[Webkit-unassigned] [Bug 34444] New: Crash in Safari opening new tabs/windows to "same page"

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=34444

           Summary: Crash in Safari opening new tabs/windows to "same
                    page"
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Page Loading
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: beidson at apple.com


Set Safari to open new tabs/windows to the same page.

Run ToT WebKit, visit any single page in a new window, then open a new
tab/window.

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x00000000000000d0
Crashed Thread:  0  Dispatch queue: com.apple.main-thread

Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   com.apple.WebCore                 0x0000000100a71b42
WebCore::FrameLoader::loadItem(WebCore::HistoryItem*, WebCore::FrameLoadType) +
50
1   com.apple.WebCore                 0x0000000100e85dbb
WebCore::HistoryController::recursiveGoToItem(WebCore::HistoryItem*,
WebCore::HistoryItem*, WebCore::FrameLoadType) + 363
2   com.apple.WebCore                 0x0000000100a71a3d
WebCore::Page::goToItem(WebCore::HistoryItem*, WebCore::FrameLoadType) + 189
3   com.apple.WebKit                  0x0000000100643dde -[WebView(WebPrivate)
_loadBackForwardListFromOtherView:] + 382
4   Safari                        0x0000000100097226 0x100000000 + 619046
5   com.apple.AppKit                  0x00007fff80ca909a -[NSApplication
sendAction:to:from:] + 95
6   Safari                        0x000000010004e4b3 0x100000000 + 320691
7   com.apple.AppKit                  0x00007fff80ccd602 -[NSMenuItem
_corePerformAction] + 365
8   com.apple.AppKit                  0x00007fff80ccd36c -[NSCarbonMenuImpl
performActionWithHighlightingForItemAtIndex:] + 121
9   com.apple.AppKit                  0x00007fff80cb3009 -[NSMenu
performKeyEquivalent:] + 272
10  com.apple.AppKit                  0x00007fff80cb1db1 -[NSApplication
_handleKeyEquivalent:] + 559
11  com.apple.AppKit                  0x00007fff80b829e1 -[NSApplication
sendEvent:] + 3630
12  Safari                        0x0000000100032aa2 0x100000000 + 207522
13  com.apple.AppKit                  0x00007fff80b19796 -[NSApplication run] +
474
14  com.apple.AppKit                  0x00007fff80b12468 NSApplicationMain +
364
15  Safari                        0x0000000100002224 0x100000000 + 8740

I have a patch coming to plug two places where the current history item is not
null checked.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.