[Webkit-unassigned] [Bug 13547] REGRESSION: Crash in _NPN_ReleaseObject when closing Safari on nba.com

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon May 7 15:07:34 PDT 2007


http://bugs.webkit.org/show_bug.cgi?id=13547


ddkilzer at webkit.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ddkilzer at webkit.org




------- Comment #4 from ddkilzer at webkit.org  2007-05-07 15:07 PDT -------
Here is another way to reproduce this (with a slightly different stack trace). 
I'm using a local debug build of WebKit r21288 with Safari 2.0.4 (419.3) on Mac
OS X 10.4.9 (8P135):

*STEPS TO REPRODUCE
1. Open Safari/WebKit.
2. Go to:  http://www.ssh.com/
3. Go to:  http://www.google.com/ [this site apparently doesn't matter]
4. Hit browser back button to return to www.ssh.com.
5. Quit Safari.

Console output:

Segmentation fault

Stack trace:

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_INVALID_ADDRESS (0x0001) at 0x17c5d614

Thread 0 Crashed:
0   com.apple.JavaScriptCore    0x0054871c _NPN_ReleaseObject + 96
(npruntime.cpp:190)
1   com.apple.JavaScriptCore    0x00546548 KJS::Bindings::CInstance::~CInstance
[in-charge deleting]() + 68 (c_instance.cpp:52)
2   com.apple.JavaScriptCore    0x005d2b34 KJS::Bindings::Instance::deref() +
116 (runtime.h:153)
3   com.apple.JavaScriptCore    0x005d2f34
WTF::RefPtr<KJS::Bindings::Instance>::~RefPtr [not-in-charge]() + 56
(RefPtr.h:41)
4   com.apple.JavaScriptCore    0x005d2f68
WTF::RefPtr<KJS::Bindings::Instance>::~RefPtr [in-charge]() + 32 (RefPtr.h:41)
5   com.apple.JavaScriptCore    0x005d2fc0
KJS::RuntimeObjectImp::~RuntimeObjectImp [not-in-charge]() + 68
(runtime_object.h:34)
6   com.apple.JavaScriptCore    0x005d3014
KJS::RuntimeObjectImp::~RuntimeObjectImp [in-charge]() + 32
(runtime_object.h:34)
7   com.apple.JavaScriptCore    0x005859c0 KJS::Collector::collect() + 820
(collector.cpp:790)
8   com.apple.WebCore           0x014a851c WebCore::CachedPage::clear() + 824
(CachedPage.cpp:164)
9   com.apple.WebCore           0x014a8cc4 WebCore::CachedPage::close() + 184
(CachedPageMac.mm:45)
10  com.apple.WebCore           0x014a6e34
WebCore::HistoryItem::performPendingReleaseOfCachedPages() + 280
(HistoryItem.cpp:452)
11  com.apple.WebKit            0x00309c2c -[WebWindowWatcher windowWillClose:]
+ 36 (WebHistoryItem.mm:514)
12  com.apple.Foundation        0x92be0ae4 _nsnote_callback + 180
13  com.apple.CoreFoundation    0x90806078 __CFXNotificationPost + 368
14  com.apple.CoreFoundation    0x907fe114 _CFXNotificationPostNotification +
684
15  com.apple.Foundation        0x92bcaeec -[NSNotificationCenter
postNotificationName:object:userInfo:] + 92
16  com.apple.AppKit            0x9384047c -[NSWindow _close] + 100
17  com.apple.AppKit            0x938403e0 -[NSWindow close] + 36
18  com.apple.Foundation        0x92be85f4 -[NSArray
makeObjectsPerformSelector:withObject:] + 264
19  com.apple.AppKit            0x938433fc -[NSApplication _deallocHardCore:] +
220
20  com.apple.AppKit            0x93841fb4 -[NSApplication terminate:] + 520
21  com.apple.AppKit            0x9383fc4c -[NSApplication sendAction:to:from:]
+ 108
22  com.apple.Safari            0x0002956c 0x1000 + 165228
23  com.apple.AppKit            0x9389a4b8 -[NSMenu
performActionForItemAtIndex:] + 392
24  com.apple.AppKit            0x9389a23c -[NSCarbonMenuImpl
performActionWithHighlightingForItemAtIndex:] + 104
25  com.apple.AppKit            0x93899ce4 -[NSMenu performKeyEquivalent:] +
272
26  com.apple.AppKit            0x93899930 -[NSApplication
_handleKeyEquivalent:] + 328
27  com.apple.AppKit            0x937a3408 -[NSApplication sendEvent:] + 2944
28  com.apple.Safari            0x00021238 0x1000 + 131640
29  com.apple.AppKit            0x9379ad10 -[NSApplication run] + 508
30  com.apple.AppKit            0x9388b87c NSApplicationMain + 452
31  com.apple.Safari            0x0005c77c 0x1000 + 374652
32  com.apple.Safari            0x0005c624 0x1000 + 374308


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list