[Webkit-unassigned] [Bug 9929] REGRESSION: crash on logging in on mijnpostbank.nl

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=9929





------- Comment #40 from ddkilzer at webkit.org  2007-03-05 21:33 PDT -------
(In reply to comment #39)
> Created an attachment (id=13482)
 --> (http://bugs.webkit.org/attachment.cgi?id=13482&action=view) [edit]
> testcase reduced to 2 html files and one dir
> 
> This is a bug reduction for the "Postbank bug" 9929. It has only two HTML
> files!!! Now, ehm, please fix it before Leopard, 
> as, uhm, I surely didFinishLoading() ;-)

Awesome job with the reduction, Bas!!  This definitely reproduces a crash on my
local debug build of WebKit r19972 with Safari 2.0.4 (419.3) on Mac OS X 10.4.8
(8L127).  The same steps do not crash shipping Safari 2.0.4 (419.3) on Mac OS X
10.4.8 (8L127).

Console output with debug build:

ASSERTION FAILED: inHeap() == (m_nextFireTime != 0)
(/path/to/Projects/Cocoa/WebKit/WebCore/platform/Timer.cpp:212 void
WebCore::TimerBase::checkConsistency() const)
Segmentation fault

Stack trace:

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_INVALID_ADDRESS (0x0001) at 0xbbadbeef

Thread 0 Crashed:
0   com.apple.WebCore           0x016b40cc
WebCore::TimerBase::checkConsistency() const + 156 (Timer.cpp:212)
1   com.apple.WebCore           0x01278948
WebCore::TimerBase::setNextFireTime(double) + 332 (Timer.cpp:306)
2   com.apple.WebCore           0x01278b98 WebCore::TimerBase::stop() + 68
(Timer.cpp:181)
3   com.apple.WebCore           0x01278e2c WebCore::TimerBase::~TimerBase
[not-in-charge]() + 60 (Timer.cpp:167)
4   com.apple.WebCore           0x016d2d44
WebCore::Timer<WebCore::Element>::~Timer [in-charge deleting]() + 64
(Timer.h:88)
5   com.apple.JavaScriptCore    0x00557090
KJS::JSObject::construct(KJS::ExecState*, KJS::List const&, KJS::Identifier
const&, KJS::UString const&, int) + 84 (object.cpp:437)
6   com.apple.WebCore           0x01106e14 WebCore::Document::implicitClose() +
1236 (Document.cpp:1395)
7   com.apple.WebCore           0x01484590
WebCore::FrameLoader::checkEmitLoadEvent() + 596 (FrameLoader.cpp:1118)
8   com.apple.WebCore           0x01490684
WebCore::FrameLoader::checkCompleted() + 468 (FrameLoader.cpp:1089)
9   com.apple.WebCore           0x01491774 WebCore::FrameLoader::loadDone() +
80 (FrameLoader.cpp:1060)
10  com.apple.WebCore           0x011261fc
WebCore::DocLoader::setLoadInProgress(bool) + 84 (DocLoader.cpp:182)
11  com.apple.WebCore           0x0112804c
WebCore::Loader::didFinishLoading(WebCore::SubresourceLoader*) + 424
(loader.cpp:110)
12  com.apple.WebCore           0x0149d2a0
WebCore::SubresourceLoader::didFinishLoading() + 204
(SubresourceLoader.cpp:191)
13  com.apple.WebCore           0x0149b1ac
WebCore::ResourceLoader::didFinishLoading(WebCore::ResourceHandle*) + 60
14  com.apple.WebCore           0x01471048 -[WebCoreResourceHandleAsDelegate
connectionDidFinishLoading:] + 144 (ResourceHandleMac.mm:370)
15  com.apple.Foundation        0x9299384c
-[NSURLConnection(NSURLConnectionInternal) _sendDidFinishLoadingCallback] + 188
16  com.apple.Foundation        0x92991ab8
-[NSURLConnection(NSURLConnectionInternal) _sendCallbacks] + 556
17  com.apple.Foundation        0x92991810 _sendCallbacks + 156
18  com.apple.CoreFoundation    0x907dd4cc __CFRunLoopDoSources0 + 384
19  com.apple.CoreFoundation    0x907dc9fc __CFRunLoopRun + 452
20  com.apple.CoreFoundation    0x907dc47c CFRunLoopRunSpecific + 268
21  com.apple.HIToolbox         0x93208740 RunCurrentEventLoopInMode + 264
22  com.apple.HIToolbox         0x93207dd4 ReceiveNextEventCommon + 380
23  com.apple.HIToolbox         0x93207c40
BlockUntilNextEventMatchingListInMode + 96
24  com.apple.AppKit            0x9370cae4 _DPSNextEvent + 384
25  com.apple.AppKit            0x9370c7a8 -[NSApplication
nextEventMatchingMask:untilDate:inMode:dequeue:] + 116
26  com.apple.Safari            0x00006740 0x1000 + 22336
27  com.apple.AppKit            0x93708cec -[NSApplication run] + 472
28  com.apple.AppKit            0x937f987c NSApplicationMain + 452
29  com.apple.Safari            0x0005c77c 0x1000 + 374652
30  com.apple.Safari            0x0005c624 0x1000 + 374308


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.