[Webkit-unassigned] [Bug 16220] REGRESSION: Certain CNet pages crash WebKit SVN r28233

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=16220





------- Comment #4 from ddkilzer at webkit.org  2007-12-02 13:48 PDT -------
WebKit nightly r28233 crashed for me this way (loading the webarchive
attachment; same test method for Comment #3):

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000010

Thread 0 Crashed:
0   com.apple.JavaScriptCore            0x0045d3ec WTF::fastFree(void*) + 1772
1   com.apple.WebCore                   0x01021e4c
WebCore::FreeArenaList(WebCore::ArenaPool*, WebCore::Arena*, bool) + 92
2   com.apple.WebCore                   0x011398b4 WebCore::Document::detach()
+ 372
3   com.apple.WebCore                   0x01189894
WebCore::Frame::setView(WebCore::FrameView*) + 132
4   com.apple.WebCore                   0x0161ff4c -[WebCoreFrameBridge
createFrameViewWithNSView:marginWidth:marginHeight:] + 76
5   com.apple.WebKit                    0x0032f660
WebFrameLoaderClient::makeDocumentView() + 400
6   com.apple.WebCore                   0x011a7e00
WebCore::FrameLoader::transitionToCommitted(WTF::PassRefPtr<WebCore::CachedPage>)
+ 480
7   com.apple.WebCore                   0x011a85e0
WebCore::FrameLoader::commitProvisionalLoad(WTF::PassRefPtr<WebCore::CachedPage>)
+ 176
8   com.apple.WebCore                   0x011472d8
WebCore::DocumentLoader::commitIfReady() + 72
9   com.apple.WebCore                   0x0114736c
WebCore::DocumentLoader::commitLoad(char const*, int) + 60
10  com.apple.WebCore                   0x014acd80
WebCore::ResourceLoader::didReceiveData(char const*, int, long long, bool) + 80
11  com.apple.WebCore                   0x013d9564
WebCore::MainResourceLoader::didReceiveData(char const*, int, long long, bool)
+ 52
12  com.apple.WebCore                   0x014a8a38
-[WebCoreResourceHandleAsDelegate connection:didReceiveData:lengthReceived:] +
168
13  com.apple.Foundation                0x92c18574
-[NSURLConnection(NSURLConnectionInternal) _sendDidReceiveDataCallback] + 564
14  com.apple.Foundation                0x92c16a14
-[NSURLConnection(NSURLConnectionInternal) _sendCallbacks] + 488
15  com.apple.Foundation                0x92c167b0 _sendCallbacks + 156
16  com.apple.CoreFoundation            0x907de42c __CFRunLoopDoSources0 + 384
17  com.apple.CoreFoundation            0x907dd95c __CFRunLoopRun + 452
18  com.apple.CoreFoundation            0x907dd3dc CFRunLoopRunSpecific + 268
19  com.apple.HIToolbox                 0x9329eb20 RunCurrentEventLoopInMode +
264
20  com.apple.HIToolbox                 0x9329e12c ReceiveNextEventCommon + 244
21  com.apple.HIToolbox                 0x9329e020
BlockUntilNextEventMatchingListInMode + 96
22  com.apple.AppKit                    0x937a4bc4 _DPSNextEvent + 384
23  com.apple.AppKit                    0x937a4888 -[NSApplication
nextEventMatchingMask:untilDate:inMode:dequeue:] + 116
24  com.apple.Safari                    0x00006740 0x1000 + 22336
25  com.apple.AppKit                    0x937a0dcc -[NSApplication run] + 472
26  com.apple.AppKit                    0x93891974 NSApplicationMain + 452
27  com.apple.Safari                    0x0005c77c 0x1000 + 374652
28  com.apple.Safari                    0x0005c624 0x1000 + 374308


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.