[Webkit-unassigned] [Bug 106711] New: Flaky crash in AXObjectCache::notificationPostTimerFired running svg/as-image/img-relative-height.html

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=106711

           Summary: Flaky crash in
                    AXObjectCache::notificationPostTimerFired running
                    svg/as-image/img-relative-height.html
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Accessibility
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: slewis at apple.com


Occurs most often on Mountain Lion Debug WK1. Due to flakiness I'm not sure if it affects other platforms, or when it started.
Occurs running svg/as-image/img-relative-height.html.

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000018

VM Regions Near 0x18:
--> 
    __TEXT                 0000000105e71000-0000000105ed0000 [  380K] r-x/rwx SM=COW  /Volumes/VOLUME/*

Application Specific Information:
CRASHING TEST: svg/as-image/img-relative-height.html

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore                 0x0000000106858f77 WebCore::AXObjectCache::notificationPostTimerFired(WebCore::Timer<WebCore::AXObjectCache>*) + 71 (AXObjectCache.cpp:615)
1   com.apple.WebCore                 0x00000001075421df WebCore::ThreadTimers::sharedTimerFiredInternal() + 159 (ThreadTimers.cpp:119)
2   com.apple.WebCore                 0x00000001073cbc23 WebCore::timerFired(__CFRunLoopTimer*, void*) + 51 (SharedTimerMac.mm:167)
3   com.apple.CoreFoundation          0x00007fff9396bda4 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20
4   com.apple.CoreFoundation          0x00007fff9396b8bd __CFRunLoopDoTimer + 557
5   com.apple.CoreFoundation          0x00007fff93951099 __CFRunLoopRun + 1513
6   com.apple.CoreFoundation          0x00007fff939506b2 CFRunLoopRunSpecific + 290
7   com.apple.Foundation              0x00007fff8892489e -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 268
8   DumpRenderTree                    0x0000000105e7eb10 runTest(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) + 1639 (DumpRenderTree.mm:1383)
9   DumpRenderTree                    0x0000000105e7e28c dumpRenderTree(int, char const**) + 1855 (DumpRenderTree.mm:847)
10  DumpRenderTree                    0x0000000105e7ee79 main + 86 (DumpRenderTree.mm:932)
11  libdyld.dylib                     0x00007fff8a4277e1 start + 1

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.