[Webkit-unassigned] [Bug 18456] segmentation fault crash on Acid3 test 64 and 79 under Linux

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=18456





------- Comment #10 from ossh4x at gmail.com  2008-04-26 13:33 PDT -------
My backtrace for segfault at 64% on acid3...
(without fast-malloc, it still bombs after adopt() at the same place)

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb567a8e0 (LWP 25866)]
0xb7eb4e4f in WTF::fastMalloc () from /usr/lib/libwebkit-1.0.so.1
(gdb) backtrace
#0  0xb7eb4e4f in WTF::fastMalloc () from /usr/lib/libwebkit-1.0.so.1
#1  0xb7bd90d6 in WebCore::StringImpl::adopt () from
/usr/lib/libwebkit-1.0.so.1
#2  0xb7bd97ab in WebCore::StringImpl::lower () from
/usr/lib/libwebkit-1.0.so.1
#3  0xb7bd3d33 in WebCore::String::lower () from /usr/lib/libwebkit-1.0.so.1
#4  0xb7a3b945 in WebCore::Element::removeAttribute () from
/usr/lib/libwebkit-1.0.so.1
#5  0xb7df4929 in WebCore::jsElementPrototypeFunctionRemoveAttribute () from
/usr/lib/libwebkit-1.0.so.1
#6  0xb7ea779e in KJS::PrototypeFunction::callAsFunction () from
/usr/lib/libwebkit-1.0.so.1
#7  0xb7ed42c2 in KJS::JSObject::call () from /usr/lib/libwebkit-1.0.so.1
#8  0xb7eedbd0 in KJS::FunctionCallDotNode::evaluate () from
/usr/lib/libwebkit-1.0.so.1
#9  0xb7ee497b in KJS::ExprStatementNode::execute () from
/usr/lib/libwebkit-1.0.so.1
#10 0xb7ea9115 in KJS::BlockNode::execute () from /usr/lib/libwebkit-1.0.so.1
#11 0xb7ef868c in KJS::FunctionImp::callAsFunction () from
/usr/lib/libwebkit-1.0.so.1
#12 0xb7ed42c2 in KJS::JSObject::call () from /usr/lib/libwebkit-1.0.so.1
#13 0xb79b787e in WebCore::ScheduledAction::execute () from
/usr/lib/libwebkit-1.0.so.1
#14 0xb799bd29 in WebCore::JSDOMWindowBase::timerFired () from
/usr/lib/libwebkit-1.0.so.1
#15 0xb799bf14 in WebCore::DOMWindowTimer::fired () from
/usr/lib/libwebkit-1.0.so.1
#16 0xb7bdea7c in WebCore::TimerBase::fireTimers () from
/usr/lib/libwebkit-1.0.so.1
#17 0xb7bdeb38 in WebCore::TimerBase::sharedTimerFired () from
/usr/lib/libwebkit-1.0.so.1
#18 0xb797f285 in WebCore::timeout_cb () from /usr/lib/libwebkit-1.0.so.1
#19 0xb6db06b6 in g_timeout_dispatch () from /usr/lib/libglib-2.0.so.0
#20 0xb6daff88 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#21 0xb6db34eb in g_main_context_iterate () from /usr/lib/libglib-2.0.so.0
#22 0xb6db39ba in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#23 0xb718cb19 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#24 0x0807bdb8 in main ()


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.