[Webkit-unassigned] [Bug 23064] New: Always repeatable crash when clicking 'Play Wilhelm Scream'

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=23064

           Summary: Always repeatable crash when clicking 'Play Wilhelm
                    Scream'
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh Intel
               URL: http://en.wikipedia.org/w/index.php?title=Wilhelm_scream
                    &oldid=261089324
        OS/Version: Mac OS X 10.5
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: john.engelhart at gmail.com


Used wikipedias 'permanent link' in case the page changes.

When clicking on the button to play the 'Wilhelm Scream' audio sample, safari
always crashes in the same spot.  This happens on the WebKit version I'm using
(38826) and the stock Safari (Version 3.2.1 (5525.27.1)).


Will attach the full crash report, but it looks like a NULL pointer is being
handed to RenderSlider::inDragMode().  When I diff the Safari.app and
WebKit.app crash logs, they are nearly identical, but there are slight
differences.  The two crashes I had with WebKit.app are identical (modulo the
normal, expected differences).

Here's the top interesting bits:

Process:         Safari [61339]
Path:            /Applications/WebKit.app/Contents/MacOS/WebKit
Identifier:      org.webkit.nightly.WebKit
Version:         r38826 (38826)
Code Type:       X86 (Native)
Parent Process:  launchd [126]

Date/Time:       2009-01-01 04:10:15.515 -0500
OS Version:      Mac OS X 10.5.6 (9G55)
Report Version:  6

Exception Type:  EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000050
Crashed Thread:  0

Thread 0 Crashed:
0   com.apple.WebCore                   0x012d98fc
WebCore::RenderSlider::inDragMode() const + 12
1   com.apple.WebCore                   0x014429f1
WebCore::MediaControlTimelineElement::defaultEventHandler(WebCore::Event*) + 33
2   com.apple.WebCore                   0x00fd242c
WebCore::EventTargetNode::dispatchGenericEvent(WTF::PassRefPtr<WebCore::Event>,
int&) + 1004
3   com.apple.WebCore                   0x00fd2af9
WebCore::EventTargetNode::dispatchEvent(WTF::PassRefPtr<WebCore::Event>, int&)
+ 233
4   com.apple.WebCore                   0x00fd2cad
WebCore::EventTargetNode::dispatchSubtreeModifiedEvent() + 253
5   com.apple.WebCore                   0x0124bea5
WebCore::NamedAttrMap::addAttribute(WTF::PassRefPtr<WebCore::Attribute>) + 181
6   com.apple.WebCore                   0x00fc0b54
WebCore::Element::setAttribute(WebCore::QualifiedName const&,
WebCore::AtomicString const&, int&) + 324
7   com.apple.WebCore                   0x00fc0d86
WebCore::Element::setAttribute(WebCore::QualifiedName const&,
WebCore::AtomicString const&) + 38
8   com.apple.WebCore                   0x014431fd
WebCore::MediaControlTimelineElement::MediaControlTimelineElement(WebCore::Document*,
WebCore::HTMLMediaElement*) + 173
9   com.apple.WebCore                   0x012b8e6f
WebCore::RenderMedia::createTimeline() + 63
10  com.apple.WebCore                   0x012ba8f0
WebCore::RenderMedia::updateControls() + 976
11  com.apple.WebCore                   0x01303512
WebCore::RenderVideo::updateFromElement() + 18
12  com.apple.WebCore                   0x0108d1c7
WebCore::HTMLVideoElement::attach() + 23
13  com.apple.WebCore                   0x00eb08eb
WebCore::ContainerNode::attach() + 43
14  com.apple.WebCore                   0x00fc0098 WebCore::Element::attach() +
40
15  com.apple.WebCore                   0x00eaffcc
WebCore::ContainerNode::appendChild(WTF::PassRefPtr<WebCore::Node>, int&, bool)
+ 652
16  com.apple.WebCore                   0x01039163
WebCore::replaceChildrenWithFragment(WebCore::HTMLElement*,
WTF::PassRefPtr<WebCore::DocumentFragment>, int&) + 115
17  com.apple.WebCore                   0x0103a0d1
WebCore::HTMLElement::setInnerHTML(WebCore::String const&, int&) + 65


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.