ec=@0xbfff6cc0)
#10 0x01a7f94c in KJS::DOMNodeProtoFunc::callAsFunction (this=0x17ed6618,
exec=0xbfff7020, thisObj=0x17c869a0, args=@0xbfff6d98)
#11 0x0103efd0 in KJS::JSObject::call (this=0x17ed6618, exec=0xbfff7020,
thisObj=0x17c869a0, args=@0xbfff6d98)
#12 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x17ffadd0,
exec=0xbfff7020)
#13 0x01030c54 in KJS::ExprStatementNode::execute (this=0x17ffad00,
exec=0xbfff7020)
#14 0x01030adc in KJS::IfNode::execute (this=0x17ffac30, exec=0xbfff7020)
#15 0x0102d380 in KJS::SourceElementsNode::execute (this=0x17ffcde0,
exec=0xbfff7020)
#16 0x0102af08 in KJS::BlockNode::execute (this=0x17ff1920, exec=0xbfff7020)
#17 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x18024508,
exec=0xbfff7020)
#18 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x18024508,
exec=0xbfff7470, thisObj=0x18028e50, args=@0xbfff7158)
#19 0x0103efd0 in KJS::JSObject::call (this=0x18024508, exec=0xbfff7470,
thisObj=0x18028e50, args=@0xbfff7158)
#20 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x18423930,
exec=0xbfff7470)
#21 0x01037c5c in KJS::AssignResolveNode::evaluate (this=0x18423b10,
exec=0xbfff7470)
#22 0x01030c54 in KJS::ExprStatementNode::execute (this=0x18423b30,
exec=0xbfff7470)
#23 0x0102d380 in KJS::SourceElementsNode::execute (this=0x184231e0,
exec=0xbfff7470)
#24 0x0102af08 in KJS::BlockNode::execute (this=0x18425d30, exec=0xbfff7470)
#25 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x17e559a0,
exec=0xbfff7470)
#26 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x17e559a0,
exec=0xbfff77d0, thisObj=0x17e4f9d0, args=@0xbfff75a8)
#27 0x0103efd0 in KJS::JSObject::call (this=0x17e559a0, exec=0xbfff77d0,
thisObj=0x17e4f9d0, args=@0xbfff75a8)
#28 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x17f52690,
exec=0xbfff77d0)
#29 0x01030c54 in KJS::ExprStatementNode::execute (this=0x17f526b0,
exec=0xbfff77d0)
#30 0x0102d380 in KJS::SourceElementsNode::execute (this=0x17f558f0,
exec=0xbfff77d0)
#31 0x0102af08 in KJS::BlockNode::execute (this=0x17f52750, exec=0xbfff77d0)
#32 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x17e2eef8,
exec=0xbfff77d0)
#33 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x17e2eef8,
exec=0xbfff7c20, thisObj=0x17e2d1a8, args=@0xbfff7908)
#34 0x0103efd0 in KJS::JSObject::call (this=0x17e2eef8, exec=0xbfff7c20,
thisObj=0x17e2d1a8, args=@0xbfff7908)
#35 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x18284760,
exec=0xbfff7c20)
#36 0x01037c5c in KJS::AssignResolveNode::evaluate (this=0x18284780,
exec=0xbfff7c20)
#37 0x01030c54 in KJS::ExprStatementNode::execute (this=0x182847a0,
exec=0xbfff7c20)
#38 0x0102d380 in KJS::SourceElementsNode::execute (this=0x18283a40,
exec=0xbfff7c20)
#39 0x0102af08 in KJS::BlockNode::execute (this=0x18285980, exec=0xbfff7c20)
#40 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x1806fb20,
exec=0xbfff7c20)
#41 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x1806fb20,
exec=0xbfff80b0, thisObj=0x180390b8, args=@0xbfff7d58)
#42 0x0103efd0 in KJS::JSObject::call (this=0x1806fb20, exec=0xbfff80b0,
thisObj=0x180390b8, args=@0xbfff7d58)
#43 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x18270370,
exec=0xbfff80b0)
#44 0x01030c54 in KJS::ExprStatementNode::execute (this=0x18270390,
exec=0xbfff80b0)
#45 0x0102d230 in KJS::SourceElementsNode::execute (this=0x182703b0,
exec=0xbfff80b0)
#46 0x0102af08 in KJS::BlockNode::execute (this=0x18270460, exec=0xbfff80b0)
#47 0x01030adc in KJS::IfNode::execute (this=0x18270490, exec=0xbfff80b0)
#48 0x0102d380 in KJS::SourceElementsNode::execute (this=0x182702d0,
exec=0xbfff80b0)
#49 0x0102af08 in KJS::BlockNode::execute (this=0x182706a0, exec=0xbfff80b0)
#50 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x1803a708,
exec=0xbfff80b0)
#51 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x1803a708,
exec=0xbfff8630, thisObj=0x136e5450, args=@0xbfff81f4)
#52 0x0103efd0 in KJS::JSObject::call (this=0x1803a708, exec=0xbfff8630,
thisObj=0x136e5450, args=@0xbfff81f4)
#53 0x01034afc in KJS::FunctionCallResolveNode::evaluate (this=0x17d9fe40,
exec=0xbfff8630)
#54 0x01030c54 in KJS::ExprStatementNode::execute (this=0x17dd7fb0,
exec=0xbfff8630)
#55 0x0102d230 in KJS::SourceElementsNode::execute (this=0x17dd7fd0,
exec=0xbfff8630)
#56 0x0102af08 in KJS::BlockNode::execute (this=0x17dd7ff0, exec=0xbfff8630)
#57 0x0102c1d4 in KJS::TryNode::execute (this=0x17dd8030, exec=0xbfff8630)
#58 0x01030adc in KJS::IfNode::execute (this=0x17dd8050, exec=0xbfff8630)
#59 0x0102d230 in KJS::SourceElementsNode::execute (this=0x17dd8070,
exec=0xbfff8630)
#60 0x0102af08 in KJS::BlockNode::execute (this=0x17dd8090, exec=0xbfff8630)
#61 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x180749e0,
exec=0xbfff8630)
#62 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x180749e0,
exec=0xbfff8dc0, thisObj=0x136e5450, args=@0xbfff890c)
#63 0x0103efd0 in KJS::JSObject::call (this=0x180749e0, exec=0xbfff8dc0,
thisObj=0x136e5450, args=@0xbfff890c)
#64 0x0100dcbc in KJS::ArrayProtoFunc::callAsFunction (this=0x17e60920,
exec=0xbfff8dc0, thisObj=0x18075818, args=@0xbfff8b38)
#65 0x0103efd0 in KJS::JSObject::call (this=0x17e60920, exec=0xbfff8dc0,
thisObj=0x18075818, args=@0xbfff8b38)
#66 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x17f12940,
exec=0xbfff8dc0)
#67 0x01030c54 in KJS::ExprStatementNode::execute (this=0x17f12960,
exec=0xbfff8dc0)
#68 0x01030b60 in KJS::IfNode::execute (this=0x17f12980, exec=0xbfff8dc0)
#69 0x0102d380 in KJS::SourceElementsNode::execute (this=0x17f12350,
exec=0xbfff8dc0)
#70 0x0102af08 in KJS::BlockNode::execute (this=0x17f129c0, exec=0xbfff8dc0)
#71 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x17cb5a60,
exec=0xbfff8dc0)
#72 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x17cb5a60,
exec=0xbfff9120, thisObj=0x17cb6898, args=@0xbfff8ef8)
#73 0x0103efd0 in KJS::JSObject::call (this=0x17cb5a60, exec=0xbfff9120,
thisObj=0x17cb6898, args=@0xbfff8ef8)
#74 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x17dd7250,
exec=0xbfff9120)
#75 0x01030c54 in KJS::ExprStatementNode::execute (this=0x17dd7270,
exec=0xbfff9120)
#76 0x0102d380 in KJS::SourceElementsNode::execute (this=0x17ddd750,
exec=0xbfff9120)
#77 0x0102af08 in KJS::BlockNode::execute (this=0x17dd7310, exec=0xbfff9120)
#78 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x17e2be30,
exec=0xbfff9120)
#79 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x17e2be30,
exec=0xbfff96e0, thisObj=0x18075e70, args=@0xbfff9258)
#80 0x0103efd0 in KJS::JSObject::call (this=0x17e2be30, exec=0xbfff96e0,
thisObj=0x18075e70, args=@0xbfff9258)
#81 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x17f4e4e0,
exec=0xbfff96e0)
#82 0x01030c54 in KJS::ExprStatementNode::execute (this=0x17f4e500,
exec=0xbfff96e0)
#83 0x0102d380 in KJS::SourceElementsNode::execute (this=0x17f4e400,
exec=0xbfff96e0)
#84 0x0102af08 in KJS::BlockNode::execute (this=0x17f4e690, exec=0xbfff96e0)
#85 0x01030adc in KJS::IfNode::execute (this=0x17f4e6b0, exec=0xbfff96e0)
#86 0x0102d230 in KJS::SourceElementsNode::execute (this=0x17f4e6d0,
exec=0xbfff96e0)
#87 0x0102af08 in KJS::BlockNode::execute (this=0x17f4e6f0, exec=0xbfff96e0)
#88 0x01030adc in KJS::IfNode::execute (this=0x17f4e7c0, exec=0xbfff96e0)
#89 0x0102d380 in KJS::SourceElementsNode::execute (this=0x17f4de60,
exec=0xbfff96e0)
#90 0x0102af08 in KJS::BlockNode::execute (this=0x17f4e860, exec=0xbfff96e0)
#91 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x17e2e590,
exec=0xbfff96e0)
#92 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x17e2e590,
exec=0xbfff9aa0, thisObj=0x1803a200, args=@0xbfff9818)
#93 0x0103efd0 in KJS::JSObject::call (this=0x17e2e590, exec=0xbfff9aa0,
thisObj=0x1803a200, args=@0xbfff9818)
#94 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x18273950,
exec=0xbfff9aa0)
#95 0x01030c54 in KJS::ExprStatementNode::execute (this=0x18273970,
exec=0xbfff9aa0)
#96 0x01030adc in KJS::IfNode::execute (this=0x18273aa0, exec=0xbfff9aa0)
#97 0x0102d380 in KJS::SourceElementsNode::execute (this=0x18273300,
exec=0xbfff9aa0)
#98 0x0102af08 in KJS::BlockNode::execute (this=0x18273ae0, exec=0xbfff9aa0)
#99 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x1803a120,
exec=0xbfff9aa0)
#100 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x1803a120,
exec=0xbfff9e20, thisObj=0x136e5450, args=@0xbfff9be4)
#101 0x0103efd0 in KJS::JSObject::call (this=0x1803a120, exec=0xbfff9e20,
thisObj=0x136e5450, args=@0xbfff9be4)
#102 0x01034afc in KJS::FunctionCallResolveNode::evaluate (this=0x18272d60,
exec=0xbfff9e20)
#103 0x01030c54 in KJS::ExprStatementNode::execute (this=0x18272d70,
exec=0xbfff9e20)
#104 0x0102d230 in KJS::SourceElementsNode::execute (this=0x18272d90,
exec=0xbfff9e20)
#105 0x0102af08 in KJS::BlockNode::execute (this=0x18272db0, exec=0xbfff9e20)
#106 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x180361b0,
exec=0xbfff9e20)
#107 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x180361b0,
exec=0xbfffa1e0, thisObj=0x1803a200, args=@0xbfff9f58)
#108 0x0103efd0 in KJS::JSObject::call (this=0x180361b0, exec=0xbfffa1e0,
thisObj=0x1803a200, args=@0xbfff9f58)
#109 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x1826f450,
exec=0xbfffa1e0)
#110 0x01030c54 in KJS::ExprStatementNode::execute (this=0x1826f470,
exec=0xbfffa1e0)
#111 0x01030adc in KJS::IfNode::execute (this=0x1826f520, exec=0xbfffa1e0)
#112 0x0102d380 in KJS::SourceElementsNode::execute (this=0x1826ef00,
exec=0xbfffa1e0)
#113 0x0102af08 in KJS::BlockNode::execute (this=0x1826f560, exec=0xbfffa1e0)
#114 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x1806efc0,
exec=0xbfffa1e0)
#115 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x1806efc0,
exec=0xbfffa540, thisObj=0x180390b8, args=@0xbfffa318)
#116 0x0103efd0 in KJS::JSObject::call (this=0x1806efc0, exec=0xbfffa540,
thisObj=0x180390b8, args=@0xbfffa318)
#117 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x182830b0,
exec=0xbfffa540)
#118 0x01030c54 in KJS::ExprStatementNode::execute (this=0x182830d0,
exec=0xbfffa540)
#119 0x0102d380 in KJS::SourceElementsNode::execute (this=0x182803e0,
exec=0xbfffa540)
#120 0x0102af08 in KJS::BlockNode::execute (this=0x18283110, exec=0xbfffa540)
#121 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x1806fa40,
exec=0xbfffa540)
#122 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x1806fa40,
exec=0xbfffa8a0, thisObj=0x180390b8, args=@0xbfffa678)
#123 0x0103efd0 in KJS::JSObject::call (this=0x1806fa40, exec=0xbfffa8a0,
thisObj=0x180390b8, args=@0xbfffa678)
#124 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x17f52690,
exec=0xbfffa8a0)
#125 0x01030c54 in KJS::ExprStatementNode::execute (this=0x17f526b0,
exec=0xbfffa8a0)
#126 0x0102d380 in KJS::SourceElementsNode::execute (this=0x17f558f0,
exec=0xbfffa8a0)
#127 0x0102af08 in KJS::BlockNode::execute (this=0x17f52750, exec=0xbfffa8a0)
#128 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x17e2eef8,
exec=0xbfffa8a0)
#129 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x17e2eef8,
exec=0xbfffacf0, thisObj=0x17e2d1a8, args=@0xbfffa9d8)
#130 0x0103efd0 in KJS::JSObject::call (this=0x17e2eef8, exec=0xbfffacf0,
thisObj=0x17e2d1a8, args=@0xbfffa9d8)
#131 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x17fc4630,
exec=0xbfffacf0)
#132 0x01037c5c in KJS::AssignResolveNode::evaluate (this=0x17fddaf0,
exec=0xbfffacf0)
#133 0x01030c54 in KJS::ExprStatementNode::execute (this=0x17fb87f0,
exec=0xbfffacf0)
#134 0x0102d380 in KJS::SourceElementsNode::execute (this=0x17fd87f0,
exec=0xbfffacf0)
#135 0x0102af08 in KJS::BlockNode::execute (this=0x17fbc710, exec=0xbfffacf0)
#136 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x180348f8,
exec=0xbfffacf0)
#137 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x180348f8,
exec=0xbfffb1a0, thisObj=0x136e5450, args=@0xbfffae34)
#138 0x0103efd0 in KJS::JSObject::call (this=0x180348f8, exec=0xbfffb1a0,
thisObj=0x136e5450, args=@0xbfffae34)
#139 0x01034afc in KJS::FunctionCallResolveNode::evaluate (this=0x17def560,
exec=0xbfffb1a0)
#140 0x01030c54 in KJS::ExprStatementNode::execute (this=0x17fe7280,
exec=0xbfffb1a0)
#141 0x0102d380 in KJS::SourceElementsNode::execute (this=0x17fe7260,
exec=0xbfffb1a0)
#142 0x0102af08 in KJS::BlockNode::execute (this=0x17fe72c0, exec=0xbfffb1a0)
#143 0x01030adc in KJS::IfNode::execute (this=0x17fe72e0, exec=0xbfffb1a0)
#144 0x0102d230 in KJS::SourceElementsNode::execute (this=0x17fe7300,
exec=0xbfffb1a0)
#145 0x0102af08 in KJS::BlockNode::execute (this=0x17fe7320, exec=0xbfffb1a0)
#146 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x18034f88,
exec=0xbfffb1a0)
#147 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x18034f88,
exec=0xbfffb580, thisObj=0x136e5450, args=@0xbfffb2e4)
#148 0x0103efd0 in KJS::JSObject::call (this=0x18034f88, exec=0xbfffb580,
thisObj=0x136e5450, args=@0xbfffb2e4)
#149 0x01034afc in KJS::FunctionCallResolveNode::evaluate (this=0x182e8110,
exec=0xbfffb580)
#150 0x01030c54 in KJS::ExprStatementNode::execute (this=0x182e8120,
exec=0xbfffb580)
#151 0x01030adc in KJS::IfNode::execute (this=0x182e8140, exec=0xbfffb580)
#152 0x0102d380 in KJS::SourceElementsNode::execute (this=0x182e7d80,
exec=0xbfffb580)
#153 0x0102af08 in KJS::BlockNode::execute (this=0x182e81b0, exec=0xbfffb580)
#154 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x1801bd30,
exec=0xbfffb580)
#155 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x1801bd30,
exec=0xbfffba90, thisObj=0x136e5450, args=@0xbfffb6c4)
#156 0x0103efd0 in KJS::JSObject::call (this=0x1801bd30, exec=0xbfffba90,
thisObj=0x136e5450, args=@0xbfffb6c4)
#157 0x01034afc in KJS::FunctionCallResolveNode::evaluate (this=0x18286a00,
exec=0xbfffba90)
#158 0x01030c54 in KJS::ExprStatementNode::execute (this=0x182061a0,
exec=0xbfffba90)
#159 0x01030adc in KJS::IfNode::execute (this=0x182869b0, exec=0xbfffba90)
#160 0x0102d380 in KJS::SourceElementsNode::execute (this=0x182632d0,
exec=0xbfffba90)
#161 0x0102af08 in KJS::BlockNode::execute (this=0x182acab0, exec=0xbfffba90)
#162 0x01030adc in KJS::IfNode::execute (this=0x17fa3b30, exec=0xbfffba90)
#163 0x0102d380 in KJS::SourceElementsNode::execute (this=0x1829d070,
exec=0xbfffba90)
#164 0x0102af08 in KJS::BlockNode::execute (this=0x182cb740, exec=0xbfffba90)
#165 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x1802bf88,
exec=0xbfffba90)
#166 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x1802bf88,
exec=0xbfffbdf0, thisObj=0x18018990, args=@0xbfffbbc8)
#167 0x0103efd0 in KJS::JSObject::call (this=0x1802bf88, exec=0xbfffbdf0,
thisObj=0x18018990, args=@0xbfffbbc8)
#168 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x182e8fb0,
exec=0xbfffbdf0)
#169 0x01030c54 in KJS::ExprStatementNode::execute (this=0x182e8fd0,
exec=0xbfffbdf0)
#170 0x0102d380 in KJS::SourceElementsNode::execute (this=0x182e81f0,
exec=0xbfffbdf0)
#171 0x0102af08 in KJS::BlockNode::execute (this=0x182e9070, exec=0xbfffbdf0)
#172 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x1802ebc0,
exec=0xbfffbdf0)
#173 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x1802ebc0,
exec=0xbfffc150, thisObj=0x1802d8b8, args=@0xbfffbf28)
#174 0x0103efd0 in KJS::JSObject::call (this=0x1802ebc0, exec=0xbfffc150,
thisObj=0x1802d8b8, args=@0xbfffbf28)
#175 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x182e72c0,
exec=0xbfffc150)
#176 0x0102e614 in KJS::ReturnNode::execute (this=0x182e72e0, exec=0xbfffc150)
#177 0x0102d230 in KJS::SourceElementsNode::execute (this=0x182e7300,
exec=0xbfffc150)
#178 0x0102af08 in KJS::BlockNode::execute (this=0x182e7320, exec=0xbfffc150)
#179 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x1802ea70,
exec=0xbfffc150)
#180 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x1802ea70,
exec=0xbfffc4b0, thisObj=0x1802d8b8, args=@0xbfffc288)
#181 0x0103efd0 in KJS::JSObject::call (this=0x1802ea70, exec=0xbfffc4b0,
thisObj=0x1802d8b8, args=@0xbfffc288)
#182 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x182db700,
exec=0xbfffc4b0)
#183 0x01030c54 in KJS::ExprStatementNode::execute (this=0x182db720,
exec=0xbfffc4b0)
#184 0x0102d230 in KJS::SourceElementsNode::execute (this=0x182db740,
exec=0xbfffc4b0)
#185 0x0102af08 in KJS::BlockNode::execute (this=0x182db760, exec=0xbfffc4b0)
#186 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x1802e0d0,
exec=0xbfffc4b0)
#187 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x1802e0d0,
exec=0xbfffc810, thisObj=0x1802df48, args=@0xbfffc5e8)
#188 0x0103efd0 in KJS::JSObject::call (this=0x1802e0d0, exec=0xbfffc810,
thisObj=0x1802df48, args=@0xbfffc5e8)
#189 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x17fdcce0,
exec=0xbfffc810)
#190 0x01030c54 in KJS::ExprStatementNode::execute (this=0x17fdb5f0,
exec=0xbfffc810)
#191 0x0102d380 in KJS::SourceElementsNode::execute (this=0x17fcea70,
exec=0xbfffc810)
#192 0x0102af08 in KJS::BlockNode::execute (this=0x17fd30d0, exec=0xbfffc810)
#193 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x18037ad8,
exec=0xbfffc810)
#194 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x18037ad8,
exec=0xbfffcb70, thisObj=0x18034888, args=@0xbfffc948)
#195 0x0103efd0 in KJS::JSObject::call (this=0x18037ad8, exec=0xbfffcb70,
thisObj=0x18034888, args=@0xbfffc948)
#196 0x01034294 in KJS::FunctionCallDotNode::evaluate (this=0x17f576f0,
exec=0xbfffcb70)
#197 0x01030c54 in KJS::ExprStatementNode::execute (this=0x17f57710,
exec=0xbfffcb70)
#198 0x0102d380 in KJS::SourceElementsNode::execute (this=0x17f56fe0,
exec=0xbfffcb70)
#199 0x0102af08 in KJS::BlockNode::execute (this=0x17f577b0, exec=0xbfffcb70)
#200 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x17e2d4b8,
exec=0xbfffcb70)
#201 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x17e2d4b8,
exec=0xbfffd330, thisObj=0x136e5450, args=@0xbfffccb4)
#202 0x0103efd0 in KJS::JSObject::call (this=0x17e2d4b8, exec=0xbfffd330,
thisObj=0x136e5450, args=@0xbfffccb4)
#203 0x01034afc in KJS::FunctionCallResolveNode::evaluate (this=0x17f5a0e0,
exec=0xbfffd330)
#204 0x0102abc0 in KJS::AssignExprNode::evaluate (this=0x17f5a0f0,
exec=0xbfffd330)
#205 0x010310dc in KJS::VarDeclNode::evaluate (this=0x17f5a100,
exec=0xbfffd330)
#206 0x01030f68 in KJS::VarDeclListNode::evaluate (this=0x17f5a120,
exec=0xbfffd330)
#207 0x01030e20 in KJS::VarStatementNode::execute (this=0x17f5a130,
exec=0xbfffd330)
#208 0x0102d230 in KJS::SourceElementsNode::execute (this=0x17f5a150,
exec=0xbfffd330)
#209 0x0102af08 in KJS::BlockNode::execute (this=0x17f5a340, exec=0xbfffd330)
#210 0x0102faa0 in KJS::ForNode::execute (this=0x17f5a360, exec=0xbfffd330)
#211 0x0102d380 in KJS::SourceElementsNode::execute (this=0x17f59990,
exec=0xbfffd330)
#212 0x0102af08 in KJS::BlockNode::execute (this=0x17f5a490, exec=0xbfffd330)
#213 0x01030adc in KJS::IfNode::execute (this=0x17f5a750, exec=0xbfffd330)
#214 0x0102d380 in KJS::SourceElementsNode::execute (this=0x17f580d0,
exec=0xbfffd330)
#215 0x0102af08 in KJS::BlockNode::execute (this=0x17f5a790, exec=0xbfffd330)
#216 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x17e2f320,
exec=0xbfffd330)
#217 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x17e2f320,
exec=0xbfffd6b0, thisObj=0x136e5450, args=@0xbfffd474)
#218 0x0103efd0 in KJS::JSObject::call (this=0x17e2f320, exec=0xbfffd6b0,
thisObj=0x136e5450, args=@0xbfffd474)
#219 0x01034afc in KJS::FunctionCallResolveNode::evaluate (this=0x17dee4b0,
exec=0xbfffd6b0)
#220 0x01030c54 in KJS::ExprStatementNode::execute (this=0x17dee4c0,
exec=0xbfffd6b0)
#221 0x0102d230 in KJS::SourceElementsNode::execute (this=0x17dee4e0,
exec=0xbfffd6b0)
#222 0x0102af08 in KJS::BlockNode::execute (this=0x17dee500, exec=0xbfffd6b0)
#223 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x1801df18,
exec=0xbfffd6b0)
#224 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x1801df18,
exec=0xbfffda90, thisObj=0x136e5450, args=@0xbfffd7f4)
#225 0x0103efd0 in KJS::JSObject::call (this=0x1801df18, exec=0xbfffda90,
thisObj=0x136e5450, args=@0xbfffd7f4)
#226 0x01034afc in KJS::FunctionCallResolveNode::evaluate (this=0x17df0d40,
exec=0xbfffda90)
#227 0x01030c54 in KJS::ExprStatementNode::execute (this=0x17df0d50,
exec=0xbfffda90)
#228 0x01030adc in KJS::IfNode::execute (this=0x17df0d70, exec=0xbfffda90)
#229 0x0102d380 in KJS::SourceElementsNode::execute (this=0x17df0c50,
exec=0xbfffda90)
#230 0x0102af08 in KJS::BlockNode::execute (this=0x17df0db0, exec=0xbfffda90)
#231 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x18024070,
exec=0xbfffda90)
#232 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x18024070,
exec=0xbfffdfa0, thisObj=0x136e5450, args=@0xbfffdbd4)
#233 0x0103efd0 in KJS::JSObject::call (this=0x18024070, exec=0xbfffdfa0,
thisObj=0x136e5450, args=@0xbfffdbd4)
#234 0x01034afc in KJS::FunctionCallResolveNode::evaluate (this=0x17f11c00,
exec=0xbfffdfa0)
#235 0x01030c54 in KJS::ExprStatementNode::execute (this=0x17f11c10,
exec=0xbfffdfa0)
#236 0x01030adc in KJS::IfNode::execute (this=0x17f11c30, exec=0xbfffdfa0)
#237 0x0102d380 in KJS::SourceElementsNode::execute (this=0x17f11a40,
exec=0xbfffdfa0)
#238 0x0102af08 in KJS::BlockNode::execute (this=0x17f11e90, exec=0xbfffdfa0)
#239 0x01030adc in KJS::IfNode::execute (this=0x17f11f10, exec=0xbfffdfa0)
#240 0x0102d230 in KJS::SourceElementsNode::execute (this=0x17f11f30,
exec=0xbfffdfa0)
#241 0x0102af08 in KJS::BlockNode::execute (this=0x17f11f50, exec=0xbfffdfa0)
#242 0x01019730 in KJS::DeclaredFunctionImp::execute (this=0x17e2ec90,
exec=0xbfffdfa0)
#243 0x01018d58 in KJS::FunctionImp::callAsFunction (this=0x17e2ec90,
exec=0x136e5ce4, thisObj=0x180176f8, args=@0xbfffe144)
#244 0x0103efd0 in KJS::JSObject::call (this=0x17e2ec90, exec=0x136e5ce4,
thisObj=0x180176f8, args=@0xbfffe144)
#245 0x01a8292c in KJS::JSAbstractEventListener::handleEvent (this=0x17f6b170,
ele=0x18484ba0, isWindowEvent=false)
#246 0x01a43f54 in WebCore::EventTargetNode::handleLocalEvents
(this=0x17ded650, evt=0x18484ba0, useCapture=false)
#247 0x01a443a8 in WebCore::EventTargetNode::dispatchGenericEvent
(this=0x17ded650, e=@0xbfffe2e8, tempEvent=true)
#248 0x01a44d60 in WebCore::EventTargetNode::dispatchEvent (this=0x17ded650,
e=@0xbfffe348, ec=@0xbfffe34c, tempEvent=true)
#249 0x01a44e50 in WebCore::EventTargetNode::dispatchHTMLEvent
(this=0x17ded650, eventType=@0x1d10f38, canBubbleArg=false,
cancelableArg=false)
#250 0x01ad17fc in WebCore::HTMLScriptElement::notifyFinished (this=0x17ded650,
o=0x17f70a80)
#251 0x018c70c0 in WebCore::CachedScript::checkNotify (this=0x17f70a80)
#252 0x018c720c in WebCore::CachedScript::data (this=0x17f70a80,
data=@0x17f4c554, eof=true)
#253 0x018c9cd8 in WebCore::Loader::receivedAllData (this=0x13255860,
job=0x17f60320, allData=0x17f2cc30)
#254 0x017a4344 in -[KWQResourceLoader finishJobAndHandle:] (self=0x17f56b00,
_cmd=0x1b3a8e4, data=0x17f2cc30)
#255 0x017a45f4 in -[KWQResourceLoader finishWithData:] (self=0x17f56b00,
_cmd=0x1b3a914, data=0x17f2cc30)
#256 0x0033e448 in -[WebSubresourceLoader didFinishLoading] (self=0x17f6c880,
_cmd=0x90a95ac4)
#257 0x00342a54 in -[WebLoader connectionDidFinishLoading:] (self=0x17f6c880,
_cmd=0x90a91a94, con=0x17f5cf10)
#258 0x929a984c in -[NSURLConnection(NSURLConnectionInternal)
_sendDidFinishLoadingCallback] ()
#259 0x929a7ab8 in -[NSURLConnection(NSURLConnectionInternal) _sendCallbacks]
()
#260 0x929a7810 in _sendCallbacks ()
#261 0x907e44cc in __CFRunLoopDoSources0 ()
#262 0x907e39fc in __CFRunLoopRun ()
#263 0x907e347c in CFRunLoopRunSpecific ()
#264 0x9321e980 in RunCurrentEventLoopInMode ()
#265 0x9321e014 in ReceiveNextEventCommon ()
#266 0x9321de80 in BlockUntilNextEventMatchingListInMode ()
#267 0x93720e84 in _DPSNextEvent ()
#268 0x93720b48 in -[NSApplication
nextEventMatchingMask:untilDate:inMode:dequeue:] ()
#269 0x00006df4 in ?? ()
#270 0x9371d08c in -[NSApplication run] ()
#271 0x9380dbfc in NSApplicationMain ()
#272 0x0005cb98 in ?? ()
#273 0x0005ca40 in ?? ()
Current language:  auto; currently c++
(gdb)


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list