[Webkit-unassigned] [Bug 12087] REGRESSION: Crash when going back in history using Cmd-LEFT-Arrow

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=12087





------- Comment #4 from beidson at apple.com  2007-01-03 21:31 PDT -------
A fuller backtrace at the top shows - 
#0      0x90a554c7 in objc_msgSend
#1      0x162704c0 in ??
#2      0x004d758b in WebCore::RetainPtr<WebDataSource>::operator= at
RetainPtr.h:127
#3      0x00494149 in WebDocumentLoaderMac::attachToFrame at
WebDocumentLoaderMac.mm:56
#4      0x01370d83 in WebCore::DocumentLoader::setFrame at
DocumentLoaderMac.mm:398

Seems to be messaging an already-dealloced objc object.

bdash helped confirm this via Zombie mode, giving us -
#0      0x926d89a1 in -[_NSZombie retain]
#1      0x9080e1af in CFRetain
#2      0x004d758b in WebCore::RetainPtr<WebDataSource>::operator= at
RetainPtr.h:127
#3      0x00494149 in WebDocumentLoaderMac::attachToFrame at
WebDocumentLoaderMac.mm:56
#4      0x01370d83 in WebCore::DocumentLoader::setFrame at
DocumentLoaderMac.mm:398

A little more exploring tonite, then I hafta go home  ;)


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.