[Webkit-unassigned] [Bug 13547] New: REGRESSION: Crash in _NPN_ReleaseObject when closing Safari on nba.com

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=13547

           Summary: REGRESSION: Crash in _NPN_ReleaseObject when closing
                    Safari on nba.com
           Product: WebKit
           Version: 522+ (nightly)
          Platform: Macintosh
               URL: http://nba.com
        OS/Version: Mac OS X 10.4
            Status: NEW
          Keywords: Regression, NeedsRadar
          Severity: Normal
          Priority: P1
         Component: Page Loading
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: pewtermoose at gmail.com


1. Load nba.com
2. Click the "Tonight" tab on the left-hand side
3. Quit Safari -> *boom*

This only seems to crash if you quit Safari, closing the tab/window doesn't
seem to trigger this.

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_INVALID_ADDRESS (0x0001) at 0x09f8945c

Thread 0 Crashed:
0   com.apple.JavaScriptCore    0x00537518 _NPN_ReleaseObject + 96
(npruntime.cpp:190)
1   com.apple.JavaScriptCore    0x00535498 KJS::Bindings::CInstance::~CInstance
[in-charge deleting]() + 68 (c_instance.cpp:52)
2   com.apple.JavaScriptCore    0x005bfe38 KJS::Bindings::Instance::deref() +
116 (runtime.h:153)
3   com.apple.JavaScriptCore    0x005c01a0
WTF::RefPtr<KJS::Bindings::Instance>::~RefPtr [in-charge]() + 56 (RefPtr.h:41)
4   com.apple.JavaScriptCore    0x005c0220
KJS::RuntimeObjectImp::~RuntimeObjectImp [in-charge]() + 68
(runtime_object.h:34)
5   com.apple.JavaScriptCore    0x00574350 KJS::Collector::collect() + 1292
(collector.cpp:814)
6   com.apple.WebCore           0x012f9d34 WebCore::KJSProxy::~KJSProxy
[in-charge]() + 208 (kjs_proxy.cpp:56)
7   com.apple.WebCore           0x010f4b64 WebCore::FramePrivate::~FramePrivate
[in-charge]() + 56 (Frame.cpp:1893)
8   com.apple.WebCore           0x010f505c WebCore::Frame::~Frame [in-charge
deleting]() + 916 (Frame.cpp:251)
9   com.apple.WebCore           0x015c531c
WebCore::Shared<WebCore::Frame>::deref() + 228 (Shared.h:52)
10  com.apple.WebCore           0x0163a768
WTF::RefPtr<WebCore::Frame>::operator=(WebCore::Frame*) + 108 (RefPtr.h:107)
11  com.apple.WebCore           0x010fc8e0 WebCore::FrameView::clearPart() + 44
(FrameView.cpp:156)
12  com.apple.WebCore           0x014ce6dc WebCore::CachedPage::clear() + 548
(CachedPage.cpp:150)
13  com.apple.WebCore           0x014cf3c4 WebCore::CachedPage::close() + 184
(CachedPageMac.mm:45)
14  com.apple.WebCore           0x014cc768
WebCore::HistoryItem::performPendingReleaseOfCachedPages() + 280
(HistoryItem.cpp:467)
15  com.apple.WebKit            0x0030a134 -[WebWindowWatcher windowWillClose:]
+ 36 (WebHistoryItem.mm:514)
16  com.apple.Foundation        0x92be0ae4 _nsnote_callback + 180
17  com.apple.CoreFoundation    0x90806078 __CFXNotificationPost + 368
18  com.apple.CoreFoundation    0x907fe114 _CFXNotificationPostNotification +
684
19  com.apple.Foundation        0x92bcaeec -[NSNotificationCenter
postNotificationName:object:userInfo:] + 92
20  com.apple.AppKit            0x9384047c -[NSWindow _close] + 100
21  com.apple.AppKit            0x938403e0 -[NSWindow close] + 36
22  com.apple.Foundation        0x92be85f4 -[NSArray
makeObjectsPerformSelector:withObject:] + 264
23  com.apple.AppKit            0x938433fc -[NSApplication _deallocHardCore:] +
220
24  com.apple.AppKit            0x93841fb4 -[NSApplication terminate:] + 520
25  com.apple.AppKit            0x9383fc4c -[NSApplication sendAction:to:from:]
+ 108
26  com.apple.Safari            0x0002956c 0x1000 + 165228
27  com.apple.AppKit            0x9389a4b8 -[NSMenu
performActionForItemAtIndex:] + 392
28  com.apple.AppKit            0x9389a23c -[NSCarbonMenuImpl
performActionWithHighlightingForItemAtIndex:] + 104
29  com.apple.AppKit            0x93899ce4 -[NSMenu performKeyEquivalent:] +
272
30  com.apple.AppKit            0x93899930 -[NSApplication
_handleKeyEquivalent:] + 328
31  com.apple.AppKit            0x937a3408 -[NSApplication sendEvent:] + 2944
32  com.apple.Safari            0x00021238 0x1000 + 131640
33  com.apple.AppKit            0x9379ad10 -[NSApplication run] + 508
34  com.apple.AppKit            0x9388b87c NSApplicationMain + 452
35  com.apple.Safari            0x0005c77c 0x1000 + 374652
36  com.apple.Safari            0x0005c624 0x1000 + 374308


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.