[Webkit-unassigned] [Bug 70421] V8 bindings: event listener can be garbage collected, causing events loss

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Nov 15 15:14:13 PST 2011


https://bugs.webkit.org/show_bug.cgi?id=70421


Peter Kasting <pkasting at google.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |pkasting at google.com




--- Comment #27 from Peter Kasting <pkasting at google.com>  2011-11-15 15:14:13 PST ---
Could this have cause a crash on the Mac 10.6 dbg bot when running fast/dom/image-object.html?  See http://test-results.appspot.com/dashboards/flakiness_dashboard.html#tests=fast%2Fdom%2Fimage-object.html .  The crash stack looks like some kind of memory error:

Process:         DumpRenderTree [8957]
Path:            /b/build/slave/Webkit_Mac10_6__CG__dbg_/build/src/xcodebuild/Debug/DumpRenderTree.app/Contents/MacOS/DumpRenderTree
Identifier:      DumpRenderTree
Version:         ??? (???)
Code Type:       X86 (Native)
Parent Process:  Python [7453]

Date/Time:       2011-11-10 21:52:50.153 -0800
OS Version:      Mac OS X Server 10.6.8 (10K549)
Report Version:  6

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_PROTECTION_FAILURE at 0x00000000bec00010
Crashed Thread:  0  Dispatch queue: com.apple.main-thread

Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   com.apple.testnetscapeplugin      0x13aa8eb9 NPP_SetWindow + 297
1   DumpRenderTree                    0x3c3b0783 webkit::npapi::PluginInstance::NPP_SetWindow(_NPWindow*) + 515
2   DumpRenderTree                    0x3c3eb8ad webkit::npapi::WebPluginDelegateImpl::WindowlessSetWindow() + 349
3   DumpRenderTree                    0x3c3ed750 webkit::npapi::WebPluginDelegateImpl::WindowlessUpdateGeometry(gfx::Rect const&, gfx::Rect const&) + 656
4   DumpRenderTree                    0x3c3e891b webkit::npapi::WebPluginDelegateImpl::UpdateGeometry(gfx::Rect const&, gfx::Rect const&) + 139
5   DumpRenderTree                    0x3c3f5669 webkit::npapi::WebPluginImpl::updateGeometry(WebKit::WebRect const&, WebKit::WebRect const&, WebKit::WebVector<WebKit::WebRect> const&, bool) + 857
6   DumpRenderTree                    0x3c3f591a non-virtual thunk to webkit::npapi::WebPluginImpl::updateGeometry(WebKit::WebRect const&, WebKit::WebRect const&, WebKit::WebVector<WebKit::WebRect> const&, bool) + 90
7   DumpRenderTree                    0x38f81a75 WebKit::WebPluginContainerImpl::reportGeometry() + 341
8   DumpRenderTree                    0x38f80038 WebKit::WebPluginContainerImpl::setFrameRect(WebCore::IntRect const&) + 88
9   DumpRenderTree                    0x3ba40031 WebCore::RenderWidget::setWidgetGeometry(WebCore::IntRect const&) + 321
10  DumpRenderTree                    0x3ba402b6 WebCore::RenderWidget::updateWidgetGeometry() + 470
11  DumpRenderTree                    0x3ba41404 WebCore::RenderWidget::updateWidgetPosition() + 100
12  DumpRenderTree                    0x3ba2a5d5 WebCore::RenderView::updateWidgetPositions() + 117
13  DumpRenderTree                    0x3b5013e1 WebCore::FrameView::performPostLayoutTasks() + 465
14  DumpRenderTree                    0x3b500f70 WebCore::FrameView::layout(bool) + 4528
15  DumpRenderTree                    0x3a7aca47 WebCore::Document::updateLayout() + 311
16  DumpRenderTree                    0x3a7acbf3 WebCore::Document::updateLayoutIgnorePendingStylesheets() + 243
17  DumpRenderTree                    0x3a82dcf8 WebCore::Element::scrollHeight() + 56
18  DumpRenderTree                    0x38f3c917 WebKit::WebFrameImpl::documentElementScrollHeight() const + 135
19  DumpRenderTree                    0x38e64528 WebViewHost::didUpdateLayout(WebKit::WebFrame*) + 136
20  DumpRenderTree                    0x38e64589 non-virtual thunk to WebViewHost::didUpdateLayout(WebKit::WebFrame*) + 41
21  DumpRenderTree                    0x38e93e07 WebKit::ChromeClientImpl::layoutUpdated(WebCore::Frame*) const + 103
22  DumpRenderTree                    0x3b501157 WebCore::FrameView::layout(bool) + 5015
23  DumpRenderTree                    0x3a7ac483 WebCore::Document::implicitClose() + 995
24  DumpRenderTree                    0x3b3ac9c2 WebCore::FrameLoader::checkCallImplicitClose() + 178
25  DumpRenderTree                    0x3b3ac6ca WebCore::FrameLoader::checkCompleted() + 330
26  DumpRenderTree                    0x3b3ab13e WebCore::FrameLoader::finishedParsing() + 190
27  DumpRenderTree                    0x3a7b93b2 WebCore::Document::finishedParsing() + 626
28  DumpRenderTree                    0x3aaafd6a WebCore::HTMLTreeBuilder::finished() + 170
29  DumpRenderTree                    0x3aa7730e WebCore::HTMLDocumentParser::end() + 254
30  DumpRenderTree                    0x3aa7610c WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd() + 300
31  DumpRenderTree                    0x3aa75e7c WebCore::HTMLDocumentParser::prepareToStopParsing() + 300
32  DumpRenderTree                    0x3aa77385 WebCore::HTMLDocumentParser::attemptToEnd() + 85
33  DumpRenderTree                    0x3aa77409 WebCore::HTMLDocumentParser::finish() + 89
34  DumpRenderTree                    0x3b39ed9a WebCore::DocumentWriter::endIfNotLoadingMainResource() + 282
35  DumpRenderTree                    0x3b39e2d3 WebCore::DocumentWriter::end() + 67
36  DumpRenderTree                    0x3b383f42 WebCore::DocumentLoader::finishedLoading() + 114
37  DumpRenderTree                    0x3b3b6665 WebCore::FrameLoader::finishedLoading() + 101
38  DumpRenderTree                    0x3b3d4672 WebCore::MainResourceLoader::didFinishLoading(double) + 434
39  DumpRenderTree                    0x3b3f4198 WebCore::ResourceLoader::didFinishLoading(WebCore::ResourceHandle*, double) + 200
40  DumpRenderTree                    0x38ef5da9 WebCore::ResourceHandleInternal::didFinishLoading(WebKit::WebURLLoader*, double) + 265
41  DumpRenderTree                    0x3c456480 webkit_glue::WebURLLoaderImpl::Context::OnCompletedRequest(net::URLRequestStatus const&, std::string const&, base::Time const&) + 992
... (remainder trimmed)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list