[Webkit-unassigned] [Bug 119027] New: WebKit2 crashes on the html5rocks Native HTML5 Drag and Drop tutorial's dataTransfer.setDragImage() example

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=119027

           Summary: WebKit2 crashes on the html5rocks Native HTML5 Drag
                    and Drop tutorial's dataTransfer.setDragImage()
                    example
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh Intel
               URL: http://www.html5rocks.com/en/tutorials/dnd/basics/#toc
                    -drag-properties
        OS/Version: Mac OS X 10.7
            Status: UNCONFIRMED
          Severity: Major
          Priority: P2
         Component: WebKit2
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: dtrebbien at gmail.com
                CC: dtrebbien at gmail.com


Created an attachment (id=207362)
 --> (https://bugs.webkit.org/attachment.cgi?id=207362&action=review)
Crash log

1. Using the latest WebKit nightly r153061 built on 23 July 2013, go to http://www.html5rocks.com/en/tutorials/dnd/basics/#toc-drag-properties
2. Try to drag one of the gray boxes under "Result (you should see the Google logo when dragging these columns):"

Chrome 28.0.1500.71 does not crash on this example.

Safari 6.0.5 also crashes, but looking through the crash log, I see basically the same backtrace as Bug 83276

The nightly's crash log (attached) is different, which is why I think that this might be a different issue:
Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   libsystem_kernel.dylib            0x00007fff8e895ce2 __pthread_kill + 10
1   libsystem_c.dylib                 0x00007fff8d4cd7d2 pthread_kill + 95
2   libsystem_c.dylib                 0x00007fff8d4bea7a abort + 143
3   libsystem_c.dylib                 0x00007fff8d4f15de __assert_rtn + 146
4   com.apple.WebKit2                 0x0000000102f68b58 WKSetDragImage + 1145
5   com.apple.WebCore                 0x0000000103fa1660 WebCore::Pasteboard::setDragImage(WTF::RetainPtr<NSImage>, WebCore::IntPoint const&) + 112
6   com.apple.WebCore                 0x0000000103771390 WebCore::Clipboard::updateDragImage() + 80
...

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.