[Webkit-unassigned] [Bug 10852] REGRESSION: Reproducible crash in XMLHttpRequest::abort()

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=10852


opendarwin.org at mitzpettel.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |opendarwin.org at mitzpettel.co
                   |                            |m
                URL|                            |http://video.google.com/vide
                   |                            |oplay?docid=3573852431733156
                   |                            |394&q=kitten
           Keywords|                            |Regression
           Priority|P3                          |P1
            Summary|Random Crash in             |REGRESSION: Reproducible
                   |XMLHttpRequest::abort()     |crash in
                   |                            |XMLHttpRequest::abort()




------- Comment #2 from opendarwin.org at mitzpettel.com  2006-09-16 03:37 PDT -------
I can reproduce an identical - or very similar - crash by going to the URL and
while the video is still playing, clicking a link or just going to about:blank.
No assert in my case (maybe due to different contents of freed memory):

0   <<00000000>>        0xfffeff18 objc_msgSend_rtp + 24
1   com.apple.WebCore           0x01bb8754
WebCore::ResourceLoader::~ResourceLoader [in-charge]() + 276
(ResourceLoaderMac.mm:55)
2   com.apple.WebCore           0x01bb7d28 WebCore::ResourceLoader::kill() + 44
(ResourceLoader.cpp:88)
3   com.apple.WebCore           0x01b2c874 WebCore::XMLHttpRequest::abort() +
84 (xmlhttprequest.cpp:359)
4   com.apple.WebCore           0x01b2d0f4
WebCore::XMLHttpRequest::cancelRequests(WebCore::Document*) + 216
(xmlhttprequest.cpp:578)
5   com.apple.WebCore           0x01a010cc WebCore::Frame::stopLoading(bool) +
1256 (Frame.cpp:349)
6   com.apple.WebCore           0x01a01194 WebCore::Frame::closeURL() + 68
(Frame.cpp:3188)


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.