[Webkit-unassigned] [Bug 61619] New: [Qt] Webcore crashes consistently on setUpIterator while parsing plaintext presented as html

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=61619

           Summary: [Qt] Webcore crashes consistently on setUpIterator
                    while parsing plaintext presented as html
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Windows 7
            Status: UNCONFIRMED
          Severity: Major
          Priority: P2
         Component: WebCore Misc.
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: qt at coffeetocode.net
                CC: laszlo.1.gombos at nokia.com, abecsi at webkit.org,
                    luiz at webkit.org, ademar.reis at openbossa.org,
                    qt at coffeetocode.net


+++ This bug was initially created as a clone of Bug #61514 +++
(Found while trying to repro 61514 on other pages, don't know if it's related)

Consistent crash with access violation while parsing simple text presented as html. 
> Unhandled exception at 0x5940c8ec (msvcr100d.dll) in browser.exe: 0xC0000005: Access violation reading location 0x02aa0054.

Repro:
1) Open Qt browser demo (qt-everywhere-opensource-src-4.8.0-tp\demos\browser\debug)
2) In the URL bar, paste "http://coffeetocode.net/qt/qt_crash.html"
3) Hit enter
4) Crash should happen within a second

Reduced the repro to the above, but didn't get consistent crashes reducing it further; it seems that there may be a minimum size of the page necessary to trigger the issue while parsing.


Crashes with: 
- Qt 4.8 Tech Preview (http://get.qt.nokia.com/qt/source/qt-everywhere-opensource-src-4.8.0-tp.zip compiled with MSVC2010 on Win7)
- Qt 4.7.2  (qt-everywhere-opensource-src-4.7.2.zip compiled with MSVC2010 on Win7)

Will attach stack trace momentarily.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.