[Webkit-unassigned] [Bug 18029] New: REGRESSION: Crash when loading http://www.balloon-juice.com/?p=9942

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sun Mar 23 17:04:00 PDT 2008


http://bugs.webkit.org/show_bug.cgi?id=18029

           Summary: REGRESSION: Crash when loading http://www.balloon-
                    juice.com/?p=9942
           Product: WebKit
           Version: 526+ (Nightly build)
          Platform: Macintosh
               URL: http://www.balloon-juice.com/?p=9942
        OS/Version: Mac OS X 10.5
            Status: NEW
          Keywords: Regression
          Severity: Normal
          Priority: P1
         Component: HTML DOM
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: koivisto at iki.fi


Process:         Safari [39205]
Path:           
/Users/antti/webkit/OpenSource/WebKitBuild/Release/Safari.app/Contents/MacOS/Safari
Identifier:      com.apple.Safari
Version:         3.1 (5526)
Code Type:       X86 (Native)
Parent Process:  perl [39198]

Date/Time:       2008-03-23 16:59:09.198 -0700
OS Version:      Mac OS X 10.5.2 (9C7010)
Report Version:  6

Exception Type:  EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x000000000000000c
Crashed Thread:  0

Thread 0 Crashed:
0   com.apple.WebCore                   0x01c68335
WTF::RefPtr<WebCore::StringImpl>::get() const + 9 (RefPtr.h:49)
1   com.apple.WebCore                   0x01cb3455 WebCore::String::impl()
const + 17 (PlatformString.h:162)
2   com.apple.WebCore                   0x01cb365d
WebCore::AtomicString::impl() const + 17 (AtomicString.h:51)
3   com.apple.WebCore                   0x01c9dc01
WebCore::CSSStyleSelector::hasSelectorForAttribute(WebCore::AtomicString
const&) + 17 (CSSStyleSelector.cpp:5050)
4   com.apple.WebCore                   0x021bc499
WebCore::StyledElement::attributeChanged(WebCore::Attribute*, bool) + 599
(StyledElement.cpp:175)
5   com.apple.WebCore                   0x01fd6ac8
WebCore::NamedAttrMap::removeAttribute(WebCore::QualifiedName const&) + 390
(NamedAttrMap.cpp:305)
6   com.apple.WebCore                   0x01da7d42
WebCore::Element::setAttribute(WebCore::QualifiedName const&,
WebCore::StringImpl*, int&) + 274 (Element.cpp:498)
7   com.apple.WebCore                   0x01da7f5f
WebCore::Element::setAttribute(WebCore::QualifiedName const&, WebCore::String
const&) + 55 (Element.cpp:175)
8   com.apple.WebCore                   0x01e45f1f
WebCore::HTMLLinkElement::setDisabled(bool) + 91 (HTMLLinkElement.cpp:267)
9   com.apple.WebCore                   0x01f1e07a
WebCore::JSHTMLLinkElement::putValueProperty(KJS::ExecState*, int,
KJS::JSValue*) + 134 (JSHTMLLinkElement.cpp:211)
10  com.apple.WebCore                   0x01f1eb0e bool
KJS::lookupPut<WebCore::JSHTMLLinkElement>(KJS::ExecState*, KJS::Identifier
const&, KJS::JSValue*, KJS::HashTable const*, WebCore::JSHTMLLinkElement*) +
154 (lookup.h:247)
11  com.apple.WebCore                   0x01f1eb47 void
KJS::lookupPut<WebCore::JSHTMLLinkElement,
WebCore::JSHTMLElement>(KJS::ExecState*, KJS::Identifier const&, KJS::JSValue*,
KJS::HashTable const*, WebCore::JSHTMLLinkElement*) + 45 (lookup.h:260)
12  com.apple.WebCore                   0x01f1e313
WebCore::JSHTMLLinkElement::put(KJS::ExecState*, KJS::Identifier const&,
KJS::JSValue*) + 55 (JSHTMLLinkElement.cpp:203)
13  com.apple.JavaScriptCore            0x00556f2d
KJS::AssignDotNode::evaluate(KJS::ExecState*) + 233 (nodes.cpp:3432)
14  com.apple.JavaScriptCore            0x005565f5
KJS::ExprStatementNode::execute(KJS::ExecState*) + 43 (nodes.cpp:3750)
15  com.apple.JavaScriptCore            0x00556543
KJS::IfNode::execute(KJS::ExecState*) + 121 (nodes.cpp:3787)
16  com.apple.JavaScriptCore            0x005375bd
KJS::statementListExecute(WTF::Vector<WTF::RefPtr<KJS::StatementNode>, 0ul>&,
KJS::ExecState*) + 85 (nodes.cpp:3703)
17  com.apple.JavaScriptCore            0x0053764a
KJS::BlockNode::execute(KJS::ExecState*) + 26 (nodes.cpp:3729)
18  com.apple.JavaScriptCore            0x00556543
KJS::IfNode::execute(KJS::ExecState*) + 121 (nodes.cpp:3787)
19  com.apple.JavaScriptCore            0x005375bd
KJS::statementListExecute(WTF::Vector<WTF::RefPtr<KJS::StatementNode>, 0ul>&,
KJS::ExecState*) + 85 (nodes.cpp:3703)
20  com.apple.JavaScriptCore            0x0053764a
KJS::BlockNode::execute(KJS::ExecState*) + 26 (nodes.cpp:3729)
21  com.apple.JavaScriptCore            0x00555f7d
KJS::ForNode::execute(KJS::ExecState*) + 223 (nodes.cpp:3916)
22  com.apple.JavaScriptCore            0x005375bd
KJS::statementListExecute(WTF::Vector<WTF::RefPtr<KJS::StatementNode>, 0ul>&,
KJS::ExecState*) + 85 (nodes.cpp:3703)
23  com.apple.JavaScriptCore            0x0053764a
KJS::BlockNode::execute(KJS::ExecState*) + 26 (nodes.cpp:3729)
24  com.apple.JavaScriptCore            0x005453b0
KJS::FunctionBodyNode::execute(KJS::ExecState*) + 34 (nodes.cpp:4648)
25  com.apple.JavaScriptCore            0x00545b88
KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List
const&) + 116 (function.cpp:76)
26  com.apple.JavaScriptCore            0x0054f8ae
KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 222
(object.cpp:96)
27  com.apple.JavaScriptCore            0x005a5ebc KJS::JSValue*
KJS::ExpressionNode::resolveAndCall<(KJS::ExpressionNode::CallerType)1>(KJS::ExecState*,
KJS::Identifier const&, KJS::ArgumentsNode*) + 562 (nodes.cpp:997)
28  com.apple.JavaScriptCore            0x005a5f8e
KJS::FunctionCallResolveNode::inlineEvaluate(KJS::ExecState*) + 130
(nodes.cpp:1062)
29  com.apple.JavaScriptCore            0x00573b38
KJS::FunctionCallResolveNode::evaluate(KJS::ExecState*) + 30 (nodes.cpp:1067)
30  com.apple.JavaScriptCore            0x005565f5
KJS::ExprStatementNode::execute(KJS::ExecState*) + 43 (nodes.cpp:3750)
31  com.apple.JavaScriptCore            0x005375bd
KJS::statementListExecute(WTF::Vector<WTF::RefPtr<KJS::StatementNode>, 0ul>&,
KJS::ExecState*) + 85 (nodes.cpp:3703)
32  com.apple.JavaScriptCore            0x0053764a
KJS::BlockNode::execute(KJS::ExecState*) + 26 (nodes.cpp:3729)
33  com.apple.JavaScriptCore            0x005453b0
KJS::FunctionBodyNode::execute(KJS::ExecState*) + 34 (nodes.cpp:4648)
34  com.apple.JavaScriptCore            0x00545b88
KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List
const&) + 116 (function.cpp:76)
35  com.apple.JavaScriptCore            0x0054f8ae
KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 222
(object.cpp:96)
36  com.apple.WebCore                   0x0222113e
WebCore::JSAbstractEventListener::handleEvent(WebCore::Event*, bool) + 622
(kjs_events.cpp:105)
37  com.apple.WebCore                   0x01d72ddb
WebCore::Document::handleWindowEvent(WebCore::Event*, bool) + 281
(Document.cpp:2575)
38  com.apple.WebCore                   0x01dbc02c
WebCore::EventTargetNode::dispatchWindowEvent(WebCore::AtomicString const&,
bool, bool) + 332 (EventTargetNode.cpp:142)
39  com.apple.WebCore                   0x01d7778e
WebCore::Document::implicitClose() + 636 (Document.cpp:1524)
40  com.apple.WebCore                   0x01deb6d2
WebCore::FrameLoader::checkCallImplicitClose() + 226 (FrameLoader.cpp:1320)
41  com.apple.WebCore                   0x01df7020
WebCore::FrameLoader::checkCompleted() + 268 (FrameLoader.cpp:1276)
42  com.apple.WebCore                   0x01df716b
WebCore::FrameLoader::loadDone() + 39 (FrameLoader.cpp:1240)
43  com.apple.WebCore                   0x01d6d07e
WebCore::DocLoader::setLoadInProgress(bool) + 78 (DocLoader.cpp:201)
44  com.apple.WebCore                   0x022256bb
WebCore::Loader::Host::didFinishLoading(WebCore::SubresourceLoader*) + 487
(loader.cpp:294)
45  com.apple.WebCore                   0x021bf825
WebCore::SubresourceLoader::didFinishLoading() + 169
(SubresourceLoader.cpp:195)
46  com.apple.WebCore                   0x020c0c7c
WebCore::ResourceLoader::didFinishLoading(WebCore::ResourceHandle*) + 24
(ResourceLoader.cpp:373)
47  com.apple.WebCore                   0x020be427
-[WebCoreResourceHandleAsDelegate connectionDidFinishLoading:] + 101
(ResourceHandleMac.mm:521)
48  com.apple.Foundation                0x9678d8b7
-[NSURLConnection(NSURLConnectionReallyInternal) sendDidFinishLoading] + 87
49  com.apple.Foundation                0x9678d844
_NSURLConnectionDidFinishLoading + 68
50  com.apple.CFNetwork                 0x96ae47f3 sendDidFinishLoadingCallback
+ 148
51  com.apple.CFNetwork                 0x96ae1920
_CFURLConnectionSendCallbacks + 1994
52  com.apple.CFNetwork                 0x96ae10d9 muxerSourcePerform + 283
53  com.apple.CoreFoundation            0x9651862e CFRunLoopRunSpecific + 3166
54  com.apple.CoreFoundation            0x96518d18 CFRunLoopRunInMode + 88
55  com.apple.HIToolbox                 0x9004b6a0 RunCurrentEventLoopInMode +
283
56  com.apple.HIToolbox                 0x9004b4b9 ReceiveNextEventCommon + 374
57  com.apple.HIToolbox                 0x9004b32d
BlockUntilNextEventMatchingListInMode + 106
58  com.apple.AppKit                    0x951097d9 _DPSNextEvent + 657
59  com.apple.AppKit                    0x9510908e -[NSApplication
nextEventMatchingMask:untilDate:inMode:dequeue:] + 128
60  com.apple.Safari                    0x0001e0ce -[BrowserApplication
nextEventMatchingMask:untilDate:inMode:dequeue:] + 94
(BrowserApplication.m:189)
61  com.apple.AppKit                    0x951020c5 -[NSApplication run] + 795
62  com.apple.AppKit                    0x950cf30a NSApplicationMain + 574
63  com.apple.Safari                    0x00002f86 start + 54

Thread 1:
0   libSystem.B.dylib                   0x91d35bce __semwait_signal + 10
1   libSystem.B.dylib                   0x91d608cd pthread_cond_wait$UNIX2003 +
73
2   com.apple.JavaScriptCore            0x005bf5eb
WTF::ThreadCondition::wait(WTF::Mutex&) + 39 (ThreadingPthreads.cpp:185)
3   com.apple.WebCore                   0x01e8fe97
WebCore::IconDatabase::syncThreadMainLoop() + 641 (IconDatabase.cpp:1312)
4   com.apple.WebCore                   0x01e9169e
WebCore::IconDatabase::iconDatabaseSyncThread() + 1198 (IconDatabase.cpp:1014)
5   com.apple.WebCore                   0x01e916cd
WebCore::IconDatabase::iconDatabaseSyncThreadStart(void*) + 23
(IconDatabase.cpp:918)
6   libSystem.B.dylib                   0x91d5fc55 _pthread_start + 321
7   libSystem.B.dylib                   0x91d5fb12 thread_start + 34

Thread 2:
0   libSystem.B.dylib                   0x91d2e9e6 mach_msg_trap + 10
1   libSystem.B.dylib                   0x91d361dc mach_msg + 72
2   com.apple.CoreFoundation            0x965180de CFRunLoopRunSpecific + 1806
3   com.apple.CoreFoundation            0x96518d18 CFRunLoopRunInMode + 88
4   com.apple.CFNetwork                 0x96adc6cc
CFURLCacheWorkerThread(void*) + 396
5   libSystem.B.dylib                   0x91d5fc55 _pthread_start + 321
6   libSystem.B.dylib                   0x91d5fb12 thread_start + 34

Thread 3:
0   libSystem.B.dylib                   0x91d2e9e6 mach_msg_trap + 10
1   libSystem.B.dylib                   0x91d361dc mach_msg + 72
2   com.apple.CoreFoundation            0x965180de CFRunLoopRunSpecific + 1806
3   com.apple.CoreFoundation            0x96518d18 CFRunLoopRunInMode + 88
4   com.apple.Foundation                0x9678bac0
+[NSURLConnection(NSURLConnectionReallyInternal) _resourceLoadLoop:] + 320
5   com.apple.Foundation                0x967285ad -[NSThread main] + 45
6   com.apple.Foundation                0x96728154 __NSThread__main__ + 308
7   libSystem.B.dylib                   0x91d5fc55 _pthread_start + 321
8   libSystem.B.dylib                   0x91d5fb12 thread_start + 34

Thread 4:
0   libSystem.B.dylib                   0x91d7eb3a select$DARWIN_EXTSN + 10
1   libSystem.B.dylib                   0x91d5fc55 _pthread_start + 321
2   libSystem.B.dylib                   0x91d5fb12 thread_start + 34

Thread 5:
0   libSystem.B.dylib                   0x91d2e9e6 mach_msg_trap + 10
1   libSystem.B.dylib                   0x91d361dc mach_msg + 72
2   com.apple.CoreFoundation            0x965180de CFRunLoopRunSpecific + 1806
3   com.apple.CoreFoundation            0x96518d18 CFRunLoopRunInMode + 88
4   com.apple.Foundation                0x9675cb15 -[NSRunLoop(NSRunLoop)
runMode:beforeDate:] + 213
5   com.apple.Foundation                0x96768c34 -[NSRunLoop(NSRunLoop) run]
+ 84
6   com.apple.Safari                    0x000b1eb0 -[Heartbeat
_startHeartbeatRunLoop] + 240 (SpinningProgressIndicator.m:450)
7   com.apple.Foundation                0x967285ad -[NSThread main] + 45
8   com.apple.Foundation                0x96728154 __NSThread__main__ + 308
9   libSystem.B.dylib                   0x91d5fc55 _pthread_start + 321
10  libSystem.B.dylib                   0x91d5fb12 thread_start + 34

Thread 6:
0   libSystem.B.dylib                   0x91d2e9e6 mach_msg_trap + 10
1   libSystem.B.dylib                   0x91d361dc mach_msg + 72
2   ...romedia.Flash Player.plugin      0x1e299341 memcopy_mmx + 709497
3   libSystem.B.dylib                   0x91d5fc55 _pthread_start + 321
4   libSystem.B.dylib                   0x91d5fb12 thread_start + 34

Thread 7:
0   libSystem.B.dylib                   0x91d2ea2e semaphore_wait_signal_trap +
10
1   libSystem.B.dylib                   0x91d60dc6 _pthread_cond_wait + 1267
2   libSystem.B.dylib                   0x91da68bb pthread_cond_wait + 48
3   ...romedia.Flash Player.plugin      0x1e160572 0x1ddd1000 + 3732850
4   ...romedia.Flash Player.plugin      0x1e197e68 Flash_EnforceLocalSecurity +
124992
5   ...romedia.Flash Player.plugin      0x1e16081c 0x1ddd1000 + 3733532
6   libSystem.B.dylib                   0x91d5fc55 _pthread_start + 321
7   libSystem.B.dylib                   0x91d5fb12 thread_start + 34

Thread 8:
0   libSystem.B.dylib                   0x91d2ea2e semaphore_wait_signal_trap +
10
1   libSystem.B.dylib                   0x91d60dc6 _pthread_cond_wait + 1267
2   libSystem.B.dylib                   0x91da68bb pthread_cond_wait + 48
3   ...romedia.Flash Player.plugin      0x1e160572 0x1ddd1000 + 3732850
4   ...romedia.Flash Player.plugin      0x1e197e68 Flash_EnforceLocalSecurity +
124992
5   ...romedia.Flash Player.plugin      0x1e16081c 0x1ddd1000 + 3733532
6   libSystem.B.dylib                   0x91d5fc55 _pthread_start + 321
7   libSystem.B.dylib                   0x91d5fb12 thread_start + 34

Thread 0 crashed with X86 Thread State (32-bit):
  eax: 0x0000000c  ebx: 0x01fd694e  ecx: 0x01c68347  edx: 0x00000000
  edi: 0x1be6ad00  esi: 0x0000000c  ebp: 0xbfffd478  esp: 0xbfffd470
   ss: 0x0000001f  efl: 0x00010282  eip: 0x01c68335   cs: 0x00000017
   ds: 0x0000001f   es: 0x0000001f   fs: 0x00000000   gs: 0x00000037
  cr2: 0x0000000c


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list