[Webkit-unassigned] [Bug 83108] New: Web Inspector: JSC Crash inspecting node with object event listener

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=83108

           Summary: Web Inspector: JSC Crash inspecting node with object
                    event listener
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Web Inspector
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: joepeck at webkit.org
                CC: timothy at apple.com, oliver at apple.com, rik at webkit.org,
                    keishi at webkit.org, pmuellr at yahoo.com,
                    joepeck at webkit.org, pfeldman at chromium.org,
                    yurys at chromium.org, bweinstein at apple.com,
                    apavlov at chromium.org, loislo at chromium.org


Created an attachment (id=135490)
 --> (https://bugs.webkit.org/attachment.cgi?id=135490&action=review)
[REDUCTION] Test Case

CRASH inspecting body of this page (attachment):

    <p>Inspect Body and you will Crash</p>
    <script>
    function Foo() { document.body.addEventListener("click", this, true); }
    new Foo();
    </script>

Backtrace:

    Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
    0   com.apple.WebCore WebCore::eventListenerHandlerLocation(WebCore::Document*, WebCore::EventListener*, WTF::String&, int&) + 128
    1   com.apple.WebCore WebCore::InspectorDOMAgent::buildObjectForEventListener(WebCore::RegisteredEventListener const&, WTF::AtomicString const&, WebCore::Node*) + 373
    2   com.apple.WebCore WebCore::InspectorDOMAgent::getEventListenersForNode(WTF::String*, int, WTF::RefPtr<WebCore::TypeBuilder::Array<WebCore::TypeBuilder::DOM::EventListener> >&) + 286
    3   com.apple.WebCore WebCore::InspectorBackendDispatcherImpl::DOM_getEventListenersForNode(long, WebCore::InspectorObject*) + 393
    4   com.apple.WebCore WebCore::InspectorBackendDispatcherImpl::dispatch(WTF::String const&) + 2131
    5   com.apple.WebCore WebCore::InspectorBackendDispatchTask::onTimer(WebCore::Timer<WebCore::InspectorBackendDispatchTask>*) + 73
    6   com.apple.WebCore WebCore::ThreadTimers::sharedTimerFiredInternal() + 148
    7   com.apple.WebCore _ZN7WebCoreL10timerFiredEP16__CFRunLoopTimerPv + 51

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.