[Webkit-unassigned] [Bug 61494] REGRESSION (r78342) - Crash when Document calls into a freed DocumentLoader

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=61494





--- Comment #1 from Brady Eidson <beidson at apple.com>  2011-05-25 18:28:52 PST ---
16 com.apple.WebCore:  WebCore::DocumentWriter::endIfNotLoadingMainResource + 58 <==
  16 com.apple.WebCore:  WebCore::Document::cancelParsing + 118
    16 com.apple.WebCore:  WebCore::FrameLoader::clear + 91
      16 com.apple.WebCore:  WebCore::FrameLoader::open + 492
        16 com.apple.WebCore:  WebCore::CachedFrame::open + 36
          16 com.apple.WebCore:  WebCore::CachedPage::restore + 22
            16 com.apple.WebCore:  WebCore::FrameLoader::commitProvisionalLoad + 966
              16 com.apple.WebCore:  WebCore::FrameLoader::continueLoadAfterNavigationPolicy + 761
                16 com.apple.WebCore:  WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy + 32
                  13 com.apple.WebCore:  WebCore::PolicyChecker::checkNavigationPolicy + 872
                    13 com.apple.WebCore:  WebCore::FrameLoader::loadWithDocumentLoader + 1260
                      13 com.apple.WebCore:  WebCore::FrameLoader::loadDifferentDocumentItem + 100
                        13 com.apple.WebCore:  WebCore::HistoryController::recursiveGoToItem + 412
                          13 com.apple.WebCore:  WebCore::HistoryController::goToItem + 165
                            13 com.apple.WebCore:  WebCore::Page::goToItem + 235

Is one oft-reported variant of the crash we're seeing.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.