[Webkit-unassigned] [Bug 14714] ASSERTION FAILED: i < size() in Vector.h:401 on mangled HTML

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=14714





------- Comment #2 from ddkilzer at webkit.org  2007-07-22 11:36 PDT -------
(In reply to comment #0)
> * REGRESSION
> Does NOT crash Safari 3.0.2 (522.12) public beta with its own WebKit on Mac OS
> X 10.4.10 (8R218).
> 
> DOES crash Safari 3.0.2 (522.12) with a local debug build of WebKit r24513 on
> Mac OS X 10.4.10 (8R218).

DOES crash WebKit nightly r24513 with Safari 3.0 (522.12) on Mac OS X 10.4.10
(8R218).

Version: r24513 (24513)

PID:    3638
Thread: 0

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_INVALID_ADDRESS (0x0001) at 0xfffffff0

Thread 0 Crashed:
0   com.apple.WebCore           0x011437dc
WebCore::RenderBlock::rightmostPosition(bool, bool) const + 508
1   com.apple.WebCore           0x011a7aec
WebCore::RenderTableSection::rightmostPosition(bool, bool) const + 188
2   com.apple.WebCore           0x011622e8
WebCore::RenderFlow::rightmostPosition(bool, bool) const + 312
3   com.apple.WebCore           0x01143608
WebCore::RenderBlock::rightmostPosition(bool, bool) const + 40
4   com.apple.WebCore           0x011622e8
WebCore::RenderFlow::rightmostPosition(bool, bool) const + 312
5   com.apple.WebCore           0x01143608
WebCore::RenderBlock::rightmostPosition(bool, bool) const + 40
6   com.apple.WebCore           0x011622e8
WebCore::RenderFlow::rightmostPosition(bool, bool) const + 312
7   com.apple.WebCore           0x01143608
WebCore::RenderBlock::rightmostPosition(bool, bool) const + 40
8   com.apple.WebCore           0x011622e8
WebCore::RenderFlow::rightmostPosition(bool, bool) const + 312
9   com.apple.WebCore           0x01143608
WebCore::RenderBlock::rightmostPosition(bool, bool) const + 40
10  com.apple.WebCore           0x011546b4 WebCore::RenderView::docWidth()
const + 84
11  com.apple.WebCore           0x011552a0 WebCore::RenderView::layout() + 288
12  com.apple.WebCore           0x010e9344 WebCore::FrameView::layout(bool) +
1364
13  com.apple.WebCore           0x010f3584 WebCore::Document::implicitClose() +
788
14  com.apple.WebCore           0x0142714c
WebCore::FrameLoader::checkCallImplicitClose() + 348
15  com.apple.WebCore           0x014363d4
WebCore::FrameLoader::checkCompleted() + 228
16  com.apple.WebCore           0x014378e8
WebCore::FrameLoader::finishedParsing() + 104
17  com.apple.WebCore           0x01021d7c WebCore::HTMLTokenizer::end() + 188
18  com.apple.WebCore           0x01022228 WebCore::HTMLTokenizer::finish() +
1160
19  com.apple.WebCore           0x0143943c
WebCore::FrameLoader::endIfNotLoadingMainResource() + 124
20  com.apple.WebCore           0x0143165c
WebCore::FrameLoader::finishedLoading() + 92
21  com.apple.WebCore           0x01443448
WebCore::MainResourceLoader::didFinishLoading() + 56
22  com.apple.WebCore           0x01415454 -[WebCoreResourceHandleAsDelegate
connectionDidFinishLoading:] + 84
23  com.apple.Foundation        0x92c1489c
-[NSURLConnection(NSURLConnectionInternal) _sendDidFinishLoadingCallback] + 188
24  com.apple.Foundation        0x92c12b08
-[NSURLConnection(NSURLConnectionInternal) _sendCallbacks] + 556
25  com.apple.Foundation        0x92c12860 _sendCallbacks + 156
26  com.apple.CoreFoundation    0x907de4fc __CFRunLoopDoSources0 + 384
27  com.apple.CoreFoundation    0x907dda2c __CFRunLoopRun + 452
28  com.apple.CoreFoundation    0x907dd4ac CFRunLoopRunSpecific + 268
29  com.apple.HIToolbox         0x9329ab20 RunCurrentEventLoopInMode + 264
30  com.apple.HIToolbox         0x9329a1b4 ReceiveNextEventCommon + 380
31  com.apple.HIToolbox         0x9329a020
BlockUntilNextEventMatchingListInMode + 96
32  com.apple.AppKit            0x937a0ae4 _DPSNextEvent + 384
33  com.apple.AppKit            0x937a07a8 -[NSApplication
nextEventMatchingMask:untilDate:inMode:dequeue:] + 116
34  com.apple.Safari            0x00006740 0x1000 + 22336
35  com.apple.AppKit            0x9379ccec -[NSApplication run] + 472
36  com.apple.AppKit            0x9388d87c NSApplicationMain + 452
37  com.apple.Safari            0x0005c77c 0x1000 + 374652
38  com.apple.Safari            0x0005c624 0x1000 + 374308


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.