[Webkit-unassigned] [Bug 114413] REGRESSION (r147880-r147965): Youtube crash in WebCore::WidgetHierarchyUpdatesSuspensionScope::moveWidgets

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=114413





--- Comment #8 from Kevin M. Dean <kevin at rhubarbproductions.com>  2013-04-12 15:40:03 PST ---
Actually it's happened twice today. Once on bluray.com, possibly going to Amazon.com via a Buy Now link.

Second, on either amazon.com or camelcamelcamel.com since I may have been moving between the 2 via a javascript command at the time.

Both crashes look the same.

Process:         WebProcess [9420]
Path:            /Applications/WebKit.app/Contents/Frameworks/10.8/WebKit2.framework/WebProcess.app/Contents/MacOS/WebProcess
Identifier:      com.apple.WebProcess
Version:         537+ (537.38+)
Code Type:       X86-64 (Native)
Parent Process:  SafariForWebKitDevelopment [9418]
User ID:         501

Date/Time:       2013-04-12 18:08:27.284 -0400
OS Version:      Mac OS X 10.8.3 (12D78)
Report Version:  10

Crashed Thread:  0  Dispatch queue: com.apple.main-thread

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: EXC_I386_GPFLT

Application Specific Information:
Bundle controller class:
BrowserBundleController


Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore                 0x000000010e66ac4c WebCore::WidgetHierarchyUpdatesSuspensionScope::moveWidgets() + 508
1   com.apple.WebCore                 0x000000010dc46585 WebCore::ContainerNode::removeChildren() + 981
2   com.apple.WebCore                 0x000000010e44e70f WebCore::replaceChildrenWithFragment(WebCore::ContainerNode*, WTF::PassRefPtr<WebCore::DocumentFragment>, int&) + 63
3   com.apple.WebCore                 0x000000010df48f89 WebCore::HTMLElement::setInnerHTML(WTF::String const&, int&) + 73
4   com.apple.WebCore                 0x000000010e1ee5b8 WebCore::setJSHTMLElementInnerHTML(JSC::ExecState*, JSC::JSObject*, JSC::JSValue) + 88
5   com.apple.WebCore                 0x000000010e1efb0e bool JSC::lookupPut<WebCore::JSHTMLElement>(JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::HashTable const*, WebCore::JSHTMLElement*, bool) + 318
6   com.apple.WebCore                 0x000000010e1ed14e WebCore::JSHTMLElement::put(JSC::JSCell*, JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&) + 62
7   com.apple.JavaScriptCore          0x000000010d8e83a6 llint_slow_path_put_by_id + 502
8   com.apple.JavaScriptCore          0x000000010d8f033d llint_op_put_by_id + 133
9   com.apple.JavaScriptCore          0x000000010d812853 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 611
10  com.apple.JavaScriptCore          0x000000010d70adf5 JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 69
11  com.apple.WebCore                 0x000000010e0f0d4e WebCore::JSMainThreadExecState::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 190
12  com.apple.WebCore                 0x000000010e698435 WebCore::ScheduledAction::executeFunctionInContext(JSC::JSGlobalObject*, JSC::JSValue, WebCore::ScriptExecutionContext*) + 453
13  com.apple.WebCore                 0x000000010e6980ec WebCore::ScheduledAction::execute(WebCore::Document*) + 156
14  com.apple.WebCore                 0x000000010ddef1cd WebCore::DOMTimer::fired() + 301
15  com.apple.WebCore                 0x000000010e85c60f WebCore::ThreadTimers::sharedTimerFiredInternal() + 175
16  com.apple.WebCore                 0x000000010e6e9213 WebCore::timerFired(__CFRunLoopTimer*, void*) + 51
17  com.apple.CoreFoundation          0x00007fff94f4e804 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20
18  com.apple.CoreFoundation          0x00007fff94f4e31d __CFRunLoopDoTimer + 557
19  com.apple.CoreFoundation          0x00007fff94f33ad9 __CFRunLoopRun + 1529
20  com.apple.CoreFoundation          0x00007fff94f330e2 CFRunLoopRunSpecific + 290
21  com.apple.HIToolbox               0x00007fff91b01eb4 RunCurrentEventLoopInMode + 209
22  com.apple.HIToolbox               0x00007fff91b01c52 ReceiveNextEventCommon + 356
23  com.apple.HIToolbox               0x00007fff91b01ae3 BlockUntilNextEventMatchingListInMode + 62
24  com.apple.AppKit                  0x00007fff964e4563 _DPSNextEvent + 685
25  com.apple.AppKit                  0x00007fff964e3e22 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 128
26  com.apple.AppKit                  0x00007fff964db1d3 -[NSApplication run] + 517
27  com.apple.WebCore                 0x000000010e69413d WebCore::RunLoop::run() + 77
28  com.apple.WebKit2                 0x000000010d347545 int WebKit::ChildProcessMain<WebKit::WebProcess, WebKit::WebContentProcessMainDelegate>(int, char**) + 631
29  com.apple.WebProcess              0x000000010d264e43 main + 307
30  libdyld.dylib                     0x00007fff903b77e1 start + 1

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.