Bug 3302 – Safari crashes when going to acid2 test page once it's in cache

• Status: VERIFIED
• Resolution: FIXED
• Component: DOM

[Mathieu Massebœuf]

Safari crashes when going to that page once it's in cache.
Reason: KERN_PROTECTION_FAILURE at address: 0x000000d0
0x010c4014 in DOM::HTMLObjectElementImpl::renderFallbackContent ()

That bug is always reproductible.
Running OSX 10.4.2 8C26 - webkit built using XCode 2.1

[Alistair McMillan]

Same here.  Running Safari 2 (412) on OSX 10.4.1.  Built by XCode 2.1 from current source pulled from 
CVS.

Date/Time:      2005-06-08 00:41:47.121 +0100
OS Version:     10.4.1 (Build 8B15)
Report Version: 3

Command: Safari
Path:    /Applications/Safari.app/Contents/MacOS/Safari
Parent:  bash [26353]

Version:        2.0 (412)
Build Version:  1
Project Name:   WebBrowser
Source Version: 4120000

PID:    26813
Thread: 0

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x000000d0

Thread 0 Crashed:
0   com.apple.WebCore        	0x010c32fc DOM::HTMLObjectElementImpl::renderFallbackContent() + 
20 (icplusplus.c:28)
1   com.apple.WebCore        	0x01053f48 KHTMLPart::handleFallbackContent() + 40 (icplusplus.c:28)
2   com.apple.WebKit         	0x0034dbc8 -[WebMainResourceClient 
continueAfterContentPolicy:response:] + 616 (WebMainResourceClient.m:272)
3   com.apple.WebKit         	0x0034dd04 -[WebMainResourceClient continueAfterContentPolicy:] + 
120 (WebMainResourceClient.m:291)
4   libobjc.A.dylib          	0x909b1214 objc_msgSendv + 180
5   com.apple.Foundation     	0x92877da8 -[NSInvocation invoke] + 944
6   com.apple.Foundation     	0x92878358 -[NSInvocation invokeWithTarget:] + 64
7   com.apple.Foundation     	0x92870154 -[NSObject(NSForwardInvocation) forward::] + 408
8   libobjc.A.dylib          	0x909b10d0 _objc_msgForward + 176
9   com.apple.WebKit         	0x0034de30 -[WebMainResourceClient 
checkContentPolicyForResponse:] + 268 (WebMainResourceClient.m:307)
10  com.apple.WebKit         	0x0034e04c -[WebMainResourceClient didReceiveResponse:] + 508 
(WebMainResourceClient.m:348)
11  com.apple.WebKit         	0x0032ba38 -[WebBaseResourceHandleDelegate 
connection:didReceiveResponse:] + 56 (WebBaseResourceHandleDelegate.m:625)
12  com.apple.Foundation     	0x928acce4 -[NSURLConnection(NSURLConnectionInternal) 
_sendCallbacks] + 392
13  com.apple.Foundation     	0x928acae0 _sendCallbacks + 156
14  com.apple.CoreFoundation 	0x9074ae2c __CFRunLoopDoSources0 + 384
15  com.apple.CoreFoundation 	0x9074a35c __CFRunLoopRun + 452
16  com.apple.CoreFoundation 	0x90749ddc CFRunLoopRunSpecific + 268
17  com.apple.HIToolbox      	0x93122ca0 RunCurrentEventLoopInMode + 264
18  com.apple.HIToolbox      	0x93122334 ReceiveNextEventCommon + 380
19  com.apple.HIToolbox      	0x931221a0 BlockUntilNextEventMatchingListInMode + 96
20  com.apple.AppKit         	0x9362b1a4 _DPSNextEvent + 384
21  com.apple.AppKit         	0x9362ae68 -[NSApplication 
nextEventMatchingMask:untilDate:inMode:dequeue:] + 116
22  com.apple.Safari         	0x00007058 0x1000 + 24664
23  com.apple.AppKit         	0x936273cc -[NSApplication run] + 472
24  com.apple.AppKit         	0x93717c1c NSApplicationMain + 452
25  com.apple.Safari         	0x00002700 0x1000 + 5888
26  com.apple.Safari         	0x00057190 0x1000 + 352656

Thread 1:
0   libSystem.B.dylib        	0x9001efec select + 12
1   com.apple.CoreFoundation 	0x9075cd6c __CFSocketManager + 472
2   libSystem.B.dylib        	0x9002c3d4 _pthread_body + 96

Thread 2:
0   libSystem.B.dylib        	0x9000a778 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000a6bc mach_msg + 60
2   com.apple.CoreFoundation 	0x9074a4d8 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x90749ddc CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x9288b244 -[NSRunLoop runMode:beforeDate:] + 172
5   com.apple.Foundation     	0x9288b17c -[NSRunLoop run] + 76
6   com.apple.WebKit         	0x003665a4 +[WebFileDatabase _syncLoop:] + 176 
(WebFileDatabase.m:295)
7   com.apple.Foundation     	0x9287c2b4 forkThreadForFunction + 108
8   libSystem.B.dylib        	0x9002c3d4 _pthread_body + 96

Thread 3:
0   libSystem.B.dylib        	0x9000a778 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000a6bc mach_msg + 60
2   com.apple.CoreFoundation 	0x9074a4d8 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x90749ddc CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x928a3760 +[NSURLConnection(NSURLConnectionInternal) 
_resourceLoadLoop:] + 264
5   com.apple.Foundation     	0x9287c2b4 forkThreadForFunction + 108
6   libSystem.B.dylib        	0x9002c3d4 _pthread_body + 96

Thread 4:
0   libSystem.B.dylib        	0x9000a778 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000a6bc mach_msg + 60
2   com.apple.CoreFoundation 	0x9074a4d8 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x90749ddc CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x928a48a0 +[NSURLCache _diskCacheSyncLoop:] + 152
5   com.apple.Foundation     	0x9287c2b4 forkThreadForFunction + 108
6   libSystem.B.dylib        	0x9002c3d4 _pthread_body + 96

Thread 5:
0   libSystem.B.dylib        	0x9002ca98 semaphore_wait_signal_trap + 8
1   libSystem.B.dylib        	0x9003127c pthread_cond_wait + 508
2   com.apple.Foundation     	0x92883420 -[NSConditionLock lockWhenCondition:] + 68
3   com.apple.Syndication    	0x9b04caf0 -[AsyncDB _run:] + 192
4   com.apple.Foundation     	0x9287c2b4 forkThreadForFunction + 108
5   libSystem.B.dylib        	0x9002c3d4 _pthread_body + 96

Thread 6:
0   libSystem.B.dylib        	0x9002ca98 semaphore_wait_signal_trap + 8
1   libSystem.B.dylib        	0x9003127c pthread_cond_wait + 508
2   com.apple.Foundation     	0x92883420 -[NSConditionLock lockWhenCondition:] + 68
3   com.apple.AppKit         	0x936c7b58 -[NSUIHeartBeat _heartBeatThread:] + 324
4   com.apple.Foundation     	0x9287c2b4 forkThreadForFunction + 108
5   libSystem.B.dylib        	0x9002c3d4 _pthread_body + 96

Thread 7:
0   libSystem.B.dylib        	0x9000a778 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000a6bc mach_msg + 60
2   com.apple.CoreFoundation 	0x9074a4d8 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x90749ddc CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x9288b244 -[NSRunLoop runMode:beforeDate:] + 172
5   com.apple.Foundation     	0x9288b17c -[NSRunLoop run] + 76
6   com.apple.Safari         	0x00035c18 0x1000 + 216088
7   com.apple.Foundation     	0x9287c2b4 forkThreadForFunction + 108
8   libSystem.B.dylib        	0x9002c3d4 _pthread_body + 96

Thread 0 crashed with PPC Thread State:
  srr0: 0x010c32fc srr1: 0x0200f030                vrsave: 0x00000000
    cr: 0x24028424  xer: 0x20000007   lr: 0x0034dbc8  ctr: 0x010162c4
    r0: 0x0034dbc8   r1: 0xbfffde90   r2: 0x00000000   r3: 0x00000000
    r4: 0xbfffde5c   r5: 0xfefefeff   r6: 0x80808080   r7: 0x00000000
    r8: 0x00000000   r9: 0x00000008  r10: 0x72fefeff  r11: 0x00808080
   r12: 0x010162c4  r13: 0x00000000  r14: 0x00000001  r15: 0x00000001
   r16: 0x00000000  r17: 0x00000000  r18: 0x00005ab3  r19: 0x00000000
   r20: 0x101bb9ca  r21: 0xa1b7d8c5  r22: 0x00000001  r23: 0x043312d0
   r24: 0x043e79e0  r25: 0x08c70f10  r26: 0x043e79e0  r27: 0x091956b0
   r28: 0x05f0dcc0  r29: 0x90a0ac7c  r30: 0x00000000  r31: 0x0034d968

Binary Images Description:
    0x1000 -    0xd7fff com.apple.Safari 2.0 (412)	/Applications/Safari.app/Contents/MacOS/Safari
  0x305000 -   0x39cfff com.apple.WebKit 412+	/Users/alistair/Projects/Builds/WebKit.framework/
Versions/A/WebKit
  0x5f9000 -   0x6b9fff com.apple.JavaScriptCore 412.1	/Users/alistair/Projects/Builds/
JavaScriptCore.framework/Versions/A/JavaScriptCore
 0x1008000 -  0x1204fff com.apple.WebCore 413.1	/Users/alistair/Projects/Builds/
WebCore.framework/Versions/A/WebCore
 0x3548000 -  0x354afff com.apple.textencoding.unicode 2.0	/System/Library/TextEncodings/Unicode 
Encodings.bundle/Contents/MacOS/Unicode Encodings
 0x4276000 -  0x427cfff com.apple.DictionaryServiceComponent 1.0.0
	/System/Library/Components/DictionaryService.component/Contents/MacOS/DictionaryService
 0x5637000 -  0x5735fff com.ioxperts.vdig.webcam 1.1	/Library/Components/IOXperts 
Webcam.component/Contents/MacOS/IOXperts Webcam
 0x57d4000 -  0x58b0fff com.divxnetworks.DivXCodec 5.1.1	/Library/QuickTime/DivX 5.component/
Contents/MacOS/DivX 5
 0x59c0b90 -  0x59c0c63 CFMPriv_ImageCapture 	PEF binary: CFMPriv_ImageCapture
 0x5f02460 -  0x5f024d7 CFMPriv_System 	PEF binary: CFMPriv_System
 0x5f6bcd0 -  0x5f6bda7 CFMPriv_PrintCore 	PEF binary: CFMPriv_PrintCore
 0x5febf00 -  0x5febfd0 CFMPriv_CarbonSound 	PEF binary: CFMPriv_CarbonSound
 0x5ffce10 -  0x5ffcedd CFMPriv_SecurityHI 	PEF binary: CFMPriv_SecurityHI
 0x5fff9f0 -  0x5fffaca CFMPriv_HIServices 	PEF binary: CFMPriv_HIServices
 0x67001d0 -  0x67002b0 CFMPriv_LangAnalysis 	PEF binary: CFMPriv_LangAnalysis
 0x6700a90 -  0x6700b42 CFMPriv_CoreFoundation 	PEF binary: CFMPriv_CoreFoundation
 0x67046b0 -  0x6704775 CFMPriv_ATS 	PEF binary: CFMPriv_ATS
 0x6706db0 -  0x6706e92 CFMPriv_SpeechRecognition 	PEF binary: CFMPriv_SpeechRecognition
 0x6714960 -  0x6714a33 CFMPriv_CommonPanels 	PEF binary: CFMPriv_CommonPanels
 0x696e000 -  0x69bd3c7 CarbonLibpwpc 	PEF binary: CarbonLibpwpc
 0x69bd3d0 -  0x69d56bd Apple;Carbon;Multimedia 	PEF binary: Apple;Carbon;Multimedia
 0x69d6c00 -  0x69d898b Apple;Carbon;Networking 	PEF binary: Apple;Carbon;Networking
 0x70a5000 -  0x71dde45 Flash Player 	PEF binary: Flash Player
 0x8c6c060 -  0x8c6c103 CFMPriv_QuickTime 	PEF binary: CFMPriv_QuickTime
 0x8c838a0 -  0x8c83976 CFMPriv_OpenScripting 	PEF binary: CFMPriv_OpenScripting
 0x8c86e00 -  0x8c86ed3 CFMPriv_OSServices 	PEF binary: CFMPriv_OSServices
 0x8c88430 -  0x8c884eb CFMPriv_Help 	PEF binary: CFMPriv_Help
 0x8c8e960 -  0x8c8ea2a CFMPriv_HIToolbox 	PEF binary: CFMPriv_HIToolbox
 0x8ceccf0 -  0x8cecdd5 CFMPriv_NavigationServices 	PEF binary: CFMPriv_NavigationServices
 0x8cf6a20 -  0x8cf6af3 CFMPriv_CarbonCore 	PEF binary: CFMPriv_CarbonCore
 0x9106ec0 -  0x9106f75 CFMPriv_DVComponentGlue 	PEF binary: CFMPriv_DVComponentGlue
 0x9133110 -  0x91331d2 CFMPriv_QD 	PEF binary: CFMPriv_QD
 0x915a5d0 -  0x915a6b6 CFMPriv_LaunchServices 	PEF binary: CFMPriv_LaunchServices
 0x916bcf0 -  0x916bdc7 CFMPriv_ColorSync 	PEF binary: CFMPriv_ColorSync
 0x916d1f0 -  0x916d2b2 CFMPriv_AE 	PEF binary: CFMPriv_AE
 0x919cc70 -  0x919cd46 CFMPriv_HTMLRendering 	PEF binary: CFMPriv_HTMLRendering
 0x919fef0 -  0x919ffd3 CFMPriv_FindByContent 	PEF binary: CFMPriv_FindByContent
 0x91bc3a0 -  0x91bc45e CFMPriv_Print 	PEF binary: CFMPriv_Print
 0x91f21a0 -  0x91f2289 CFMPriv_SpeechSynthesis 	PEF binary: CFMPriv_SpeechSynthesis
0x8fe00000 - 0x8fe50fff dyld 43	/usr/lib/dyld
0x90000000 - 0x901a6fff libSystem.B.dylib 	/usr/lib/libSystem.B.dylib
0x901fe000 - 0x90202fff libmathCommon.A.dylib 	/usr/lib/system/libmathCommon.A.dylib
0x90204000 - 0x90257fff com.apple.CoreText 1.0.0 (???)	/System/Library/Frameworks/
ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x90284000 - 0x90335fff ATS 	/System/Library/Frameworks/ApplicationServices.framework/
Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x90364000 - 0x9069cfff com.apple.CoreGraphics 1.256.4 (???)
	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/
CoreGraphics.framework/Versions/A/CoreGraphics
0x90727000 - 0x90800fff com.apple.CoreFoundation 6.4.1 (368.1)
	/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x90849000 - 0x90849fff com.apple.CoreServices 10.4 (???)	/System/Library/Frameworks/
CoreServices.framework/Versions/A/CoreServices
0x9084b000 - 0x9094dfff libicucore.A.dylib 	/usr/lib/libicucore.A.dylib
0x909a7000 - 0x90a2bfff libobjc.A.dylib 	/usr/lib/libobjc.A.dylib
0x90a55000 - 0x90ac9fff com.apple.framework.IOKit 1.4 (???)	/System/Library/Frameworks/
IOKit.framework/Versions/A/IOKit
0x90ae3000 - 0x90af5fff libauto.dylib 	/usr/lib/libauto.dylib
0x90afc000 - 0x90dc1fff com.apple.CoreServices.CarbonCore 10.4 (611.1)
	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/
CarbonCore.framework/Versions/A/CarbonCore
0x90e24000 - 0x90ea4fff com.apple.CoreServices.OSServices 4.0 (4.0.0)
	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/
OSServices.framework/Versions/A/OSServices
0x90eee000 - 0x90f2efff com.apple.CFNetwork 4.0 (80)	/System/Library/Frameworks/
CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x90f43000 - 0x90f5bfff com.apple.WebServices 1.1.2 (1.1.0)	/System/Library/Frameworks/
CoreServices.framework/Versions/A/Frameworks/WebServicesCore.framework/Versions/A/
WebServicesCore
0x90f6b000 - 0x90fe9fff com.apple.SearchKit 1.0.3	/System/Library/Frameworks/
CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x9102e000 - 0x91055fff com.apple.Metadata 0.1 (121)	/System/Library/Frameworks/
CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x91066000 - 0x91073fff libz.1.dylib 	/usr/lib/libz.1.dylib
0x91076000 - 0x91238fff com.apple.security 4.0 (221)	/System/Library/Frameworks/
Security.framework/Versions/A/Security
0x9133a000 - 0x91343fff com.apple.DiskArbitration 2.1	/System/Library/Frameworks/
DiskArbitration.framework/Versions/A/DiskArbitration
0x9134a000 - 0x91371fff com.apple.SystemConfiguration 1.8.0
	/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x91384000 - 0x9138cfff libbsm.dylib 	/usr/lib/libbsm.dylib
0x91390000 - 0x9140efff com.apple.audio.CoreAudio 3.0.0 (3.0)
	/System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x9144c000 - 0x9144cfff com.apple.ApplicationServices 10.4 (???)
	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x9144e000 - 0x91486fff com.apple.AE 1.5 (297)	/System/Library/Frameworks/
ApplicationServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x914a1000 - 0x9156cfff com.apple.ColorSync 4.4	/System/Library/Frameworks/
ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x915c1000 - 0x91654fff com.apple.print.framework.PrintCore 4.0 (172)
	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/
PrintCore.framework/Versions/A/PrintCore
0x9169a000 - 0x91757fff com.apple.QD 3.8.5 (???)	/System/Library/Frameworks/
ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x91795000 - 0x917f3fff com.apple.HIServices 1.5.0 (???)	/System/Library/Frameworks/
ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x91821000 - 0x91844fff com.apple.LangAnalysis 1.6	/System/Library/Frameworks/
ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/
LangAnalysis
0x91858000 - 0x9187dfff com.apple.FindByContent 1.5	/System/Library/Frameworks/
ApplicationServices.framework/Versions/A/Frameworks/FindByContent.framework/Versions/A/
FindByContent
0x91890000 - 0x918d0fff com.apple.LaunchServices 10.4.1 (118)
	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/
LaunchServices.framework/Versions/A/LaunchServices
0x918eb000 - 0x918fffff com.apple.speech.synthesis.framework 3.3
	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/
SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x9190d000 - 0x91943fff com.apple.ImageIO.framework 1.0	/System/Library/Frameworks/
ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x91957000 - 0x91a19fff libcrypto.0.9.7.dylib 	/usr/lib/libcrypto.0.9.7.dylib
0x91a65000 - 0x91a7afff libcups.2.dylib 	/usr/lib/libcups.2.dylib
0x91a7f000 - 0x91a9bfff libJPEG.dylib 	/System/Library/Frameworks/ApplicationServices.framework/
Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x91aa0000 - 0x91b0ffff libJP2.dylib 	/System/Library/Frameworks/ApplicationServices.framework/
Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib
0x91b26000 - 0x91b2afff libGIF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/
Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x91b2c000 - 0x91b44fff libRaw.dylib 	/System/Library/Frameworks/ApplicationServices.framework/
Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRaw.dylib
0x91b47000 - 0x91b8afff libTIFF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/
Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x91b91000 - 0x91baafff libPng.dylib 	/System/Library/Frameworks/ApplicationServices.framework/
Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x91baf000 - 0x91bb2fff libRadiance.dylib 	/System/Library/Frameworks/
ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/
libRadiance.dylib
0x91bb4000 - 0x91bb4fff com.apple.Accelerate 1.1.1 (Accelerate 1.1.1)
	/System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x91bb6000 - 0x91ca0fff com.apple.vImage 2.0	/System/Library/Frameworks/
Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x91ca8000 - 0x91cc7fff com.apple.Accelerate.vecLib 3.1.1 (vecLib 3.1.1)
	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/
Versions/A/vecLib
0x91d33000 - 0x91d53fff libmx.A.dylib 	/usr/lib/libmx.A.dylib
0x91d59000 - 0x91dbefff libvMisc.dylib 	/System/Library/Frameworks/Accelerate.framework/
Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x91dc8000 - 0x91e5afff libvDSP.dylib 	/System/Library/Frameworks/Accelerate.framework/
Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x91e74000 - 0x92404fff libBLAS.dylib 	/System/Library/Frameworks/Accelerate.framework/
Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x9244c000 - 0x9275cfff libLAPACK.dylib 	/System/Library/Frameworks/Accelerate.framework/
Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x92789000 - 0x92814fff com.apple.DesktopServices 1.3	/System/Library/PrivateFrameworks/
DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x92856000 - 0x92a7ffff com.apple.Foundation 6.4 (567)	/System/Library/Frameworks/
Foundation.framework/Versions/C/Foundation
0x92b9d000 - 0x92c7bfff libxml2.2.dylib 	/usr/lib/libxml2.2.dylib
0x92c9b000 - 0x92d89fff libiconv.2.dylib 	/usr/lib/libiconv.2.dylib
0x92d9b000 - 0x92db9fff libGL.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/
A/Libraries/libGL.dylib
0x92dc4000 - 0x92e1efff libGLU.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/
A/Libraries/libGLU.dylib
0x92e3c000 - 0x92e3cfff com.apple.Carbon 10.4 (???)	/System/Library/Frameworks/
Carbon.framework/Versions/A/Carbon
0x92e3e000 - 0x92e52fff com.apple.ImageCapture 3.0	/System/Library/Frameworks/
Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x92e6a000 - 0x92e7afff com.apple.speech.recognition.framework 3.4
	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/
SpeechRecognition.framework/Versions/A/SpeechRecognition
0x92e86000 - 0x92e9bfff com.apple.securityhi 2.0 (203)	/System/Library/Frameworks/
Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x92ead000 - 0x92f34fff com.apple.ink.framework 101.2 (69)
	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/
Versions/A/Ink
0x92f48000 - 0x92f53fff com.apple.help 1.0.3 (32)	/System/Library/Frameworks/Carbon.framework/
Versions/A/Frameworks/Help.framework/Versions/A/Help
0x92f5d000 - 0x92f8afff com.apple.openscripting 1.2.2 (???)	/System/Library/Frameworks/
Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x92fa4000 - 0x92fb4fff com.apple.print.framework.Print 4.0 (187)
	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/
Versions/A/Print
0x92fc0000 - 0x93026fff com.apple.htmlrendering 1.1.2	/System/Library/Frameworks/
Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x93057000 - 0x930a9fff com.apple.NavigationServices 3.4	/System/Library/Frameworks/
Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/
NavigationServices
0x930d5000 - 0x930f2fff com.apple.audio.SoundManager 3.9	/System/Library/Frameworks/
Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x93104000 - 0x93111fff com.apple.CommonPanels 1.2.2 (73)
	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/
CommonPanels.framework/Versions/A/CommonPanels
0x9311a000 - 0x9342afff com.apple.HIToolbox 1.4.1 (???)	/System/Library/Frameworks/
Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x93575000 - 0x93581fff com.apple.opengl 1.4.0	/System/Library/Frameworks/OpenGL.framework/
Versions/A/OpenGL
0x93586000 - 0x935a8fff com.apple.DirectoryService.Framework 2.0
	/System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x93614000 - 0x9361cfff libgcc_s.1.dylib 	/usr/lib/libgcc_s.1.dylib
0x93621000 - 0x93621fff com.apple.Cocoa 6.4 (???)	/System/Library/Frameworks/
Cocoa.framework/Versions/A/Cocoa
0x93623000 - 0x93c54fff com.apple.AppKit 6.4.1 (824.1)	/System/Library/Frameworks/
AppKit.framework/Versions/C/AppKit
0x93fe0000 - 0x9404afff com.apple.CoreData 1.0 (46)	/System/Library/Frameworks/
CoreData.framework/Versions/A/CoreData
0x94082000 - 0x9414cfff com.apple.audio.toolbox.AudioToolbox 1.4
	/System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x941a0000 - 0x941a0fff com.apple.audio.units.AudioUnit 1.4
	/System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x941a2000 - 0x94301fff com.apple.QuartzCore 1.4.1	/System/Library/Frameworks/
QuartzCore.framework/Versions/A/QuartzCore
0x94349000 - 0x94386fff libsqlite3.0.dylib 	/usr/lib/libsqlite3.0.dylib
0x9438e000 - 0x943d9fff libGLImage.dylib 	/System/Library/Frameworks/OpenGL.framework/
Versions/A/Libraries/libGLImage.dylib
0x94467000 - 0x9449ffff com.apple.vmutils 4.0.0 (85)	/System/Library/PrivateFrameworks/
vmutils.framework/Versions/A/vmutils
0x944e2000 - 0x944fefff com.apple.securityfoundation 2.0 (262)
	/System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x94512000 - 0x94555fff com.apple.securityinterface 2.0 (256)
	/System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
0x94579000 - 0x94588fff libCGATS.A.dylib 	/System/Library/Frameworks/
ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/
Resources/libCGATS.A.dylib
0x94590000 - 0x9459cfff libCSync.A.dylib 	/System/Library/Frameworks/
ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/
Resources/libCSync.A.dylib
0x945e1000 - 0x945f5fff libRIP.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/
Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x945fb000 - 0x9485dfff com.apple.QuickTime 7.0.1	/System/Library/Frameworks/
QuickTime.framework/Versions/A/QuickTime
0x94930000 - 0x9494ffff com.apple.vecLib 3.1.1 (vecLib 3.1.1)
	/System/Library/Frameworks/vecLib.framework/Versions/A/vecLib
0x94abc000 - 0x94be9fff com.apple.AddressBook.framework 4.0.1 (472)
	/System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x94c7a000 - 0x94c89fff com.apple.DSObjCWrappers.Framework 1.1
	/System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
0x94c91000 - 0x94cb8fff com.apple.LDAPFramework 1.4 (68)	/System/Library/Frameworks/
LDAP.framework/Versions/A/LDAP
0x94cbe000 - 0x94ccefff libsasl2.2.dylib 	/usr/lib/libsasl2.2.dylib
0x94cd2000 - 0x94d00fff libssl.0.9.7.dylib 	/usr/lib/libssl.0.9.7.dylib
0x94d10000 - 0x94d2dfff libresolv.9.dylib 	/usr/lib/libresolv.9.dylib
0x95491000 - 0x95514fff libstdc++.6.dylib 	/usr/lib/libstdc++.6.dylib
0x96038000 - 0x96061fff libxslt.1.dylib 	/usr/lib/libxslt.1.dylib
0x968d3000 - 0x968e9fff libJapaneseConverter.dylib 	/System/Library/CoreServices/Encodings/
libJapaneseConverter.dylib
0x97ad6000 - 0x97ae3fff com.apple.agl 2.5.6 (AGL-2.5.6)	/System/Library/Frameworks/
AGL.framework/Versions/A/AGL
0x99534000 - 0x99cc6fff com.apple.QuickTimeComponents.component 7.0.1
	/System/Library/QuickTime/QuickTimeComponents.component/Contents/MacOS/
QuickTimeComponents
0x9ac24000 - 0x9ac25fff com.apple.iokit.dvcomponentglue 1.7.5
	/System/Library/Frameworks/DVComponentGlue.framework/Versions/A/DVComponentGlue
0x9b04a000 - 0x9b07dfff com.apple.Syndication 1.0.0 (38)	/System/Library/PrivateFrameworks/
Syndication.framework/Versions/A/Syndication
0x9b098000 - 0x9b0a8fff com.apple.SyndicationUI 1.0.0 (38)	/System/Library/PrivateFrameworks/
SyndicationUI.framework/Versions/A/SyndicationUI

Model: PowerBook5,2, BootROM 4.7.1f1, 1 processors, PowerPC G4  (1.1), 1.25 GHz, 512 MB
Graphics: ATI Mobility Radeon 9600, ATY,RV350M10, AGP, 64 MB
Memory Module: SODIMM0/J25LOWER, 256 MB, DDR SDRAM, PC2700U-25330
Memory Module: SODIMM1/J25UPPER, 256 MB, DDR SDRAM, PC2700U-25330
AirPort: AirPort Extreme, 3.5f1 (3.50.37.p6)
Modem: LastDash, UCJ, V.92, 4.0, APPLE VERSION 2.6.4
Bluetooth: Version 1.6.0f2, 2 service, 0 devices, 1 incoming serial ports
Network Service: Built-in Ethernet, Ethernet, en0
PCI Card: TXN,PCIXXXX-00, cardbus, PC Card
Parallel ATA Device: MATSHITADVD-R   UJ-816, 
Parallel ATA Device: FUJITSU MHT2080AT, 74.53 GB
USB Device: Bluetooth HCI, , Up to 12 Mb/sec, 500 mA

[Mark Rowe (bdash)]

*** Bug 3319 has been marked as a duplicate of this bug. ***

[John Sullivan]

Maciej is looking into this (dupe 3319 was assigned to him), so reassigning this one.

[Steven Fisher]

As an FYI, I had this happen on my first visit to Acid2. I've also had it happen immediately after emptying 
the cache and clicking the URL in the report. Assuming Empty Cache works correctly, this doesn't seem to 
be 100% cache related. Crash log seems to be the same as comment #1.

[Andrew Wellington]

Created attachment 2181 [details]
Proposed fix

This appears to fix this problem. Also posted to webkit-reviews.

[Alistair McMillan]

Andrew's patch WORKSFORME.

One thing I've not seen mentioned anywhere else.  When you load that page from cache, "http://
www.example.com/404/" appears to get called twice.  When it is being loaded fresh from 
webstandards.org, "http://www.example.com/404/" only gets called once.  Most of the crashes seemed to 
occur for me right after the second call to example.com.

Not sure if this might point to another bug somewhere else.

[Maciej Stachowiak]

r=me

committed

[Chris Petersen]

Reporter, please update and verify with the latest TOT WebKit. Please check "Mark bug as Verified".

[Mathieu Massebœuf]

I cannot reproduce this anymore with fresh sources.