[Webkit-unassigned] [Bug 13300] Reproducible crash opening anekdot.ru

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=13300





------- Comment #1 from ap at webkit.org  2007-04-07 02:27 PDT -------
Stack trace under GuardMalloc:

#0      0x01630260 in WTF::Vector<WebCore::HTMLImageElement*, 0ul>::size at
Vector.h:395
#1      0x01633360 in WTF::Vector<WebCore::HTMLImageElement*,
0ul>::append<WebCore::HTMLImageElement*> at Vector.h:628
#2      0x010dd0f4 in WebCore::HTMLFormElement::registerImgElement at
HTMLFormElement.cpp:576
#3      0x0135b210 in WebCore::HTMLImageElement::HTMLImageElement at
HTMLImageElement.cpp:51
#4      0x0105fad4 in imageConstructor at HTMLElementFactory.cpp:290
#5      0x01060ad0 in WebCore::HTMLElementFactory::createHTMLElement at
HTMLElementFactory.cpp:475
#6      0x01023b84 in WebCore::HTMLParser::getNode at HTMLParser.cpp:832
#7      0x010240d4 in WebCore::HTMLParser::parseToken at HTMLParser.cpp:224
#8      0x01027d18 in WebCore::HTMLTokenizer::processToken at
HTMLTokenizer.cpp:1590
#9      0x0102b420 in WebCore::HTMLTokenizer::parseTag at
HTMLTokenizer.cpp:1163
#10     0x0102bf88 in WebCore::HTMLTokenizer::write at HTMLTokenizer.cpp:1389
#11     0x01109710 in WebCore::Document::write at Document.cpp:1505
#12     0x012f2758 in KJS::JSHTMLDocumentPrototypeFunction::callAsFunction at
kjs_html.cpp:135
#13     0x00557e3c in KJS::JSObject::call at object.cpp:97
#14     0x0054d268 in KJS::FunctionCallDotNode::evaluate at nodes.cpp:781
#15     0x00549628 in KJS::ExprStatementNode::execute at nodes.cpp:1681
#16     0x00546bb8 in KJS::SourceElementsNode::execute at nodes.cpp:2464
#17     0x00544520 in KJS::BlockNode::execute at nodes.cpp:1657
#18     0x0053d280 in KJS::Interpreter::evaluate at interpreter.cpp:365
#19     0x012f9d28 in WebCore::KJSProxy::evaluate at kjs_proxy.cpp:78
#20     0x0149e298 in WebCore::FrameLoader::executeScript at
FrameLoader.cpp:685
#21     0x01025f38 in WebCore::HTMLTokenizer::scriptExecution at
HTMLTokenizer.cpp:502
#22     0x01028f18 in WebCore::HTMLTokenizer::scriptHandler at
HTMLTokenizer.cpp:452
#23     0x0102957c in WebCore::HTMLTokenizer::parseSpecial at
HTMLTokenizer.cpp:310
#24     0x0102b660 in WebCore::HTMLTokenizer::parseTag at
HTMLTokenizer.cpp:1176
#25     0x0102bf88 in WebCore::HTMLTokenizer::write at HTMLTokenizer.cpp:1389
#26     0x010279fc in WebCore::HTMLTokenizer::notifyFinished at
HTMLTokenizer.cpp:1682
#27     0x01128bdc in WebCore::CachedScript::checkNotify at CachedScript.cpp:93
#28     0x01128db8 in WebCore::CachedScript::data at CachedScript.cpp:83
#29     0x0112b2e8 in WebCore::Loader::didFinishLoading at loader.cpp:107
#30     0x014a779c in WebCore::SubresourceLoader::didFinishLoading at
SubresourceLoader.cpp:190
#31     0x014a55e4 in WebCore::ResourceLoader::didFinishLoading at
ResourceLoader.cpp:335
#32     0x0147af38 in -[WebCoreResourceHandleAsDelegate
connectionDidFinishLoading:] at ResourceHandleMac.mm:369
#33     0x92c1389c in -[NSURLConnection(NSURLConnectionInternal)
_sendDidFinishLoadingCallback]
#34     0x92c11b08 in -[NSURLConnection(NSURLConnectionInternal)
_sendCallbacks]
#35     0x92c11860 in _sendCallbacks
#36     0x907df4fc in __CFRunLoopDoSources0
#37     0x907dea2c in __CFRunLoopRun
#38     0x907de4ac in CFRunLoopRunSpecific
#39     0x93298b20 in RunCurrentEventLoopInMode
#40     0x932981b4 in ReceiveNextEventCommon
#41     0x93298020 in BlockUntilNextEventMatchingListInMode
#42     0x9379eae4 in _DPSNextEvent
#43     0x9379e7a8 in -[NSApplication
nextEventMatchingMask:untilDate:inMode:dequeue:]
#44     0x00006740 in ??
#45     0x9379acec in -[NSApplication run]
#46     0x9388b87c in NSApplicationMain


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.