[Webkit-unassigned] [Bug 44533] Crash when loading page

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=44533


Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
           Keywords|                            |NeedsRadar, NeedsReduction
          Component|New Bugs                    |XML DOM
                 CC|                            |abarth at webkit.org,
                   |                            |ap at webkit.org,
                   |                            |eseidel at chromium.org
     Ever Confirmed|0                           |1




--- Comment #1 from Alexey Proskuryakov <ap at webkit.org>  2010-08-24 12:01:24 PST ---
#0    0x1029e0421 in WebCore::TreeShared<WebCore::Node>::deref at TreeShared.h:71
#1    0x10367b6cf in WebCore::XMLDocumentParser::clearCurrentNodeStack at XMLDocumentParser.cpp:107
#2    0x10367d0ed in WebCore::XMLDocumentParser::~XMLDocumentParser at XMLDocumentParserLibxml2.cpp:619
#3    0x102c3598d in WTF::RefCounted<WebCore::DocumentParser>::deref at RefCounted.h:139
#4    0x102c4b317 in WTF::derefIfNotNull<WebCore::DocumentParser> at PassRefPtr.h:58
#5    0x102c4b39d in WTF::RefPtr<WebCore::DocumentParser>::clear at RefPtr.h:104
#6    0x102c1c77d in WebCore::Document::detachParser at Document.cpp:1830
#7    0x102c2b20c in WebCore::Document::~Document at Document.cpp:541
#8    0x1035386cd in WebCore::SVGDocument::~SVGDocument at SVGDocument.cpp:45
#9    0x102c2b87a in WebCore::Document::removedLastRef at Document.cpp:514
#10    0x1029e04ff in WebCore::TreeShared<WebCore::Node>::deref at TreeShared.h:78
#11    0x102c9c469 in WTF::derefIfNotNull<WebCore::SVGDocument> at PassRefPtr.h:58
#12    0x102aa2839 in WTF::RefPtr<WebCore::SVGDocument>::clear at RefPtr.h:104
#13    0x102aa1f3a in WebCore::CachedFont::ensureSVGFontData at CachedFont.cpp:146
#14    0x102b24abf in WebCore::CSSFontFaceSource::getFontData at CSSFontFaceSource.cpp:130

    if (m_currentNode && m_currentNode != document())
        m_currentNode->deref();

m_currentNode is a Document, but DocumentParser::m_document is null, so we're wrongly trying to deref the document.

Could it be an HTML5 parser related change that DocumentParser::m_document is null here?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.