In a page where an applet's method is envoked from Javascript, the method fails to execute and causes a subsequent page unload (navigating away from the page, closing the window) to crash WebKit. Reduced test case below including the applet in question, URL for reference only. Works fine in 417.9.2, haven't looked for the build where the regression occured.
Created attachment 8009 [details] ZIP Archive containing HTML and Java applet Archive contains the applet (in case it is important) and an HTML page to repro the bug.
Steps to reproduce: (After unarchiving reduced testcase) 1) Load page 2) Click hyperlink to execute javscript method on Applet 3) Navigate away from page or close window/tab Actual Result: Crash Expected Result: Java method envoked
*** Bug 8635 has been marked as a duplicate of this bug. ***
Created attachment 8010 [details] Console output Console output from page load until after crash.
Setting P1 for reproducable Crash/Hang. Priority=norm for later triage. Added Keyword 'Regression'.
-[JavaWebKitView _webViewURL]: selector not recognized Looks like we're calling a method that's not implemented by the Java Plug-In. Might be an SPI weening global replace gone awry. Tim?
Created attachment 8039 [details] Java log file Java log file for crash
Created attachment 8040 [details] Crash Report Safari/Webkit crash report
Cannot confirm yet, since the test case just crashes (in freeWidthMap(), this is a known issue).
With r14184, I'm getting the same stack trace as in bug 8717 (ATSUConvertCharToGlyphs at the top).
JavaScriptCore calls the method _webViewURL. This method was implemented in WebKit until revision 14302, on 2006-04-24, for bug 8562. The call to the method is still present in JavaScriptCore but we have removed the implementation of it. I believe that may be the source of this bug and of bug 8717 as well.
<rdar://problem/4575074>
Created attachment 9070 [details] Patch
Comment on attachment 9070 [details] Patch r=me, assuming this passes the tests in <rdar://3863248>
Fixed in r15070