[Webkit-unassigned] [Bug 51224] New: ASSERT hit in HistoryItem::addChildItem

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=51224

           Summary: ASSERT hit in HistoryItem::addChildItem
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: History
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: rniwa at webkit.org
                CC: beidson at apple.com, fishd at chromium.org,
                    mihaip at chromium.org


I hit the following assertion on facebook:

void HistoryItem::addChildItem(PassRefPtr<HistoryItem> child)
{
    ASSERT(!childItemWithTarget(child->target())); // < this one
    m_children.append(child);
#if PLATFORM(ANDROID)
    notifyHistoryItemChanged(this);
#endif
}

Stack trace:
#0    0x10192f18d in WebCore::HistoryItem::addChildItem at HistoryItem.cpp:419
#1    0x10192d387 in WebCore::HistoryController::createItemTree at HistoryController.cpp:543
#2    0x10192d49e in WebCore::HistoryController::pushState at HistoryController.cpp:659
#3    0x10192b98e in WebCore::History::stateObjectAdded at History.cpp:106
#4    0x101b80f99 in WebCore::JSHistory::pushState at JSHistoryCustom.cpp:183
#5    0x101b800e0 in WebCore::jsHistoryPrototypeFunctionPushState at JSHistory.cpp:182
#6    0x5f84352001b8 in ??
#7    0x1007e84a3 in JSC::JITCode::execute at JITCode.h:77
#8    0x1007e32a5 in JSC::Interpreter::executeCall at Interpreter.cpp:849
#9    0x10079c9b4 in JSC::call at CallData.cpp:38
#10    0x101ace843 in WebCore::JSMainThreadExecState::call at JSMainThreadExecState.h:48
#11    0x101b6db7c in WebCore::JSEventListener::handleEvent at JSEventListener.cpp:124
#12    0x10183fe3e in WebCore::EventTarget::fireEventListeners at EventTarget.cpp:342
#13    0x1018404a8 in WebCore::EventTarget::fireEventListeners at EventTarget.cpp:311
#14    0x101dbef35 in WebCore::Node::handleLocalEvents at Node.cpp:2511
#15    0x101dbe98c in WebCore::Node::dispatchGenericEvent at Node.cpp:2636
#16    0x101dbee65 in WebCore::Node::dispatchEvent at Node.cpp:2580
#17    0x10183f9b8 in WebCore::EventTarget::dispatchEvent at EventTarget.cpp:289
#18    0x10182c64c in WebCore::EventHandler::keyEvent at EventHandler.cpp:2378
#19    0x101839d55 in WebCore::EventHandler::keyEvent at EventHandlerMac.mm:148
#20    0x100f994db in -[WebHTMLView keyDown:] at WebHTMLView.mm:4217

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.