[Webkit-unassigned] [Bug 13547] REGRESSION: Crash in _NPN_ReleaseObject when closing Safari on nba.com
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Mon May 7 15:07:34 PDT 2007
http://bugs.webkit.org/show_bug.cgi?id=13547
ddkilzer at webkit.org changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |ddkilzer at webkit.org
------- Comment #4 from ddkilzer at webkit.org 2007-05-07 15:07 PDT -------
Here is another way to reproduce this (with a slightly different stack trace).
I'm using a local debug build of WebKit r21288 with Safari 2.0.4 (419.3) on Mac
OS X 10.4.9 (8P135):
*STEPS TO REPRODUCE
1. Open Safari/WebKit.
2. Go to: http://www.ssh.com/
3. Go to: http://www.google.com/ [this site apparently doesn't matter]
4. Hit browser back button to return to www.ssh.com.
5. Quit Safari.
Console output:
Segmentation fault
Stack trace:
Exception: EXC_BAD_ACCESS (0x0001)
Codes: KERN_INVALID_ADDRESS (0x0001) at 0x17c5d614
Thread 0 Crashed:
0 com.apple.JavaScriptCore 0x0054871c _NPN_ReleaseObject + 96
(npruntime.cpp:190)
1 com.apple.JavaScriptCore 0x00546548 KJS::Bindings::CInstance::~CInstance
[in-charge deleting]() + 68 (c_instance.cpp:52)
2 com.apple.JavaScriptCore 0x005d2b34 KJS::Bindings::Instance::deref() +
116 (runtime.h:153)
3 com.apple.JavaScriptCore 0x005d2f34
WTF::RefPtr<KJS::Bindings::Instance>::~RefPtr [not-in-charge]() + 56
(RefPtr.h:41)
4 com.apple.JavaScriptCore 0x005d2f68
WTF::RefPtr<KJS::Bindings::Instance>::~RefPtr [in-charge]() + 32 (RefPtr.h:41)
5 com.apple.JavaScriptCore 0x005d2fc0
KJS::RuntimeObjectImp::~RuntimeObjectImp [not-in-charge]() + 68
(runtime_object.h:34)
6 com.apple.JavaScriptCore 0x005d3014
KJS::RuntimeObjectImp::~RuntimeObjectImp [in-charge]() + 32
(runtime_object.h:34)
7 com.apple.JavaScriptCore 0x005859c0 KJS::Collector::collect() + 820
(collector.cpp:790)
8 com.apple.WebCore 0x014a851c WebCore::CachedPage::clear() + 824
(CachedPage.cpp:164)
9 com.apple.WebCore 0x014a8cc4 WebCore::CachedPage::close() + 184
(CachedPageMac.mm:45)
10 com.apple.WebCore 0x014a6e34
WebCore::HistoryItem::performPendingReleaseOfCachedPages() + 280
(HistoryItem.cpp:452)
11 com.apple.WebKit 0x00309c2c -[WebWindowWatcher windowWillClose:]
+ 36 (WebHistoryItem.mm:514)
12 com.apple.Foundation 0x92be0ae4 _nsnote_callback + 180
13 com.apple.CoreFoundation 0x90806078 __CFXNotificationPost + 368
14 com.apple.CoreFoundation 0x907fe114 _CFXNotificationPostNotification +
684
15 com.apple.Foundation 0x92bcaeec -[NSNotificationCenter
postNotificationName:object:userInfo:] + 92
16 com.apple.AppKit 0x9384047c -[NSWindow _close] + 100
17 com.apple.AppKit 0x938403e0 -[NSWindow close] + 36
18 com.apple.Foundation 0x92be85f4 -[NSArray
makeObjectsPerformSelector:withObject:] + 264
19 com.apple.AppKit 0x938433fc -[NSApplication _deallocHardCore:] +
220
20 com.apple.AppKit 0x93841fb4 -[NSApplication terminate:] + 520
21 com.apple.AppKit 0x9383fc4c -[NSApplication sendAction:to:from:]
+ 108
22 com.apple.Safari 0x0002956c 0x1000 + 165228
23 com.apple.AppKit 0x9389a4b8 -[NSMenu
performActionForItemAtIndex:] + 392
24 com.apple.AppKit 0x9389a23c -[NSCarbonMenuImpl
performActionWithHighlightingForItemAtIndex:] + 104
25 com.apple.AppKit 0x93899ce4 -[NSMenu performKeyEquivalent:] +
272
26 com.apple.AppKit 0x93899930 -[NSApplication
_handleKeyEquivalent:] + 328
27 com.apple.AppKit 0x937a3408 -[NSApplication sendEvent:] + 2944
28 com.apple.Safari 0x00021238 0x1000 + 131640
29 com.apple.AppKit 0x9379ad10 -[NSApplication run] + 508
30 com.apple.AppKit 0x9388b87c NSApplicationMain + 452
31 com.apple.Safari 0x0005c77c 0x1000 + 374652
32 com.apple.Safari 0x0005c624 0x1000 + 374308
--
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
More information about the webkit-unassigned
mailing list