[Webkit-unassigned] [Bug 76206] New: REGRESSION (r104664-r104705): Crash - pthread_kil

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=76206

           Summary: REGRESSION (r104664-r104705): Crash - pthread_kil
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh Intel
               URL: http://www.avsforum.com/avs-vb/forumdisplay.php?s=&day
                    sprune=&f=148
        OS/Version: Mac OS X 10.7
            Status: UNCONFIRMED
          Severity: Critical
          Priority: P1
         Component: WebCore Misc.
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: kevin at rhubarbproductions.com


Created an attachment (id=122296)
 --> (https://bugs.webkit.org/attachment.cgi?id=122296&action=review)
Crash Log

I visit the AVS Forums and then command-click on a Sub-Forum to open it in a new tab. Then I close that tab and WebProcess crashes. This is repeatable for me. Not sure if you need to be logged in to AVS or not.

Crash Log attached.

Crashed thread here:


Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   libsystem_kernel.dylib            0x00007fff8da4dce2 __pthread_kill + 10
1   libsystem_c.dylib                 0x00007fff9902e7d2 pthread_kill + 95
2   libsystem_c.dylib                 0x00007fff9901fa7a abort + 143
3   libc++abi.dylib                   0x00007fff92e3f7bc abort_message + 214
4   libc++abi.dylib                   0x00007fff92e3d09c __cxa_pure_virtual + 18
5   com.apple.WebCore                 0x0000000102b8d4b2 WebCore::CheckedRadioButtons::removeButton(WebCore::HTMLInputElement*) + 34
6   com.apple.WebCore                 0x0000000102e7511c WebCore::HTMLInputElement::setChecked(bool, bool) + 76
7   com.apple.WebCore                 0x0000000102b8d43b WebCore::CheckedRadioButtons::addButton(WebCore::HTMLInputElement*) + 251
8   com.apple.WebCore                 0x0000000102e69f00 WebCore::HTMLFormElement::~HTMLFormElement() + 224
9   com.apple.WebCore                 0x0000000102e69dd1 WebCore::HTMLFormElement::~HTMLFormElement() + 17
10  com.apple.WebCore                 0x0000000102baf1ca void WebCore::removeAllChildrenInContainer<WebCore::Node, WebCore::ContainerNode>(WebCore::ContainerNode*) + 314
11  com.apple.WebCore                 0x0000000102c8e21b WebCore::Document::removedLastRef() + 411
12  com.apple.WebCore                 0x000000010310e0db WebCore::JSNodeOwner::finalize(JSC::Handle<JSC::Unknown>, void*) + 267
13  com.apple.JavaScriptCore          0x00000001028c26ff JSC::HandleHeap::finalizeWeakHandles() + 159
14  com.apple.JavaScriptCore          0x00000001028c4daf JSC::Heap::collect(JSC::Heap::SweepToggle) + 63
15  com.apple.WebCore                 0x0000000103576a14 WebCore::ThreadTimers::sharedTimerFiredInternal() + 148
16  com.apple.WebCore                 0x000000010346e033 _ZN7WebCoreL10timerFiredEP16__CFRunLoopTimerPv + 51
17  com.apple.CoreFoundation          0x00007fff9400df84 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20
18  com.apple.CoreFoundation          0x00007fff9400dad6 __CFRunLoopDoTimer + 534
19  com.apple.CoreFoundation          0x00007fff93fee471 __CFRunLoopRun + 1617
20  com.apple.CoreFoundation          0x00007fff93fedae6 CFRunLoopRunSpecific + 230
21  com.apple.HIToolbox               0x00007fff9816f3d3 RunCurrentEventLoopInMode + 277
22  com.apple.HIToolbox               0x00007fff9817663d ReceiveNextEventCommon + 355
23  com.apple.HIToolbox               0x00007fff981764ca BlockUntilNextEventMatchingListInMode + 62
24  com.apple.AppKit                  0x00007fff902fe3f1 _DPSNextEvent + 659
25  com.apple.AppKit                  0x00007fff902fdcf5 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 135
26  com.apple.AppKit                  0x00007fff902fa62d -[NSApplication run] + 470
27  com.apple.WebKit2                 0x00000001025574f1 RunLoop::run() + 67
28  com.apple.WebKit2                 0x00000001025dd9b4 WebKit::WebProcessMain(WebKit::CommandLine const&) + 2538
29  com.apple.WebKit2                 0x000000010259490b WebKitMain + 285
30  com.apple.WebProcess              0x0000000102350e5f main + 219
31  com.apple.WebProcess              0x0000000102350d7c start + 52

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.