[Webkit-unassigned] [Bug 43553] New: crash in QtWebKit4.dll!WebCore::Document::~Document() Line 482 + 0x11 bytes C++

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Aug 5 04:59:39 PDT 2010


https://bugs.webkit.org/show_bug.cgi?id=43553

           Summary: crash in QtWebKit4.dll!WebCore::Document::~Document()
                    Line 482 + 0x11 bytes C++
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Windows XP
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: WebKit Qt
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: stawel at gmail.com


Hi,

I'm getting a crash in ~Document() destructor.
It's the Qt4.6.2 version of webkit.

callstack:
     QtWebKit4.dll!WTF::HashTable<WebCore::AtomicStringImpl *,std::pair<WebCore::AtomicStringImpl *,WebCore::CSSRuleDataList *>,WTF::PairFirstExtractor<std::pair<WebCore::AtomicStringImpl *,WebCore::CSSRuleDataList *> >,WTF::PtrHash<WebCore::AtomicStringImpl *>,WTF::PairHashTraits<WTF::HashTraits<WebCore::AtomicStringImpl *>,WTF::HashTraits<WebCore::CSSRuleDataList *> >,WTF::HashTraits<WebCore::AtomicStringImpl *> >::makeConstIterator(std::pair<WebCore::AtomicStringImpl *,WebCore::CSSRuleDataList *> * pos=(...,...)  Line 382 + 0x22 bytes    C++
     QtWebKit4.dll!WTF::deleteAllPairSeconds<WebCore::CSSRuleDataList *,WTF::HashMap<WebCore::AtomicStringImpl *,WebCore::CSSRuleDataList *,WTF::PtrHash<WebCore::AtomicStringImpl *>,WTF::HashTraits<WebCore::AtomicStringImpl *>,WTF::HashTraits<WebCore::CSSRuleDataList *> > const >(const WTF::HashMap<WebCore::AtomicStringImpl *,WebCore::CSSRuleDataList *,WTF::PtrHash<WebCore::AtomicStringImpl *>,WTF::HashTraits<WebCore::AtomicStringImpl *>,WTF::HashTraits<WebCore::CSSRuleDataList *> > & collection={...})  Line 277 + 0xf bytes    C++
     QtWebKit4.dll!WebCore::CSSRuleSet::~CSSRuleSet()  Line 2702    C++
     QtWebKit4.dll!WebCore::CSSStyleSelector::~CSSStyleSelector()  Line 500 + 0xd bytes    C++
>	QtWebKit4.dll!WebCore::Document::~Document()  Line 482 + 0x11 bytes	C++
     QtWebKit4.dll!WebCore::Document::`scalar deleting destructor'()  + 0x8 bytes    C++
     QtWebKit4.dll!WebCore::Document::removedLastRef()  Line 459 + 0x10 bytes    C++
     QtWebKit4.dll!WebCore::Loader::Host::didFail(WebCore::SubresourceLoader * loader=0x13f051b8, bool cancelled=true)  Line 427 + 0x25 bytes    C++
     QtWebKit4.dll!WebCore::Loader::Host::cancelRequests(WebCore::DocLoader * docLoader=0x13f051b8)  Line 555 + 0xa bytes    C++
     QtWebKit4.dll!WebCore::Loader::cancelRequests(WebCore::DocLoader * docLoader=0x13f051b8)  Line 224 + 0xa bytes    C++
     QtWebKit4.dll!WebCore::DocLoader::~DocLoader()  Line 67    C++
     QtWebKit4.dll!WebCore::Document::~Document()  Line 483 + 0x11 bytes    C++
     QtWebKit4.dll!WebCore::HTMLDocument::~HTMLDocument()  Line 91 + 0x41 bytes    C++
     QtWebKit4.dll!WebCore::HTMLDocument::`scalar deleting destructor'()  + 0x8 bytes    C++
     QtWebKit4.dll!WebCore::Document::removedLastRef()  Line 454 + 0x1a bytes    C++
     QtWebKit4.dll!WebCore::Frame::setDocument(WTF::PassRefPtr<WebCore::Document> newDoc={...})  Line 280    C++
     QtWebKit4.dll!WebCore::FrameLoader::clear(bool clearWindowProperties=true, bool clearScriptObjects=true, bool clearFrameView=true)  Line 718    C++
     QtWebKit4.dll!WebCore::FrameLoader::begin(const WebCore::KURL & url={...}, bool dispatch=true, WebCore::SecurityOrigin * origin=0x00000000)  Line 804    C++
     QtWebKit4.dll!QWebFrame::setUrl(const QUrl & url={...})  Line 637 + 0x40 bytes    C++
     QtWebKit4.dll!QWebView::setUrl(const QUrl & url={...})  Line 484    C++
    .....


I'm calling:
ui.m_webView->setUrl(QString("about:blank"));


The crash callstack is from a minidump automatically 
send from users (don't now how to reproduce).


Looks to me that the destructor (~Document) was executed twice.
(see callstack)

Best Regards

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.


More information about the webkit-unassigned mailing list