[Webkit-unassigned] [Bug 70684] New: Crash in -[WKView(Internal) _addTrackingRect:owner:userData:assumeInside:useTrackingNum:] due to assert failure

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=70684

           Summary: Crash in -[WKView(Internal)
                    _addTrackingRect:owner:userData:assumeInside:useTracki
                    ngNum:] due to assert failure
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh Intel
               URL: http://www.imdb.com/list/S7_47YXgjLU/
        OS/Version: Mac OS X 10.7
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: WebKit API
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: rex_4539 at yahoo.com


Created an attachment (id=112095)
 --> (https://bugs.webkit.org/attachment.cgi?id=112095&action=review)
Crash log.

r98193

Reproducibility: once

Steps:
I opened http://www.imdb.com/list/S7_47YXgjLU/

What happened:
Assert failure and crash.

ASSERTION FAILED: _data->_trackingRectOwner == nil
/Users/rex/WebKit/Source/WebKit2/UIProcess/API/mac/WKView.mm(2183) : -[WKView(Internal) _addTrackingRect:owner:userData:assumeInside:useTrackingNum:]
1   0x1046255c0 -[WKView(Internal) _addTrackingRect:owner:userData:assumeInside:useTrackingNum:]
2   0x1062e3715 -[NSToolTipManager _addTrackingRectsForView:]
3   0x105e016c2 -[NSToolTipManager recomputeToolTipsForView:remove:add:]
4   0x105daff2f -[NSView _setWindow:]
5   0x105cdc124 __NSViewRecursionHelper
6   0x10549d314 CFArrayApplyFunction
7   0x105db013c -[NSView _setWindow:]
8   0x105dae3e2 -[NSView addSubview:]
9   0x105dae168 -[NSView replaceSubview:with:]
10  0x105edacbd -[NSTabView _switchTabViewItem:oldView:withTabViewItem:newView:initialFirstResponder:lastKeyView:]
11  0x105eda63e -[NSTabView selectTabViewItem:]
12  0x101e2c907 -[BrowserWindowControllerMac(Internal) _showTab:]
13  0x101e2cb64 -[BrowserWindowControllerMac(Internal) _closeTabWithoutConfirming:allowUndo:]
14  0x101e2a3f8 -[BrowserWindowControllerMac(Internal) _closeTabWithoutConfirming:]
15  0x101e03aa9 Safari::BrowserTab::tryToCloseWhenReady()
16  0x1054fea1d -[NSObject performSelector:withObject:]
17  0x105da1710 -[NSApplication sendAction:to:from:]
18  0x101dbe475 -[BrowserApplication sendAction:to:from:]
19  0x105e8ebd7 -[NSMenuItem _corePerformAction]
20  0x105e8e90e -[NSCarbonMenuImpl performActionWithHighlightingForItemAtIndex:]
21  0x105e0bc3a -[NSMenu performKeyEquivalent:]
22  0x105e0a88d -[NSApplication _handleKeyEquivalent:]
23  0x105d02170 -[NSApplication sendEvent:]
24  0x101dbe418 -[BrowserApplication sendEvent:]
25  0x1046250ee -[WKView(Internal) _doneWithKeyEvent:eventWasHandled:]
26  0x1044e98f8 WebKit::PageClientImpl::doneWithKeyEvent(WebKit::NativeWebKeyboardEvent const&, bool)
27  0x10458f7cc WebKit::WebPageProxy::didReceiveEvent(unsigned int, bool)
28  0x1046c5fa6 void CoreIPC::callMemberFunction<WebKit::WebPageProxy, void (WebKit::WebPageProxy::*)(unsigned int, bool), unsigned int, bool>(CoreIPC::Arguments2<unsigned int, bool> const&, WebKit::WebPageProxy*, void (WebKit::WebPageProxy::*)(unsigned int, bool))
29  0x1046b5a83 void CoreIPC::handleMessage<Messages::WebPageProxy::DidReceiveEvent, WebKit::WebPageProxy, void (WebKit::WebPageProxy::*)(unsigned int, bool)>(CoreIPC::ArgumentDecoder*, WebKit::WebPageProxy*, void (WebKit::WebPageProxy::*)(unsigned int, bool))
30  0x1046b2f38 WebKit::WebPageProxy::didReceiveWebPageProxyMessage(CoreIPC::Connection*, CoreIPC::MessageID, CoreIPC::ArgumentDecoder*)
31  0x104591f0f WebKit::WebPageProxy::didReceiveMessage(CoreIPC::Connection*, CoreIPC::MessageID, CoreIPC::ArgumentDecoder*)

Expected result:
No assert failure, no crash.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.