[Webkit-unassigned] [Bug 31809] New: [CRASH] Assertion on clicking a link

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=31809

           Summary: [CRASH] Assertion on clicking a link
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
               URL: http://user.qzone.qq.com/775036573
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: pfeldman at chromium.org


Open http://user.qzone.qq.com/775036573 page,
Click second link to the right from the floating hearts.
Enjoy the crash:

#0    0x0468b8ba in WebCore::HTMLFrameElementBase::openURL at
HTMLFrameElementBase.cpp:93
#1    0x0468ba74 in WebCore::HTMLFrameElementBase::setLocation at
HTMLFrameElementBase.cpp:214
#2    0x0468bae0 in WebCore::HTMLFrameElementBase::parseMappedAttribute at
HTMLFrameElementBase.cpp:113
#3    0x0468f775 in WebCore::HTMLIFrameElement::parseMappedAttribute at
HTMLIFrameElement.cpp:92
#4    0x04c32db0 in WebCore::StyledElement::attributeChanged at
StyledElement.cpp:190
#5    0x04a25754 in WebCore::NamedNodeMap::addAttribute at NamedAttrMap.cpp:278
#6    0x045a505e in WebCore::Element::setAttribute at Element.cpp:555
#7    0x045a51da in WebCore::Element::setAttribute at Element.cpp:137
#8    0x04888f9b in WebCore::JSHTMLIFrameElement::setSrc at
JSHTMLIFrameElementCustom.cpp:56
#9    0x048877e2 in WebCore::setJSHTMLIFrameElementSrc at
JSHTMLIFrameElement.cpp:327
#10    0x04888791 in JSC::lookupPut<WebCore::JSHTMLIFrameElement> at
Lookup.h:303
#11    0x048887d6 in JSC::lookupPut<WebCore::JSHTMLIFrameElement,
WebCore::JSHTMLElement> at Lookup.h:317
#12    0x04887829 in WebCore::JSHTMLIFrameElement::put at
JSHTMLIFrameElement.cpp:274
#13    0x006e7c6a in JSC::JSValue::put at JSObject.h:656

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.