Bug 8898 – REGRESSION: Attempting to right-click image in own tab on website causes crash

• Status: RESOLVED
• Resolution: FIXED
• Component: Images

[Kevin Broderick]

When I load the image above in its own tab and then right-click on it to view EXIF data, Safari w/WebKit r14322 crashes before the right-click menu appears.  Using wget to fetch the image, loading it from a local drive, and then-right clicking on it works as expected (shows right-click menu).  Using Safari 2.0.3 w/released WebKit (stock on OS X 10.4.6 w/all updates) also works as expected (shows right-click menu and does not crash).

Crash report:
Date/Time:      2006-05-14 11:19:36.834 -0400
OS Version:     10.4.6 (Build 8I127)
Report Version: 4

Command: Safari
Path:    /Applications/Safari.app/Contents/MacOS/Safari
Parent:  bash [312]

Version:        2.0.3 (417.9.3)
Build Version:  2
Project Name:   WebBrowser
Source Version: 4170903

PID:    8111
Thread: 0

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000038

Thread 0 Crashed:
0   com.apple.WebCore        	0x018ecc98 -[WebCoreFrameBridge getData:andResponse:forURL:] + 56 (Document.h:282)
1   com.apple.WebKit         	0x0032c950 -[WebDataSource subresourceForURL:] + 64 (WebDataSource.m:1080)
2   com.apple.WebKit         	0x003294f4 -[WebDataSource(WebPrivate) _fileWrapperForURL:] + 164 (WebDataSource.m:111)
3   com.apple.WebKit         	0x0032d4f4 -[WebDefaultUIDelegate(WebContextMenu) contextMenuItemsForElement:defaultMenuItems:] + 596 (WebDefaultContextMenuDelegate.m:218)
4   com.apple.WebKit         	0x0035ab50 -[WebView(WebPrivate) _menuForElement:defaultItems:] + 80 (WebView.m:691)
5   com.apple.AppKit         	0x93b65eb8 -[NSView rightMouseDown:] + 68
6   com.apple.AppKit         	0x9377c340 -[NSWindow sendEvent:] + 6424
7   com.apple.Safari         	0x00021ca4 0x1000 + 134308
8   com.apple.AppKit         	0x93724c74 -[NSApplication sendEvent:] + 4172
9   com.apple.Safari         	0x000217a8 0x1000 + 133032
10  com.apple.AppKit         	0x9371c0b0 -[NSApplication run] + 508
11  com.apple.AppKit         	0x9380cbfc NSApplicationMain + 452
12  com.apple.Safari         	0x0005cb98 0x1000 + 375704
13  com.apple.Safari         	0x0005ca40 0x1000 + 375360

Thread 1:
0   libSystem.B.dylib        	0x9000b0a8 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000affc mach_msg + 60
2   com.apple.CoreFoundation 	0x907e3b78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x907e347c CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x92985164 -[NSRunLoop runMode:beforeDate:] + 172
5   com.apple.Foundation     	0x9298509c -[NSRunLoop run] + 76
6   com.apple.WebKit         	0x00369584 +[WebFileDatabase _syncLoop:] + 180 (WebFileDatabase.m:291)
7   com.apple.Foundation     	0x92976194 forkThreadForFunction + 108
8   libSystem.B.dylib        	0x9002ba68 _pthread_body + 96

Thread 2:
0   libSystem.B.dylib        	0x9000b0a8 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000affc mach_msg + 60
2   com.apple.CoreFoundation 	0x907e3b78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x907e347c CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x9299d69c +[NSURLConnection(NSURLConnectionInternal) _resourceLoadLoop:] + 264
5   com.apple.Foundation     	0x92976194 forkThreadForFunction + 108
6   libSystem.B.dylib        	0x9002ba68 _pthread_body + 96

Thread 3:
0   libSystem.B.dylib        	0x9000b0a8 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000affc mach_msg + 60
2   com.apple.CoreFoundation 	0x907e3b78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x907e347c CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x9299e7dc +[NSURLCache _diskCacheSyncLoop:] + 152
5   com.apple.Foundation     	0x92976194 forkThreadForFunction + 108
6   libSystem.B.dylib        	0x9002ba68 _pthread_body + 96

Thread 4:
0   libSystem.B.dylib        	0x9002c128 semaphore_wait_signal_trap + 8
1   libSystem.B.dylib        	0x90030bec pthread_cond_wait + 480
2   com.apple.Foundation     	0x9297d300 -[NSConditionLock lockWhenCondition:] + 68
3   com.apple.Syndication    	0x9b6a950c -[AsyncDB _run:] + 192
4   com.apple.Foundation     	0x92976194 forkThreadForFunction + 108
5   libSystem.B.dylib        	0x9002ba68 _pthread_body + 96

Thread 5:
0   libSystem.B.dylib        	0x9001f5ec select + 12
1   com.apple.CoreFoundation 	0x907f640c __CFSocketManager + 472
2   libSystem.B.dylib        	0x9002ba68 _pthread_body + 96

Thread 0 crashed with PPC Thread State 64:
  srr0: 0x00000000018ecc98 srr1: 0x000000000200f030                        vrsave: 0x0000000000000000
    cr: 0x24004224          xer: 0x0000000020000004   lr: 0x00000000018ecc94  ctr: 0x00000000018e7900
    r0: 0x00000000018ecc90   r1: 0x00000000bfffe600   r2: 0x00000000a0001fac   r3: 0x0000000000000000
    r4: 0x0000000001bccc70   r5: 0x00000000bfffe6b8   r6: 0x00000000bfffe6bc   r7: 0x00000000142253f0
    r8: 0x0000000000000066   r9: 0x0000000000000010  r10: 0x00000000a07c9320  r11: 0x0000000000000001
   r12: 0x00000000018e7900  r13: 0x0000000000000000  r14: 0x0000000000000100  r15: 0x0000000000000000
   r16: 0x0000000000000000  r17: 0x0000000000000000  r18: 0x0000000000000000  r19: 0x0000000000000000
   r20: 0x0000000000000000  r21: 0x0000000000000000  r22: 0x0000000012024520  r23: 0x00000000142fe560
   r24: 0x00000000120a2b50  r25: 0x00000000142253f0  r26: 0x00000000bfffe6bc  r27: 0x00000000003bd2bc
   r28: 0x00000000142253f0  r29: 0x00000000142253f0  r30: 0x00000000bfffe6b8  r31: 0x00000000018ecc70

Binary Images Description:
    0x1000 -    0xdafff com.apple.Safari 2.0.3 (417.9.3)	/Applications/Safari.app/Contents/MacOS/Safari
  0x305000 -   0x3adfff com.apple.WebKit 420+	/Users/kbroderick/Documents/src/builds/Release/WebKit.framework/Versions/A/WebKit
 0x1008000 -  0x1094fff com.apple.JavaScriptCore 420+	/Users/kbroderick/Documents/src/builds/Release/JavaScriptCore.framework/Versions/A/JavaScriptCore
 0x17a3000 -  0x1b8bfff com.apple.WebCore 420+	/Users/kbroderick/Documents/src/builds/Release/WebCore.framework/Versions/A/WebCore
 0xf708000 -  0xf708fff jp.hetima.SafariStand.loader SafariStand-loader version  1.0 (5)	/Users/kbroderick/Library/InputManagers/SafariStand/SafariStand-loader.bundle/Contents/MacOS/SafariStand-loader
 0xf70c000 -  0xf713fff com.unsanity.smartcrashreports Smart Crash Reports version 1.0 (1.0.1)	/Library/InputManagers/Smart Crash Reports/Smart Crash Reports.bundle/Contents/MacOS/Smart Crash Reports
0x10047000 - 0x1007bfff jp.hetima.SafariStand 2.0b3 (107)	/Users/kbroderick/Library/InputManagers/SafariStand/SafariStand.bundle/Contents/MacOS/SafariStand
0x11e1a000 - 0x11e1cfff com.apple.AutomatorCMM 1.0 (48)	/System/Library/Contextual Menu Items/AutomatorCMM.plugin/Contents/MacOS/AutomatorCMM
0x11e1f000 - 0x11e1ffff com.apple.SpotLightCM 1.0 (121.20.2)	/System/Library/Contextual Menu Items/SpotlightCM.plugin/Contents/MacOS/SpotlightCM
0x11e45000 - 0x11e49fff com.apple.FolderActionsMenu 1.3	/System/Library/Contextual Menu Items/FolderActionsMenu.plugin/Contents/MacOS/FolderActionsMenu
0x32000000 - 0x32023fff isao.sonobe.OgreKit OgreKit version 1.2.2 (1.2.3)	/Users/kbroderick/Library/InputManagers/SafariStand/SafariStand.bundle/Contents/Resources/OgreKit.framework/OgreKit
0x8fe00000 - 0x8fe51fff dyld 44.4	/usr/lib/dyld
0x90000000 - 0x901bbfff libSystem.B.dylib 	/usr/lib/libSystem.B.dylib
0x90213000 - 0x90218fff libmathCommon.A.dylib 	/usr/lib/system/libmathCommon.A.dylib
0x9021a000 - 0x9026dfff com.apple.CoreText 1.0.1 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x9029a000 - 0x9034bfff ATS 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x9037a000 - 0x90734fff com.apple.CoreGraphics 1.258.30 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x907c1000 - 0x9089afff com.apple.CoreFoundation 6.4.6 (368.27)	/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x908e3000 - 0x908e3fff com.apple.CoreServices 10.4 (???)	/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x908e5000 - 0x909e7fff libicucore.A.dylib 	/usr/lib/libicucore.A.dylib
0x90a41000 - 0x90ac5fff libobjc.A.dylib 	/usr/lib/libobjc.A.dylib
0x90aef000 - 0x90b5dfff com.apple.framework.IOKit 1.4 (???)	/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x90b74000 - 0x90b86fff libauto.dylib 	/usr/lib/libauto.dylib
0x90b8d000 - 0x90e65fff com.apple.CoreServices.CarbonCore 681.3 (671.2)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x90ecb000 - 0x90f4bfff com.apple.CoreServices.OSServices 4.1	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x90f95000 - 0x90fd6fff com.apple.CFNetwork 129.16	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x90feb000 - 0x91003fff com.apple.WebServices 1.1.2 (1.1.0)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/WebServicesCore.framework/Versions/A/WebServicesCore
0x91013000 - 0x91094fff com.apple.SearchKit 1.0.5	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x910da000 - 0x91104fff com.apple.Metadata 10.4.4 (121.36)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x91126000 - 0x912e9fff com.apple.security 4.3 (25966)	/System/Library/Frameworks/Security.framework/Versions/A/Security
0x913ec000 - 0x913f5fff com.apple.DiskArbitration 2.1	/System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x913fc000 - 0x91423fff com.apple.SystemConfiguration 1.8.2	/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x9146c000 - 0x91474fff libbsm.dylib 	/usr/lib/libbsm.dylib
0x91478000 - 0x914f3fff com.apple.audio.CoreAudio 3.0.3	/System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x91530000 - 0x91530fff com.apple.ApplicationServices 10.4 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x91532000 - 0x9156afff com.apple.AE 1.5 (297)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x91585000 - 0x91652fff com.apple.ColorSync 4.4.4	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x916a7000 - 0x91738fff com.apple.print.framework.PrintCore 4.5 (177.10)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x9177f000 - 0x91836fff com.apple.QD 3.8.20 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x91873000 - 0x918d1fff com.apple.HIServices 1.5.1 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x918ff000 - 0x91923fff com.apple.LangAnalysis 1.6.1	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x91937000 - 0x9195cfff com.apple.FindByContent 1.5	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/FindByContent.framework/Versions/A/FindByContent
0x9196f000 - 0x919b1fff com.apple.LaunchServices 178	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x919cd000 - 0x919e1fff com.apple.speech.synthesis.framework 3.3	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x919ef000 - 0x91a2efff com.apple.ImageIO.framework 1.4.6	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x91a44000 - 0x91b0cfff libcrypto.0.9.7.dylib 	/usr/lib/libcrypto.0.9.7.dylib
0x91b5a000 - 0x91b6ffff libcups.2.dylib 	/usr/lib/libcups.2.dylib
0x91b74000 - 0x91b91fff libJPEG.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x91b96000 - 0x91c05fff libJP2.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib
0x91c1c000 - 0x91c20fff libGIF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x91c22000 - 0x91c69fff libRaw.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRaw.dylib
0x91c6e000 - 0x91cabfff libTIFF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x91cb2000 - 0x91ccbfff libPng.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x91cd0000 - 0x91cd3fff libRadiance.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x91cd5000 - 0x91cd5fff com.apple.Accelerate 1.2.1 (Accelerate 1.2.1)	/System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x91d34000 - 0x91d54fff libmx.A.dylib 	/usr/lib/libmx.A.dylib
0x91dbf000 - 0x91ddefff com.apple.Accelerate.vecLib 3.2.1 (vecLib 3.2.1)	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x91e4a000 - 0x91eb8fff libvMisc.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x91ec3000 - 0x91f57fff libvDSP.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x91f71000 - 0x924f9fff libBLAS.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x9252c000 - 0x92857fff libLAPACK.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x92887000 - 0x9290ffff com.apple.DesktopServices 1.3.3	/System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x92950000 - 0x92b7bfff com.apple.Foundation 6.4.5 (567.26)	/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x92c99000 - 0x92d77fff libxml2.2.dylib 	/usr/lib/libxml2.2.dylib
0x92d97000 - 0x92e85fff libiconv.2.dylib 	/usr/lib/libiconv.2.dylib
0x92e97000 - 0x92eb5fff libGL.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x92ec0000 - 0x92f1afff libGLU.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x92f38000 - 0x92f38fff com.apple.Carbon 10.4 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x92f3a000 - 0x92f4efff com.apple.ImageCapture 3.0	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x92f66000 - 0x92f76fff com.apple.speech.recognition.framework 3.4	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x92f82000 - 0x92f97fff com.apple.securityhi 2.0 (203)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x92fa9000 - 0x93030fff com.apple.ink.framework 101.2 (69)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x93044000 - 0x9304ffff com.apple.help 1.0.3 (32)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x93059000 - 0x93086fff com.apple.openscripting 1.2.5 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x930a0000 - 0x930b0fff com.apple.print.framework.Print 5.0 (190.1)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x930bc000 - 0x93122fff com.apple.htmlrendering 1.1.2	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x93153000 - 0x931a2fff com.apple.NavigationServices 3.4.4 (3.4.3)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x931d0000 - 0x931edfff com.apple.audio.SoundManager 3.9	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x931ff000 - 0x9320cfff com.apple.CommonPanels 1.2.2 (73)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x93215000 - 0x93522fff com.apple.HIToolbox 1.4.6 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x93671000 - 0x9367dfff com.apple.opengl 1.4.7	/System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x93682000 - 0x936a2fff com.apple.DirectoryService.Framework 3.1	/System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x93716000 - 0x93716fff com.apple.Cocoa 6.4 (???)	/System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x93718000 - 0x93d4afff com.apple.AppKit 6.4.6 (824.38)	/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x940d7000 - 0x94147fff com.apple.CoreData 80	/System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x94180000 - 0x9424afff com.apple.audio.toolbox.AudioToolbox 1.4.1	/System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x9429e000 - 0x9429efff com.apple.audio.units.AudioUnit 1.4	/System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x942a0000 - 0x94454fff com.apple.QuartzCore 1.4.7	/System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x944a7000 - 0x944e4fff libsqlite3.0.dylib 	/usr/lib/libsqlite3.0.dylib
0x944ec000 - 0x9453cfff libGLImage.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x945cc000 - 0x94604fff com.apple.vmutils 4.0.0 (85)	/System/Library/PrivateFrameworks/vmutils.framework/Versions/A/vmutils
0x94647000 - 0x94663fff com.apple.securityfoundation 2.1 (24988)	/System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x94677000 - 0x946bbfff com.apple.securityinterface 2.1 (24981)	/System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
0x946df000 - 0x946eefff libCGATS.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib
0x946f6000 - 0x94702fff libCSync.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x94748000 - 0x94760fff libRIP.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x9494d000 - 0x94a7bfff com.apple.AddressBook.framework 4.0.3 (483)	/System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x94b0d000 - 0x94b1cfff com.apple.DSObjCWrappers.Framework 1.1	/System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
0x94b24000 - 0x94b51fff com.apple.LDAPFramework 1.4.1 (69.0.1)	/System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x94b58000 - 0x94b68fff libsasl2.2.dylib 	/usr/lib/libsasl2.2.dylib
0x94b6c000 - 0x94b9bfff libssl.0.9.7.dylib 	/usr/lib/libssl.0.9.7.dylib
0x94bab000 - 0x94bc8fff libresolv.9.dylib 	/usr/lib/libresolv.9.dylib
0x95e09000 - 0x95e32fff libxslt.1.dylib 	/usr/lib/libxslt.1.dylib
0x9b6a6000 - 0x9b6dcfff com.apple.Syndication 1.0.5 (52)	/System/Library/PrivateFrameworks/Syndication.framework/Versions/A/Syndication
0x9b6fc000 - 0x9b70efff com.apple.SyndicationUI 1.0.5 (52)	/System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI
0x9ea04000 - 0x9ea12fff libz.1.dylib 	/usr/lib/libz.1.dylib
0x9ebad000 - 0x9ebb8fff libgcc_s.1.dylib 	/usr/lib/libgcc_s.1.dylib
0x9ebbe000 - 0x9ec2ffff libstdc++.6.dylib 	/usr/lib/libstdc++.6.dylib
0x9ff18000 - 0x9fff8fff com.apple.vImage 2.3	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage

Model: PowerBook3,4, BootROM 4.3.7f3, 1 processors, PowerPC G4  (2.1), 800 MHz, 1 GB
Graphics: ATI Mobility Radeon 7500, ATY,RageM7, AGP, 32 MB
Memory Module: SODIMM0/J16TOP, 512 MB, SDRAM, PC133U-333
Memory Module: SODIMM1/J16BOTTOM, 512 MB, SDRAM, PC133U-333
AirPort: AirPort, 9.52
Modem: MicroDash, UCJ, V.92, 1.0F, APPLE VERSION 2.6.6
Network Service: Built-in Ethernet, Ethernet, en0
PCI Card: TXN,PCI1410-02, cardbus, PC Card
Parallel ATA Device: TOSHIBA MK8025GAS, 74.53 GB
Parallel ATA Device: MATSHITACD-RW  CW-8121, 
USB Device: USB Receiver, Logitech, Up to 1.5 Mb/sec, 500 mA
FireWire Device: Maxtor 6Y250L0, DMI, Up to 400 Mb/sec

[Alexey Proskuryakov]

Confirmed with r14350.

r14249 doesn't crash, r14271 does.

[Darin Adler]

Looks like fallout from refactoring of loading logic. Might just "fix itself" if we eliminate the standalone image view and start using the engine as planned.

[Darin Adler]

Missing nil check of document() in -[WebCoreFrameBridge getData:andResponse:forURL:].

[Darin Adler]

Created attachment 8340 [details]
add check for 0 document

(In reply to comment #5)
> Created an attachment (id=8340) [edit]
> add check for 0 document
> 

I don't understand the (quite common) case where document is not zero. In that case, the document is just the XML/HTML document that happened to be in the frame last before the image was opened. While it may be harmless to call cachedObject() on it (what if it contained the image as a subresource?), it just doesn't feel right. But I guess this is going to change soon anyway with the ImageDocument.

[Dave Hyatt]

Comment on attachment 8340 [details]
add check for 0 document

r=me

[Darin Adler]

(In reply to comment #6)
> I don't understand the (quite common) case where document is not zero. In that
> case, the document is just the XML/HTML document that happened to be in the
> frame last before the image was opened. While it may be harmless to call
> cachedObject() on it (what if it contained the image as a subresource?), it
> just doesn't feel right. But I guess this is going to change soon anyway with
> the ImageDocument.

It's true that this won't matter any more for image view, but it could still matter for other views. The code should probably be changed around so the old document goes away, or so that a new empty document is created.

[Darin Adler]

r14416