[Webkit-unassigned] [Bug 112220] New: Crash in FrameLoader::dispatchDidCommitLoad() running editing/selection/selection-in-iframe-removed-crash.html

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=112220

           Summary: Crash in FrameLoader::dispatchDidCommitLoad() running
                    editing/selection/selection-in-iframe-removed-crash.ht
                    ml
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Keywords: MakingBotsRed
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: simon.fraser at apple.com
                CC: rniwa at webkit.org, enrica at apple.com


ML WK1 Release bot is showing crashes here:

Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000070

VM Regions Near 0x70:
--> 
    __TEXT                 000000010d203000-000000010d261000 [  376K] r-x/rwx SM=COW  /Volumes/VOLUME/*

Application Specific Information:
CRASHING TEST: editing/selection/selection-in-iframe-removed-crash.html

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore                 0x000000010dfc29f0 WebCore::FrameLoader::dispatchDidCommitLoad() + 128 (RefPtr.h:58)
1   com.apple.WebCore                 0x000000010dfc2765 WebCore::FrameLoader::receivedFirstData() + 21 (FrameLoader.cpp:602)
2   com.apple.WebCore                 0x000000010de325df WebCore::DocumentLoader::commitData(char const*, unsigned long) + 239 (RefPtr.h:43)
3   com.apple.WebKit                  0x000000010d9819d4 -[WebHTMLRepresentation receivedData:withDataSource:] + 100 (WebHTMLRepresentation.mm:186)
4   com.apple.WebKit                  0x000000010d954c8d -[WebDataSource(WebInternal) _receivedData:] + 77 (WebDataSource.mm:216)
5   com.apple.WebKit                  0x000000010d96caf7 WebFrameLoaderClient::committedLoad(WebCore::DocumentLoader*, char const*, int) + 103 (WebFrameLoaderClient.mm:848)
6   com.apple.WebCore                 0x000000010de32790 WebCore::DocumentLoader::commitLoad(char const*, int) + 144 (RefCounted.h:148)
7   com.apple.WebCore                 0x000000010e556fb5 WebCore::MainResourceLoader::dataReceived(WebCore::CachedResource*, char const*, int) + 837 (MainResourceLoader.cpp:529)
8   com.apple.WebCore                 0x000000010e556109 WebCore::MainResourceLoader::continueAfterContentPolicy(WebCore::PolicyAction, WebCore::ResourceResponse const&) + 1257 (RefPtr.h:64)
9   com.apple.WebCore                 0x000000010e556ab6 WebCore::MainResourceLoader::responseReceived(WebCore::CachedResource*, WebCore::ResourceResponse const&) + 1766 (RefCounted.h:148)
10  com.apple.WebCore                 0x000000010e554efd WebCore::MainResourceLoader::handleSubstituteDataLoadNow(WTF::RunLoopTimer<WebCore::MainResourceLoader>*) + 717 (RetainPtr.h:84)
11  com.apple.JavaScriptCore          0x000000010d610e68 WTF::timerFired(__CFRunLoopTimer*, void*) + 40 (RunLoopTimerCF.cpp:53)
12  com.apple.CoreFoundation          0x00007fff92ac7da4 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.