[Webkit-unassigned] [Bug 19580] New: <untitled>r34578 crashes with JS enabled, source contained

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=19580

           Summary: <untitled>r34578 crashes with JS enabled, source
                    contained
           Product: WebKit
           Version: 526+ (Nightly build)
          Platform: PC
        OS/Version: Windows XP
            Status: UNCONFIRMED
          Severity: Major
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: 808caaa4.8ce9.9cd6c799e9f6 at gmail.com


source:

---
<form name=myForm>
        <textarea name=myText></textarea>
</form>

<script>window.myForm.myText.value='test';</script>
---

debugger outout:
---
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=0012f250 ecx=7fd1e3a0 edx=00000020 esi=7fd1e3a0 edi=0012f248
eip=100ad160 esp=0012f1dc ebp=0012f1fc iopl=0         nv up ei pl nz na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000206
WebKit!WebCore__HTMLCollection__resetCollectionInfo+10:
100ad160 8b9800010000     mov     ebx,[eax+0x100]   ds:0023:00000100=????????
0:000> k
ChildEBP RetAddr
0012f1fc 100b592e WebKit!WebCore__HTMLCollection__resetCollectionInfo+0x10
0012f210 100ba061 WebKit!WebCore__HTMLCollection__namedItems+0x1e
0012f230 102cb8c0 WebKit!WebCore__HTMLFormElement__getNamedElements+0x21
0012f258 102669a8 WebKit!WebCore__JSHTMLFormElement__canGetItemsForName+0x40
0012f274 103dc15b WebKit!WebCore__JSHTMLFormElement__getOwnPropertySlot+0x18
0012f2ac 10071956 WebKit!KJS__JSValue__get+0x51
0012f49c 1009dc5f WebKit!KJS__Machine__privateExecute+0x2e86
0012f4f4 1009dad7 WebKit!KJS__Machine__execute+0xcf
0012f53c 1013dfc1 WebKit!KJS__Interpreter__evaluate+0xd7
0012f578 1012ac99 WebKit!WebCore__ScriptController__evaluate+0xb1
0012f594 10023a6e WebKit!WebCore__FrameLoader__executeScript+0x49
0012f758 100326d7 WebKit!WebCore__HTMLTokenizer__scriptExecution+0x10e
0012f7f8 1005e9d9 WebKit!WebCore__HTMLTokenizer__scriptHandler+0x257
0012f830 1005e108 WebKit!WebCore__HTMLTokenizer__parseSpecial+0x369
0012f96c 1005ee32 WebKit!WebCore__HTMLTokenizer__parseTag+0x11a8
7fef7410 00000000 WebKit!WebCore__HTMLTokenizer__write+0x2b2
---

host is safari 4DP(4.526.12.2).


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.