[Webkit-unassigned] [Bug 23131] New: Assertion failure when switching from native to Java sound player on Wikipedia

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=23131

           Summary: Assertion failure when switching from native to Java
                    sound player on Wikipedia
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh
               URL: http://en.wikipedia.org/w/index.php?title=Wilhelm_scream
                    &oldid=261089324
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit Misc.
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ap at webkit.org


Steps to reproduce:
1. Open
http://en.wikipedia.org/w/index.php?title=Wilhelm_scream&oldid=261089324
2. Click Play button (Wilhelm scream).
3. Click "More..." link beneath the player and switch to "Native browser
support".
4. Click "More..." again and switch back to Java (Cortado) player.

An assertion fails: 

ASSERT(!eventDispatchForbidden());

#0      0x03606138 in WebCore::EventTargetNode::dispatchProgressEvent at
EventTargetNode.cpp:672
#1      0x036c0781 in WebCore::HTMLMediaElement::load at
HTMLMediaElement.cpp:335
#2      0x036c0a14 in WebCore::HTMLMediaElement::pause at
HTMLMediaElement.cpp:680
#3      0x036c0a9a in WebCore::HTMLMediaElement::removedFromDocument at
HTMLMediaElement.cpp:143
#4      0x034ae824 in WebCore::ContainerNode::removedFromDocument at
ContainerNode.cpp:609
#5      0x035ed791 in WebCore::Element::removedFromDocument at Element.cpp:641
#6      0x034af9ab in WebCore::ContainerNode::removeChildren at
ContainerNode.cpp:430
#7      0x036940e6 in WebCore::replaceChildrenWithFragment at
HTMLElement.cpp:310
#8      0x03695c85 in WebCore::HTMLElement::setInnerHTML at HTMLElement.cpp:354
#9      0x037e0bda in WebCore::setJSHTMLElementInnerHTML at
JSHTMLElement.cpp:285
#10     0x037e1b18 in JSC::lookupPut<WebCore::JSHTMLElement> at Lookup.h:256
#11     0x037e1b51 in JSC::lookupPut<WebCore::JSHTMLElement,
WebCore::JSElement> at Lookup.h:270
#12     0x037e1506 in WebCore::JSHTMLElement::put at JSHTMLElement.cpp:242
#13     0x037de19b in JSC::lookupPut<WebCore::JSHTMLDivElement,
WebCore::JSHTMLElement> at Lookup.h:271
#14     0x037ddbba in WebCore::JSHTMLDivElement::put at
JSHTMLDivElement.cpp:143
#15     0x00bc1f36 in JSC::JSValue::put at JSObject.h:526

It doesn't look right at all that pause() calls play()!


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.