[Webkit-unassigned] [Bug 29339] New: Reproducible crash from webView:unableToImplementPolicyWithError:frame:

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=29339

           Summary: Reproducible crash from
                    webView:unableToImplementPolicyWithError:frame:
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh Intel
        OS/Version: Mac OS X 10.5
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Page Loading
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: opendarwin at lapcatsoftware.com


Overview:
The WebFrame class reference suggests that you can call -[WebFrame
loadAlternateHTMLString:baseURL:forUnreachableURL:] in the WebPolicyDelegate
method webView:unableToImplementPolicyWithError:frame:. However, doing so can
cause a crash during a page load.

Steps to Reproduce:
1. On a web server running Apache, create an .htaccess file with the following
line, replacing /path/to/ with an actual path:
RedirectMatch ^/path/to/redirect-crash.html httypo://bugs.webkit.org/

2. Download, unzip, build, and run the attached sample Xcode project
WebPolicyCrash.

3. In the text field, enter
http://my.apache.web.server/path/to/redirect-crash.html and press return.

Actual Results:
Crash

Expected Results:
No crash (duh).

Build Date & Platform:
git commit c3f23b6f9e374dec5ddd54a645c05cf06f4ceb03 corresponding to svn
revision 48472

Additional Builds and Platforms:
Mac OS X 10.5.8 Build 9L30

Additional Information:
I've also attached a crash log and a gdb backtrace.

The crash occurs after calling -[WebFrame
loadAlternateHTMLString:baseURL:forUnreachableURL:] in the WebPolicyDelegate
method webView:unableToImplementPolicyWithError:frame:. This should definitely
not occur, because the documentation at
http://developer.apple.com/mac/library/documentation/Cocoa/Reference/WebKit/Classes/WebFrame_Class/Reference/Reference.html#//apple_ref/occ/instm/WebFrame/loadAlternateHTMLString:baseURL:forUnreachableURL:
specifically mentions that this method can be called in
webView:unableToImplementPolicyWithError:frame:.

The crash also occurs if you call -[WebFrame stopLoading] instead of -[WebFrame
loadAlternateHTMLString:baseURL:forUnreachableURL:].

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.