[Webkit-unassigned] [Bug 16678] New: Unreproducible crash in KJS::JSObject::inherits() after using Web Inspector

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=16678

           Summary: Unreproducible crash in KJS::JSObject::inherits() after
                    using Web Inspector
           Product: WebKit
           Version: 525+ (Nightly build)
          Platform: Macintosh
        OS/Version: Mac OS X 10.4
            Status: NEW
          Keywords: NeedsReduction
          Severity: Normal
          Priority: P2
         Component: Web Inspector
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ddkilzer at webkit.org


* SUMMARY
I've seen two crashes in KJS::JSObject::inherits() now related to the
WebInspector.  I'm not sure how to reproduce the crash yet.

* NOTES
No console output reported for the crash.  Crash log:

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000000

Thread 0 Crashed:
0   com.apple.JavaScriptCore    0x0061dad8
KJS::JSObject::inherits(KJS::ClassInfo const*) const + 32 (object.h:526)
1   com.apple.JavaScriptCore    0x005d3944 JSObjectSetPrivate + 68
(JSObjectRef.cpp:254)
2   com.apple.WebCore           0x0126e394
WebCore::InspectorController::~InspectorController [in-charge]() + 220
(InspectorController.cpp:616)
3   com.apple.WebCore           0x018f95c8 void
WTF::deleteOwnedPtr<WebCore::InspectorController>(WebCore::InspectorController*)
+ 52 (OwnPtr.h:52)
4   com.apple.WebCore           0x018f9614
WTF::OwnPtr<WebCore::InspectorController>::~OwnPtr [in-charge]() + 40
(OwnPtr.h:70)
5   com.apple.WebCore           0x01357b58 WebCore::Page::~Page [in-charge]() +
476 (Page.cpp:120)
6   com.apple.WebKit            0x003d91c8 -[WebView(WebPrivate) _close] + 596
(WebView.mm:715)
7   com.apple.Safari            0x00050b60 0x1000 + 326496
8   com.apple.Safari            0x000506c8 0x1000 + 325320
9   com.apple.WebKit            0x003c2874 -[WebView close] + 60
(WebView.mm:2022)
10  com.apple.Safari            0x00053c88 0x1000 + 339080
11  com.apple.Safari            0x00054038 0x1000 + 340024
12  com.apple.AppKit            0x93847d44 -[NSApplication sendAction:to:from:]
+ 108
13  com.apple.Safari            0x00034ae0 0x1000 + 211680
14  com.apple.AppKit            0x938a25b0 -[NSMenu
performActionForItemAtIndex:] + 392
15  com.apple.AppKit            0x938a2334 -[NSCarbonMenuImpl
performActionWithHighlightingForItemAtIndex:] + 104
16  com.apple.AppKit            0x938a1ddc -[NSMenu performKeyEquivalent:] +
272
17  com.apple.AppKit            0x938a1a28 -[NSApplication
_handleKeyEquivalent:] + 328
18  com.apple.AppKit            0x937ab4e8 -[NSApplication sendEvent:] + 2944
19  com.apple.Safari            0x000304b4 0x1000 + 193716
20  com.apple.AppKit            0x937a2df0 -[NSApplication run] + 508
21  com.apple.AppKit            0x93893974 NSApplicationMain + 452
22  com.apple.Safari            0x0009bad4 0x1000 + 633556
23  com.apple.Safari            0x000022fc 0x1000 + 4860


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.