[Webkit-unassigned] [Bug 22148] nytime.com page crashes browser during load

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=22148


webkit at mattlilek.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
          Component|Page Loading                |JavaScriptCore
     Ever Confirmed|0                           |1
           Keywords|                            |NeedsReduction
           Priority|P2                          |P1




------- Comment #3 from webkit at mattlilek.com  2008-11-09 10:42 PDT -------
Confirmed with r38239:

Exception Type:  EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000114
Crashed Thread:  0

Thread 0 Crashed:
0   com.apple.JavaScriptCore            0x0053dc2f bool WTF::HashTable<void*,
std::pair<void*, unsigned int>, WTF::PairFirstExtractor<std::pair<void*,
unsigned int> >, WTF::PtrHash<void*>,
WTF::PairHashTraits<WTF::HashTraits<void*>, WTF::HashTraits<unsigned int> >,
WTF::HashTraits<void*> >::contains<void*, WTF::IdentityHashTranslator<void*,
std::pair<void*, unsigned int>, WTF::PtrHash<void*> > >(void* const&) const + 9
(HashTable.h:779)
1   com.apple.JavaScriptCore            0x0053dc78 WTF::HashTable<void*,
std::pair<void*, unsigned int>, WTF::PairFirstExtractor<std::pair<void*,
unsigned int> >, WTF::PtrHash<void*>,
WTF::PairHashTraits<WTF::HashTraits<void*>, WTF::HashTraits<unsigned int> >,
WTF::HashTraits<void*> >::contains(void* const&) const + 24 (HashTable.h:315)
2   com.apple.JavaScriptCore            0x0053dc96 WTF::HashMap<void*, unsigned
int, WTF::PtrHash<void*>, WTF::HashTraits<void*>, WTF::HashTraits<unsigned int>
>::contains(void* const&) const + 24 (HashMap.h:173)
3   com.apple.JavaScriptCore            0x0052fa69
JSC::Machine::cti_vm_throw(void*, ...) + 83 (Machine.cpp:5960)
4   com.apple.JavaScriptCore            0x00524020 jscGeneratedNativeCode + 0
(Machine.cpp:4296)
5   com.apple.JavaScriptCore            0x0052afb2
JSC::Machine::execute(JSC::ProgramNode*, JSC::ExecState*, JSC::ScopeChainNode*,
JSC::JSObject*, JSC::JSValue**) + 674 (Machine.cpp:934)
6   com.apple.JavaScriptCore            0x004b358a
JSC::Interpreter::evaluate(JSC::ExecState*, JSC::ScopeChain&, JSC::SourceCode
const&, JSC::JSValue*) + 438 (Interpreter.cpp:68)
7   com.apple.WebCore                   0x0398b896
WebCore::ScriptController::evaluate(WebCore::String const&, int,
WebCore::String const&) + 250 (ScriptController.cpp:111)
8   com.apple.WebCore                   0x0351368c
WebCore::FrameLoader::executeScript(WebCore::String const&, int,
WebCore::String const&) + 154 (FrameLoader.cpp:792)
9   com.apple.WebCore                   0x035a2054
WebCore::HTMLTokenizer::scriptExecution(WebCore::String const&,
WebCore::HTMLTokenizer::State, WebCore::String const&, int) + 300
(HTMLTokenizer.cpp:563)
10  com.apple.WebCore                   0x035a24c3
WebCore::HTMLTokenizer::notifyFinished(WebCore::CachedResource*) + 623
(HTMLTokenizer.cpp:2011)
11  com.apple.WebCore                   0x0335c6ce
WebCore::CachedScript::checkNotify() + 86 (CachedScript.cpp:92)
12  com.apple.WebCore                   0x0335c8cb
WebCore::CachedScript::data(WTF::PassRefPtr<WebCore::SharedBuffer>, bool) + 279
(CachedScript.cpp:84)
13  com.apple.WebCore                   0x03991351
WebCore::Loader::Host::didFinishLoading(WebCore::SubresourceLoader*) + 413
(loader.cpp:300)
14  com.apple.WebCore                   0x0390c257
WebCore::SubresourceLoader::didFinishLoading() + 169
(SubresourceLoader.cpp:196)
15  com.apple.WebCore                   0x03833332
WebCore::ResourceLoader::didFinishLoading(WebCore::ResourceHandle*) + 24
(ResourceLoader.cpp:399)


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.