[Webkit-unassigned] [Bug 16220] REGRESSION: Certain CNet pages crash WebKit SVN r28233

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=16220


ddkilzer at webkit.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |darin at apple.com




------- Comment #3 from ddkilzer at webkit.org  2007-12-02 13:45 PDT -------
I saw a different crash with WebKit nightly r28314:

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000008

Thread 0 Crashed:
0   <<00000000>>        0x00000008 0 + 8
1   com.apple.WebCore                   0x011cfe5c
WebCore::HTMLImageElement::parseMappedAttribute(WebCore::MappedAttribute*) +
140
2   com.apple.WebCore                   0x014eb024
WebCore::StyledElement::attributeChanged(WebCore::Attribute*, bool) + 500
3   com.apple.WebCore                   0x0115f790
WebCore::Element::setAttributeMap(WebCore::NamedAttrMap*) + 528
4   com.apple.WebCore                   0x011f1038
WebCore::HTMLParser::parseToken(WebCore::Token*) + 1080
5   com.apple.WebCore                   0x01204ce4
WebCore::HTMLTokenizer::processToken() + 852
6   com.apple.WebCore                   0x0120971c
WebCore::HTMLTokenizer::parseTag(WebCore::SegmentedString&,
WebCore::HTMLTokenizer::State) + 7740
7   com.apple.WebCore                   0x0120a06c
WebCore::HTMLTokenizer::write(WebCore::SegmentedString const&, bool) + 1148
8   com.apple.WebCore                   0x01203910
WebCore::HTMLTokenizer::notifyFinished(WebCore::CachedResource*) + 784
9   com.apple.WebCore                   0x01087718
WebCore::CachedScript::checkNotify() + 88
10  com.apple.WebCore                   0x01087b30
WebCore::CachedScript::data(WTF::PassRefPtr<WebCore::SharedBuffer>, bool) + 336
11  com.apple.WebCore                   0x0156b5ec
WebCore::Loader::didFinishLoading(WebCore::SubresourceLoader*) + 412
12  com.apple.WebCore                   0x014ebed0
WebCore::SubresourceLoader::didFinishLoading() + 96
13  com.apple.WebCore                   0x0149a464
-[WebCoreResourceHandleAsDelegate connectionDidFinishLoading:] + 100
14  com.apple.Foundation                0x92c187ec
-[NSURLConnection(NSURLConnectionInternal) _sendDidFinishLoadingCallback] + 188
15  com.apple.Foundation                0x92c16a58
-[NSURLConnection(NSURLConnectionInternal) _sendCallbacks] + 556
16  com.apple.Foundation                0x92c167b0 _sendCallbacks + 156
17  com.apple.CoreFoundation            0x907de42c __CFRunLoopDoSources0 + 384
18  com.apple.CoreFoundation            0x907dd95c __CFRunLoopRun + 452
19  com.apple.CoreFoundation            0x907dd3dc CFRunLoopRunSpecific + 268
20  com.apple.HIToolbox                 0x9329eb20 RunCurrentEventLoopInMode +
264
21  com.apple.HIToolbox                 0x9329e12c ReceiveNextEventCommon + 244
22  com.apple.HIToolbox                 0x9329e020
BlockUntilNextEventMatchingListInMode + 96
23  com.apple.AppKit                    0x937a4bc4 _DPSNextEvent + 384
24  com.apple.AppKit                    0x937a4888 -[NSApplication
nextEventMatchingMask:untilDate:inMode:dequeue:] + 116
25  com.apple.Safari                    0x00006740 0x1000 + 22336
26  com.apple.AppKit                    0x937a0dcc -[NSApplication run] + 472
27  com.apple.AppKit                    0x93891974 NSApplicationMain + 452
28  com.apple.Safari                    0x0005c77c 0x1000 + 374652
29  com.apple.Safari                    0x0005c624 0x1000 + 374308


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.