[Webkit-unassigned] [Bug 39042] New: r59270 causes crashes on some pages

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=39042

           Summary: r59270 causes crashes on some pages
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: simon.fraser at apple.com


r59270 caused a crash with some internal test content. Crash stack looks like:


Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   ???                               000000000000000000 0 + 0
1   com.apple.WebCore                 0x0000000100dada06 WebCore::RenderInline::destroy() + 38
2   com.apple.WebCore                 0x0000000100c66a9b WebCore::RenderBlock::destroy() + 43
3   com.apple.WebCore                 0x0000000100dada06 WebCore::RenderInline::destroy() + 38
4   com.apple.WebCore                 0x0000000100dada06 WebCore::RenderInline::destroy() + 38
5   com.apple.WebCore                 0x0000000100c66a9b WebCore::RenderBlock::destroy() + 43
6   com.apple.WebCore                 0x0000000100dada06 WebCore::RenderInline::destroy() + 38
7   com.apple.WebCore                 0x0000000100dada06 WebCore::RenderInline::destroy() + 38
8   com.apple.WebCore                 0x0000000100c66a13 WebCore::Node::detach() + 35
9   com.apple.WebCore                 0x0000000100c668cb WebCore::Element::detach() + 107
10  com.apple.WebCore                 0x0000000100c6683c WebCore::ContainerNode::detach() + 44
11  com.apple.WebCore                 0x0000000100c668cb WebCore::Element::detach() + 107
12  com.apple.WebCore                 0x0000000100c6683c WebCore::ContainerNode::detach() + 44
13  com.apple.WebCore                 0x0000000100c668cb WebCore::Element::detach() + 107
14  com.apple.WebCore                 0x0000000100c6683c WebCore::ContainerNode::detach() + 44
15  com.apple.WebCore                 0x0000000100c668cb WebCore::Element::detach() + 107
16  com.apple.WebCore                 0x0000000100c6683c WebCore::ContainerNode::detach() + 44
17  com.apple.WebCore                 0x0000000100c668cb WebCore::Element::detach() + 107
18  com.apple.WebCore                 0x0000000100c6683c WebCore::ContainerNode::detach() + 44
19  com.apple.WebCore                 0x0000000100c668cb WebCore::Element::detach() + 107
20  com.apple.WebCore                 0x0000000100d9da67 WebCore::ContainerNode::removeChild(WebCore::Node*, int&) + 263
21  com.apple.WebCore                 0x0000000100e26633 WebCore::HTMLParser::handleResidualStyleCloseTagAcrossBlocks(WebCore::HTMLStackElem*) + 2115
22  com.apple.WebCore                 0x0000000100c80fec WebCore::HTMLParser::popBlock(WebCore::AtomicString const&, bool) + 172
23  com.apple.WebCore                 0x0000000100c7aaeb WebCore::HTMLParser::processCloseTag(WebCore::Token*) + 171
24  com.apple.WebCore                 0x0000000100c76dbb WebCore::HTMLParser::parseToken(WebCore::Token*) + 779

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.