Bug 9795 – REGRESSION: Crash in [WebHTMLView(WebPrivate) _updateMouseoverWithEvent:]

• Status: RESOLVED
• Resolution: FIXED
• Component: Page Loading

[David Kilzer (:ddkilzer)]

Every now and then I get a crash when reloading the webkit-unassigned month-by-date web page (see URL above).  Most of the time I've noticed it happens after I've reloaded the page, then hid Safari or switched to another application.  The following stack trace occurred with Mac OS X 10.4.7 (8J135/PowerPC) with Safari 2.0.4 (419.3) and a locally-built WebKit r15239 (with local patches for Bug 9179).

I think Darin might have mentioned a similar problem today in another bug comment, but I'm not sure I could find it now.

Date/Time:      2006-07-08 22:42:17.197 -0500
OS Version:     10.4.7 (Build 8J135)
Report Version: 4

Command: Safari
Path:    /Applications/Safari.app/Contents/MacOS/Safari
Parent:  bash [394]

Version:        2.0.4 (419.3)
Build Version:  1
Project Name:   WebBrowser
Source Version: 4190300

PID:    541
Thread: 0

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_INVALID_ADDRESS (0x0001) at 0x34383129

Thread 0 Crashed:
0   <<00000000>> 	0xfffeff20 objc_msgSend_rtp + 32
1   com.apple.WebKit               	0x00365590 -[WebHTMLView(WebPrivate) _updateMouseoverWithEvent:] + 564 (WebHTMLView.m:1118)
2   com.apple.WebKit               	0x0037345c -[WebHTMLView mouseMovedNotification:] + 148 (WebHTMLView.m:3153)
3   com.apple.Foundation           	0x92943ad8 _nsnote_callback + 180
4   com.apple.CoreFoundation       	0x90803010 __CFXNotificationPost + 368
5   com.apple.CoreFoundation       	0x907fb0ec _CFXNotificationPostNotification + 684
6   com.apple.Foundation           	0x9292dee0 -[NSNotificationCenter postNotificationName:object:userInfo:] + 92
7   com.apple.AppKit               	0x937bcf84 forwardMethod + 92
8   com.apple.AppKit               	0x937bcf84 forwardMethod + 92
9   com.apple.AppKit               	0x937bcf84 forwardMethod + 92
10  com.apple.AppKit               	0x937bcf84 forwardMethod + 92
11  com.apple.AppKit               	0x937bcf84 forwardMethod + 92
12  com.apple.AppKit               	0x937bcf84 forwardMethod + 92
13  com.apple.AppKit               	0x937bcf84 forwardMethod + 92
14  com.apple.AppKit               	0x9374afa0 -[NSWindow sendEvent:] + 6424
15  com.apple.Safari               	0x00021734 0x1000 + 132916
16  com.apple.AppKit               	0x936f38d4 -[NSApplication sendEvent:] + 4172
17  com.apple.Safari               	0x00021238 0x1000 + 131640
18  com.apple.AppKit               	0x936ead10 -[NSApplication run] + 508
19  com.apple.AppKit               	0x937db87c NSApplicationMain + 452
20  com.apple.Safari               	0x0005c77c 0x1000 + 374652
21  com.apple.Safari               	0x0005c624 0x1000 + 374308

Thread 1:
0   libSystem.B.dylib              	0x9000b268 mach_msg_trap + 8
1   libSystem.B.dylib              	0x9000b1bc mach_msg + 60
2   com.apple.CoreFoundation       	0x907dbb78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation       	0x907db47c CFRunLoopRunSpecific + 268
4   com.apple.Foundation           	0x92953164 -[NSRunLoop runMode:beforeDate:] + 172
5   com.apple.Foundation           	0x9295309c -[NSRunLoop run] + 76
6   com.apple.WebKit               	0x003b411c +[WebFileDatabase _syncLoop:] + 420 (WebFileDatabase.m:294)
7   com.apple.Foundation           	0x92944194 forkThreadForFunction + 108
8   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 2:
0   libSystem.B.dylib              	0x9000b268 mach_msg_trap + 8
1   libSystem.B.dylib              	0x9000b1bc mach_msg + 60
2   com.apple.CoreFoundation       	0x907dbb78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation       	0x907db47c CFRunLoopRunSpecific + 268
4   com.apple.Foundation           	0x9296b69c +[NSURLConnection(NSURLConnectionInternal) _resourceLoadLoop:] + 264
5   com.apple.Foundation           	0x92944194 forkThreadForFunction + 108
6   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 3:
0   libSystem.B.dylib              	0x9000b268 mach_msg_trap + 8
1   libSystem.B.dylib              	0x9000b1bc mach_msg + 60
2   com.apple.CoreFoundation       	0x907dbb78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation       	0x907db47c CFRunLoopRunSpecific + 268
4   com.apple.Foundation           	0x9296c7dc +[NSURLCache _diskCacheSyncLoop:] + 152
5   com.apple.Foundation           	0x92944194 forkThreadForFunction + 108
6   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 4:
0   libSystem.B.dylib              	0x9002c2e8 semaphore_wait_signal_trap + 8
1   libSystem.B.dylib              	0x90030dcc pthread_cond_wait + 480
2   com.apple.Foundation           	0x9294b300 -[NSConditionLock lockWhenCondition:] + 68
3   com.apple.Syndication          	0x9b14742c -[AsyncDB _run:] + 192
4   com.apple.Foundation           	0x92944194 forkThreadForFunction + 108
5   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 5:
0   libSystem.B.dylib              	0x9001f7ac select + 12
1   com.apple.CoreFoundation       	0x907ee40c __CFSocketManager + 472
2   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 6:
0   libSystem.B.dylib              	0x9002efac kevent + 12
1   com.apple.DesktopServices      	0x92858250 TFSNotificationTask::FSNotificationTaskProc(void*) + 56
2   ...ple.CoreServices.CarbonCore 	0x90bc1900 PrivateMPEntryPoint + 76
3   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 7:
0   libSystem.B.dylib              	0x9002c2e8 semaphore_wait_signal_trap + 8
1   libSystem.B.dylib              	0x90030dcc pthread_cond_wait + 480
2   ...ple.CoreServices.CarbonCore 	0x90bc1af0 MPWaitOnQueue + 224
3   com.apple.DesktopServices      	0x928588cc TNodeSyncTask::SyncTaskProc(void*) + 116
4   ...ple.CoreServices.CarbonCore 	0x90bc1900 PrivateMPEntryPoint + 76
5   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 8:
0   libSystem.B.dylib              	0x9002c2e8 semaphore_wait_signal_trap + 8
1   libSystem.B.dylib              	0x90030dcc pthread_cond_wait + 480
2   com.apple.Foundation           	0x9294b300 -[NSConditionLock lockWhenCondition:] + 68
3   com.apple.AppKit               	0x9378b708 -[NSUIHeartBeat _heartBeatThread:] + 324
4   com.apple.Foundation           	0x92944194 forkThreadForFunction + 108
5   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 9:
0   libSystem.B.dylib              	0x9000b268 mach_msg_trap + 8
1   libSystem.B.dylib              	0x9000b1bc mach_msg + 60
2   com.apple.CoreFoundation       	0x907dbb78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation       	0x907db47c CFRunLoopRunSpecific + 268
4   com.apple.Foundation           	0x92953164 -[NSRunLoop runMode:beforeDate:] + 172
5   com.apple.Foundation           	0x9295309c -[NSRunLoop run] + 76
6   com.apple.Safari               	0x0003d5f0 0x1000 + 247280
7   com.apple.Foundation           	0x92944194 forkThreadForFunction + 108
8   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 0 crashed with PPC Thread State 64:
  srr0: 0x00000000fffeff20 srr1: 0x000000000000d030                        vrsave: 0x0000000000000000
    cr: 0x44000224          xer: 0x0000000000000007   lr: 0x0000000000365590  ctr: 0x0000000092923630
    r0: 0x0000000090a61798   r1: 0x00000000bfffddf0   r2: 0x0000000034383129   r3: 0x000000001a500c10
    r4: 0x0000000090a61798   r5: 0x0000000000420900   r6: 0x00000000ffffffff   r7: 0x0000000000000000
    r8: 0x0000000000000000   r9: 0x000000001a500c10  r10: 0x0000000000000081  r11: 0x000000006f581798
   r12: 0x00000000031c806b  r13: 0x0000000000000000  r14: 0x0000000000000100  r15: 0x0000000000000000
   r16: 0x0000000000000000  r17: 0x0000000018d56e50  r18: 0x00000000146198f0  r19: 0x0000000016dbc0f0
   r20: 0x00000000a36ec814  r21: 0x00000000a07b2eb0  r22: 0x000000000000004c  r23: 0x0000000000000000
   r24: 0x00000000146055d0  r25: 0x0000000000000000  r26: 0x0000000000000000  r27: 0x0000000016df4440
   r28: 0x0000000090a9cc68  r29: 0x0000000018a870c0  r30: 0x00000000bfffddf0  r31: 0x0000000000365378

Binary Images Description:
    0x1000 -    0xdcfff com.apple.Safari 2.0.4 (419.3)	/Applications/Safari.app/Contents/MacOS/Safari
  0x305000 -   0x413fff com.apple.WebKit 420+	/Users/ddkilzer/Projects/Cocoa/WebKit/WebKitBuild/Debug/WebKit.framework/Versions/A/WebKit
 0x1008000 -  0x10dcfff com.apple.JavaScriptCore 420+	/Users/ddkilzer/Projects/Cocoa/WebKit/WebKitBuild/Debug/JavaScriptCore.framework/Versions/A/JavaScriptCore
 0x180b000 -  0x1dfafff com.apple.WebCore 420+	/Users/ddkilzer/Projects/Cocoa/WebKit/WebKitBuild/Debug/WebCore.framework/Versions/A/WebCore
0x16a00000 - 0x16a02fff com.apple.AutomatorCMM 1.0 (48)	/System/Library/Contextual Menu Items/AutomatorCMM.plugin/Contents/MacOS/AutomatorCMM
0x16a05000 - 0x16a09fff com.apple.FolderActionsMenu 1.3	/System/Library/Contextual Menu Items/FolderActionsMenu.plugin/Contents/MacOS/FolderActionsMenu
0x16a0d000 - 0x16a0dfff com.apple.SpotLightCM 1.0 (121.20.2)	/System/Library/Contextual Menu Items/SpotlightCM.plugin/Contents/MacOS/SpotlightCM
0x18e69000 - 0x18ebefff com.DivXInc.DivXDecoder 6.0.0	/Library/QuickTime/DivX 6 Decoder.component/Contents/MacOS/DivX 6 Decoder
0x8fe00000 - 0x8fe52fff dyld 45.1	/usr/lib/dyld
0x90000000 - 0x901bbfff libSystem.B.dylib 	/usr/lib/libSystem.B.dylib
0x90213000 - 0x90218fff libmathCommon.A.dylib 	/usr/lib/system/libmathCommon.A.dylib
0x9021a000 - 0x90267fff com.apple.CoreText 1.0.2 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x90292000 - 0x90343fff ATS 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x90372000 - 0x9072cfff com.apple.CoreGraphics 1.258.33 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x907b9000 - 0x90892fff com.apple.CoreFoundation 6.4.6 (368.27)	/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x908db000 - 0x908dbfff com.apple.CoreServices 10.4 (???)	/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x908dd000 - 0x909dffff libicucore.A.dylib 	/usr/lib/libicucore.A.dylib
0x90a39000 - 0x90abdfff libobjc.A.dylib 	/usr/lib/libobjc.A.dylib
0x90ae7000 - 0x90b57fff com.apple.framework.IOKit 1.4 (???)	/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x90b6d000 - 0x90b7ffff libauto.dylib 	/usr/lib/libauto.dylib
0x90b86000 - 0x90e5dfff com.apple.CoreServices.CarbonCore 681.4	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x90ec3000 - 0x90f43fff com.apple.CoreServices.OSServices 4.1	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x90f8d000 - 0x90fcefff com.apple.CFNetwork 129.16	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x90fe3000 - 0x90ffbfff com.apple.WebServices 1.1.2 (1.1.0)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/WebServicesCore.framework/Versions/A/WebServicesCore
0x9100b000 - 0x9108cfff com.apple.SearchKit 1.0.5	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x910d2000 - 0x910fcfff com.apple.Metadata 10.4.4 (121.36)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x9110d000 - 0x9111bfff libz.1.dylib 	/usr/lib/libz.1.dylib
0x9111e000 - 0x912d8fff com.apple.security 4.4 (27566)	/System/Library/Frameworks/Security.framework/Versions/A/Security
0x913d6000 - 0x913dffff com.apple.DiskArbitration 2.1	/System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x913e6000 - 0x9140efff com.apple.SystemConfiguration 1.8.3	/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x91421000 - 0x9142cfff libgcc_s.1.dylib 	/usr/lib/libgcc_s.1.dylib
0x91431000 - 0x91439fff libbsm.dylib 	/usr/lib/libbsm.dylib
0x9143d000 - 0x914b8fff com.apple.audio.CoreAudio 3.0.4	/System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x914f5000 - 0x914f5fff com.apple.ApplicationServices 10.4 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x914f7000 - 0x9152ffff com.apple.AE 1.5 (297)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x9154a000 - 0x91617fff com.apple.ColorSync 4.4.4	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x9166c000 - 0x916fdfff com.apple.print.framework.PrintCore 4.6 (177.13)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x91744000 - 0x917fbfff com.apple.QD 3.10.20 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x91838000 - 0x91896fff com.apple.HIServices 1.5.3 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x918c5000 - 0x918e9fff com.apple.LangAnalysis 1.6.1	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x918fd000 - 0x91922fff com.apple.FindByContent 1.5	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/FindByContent.framework/Versions/A/FindByContent
0x91935000 - 0x91977fff com.apple.LaunchServices 180	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x91993000 - 0x919a7fff com.apple.speech.synthesis.framework 3.3	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x919b5000 - 0x919f5fff com.apple.ImageIO.framework 1.4.7	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x91a0b000 - 0x91ad3fff libcrypto.0.9.7.dylib 	/usr/lib/libcrypto.0.9.7.dylib
0x91b21000 - 0x91b36fff libcups.2.dylib 	/usr/lib/libcups.2.dylib
0x91b3b000 - 0x91b58fff libJPEG.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x91b5d000 - 0x91bccfff libJP2.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib
0x91be3000 - 0x91be7fff libGIF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x91be9000 - 0x91c31fff libRaw.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRaw.dylib
0x91c36000 - 0x91c73fff libTIFF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x91c7a000 - 0x91c93fff libPng.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x91c98000 - 0x91c9bfff libRadiance.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x91c9d000 - 0x91c9dfff com.apple.Accelerate 1.2.2 (Accelerate 1.2.2)	/System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x91c9f000 - 0x91d84fff com.apple.vImage 2.4	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x91d8c000 - 0x91dabfff com.apple.Accelerate.vecLib 3.2.2 (vecLib 3.2.2)	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x91e17000 - 0x91e85fff libvMisc.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x91e90000 - 0x91f25fff libvDSP.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x91f3f000 - 0x924c7fff libBLAS.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x924fa000 - 0x92825fff libLAPACK.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x92855000 - 0x928ddfff com.apple.DesktopServices 1.3.4	/System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x9291e000 - 0x92b49fff com.apple.Foundation 6.4.6 (567.27)	/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x92c67000 - 0x92d45fff libxml2.2.dylib 	/usr/lib/libxml2.2.dylib
0x92d65000 - 0x92e53fff libiconv.2.dylib 	/usr/lib/libiconv.2.dylib
0x92e65000 - 0x92e83fff libGL.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x92e8e000 - 0x92ee8fff libGLU.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x92f06000 - 0x92f06fff com.apple.Carbon 10.4 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x92f08000 - 0x92f1cfff com.apple.ImageCapture 3.0	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x92f34000 - 0x92f44fff com.apple.speech.recognition.framework 3.4	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x92f50000 - 0x92f65fff com.apple.securityhi 2.0 (203)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x92f77000 - 0x92ffefff com.apple.ink.framework 101.2 (69)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x93012000 - 0x9301dfff com.apple.help 1.0.3 (32)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x93027000 - 0x93054fff com.apple.openscripting 1.2.5 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x9306e000 - 0x9307efff com.apple.print.framework.Print 5.0 (190.1)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x9308a000 - 0x930f0fff com.apple.htmlrendering 1.1.2	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x93121000 - 0x93170fff com.apple.NavigationServices 3.4.4 (3.4.3)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x9319e000 - 0x931bbfff com.apple.audio.SoundManager 3.9	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x931cd000 - 0x931dafff com.apple.CommonPanels 1.2.2 (73)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x931e3000 - 0x934f0fff com.apple.HIToolbox 1.4.8 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x9363f000 - 0x9364bfff com.apple.opengl 1.4.7	/System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x93650000 - 0x93670fff com.apple.DirectoryService.Framework 3.1	/System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x936e4000 - 0x936e4fff com.apple.Cocoa 6.4 (???)	/System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x936e6000 - 0x93d19fff com.apple.AppKit 6.4.7 (824.41)	/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x940a6000 - 0x94116fff com.apple.CoreData 80	/System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x9414f000 - 0x94212fff com.apple.audio.toolbox.AudioToolbox 1.4.3	/System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x94264000 - 0x94264fff com.apple.audio.units.AudioUnit 1.4	/System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x94266000 - 0x94419fff com.apple.QuartzCore 1.4.8	/System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x9446c000 - 0x944a9fff libsqlite3.0.dylib 	/usr/lib/libsqlite3.0.dylib
0x944b1000 - 0x94501fff libGLImage.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x94591000 - 0x945d3fff com.apple.vmutils 4.0.2 (93.1)	/System/Library/PrivateFrameworks/vmutils.framework/Versions/A/vmutils
0x94617000 - 0x94633fff com.apple.securityfoundation 2.2 (27710)	/System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x94647000 - 0x9468bfff com.apple.securityinterface 2.2 (27692)	/System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
0x946af000 - 0x946befff libCGATS.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib
0x946c6000 - 0x946d2fff libCSync.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x94718000 - 0x94730fff libRIP.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x94737000 - 0x949ebfff com.apple.QuickTime 7.1.2	/System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x94aaf000 - 0x94b20fff libstdc++.6.dylib 	/usr/lib/libstdc++.6.dylib
0x94b93000 - 0x94bb3fff libmx.A.dylib 	/usr/lib/libmx.A.dylib
0x94cbb000 - 0x94debfff com.apple.AddressBook.framework 4.0.4 (485.1)	/System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x94e7d000 - 0x94e8cfff com.apple.DSObjCWrappers.Framework 1.1	/System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
0x94e94000 - 0x94ec1fff com.apple.LDAPFramework 1.4.1 (69.0.1)	/System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x94ec8000 - 0x94ed8fff libsasl2.2.dylib 	/usr/lib/libsasl2.2.dylib
0x94edc000 - 0x94f0bfff libssl.0.9.7.dylib 	/usr/lib/libssl.0.9.7.dylib
0x94f1b000 - 0x94f38fff libresolv.9.dylib 	/usr/lib/libresolv.9.dylib
0x96111000 - 0x9613afff libxslt.1.dylib 	/usr/lib/libxslt.1.dylib
0x97461000 - 0x97480fff com.apple.vecLib 3.2.2 (vecLib 3.2.2)	/System/Library/Frameworks/vecLib.framework/Versions/A/vecLib
0x97c86000 - 0x97c93fff com.apple.agl 2.5.6 (AGL-2.5.6)	/System/Library/Frameworks/AGL.framework/Versions/A/AGL
0x9978a000 - 0x9a160fff com.apple.QuickTimeComponents.component 7.1.2	/System/Library/QuickTime/QuickTimeComponents.component/Contents/MacOS/QuickTimeComponents
0x9ad94000 - 0x9adbbfff com.apple.QuickTime Plugin.plugin 7.1.2	/Library/Internet Plug-Ins/QuickTime Plugin.plugin/Contents/MacOS/QuickTime Plugin
0x9b144000 - 0x9b17afff com.apple.Syndication 1.0.6 (54)	/System/Library/PrivateFrameworks/Syndication.framework/Versions/A/Syndication
0x9b197000 - 0x9b1a9fff com.apple.SyndicationUI 1.0.6 (54)	/System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI

Model: PowerBook5,4, BootROM 4.8.6f0, 1 processors, PowerPC G4  (1.1), 1.5 GHz, 1 GB
Graphics: ATI Mobility Radeon 9700, ATY,RV360M11, AGP, 128 MB
Memory Module: SODIMM1/J25UPPER, 1 GB, DDR SDRAM, PC2700U-25330
AirPort: AirPort Extreme, 404.2 (3.90.34.0.p16)
Modem: Jump, , V.92, Version 1.0, 
Bluetooth: Version 1.7.5f10, 2 service, 0 devices, 1 incoming serial ports
Network Service: AirPort, AirPort, en1
PCI Card: TXN,PCIXXXX-00, cardbus, PC Card
Parallel ATA Device: MATSHITADVD-R   UJ-825, 
Parallel ATA Device: Hitachi HTS548080M9AT00, 74.53 GB
USB Device: Hub, , Up to 480 Mb/sec, 500 mA
USB Device: Apple Optical USB Mouse, Mitsumi Electric, Up to 1.5 Mb/sec, 500 mA
USB Device: Apple Cinema HD Display, , Up to 1.5 Mb/sec, 500 mA
USB Device: Bluetooth HCI, , Up to 12 Mb/sec, 500 mA
FireWire Device: iSight, Apple Computer, Inc., Up to 400 Mb/sec
FireWire Device: unknown_device, unknown_value, Up to 400 Mb/sec

[David Kilzer (:ddkilzer)]

Another crash with a slightly different stack from earlier today (with a locally-built WebKit again, but I don't recall which revision it was).

**********

Host Name:      David-Kilzers-Computer
Date/Time:      2006-07-08 06:18:50.137 -0500
OS Version:     10.4.7 (Build 8J135)
Report Version: 4

Command: Safari
Path:    /Applications/Safari.app/Contents/MacOS/Safari
Parent:  bash [394]

Version:        2.0.4 (419.3)
Build Version:  1
Project Name:   WebBrowser
Source Version: 4190300

PID:    25214
Thread: 0

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000000

Thread 0 Crashed:
0   <<00000000>> 	0xfffeff20 objc_msgSend_rtp + 32
1   com.apple.WebKit               	0x00365590 -[WebHTMLView(WebPrivate) _updateMouseoverWithEvent:] + 564 (WebHTMLView.m:1118)
2   com.apple.WebKit               	0x0036342c -[WebHTMLView(WebPrivate) _updateMouseoverWithFakeEvent] + 580 (WebHTMLView.m:749)
3   com.apple.Foundation           	0x9294ebf8 __NSFireDelayedPerform + 304
4   com.apple.CoreFoundation       	0x907ef550 __CFRunLoopDoTimer + 184
5   com.apple.CoreFoundation       	0x907dbec8 __CFRunLoopRun + 1680
6   com.apple.CoreFoundation       	0x907db47c CFRunLoopRunSpecific + 268
7   com.apple.HIToolbox            	0x931eb740 RunCurrentEventLoopInMode + 264
8   com.apple.HIToolbox            	0x931eadd4 ReceiveNextEventCommon + 380
9   com.apple.HIToolbox            	0x931eac40 BlockUntilNextEventMatchingListInMode + 96
10  com.apple.AppKit               	0x936eeae4 _DPSNextEvent + 384
11  com.apple.AppKit               	0x936ee7a8 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 116
12  com.apple.Safari               	0x00006740 0x1000 + 22336
13  com.apple.AppKit               	0x936eacec -[NSApplication run] + 472
14  com.apple.AppKit               	0x937db87c NSApplicationMain + 452
15  com.apple.Safari               	0x0005c77c 0x1000 + 374652
16  com.apple.Safari               	0x0005c624 0x1000 + 374308

Thread 1:
0   libSystem.B.dylib              	0x9000b268 mach_msg_trap + 8
1   libSystem.B.dylib              	0x9000b1bc mach_msg + 60
2   com.apple.CoreFoundation       	0x907dbb78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation       	0x907db47c CFRunLoopRunSpecific + 268
4   com.apple.Foundation           	0x92953164 -[NSRunLoop runMode:beforeDate:] + 172
5   com.apple.Foundation           	0x9295309c -[NSRunLoop run] + 76
6   com.apple.WebKit               	0x003b411c +[WebFileDatabase _syncLoop:] + 420 (WebFileDatabase.m:294)
7   com.apple.Foundation           	0x92944194 forkThreadForFunction + 108
8   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 2:
0   libSystem.B.dylib              	0x9000b268 mach_msg_trap + 8
1   libSystem.B.dylib              	0x9000b1bc mach_msg + 60
2   com.apple.CoreFoundation       	0x907dbb78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation       	0x907db47c CFRunLoopRunSpecific + 268
4   com.apple.Foundation           	0x9296b69c +[NSURLConnection(NSURLConnectionInternal) _resourceLoadLoop:] + 264
5   com.apple.Foundation           	0x92944194 forkThreadForFunction + 108
6   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 3:
0   libSystem.B.dylib              	0x9000b268 mach_msg_trap + 8
1   libSystem.B.dylib              	0x9000b1bc mach_msg + 60
2   com.apple.CoreFoundation       	0x907dbb78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation       	0x907db47c CFRunLoopRunSpecific + 268
4   com.apple.Foundation           	0x9296c7dc +[NSURLCache _diskCacheSyncLoop:] + 152
5   com.apple.Foundation           	0x92944194 forkThreadForFunction + 108
6   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 4:
0   libSystem.B.dylib              	0x9002c2e8 semaphore_wait_signal_trap + 8
1   libSystem.B.dylib              	0x90030dcc pthread_cond_wait + 480
2   com.apple.Foundation           	0x9294b300 -[NSConditionLock lockWhenCondition:] + 68
3   com.apple.Syndication          	0x9b14742c -[AsyncDB _run:] + 192
4   com.apple.Foundation           	0x92944194 forkThreadForFunction + 108
5   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 5:
0   libSystem.B.dylib              	0x9001f7ac select + 12
1   com.apple.CoreFoundation       	0x907ee40c __CFSocketManager + 472
2   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 6:
0   libSystem.B.dylib              	0x9002efac kevent + 12
1   com.apple.DesktopServices      	0x92858250 TFSNotificationTask::FSNotificationTaskProc(void*) + 56
2   ...ple.CoreServices.CarbonCore 	0x90bc1900 PrivateMPEntryPoint + 76
3   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 7:
0   libSystem.B.dylib              	0x9002c2e8 semaphore_wait_signal_trap + 8
1   libSystem.B.dylib              	0x90030dcc pthread_cond_wait + 480
2   ...ple.CoreServices.CarbonCore 	0x90bc1af0 MPWaitOnQueue + 224
3   com.apple.DesktopServices      	0x928588cc TNodeSyncTask::SyncTaskProc(void*) + 116
4   ...ple.CoreServices.CarbonCore 	0x90bc1900 PrivateMPEntryPoint + 76
5   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 8:
0   libSystem.B.dylib              	0x9002c2e8 semaphore_wait_signal_trap + 8
1   libSystem.B.dylib              	0x90030dcc pthread_cond_wait + 480
2   com.apple.Foundation           	0x9294b300 -[NSConditionLock lockWhenCondition:] + 68
3   com.apple.AppKit               	0x9378b708 -[NSUIHeartBeat _heartBeatThread:] + 324
4   com.apple.Foundation           	0x92944194 forkThreadForFunction + 108
5   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 9:
0   libSystem.B.dylib              	0x900551a8 semaphore_timedwait_signal_trap + 8
1   libSystem.B.dylib              	0x90071828 pthread_cond_timedwait_relative_np + 556
2   ...ple.CoreServices.CarbonCore 	0x90bf4550 TSWaitOnSemaphoreCommon + 176
3   ...ple.CoreServices.CarbonCore 	0x90bf43a4 AsyncFileThread(void*) + 56
4   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 10:
0   libSystem.B.dylib              	0x9000b268 mach_msg_trap + 8
1   libSystem.B.dylib              	0x9000b1bc mach_msg + 60
2   com.apple.CoreFoundation       	0x907dbb78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation       	0x907db47c CFRunLoopRunSpecific + 268
4   com.apple.Foundation           	0x92953164 -[NSRunLoop runMode:beforeDate:] + 172
5   com.apple.Foundation           	0x9295309c -[NSRunLoop run] + 76
6   com.apple.Safari               	0x0003d5f0 0x1000 + 247280
7   com.apple.Foundation           	0x92944194 forkThreadForFunction + 108
8   libSystem.B.dylib              	0x9002bc28 _pthread_body + 96

Thread 0 crashed with PPC Thread State 64:
  srr0: 0x00000000fffeff20 srr1: 0x000000000000f030                        vrsave: 0x0000000000000000
    cr: 0x44028224          xer: 0x0000000000000007   lr: 0x0000000000365590  ctr: 0x0000000092923630
    r0: 0x0000000090a61798   r1: 0x00000000bfffdbc0   r2: 0x0000000000000000   r3: 0x000000001a7df960
    r4: 0x0000000090a61798   r5: 0x0000000000420900   r6: 0x00000000ffffffff   r7: 0x0000000000000000
    r8: 0x0000000000000000   r9: 0x000000001a7df960  r10: 0x0000000000000081  r11: 0x000000006f581798
   r12: 0x000000001a394540  r13: 0x0000000000000000  r14: 0x0000000000000001  r15: 0x0000000000000001
   r16: 0x0000000000000000  r17: 0x0000000000000001  r18: 0x000000000000d2af  r19: 0x0000000000000000
   r20: 0x0000000010197841  r21: 0x0000000007ceca48  r22: 0x0000000014613158  r23: 0x0000000014613150
   r24: 0x0000000014613040  r25: 0x0000000014613158  r26: 0x0000000000002329  r27: 0x0000000000100108
   r28: 0x0000000090a9cc68  r29: 0x0000000018a88fa0  r30: 0x00000000bfffdbc0  r31: 0x0000000000365378

Binary Images Description:
    0x1000 -    0xdcfff com.apple.Safari 2.0.4 (419.3)	/Applications/Safari.app/Contents/MacOS/Safari
  0x305000 -   0x413fff com.apple.WebKit 420+	/Users/ddkilzer/Projects/Cocoa/WebKit/WebKitBuild/Debug/WebKit.framework/Versions/A/WebKit
 0x1008000 -  0x10dcfff com.apple.JavaScriptCore 420+	/Users/ddkilzer/Projects/Cocoa/WebKit/WebKitBuild/Debug/JavaScriptCore.framework/Versions/A/JavaScriptCore
 0x180b000 -  0x1dfafff com.apple.WebCore 420+	/Users/ddkilzer/Projects/Cocoa/WebKit/WebKitBuild/Debug/WebCore.framework/Versions/A/WebCore
0x17337000 - 0x17337fff com.apple.SpotLightCM 1.0 (121.20.2)	/System/Library/Contextual Menu Items/SpotlightCM.plugin/Contents/MacOS/SpotlightCM
0x17384000 - 0x17386fff com.apple.AutomatorCMM 1.0 (48)	/System/Library/Contextual Menu Items/AutomatorCMM.plugin/Contents/MacOS/AutomatorCMM
0x17389000 - 0x1738dfff com.apple.FolderActionsMenu 1.3	/System/Library/Contextual Menu Items/FolderActionsMenu.plugin/Contents/MacOS/FolderActionsMenu
0x19099000 - 0x190eefff com.DivXInc.DivXDecoder 6.0.0	/Library/QuickTime/DivX 6 Decoder.component/Contents/MacOS/DivX 6 Decoder
0x8fe00000 - 0x8fe52fff dyld 45.1	/usr/lib/dyld
0x90000000 - 0x901bbfff libSystem.B.dylib 	/usr/lib/libSystem.B.dylib
0x90213000 - 0x90218fff libmathCommon.A.dylib 	/usr/lib/system/libmathCommon.A.dylib
0x9021a000 - 0x90267fff com.apple.CoreText 1.0.2 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x90292000 - 0x90343fff ATS 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x90372000 - 0x9072cfff com.apple.CoreGraphics 1.258.33 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x907b9000 - 0x90892fff com.apple.CoreFoundation 6.4.6 (368.27)	/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x908db000 - 0x908dbfff com.apple.CoreServices 10.4 (???)	/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x908dd000 - 0x909dffff libicucore.A.dylib 	/usr/lib/libicucore.A.dylib
0x90a39000 - 0x90abdfff libobjc.A.dylib 	/usr/lib/libobjc.A.dylib
0x90ae7000 - 0x90b57fff com.apple.framework.IOKit 1.4 (???)	/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x90b6d000 - 0x90b7ffff libauto.dylib 	/usr/lib/libauto.dylib
0x90b86000 - 0x90e5dfff com.apple.CoreServices.CarbonCore 681.4	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x90ec3000 - 0x90f43fff com.apple.CoreServices.OSServices 4.1	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x90f8d000 - 0x90fcefff com.apple.CFNetwork 129.16	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x90fe3000 - 0x90ffbfff com.apple.WebServices 1.1.2 (1.1.0)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/WebServicesCore.framework/Versions/A/WebServicesCore
0x9100b000 - 0x9108cfff com.apple.SearchKit 1.0.5	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x910d2000 - 0x910fcfff com.apple.Metadata 10.4.4 (121.36)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x9110d000 - 0x9111bfff libz.1.dylib 	/usr/lib/libz.1.dylib
0x9111e000 - 0x912d8fff com.apple.security 4.4 (27566)	/System/Library/Frameworks/Security.framework/Versions/A/Security
0x913d6000 - 0x913dffff com.apple.DiskArbitration 2.1	/System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x913e6000 - 0x9140efff com.apple.SystemConfiguration 1.8.3	/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x91421000 - 0x9142cfff libgcc_s.1.dylib 	/usr/lib/libgcc_s.1.dylib
0x91431000 - 0x91439fff libbsm.dylib 	/usr/lib/libbsm.dylib
0x9143d000 - 0x914b8fff com.apple.audio.CoreAudio 3.0.4	/System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x914f5000 - 0x914f5fff com.apple.ApplicationServices 10.4 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x914f7000 - 0x9152ffff com.apple.AE 1.5 (297)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x9154a000 - 0x91617fff com.apple.ColorSync 4.4.4	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x9166c000 - 0x916fdfff com.apple.print.framework.PrintCore 4.6 (177.13)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x91744000 - 0x917fbfff com.apple.QD 3.10.20 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x91838000 - 0x91896fff com.apple.HIServices 1.5.3 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x918c5000 - 0x918e9fff com.apple.LangAnalysis 1.6.1	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x918fd000 - 0x91922fff com.apple.FindByContent 1.5	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/FindByContent.framework/Versions/A/FindByContent
0x91935000 - 0x91977fff com.apple.LaunchServices 180	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x91993000 - 0x919a7fff com.apple.speech.synthesis.framework 3.3	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x919b5000 - 0x919f5fff com.apple.ImageIO.framework 1.4.7	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x91a0b000 - 0x91ad3fff libcrypto.0.9.7.dylib 	/usr/lib/libcrypto.0.9.7.dylib
0x91b21000 - 0x91b36fff libcups.2.dylib 	/usr/lib/libcups.2.dylib
0x91b3b000 - 0x91b58fff libJPEG.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x91b5d000 - 0x91bccfff libJP2.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib
0x91be3000 - 0x91be7fff libGIF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x91be9000 - 0x91c31fff libRaw.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRaw.dylib
0x91c36000 - 0x91c73fff libTIFF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x91c7a000 - 0x91c93fff libPng.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x91c98000 - 0x91c9bfff libRadiance.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x91c9d000 - 0x91c9dfff com.apple.Accelerate 1.2.2 (Accelerate 1.2.2)	/System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x91c9f000 - 0x91d84fff com.apple.vImage 2.4	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x91d8c000 - 0x91dabfff com.apple.Accelerate.vecLib 3.2.2 (vecLib 3.2.2)	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x91e17000 - 0x91e85fff libvMisc.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x91e90000 - 0x91f25fff libvDSP.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x91f3f000 - 0x924c7fff libBLAS.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x924fa000 - 0x92825fff libLAPACK.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x92855000 - 0x928ddfff com.apple.DesktopServices 1.3.4	/System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x9291e000 - 0x92b49fff com.apple.Foundation 6.4.6 (567.27)	/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x92c67000 - 0x92d45fff libxml2.2.dylib 	/usr/lib/libxml2.2.dylib
0x92d65000 - 0x92e53fff libiconv.2.dylib 	/usr/lib/libiconv.2.dylib
0x92e65000 - 0x92e83fff libGL.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x92e8e000 - 0x92ee8fff libGLU.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x92f06000 - 0x92f06fff com.apple.Carbon 10.4 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x92f08000 - 0x92f1cfff com.apple.ImageCapture 3.0	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x92f34000 - 0x92f44fff com.apple.speech.recognition.framework 3.4	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x92f50000 - 0x92f65fff com.apple.securityhi 2.0 (203)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x92f77000 - 0x92ffefff com.apple.ink.framework 101.2 (69)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x93012000 - 0x9301dfff com.apple.help 1.0.3 (32)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x93027000 - 0x93054fff com.apple.openscripting 1.2.5 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x9306e000 - 0x9307efff com.apple.print.framework.Print 5.0 (190.1)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x9308a000 - 0x930f0fff com.apple.htmlrendering 1.1.2	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x93121000 - 0x93170fff com.apple.NavigationServices 3.4.4 (3.4.3)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x9319e000 - 0x931bbfff com.apple.audio.SoundManager 3.9	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x931cd000 - 0x931dafff com.apple.CommonPanels 1.2.2 (73)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x931e3000 - 0x934f0fff com.apple.HIToolbox 1.4.8 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x9363f000 - 0x9364bfff com.apple.opengl 1.4.7	/System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x93650000 - 0x93670fff com.apple.DirectoryService.Framework 3.1	/System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x936e4000 - 0x936e4fff com.apple.Cocoa 6.4 (???)	/System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x936e6000 - 0x93d19fff com.apple.AppKit 6.4.7 (824.41)	/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x940a6000 - 0x94116fff com.apple.CoreData 80	/System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x9414f000 - 0x94212fff com.apple.audio.toolbox.AudioToolbox 1.4.3	/System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x94264000 - 0x94264fff com.apple.audio.units.AudioUnit 1.4	/System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x94266000 - 0x94419fff com.apple.QuartzCore 1.4.8	/System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x9446c000 - 0x944a9fff libsqlite3.0.dylib 	/usr/lib/libsqlite3.0.dylib
0x944b1000 - 0x94501fff libGLImage.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x94591000 - 0x945d3fff com.apple.vmutils 4.0.2 (93.1)	/System/Library/PrivateFrameworks/vmutils.framework/Versions/A/vmutils
0x94617000 - 0x94633fff com.apple.securityfoundation 2.2 (27710)	/System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x94647000 - 0x9468bfff com.apple.securityinterface 2.2 (27692)	/System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
0x946af000 - 0x946befff libCGATS.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib
0x946c6000 - 0x946d2fff libCSync.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x94718000 - 0x94730fff libRIP.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x94737000 - 0x949ebfff com.apple.QuickTime 7.1.2	/System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x94aaf000 - 0x94b20fff libstdc++.6.dylib 	/usr/lib/libstdc++.6.dylib
0x94b93000 - 0x94bb3fff libmx.A.dylib 	/usr/lib/libmx.A.dylib
0x94cbb000 - 0x94debfff com.apple.AddressBook.framework 4.0.4 (485.1)	/System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x94e7d000 - 0x94e8cfff com.apple.DSObjCWrappers.Framework 1.1	/System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
0x94e94000 - 0x94ec1fff com.apple.LDAPFramework 1.4.1 (69.0.1)	/System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x94ec8000 - 0x94ed8fff libsasl2.2.dylib 	/usr/lib/libsasl2.2.dylib
0x94edc000 - 0x94f0bfff libssl.0.9.7.dylib 	/usr/lib/libssl.0.9.7.dylib
0x94f1b000 - 0x94f38fff libresolv.9.dylib 	/usr/lib/libresolv.9.dylib
0x96111000 - 0x9613afff libxslt.1.dylib 	/usr/lib/libxslt.1.dylib
0x97461000 - 0x97480fff com.apple.vecLib 3.2.2 (vecLib 3.2.2)	/System/Library/Frameworks/vecLib.framework/Versions/A/vecLib
0x97c86000 - 0x97c93fff com.apple.agl 2.5.6 (AGL-2.5.6)	/System/Library/Frameworks/AGL.framework/Versions/A/AGL
0x9978a000 - 0x9a160fff com.apple.QuickTimeComponents.component 7.1.2	/System/Library/QuickTime/QuickTimeComponents.component/Contents/MacOS/QuickTimeComponents
0x9ad94000 - 0x9adbbfff com.apple.QuickTime Plugin.plugin 7.1.2	/Library/Internet Plug-Ins/QuickTime Plugin.plugin/Contents/MacOS/QuickTime Plugin
0x9b144000 - 0x9b17afff com.apple.Syndication 1.0.6 (54)	/System/Library/PrivateFrameworks/Syndication.framework/Versions/A/Syndication
0x9b197000 - 0x9b1a9fff com.apple.SyndicationUI 1.0.6 (54)	/System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI  

[David Kilzer (:ddkilzer)]

(In reply to comment #0)
> I think Darin might have mentioned a similar problem today in another bug
> comment, but I'm not sure I could find it now.

I was thinking of Bug 9743 Comment #3, but I'm not sure this applies.

[David Kilzer (:ddkilzer)]

And again today:

Date/Time:      2006-07-09 14:37:59.972 -0500
OS Version:     10.4.7 (Build 8J135)
Report Version: 4

Command: Safari
Path:    /Applications/Safari.app/Contents/MacOS/Safari
Parent:  bash [394]

Version:        2.0.4 (419.3)
Build Version:  1
Project Name:   WebBrowser
Source Version: 4190300

PID:    15530
Thread: 0

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_INVALID_ADDRESS (0x0001) at 0x733a7061

Thread 0 Crashed:
0   <<00000000>> 	0xfffeff20 objc_msgSend_rtp + 32
1   com.apple.WebKit         	0x00365494 -[WebHTMLView(WebPrivate) _updateMouseoverWithEvent:] + 564 (WebHTMLView.m:1118)
2   com.apple.WebKit         	0x00363330 -[WebHTMLView(WebPrivate) _updateMouseoverWithFakeEvent] + 580 (WebHTMLView.m:749)
3   com.apple.Foundation     	0x9294ebf8 __NSFireDelayedPerform + 304
4   com.apple.CoreFoundation 	0x907ef550 __CFRunLoopDoTimer + 184
5   com.apple.CoreFoundation 	0x907dbec8 __CFRunLoopRun + 1680
6   com.apple.CoreFoundation 	0x907db47c CFRunLoopRunSpecific + 268
7   com.apple.HIToolbox      	0x931eb740 RunCurrentEventLoopInMode + 264
8   com.apple.HIToolbox      	0x931eadd4 ReceiveNextEventCommon + 380
9   com.apple.HIToolbox      	0x931eac40 BlockUntilNextEventMatchingListInMode + 96
10  com.apple.AppKit         	0x936eeae4 _DPSNextEvent + 384
11  com.apple.AppKit         	0x936ee7a8 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 116
12  com.apple.Safari         	0x00006740 0x1000 + 22336
13  com.apple.AppKit         	0x936eacec -[NSApplication run] + 472
14  com.apple.AppKit         	0x937db87c NSApplicationMain + 452
15  com.apple.Safari         	0x0005c77c 0x1000 + 374652
16  com.apple.Safari         	0x0005c624 0x1000 + 374308

Thread 1:
0   libSystem.B.dylib        	0x9000b268 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000b1bc mach_msg + 60
2   com.apple.CoreFoundation 	0x907dbb78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x907db47c CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x92953164 -[NSRunLoop runMode:beforeDate:] + 172
5   com.apple.Foundation     	0x9295309c -[NSRunLoop run] + 76
6   com.apple.WebKit         	0x003b4020 +[WebFileDatabase _syncLoop:] + 420 (WebFileDatabase.m:294)
7   com.apple.Foundation     	0x92944194 forkThreadForFunction + 108
8   libSystem.B.dylib        	0x9002bc28 _pthread_body + 96

Thread 2:
0   libSystem.B.dylib        	0x9000b268 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000b1bc mach_msg + 60
2   com.apple.CoreFoundation 	0x907dbb78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x907db47c CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x9296b69c +[NSURLConnection(NSURLConnectionInternal) _resourceLoadLoop:] + 264
5   com.apple.Foundation     	0x92944194 forkThreadForFunction + 108
6   libSystem.B.dylib        	0x9002bc28 _pthread_body + 96

Thread 3:
0   libSystem.B.dylib        	0x9000b268 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000b1bc mach_msg + 60
2   com.apple.CoreFoundation 	0x907dbb78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x907db47c CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x9296c7dc +[NSURLCache _diskCacheSyncLoop:] + 152
5   com.apple.Foundation     	0x92944194 forkThreadForFunction + 108
6   libSystem.B.dylib        	0x9002bc28 _pthread_body + 96

Thread 4:
0   libSystem.B.dylib        	0x9002c2e8 semaphore_wait_signal_trap + 8
1   libSystem.B.dylib        	0x90030dcc pthread_cond_wait + 480
2   com.apple.Foundation     	0x9294b300 -[NSConditionLock lockWhenCondition:] + 68
3   com.apple.Syndication    	0x9b14742c -[AsyncDB _run:] + 192
4   com.apple.Foundation     	0x92944194 forkThreadForFunction + 108
5   libSystem.B.dylib        	0x9002bc28 _pthread_body + 96

Thread 5:
0   libSystem.B.dylib        	0x9001f7ac select + 12
1   com.apple.CoreFoundation 	0x907ee40c __CFSocketManager + 472
2   libSystem.B.dylib        	0x9002bc28 _pthread_body + 96

Thread 6:
0   libSystem.B.dylib        	0x9000b268 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000b1bc mach_msg + 60
2   com.apple.CoreFoundation 	0x907dbb78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x907db47c CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x92953164 -[NSRunLoop runMode:beforeDate:] + 172
5   com.apple.Foundation     	0x9295309c -[NSRunLoop run] + 76
6   com.apple.Safari         	0x0003d5f0 0x1000 + 247280
7   com.apple.Foundation     	0x92944194 forkThreadForFunction + 108
8   libSystem.B.dylib        	0x9002bc28 _pthread_body + 96

Thread 0 crashed with PPC Thread State 64:
  srr0: 0x00000000fffeff20 srr1: 0x000000000200f030                        vrsave: 0x0000000000000000
    cr: 0x44028224          xer: 0x0000000000000007   lr: 0x0000000000365494  ctr: 0x0000000092923630
    r0: 0x0000000090a61798   r1: 0x00000000bfffdbc0   r2: 0x00000000733a7061   r3: 0x00000000191c8110
    r4: 0x0000000090a61798   r5: 0x0000000000420900   r6: 0x00000000ffffffff   r7: 0x0000000000000000
    r8: 0x0000000000000000   r9: 0x00000000191c8110  r10: 0x0000000000000081  r11: 0x000000006f581798
   r12: 0x00000000000b37eb  r13: 0x0000000000000000  r14: 0x0000000000000001  r15: 0x0000000000000001
   r16: 0x0000000000000000  r17: 0x0000000000000001  r18: 0x000000000000b093  r19: 0x0000000000000000
   r20: 0x0000000010197841  r21: 0x0000000006f2fa74  r22: 0x0000000015113198  r23: 0x0000000015113190
   r24: 0x0000000015113080  r25: 0x0000000015113198  r26: 0x00000000000050b9  r27: 0x0000000000000100
   r28: 0x0000000090a9cc68  r29: 0x0000000018b876a0  r30: 0x00000000bfffdbc0  r31: 0x000000000036527c

Binary Images Description:
    0x1000 -    0xdcfff com.apple.Safari 2.0.4 (419.3)	/Applications/Safari.app/Contents/MacOS/Safari
  0x305000 -   0x413fff com.apple.WebKit 420+	/Users/ddkilzer/Projects/Cocoa/WebKit/WebKitBuild/Debug/WebKit.framework/Versions/A/WebKit
 0x1008000 -  0x10dcfff com.apple.JavaScriptCore 420+	/Users/ddkilzer/Projects/Cocoa/WebKit/WebKitBuild/Debug/JavaScriptCore.framework/Versions/A/JavaScriptCore
 0x180a000 -  0x1df9fff com.apple.WebCore 420+	/Users/ddkilzer/Projects/Cocoa/WebKit/WebKitBuild/Debug/WebCore.framework/Versions/A/WebCore
0x16e0e000 - 0x16e0efff com.apple.SpotLightCM 1.0 (121.20.2)	/System/Library/Contextual Menu Items/SpotlightCM.plugin/Contents/MacOS/SpotlightCM
0x16f1b000 - 0x16f1dfff com.apple.AutomatorCMM 1.0 (48)	/System/Library/Contextual Menu Items/AutomatorCMM.plugin/Contents/MacOS/AutomatorCMM
0x17076000 - 0x1707afff com.apple.FolderActionsMenu 1.3	/System/Library/Contextual Menu Items/FolderActionsMenu.plugin/Contents/MacOS/FolderActionsMenu
0x8fe00000 - 0x8fe52fff dyld 45.1	/usr/lib/dyld
0x90000000 - 0x901bbfff libSystem.B.dylib 	/usr/lib/libSystem.B.dylib
0x90213000 - 0x90218fff libmathCommon.A.dylib 	/usr/lib/system/libmathCommon.A.dylib
0x9021a000 - 0x90267fff com.apple.CoreText 1.0.2 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x90292000 - 0x90343fff ATS 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x90372000 - 0x9072cfff com.apple.CoreGraphics 1.258.33 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x907b9000 - 0x90892fff com.apple.CoreFoundation 6.4.6 (368.27)	/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x908db000 - 0x908dbfff com.apple.CoreServices 10.4 (???)	/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x908dd000 - 0x909dffff libicucore.A.dylib 	/usr/lib/libicucore.A.dylib
0x90a39000 - 0x90abdfff libobjc.A.dylib 	/usr/lib/libobjc.A.dylib
0x90ae7000 - 0x90b57fff com.apple.framework.IOKit 1.4 (???)	/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x90b6d000 - 0x90b7ffff libauto.dylib 	/usr/lib/libauto.dylib
0x90b86000 - 0x90e5dfff com.apple.CoreServices.CarbonCore 681.4	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x90ec3000 - 0x90f43fff com.apple.CoreServices.OSServices 4.1	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x90f8d000 - 0x90fcefff com.apple.CFNetwork 129.16	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x90fe3000 - 0x90ffbfff com.apple.WebServices 1.1.2 (1.1.0)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/WebServicesCore.framework/Versions/A/WebServicesCore
0x9100b000 - 0x9108cfff com.apple.SearchKit 1.0.5	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x910d2000 - 0x910fcfff com.apple.Metadata 10.4.4 (121.36)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x9110d000 - 0x9111bfff libz.1.dylib 	/usr/lib/libz.1.dylib
0x9111e000 - 0x912d8fff com.apple.security 4.4 (27566)	/System/Library/Frameworks/Security.framework/Versions/A/Security
0x913d6000 - 0x913dffff com.apple.DiskArbitration 2.1	/System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x913e6000 - 0x9140efff com.apple.SystemConfiguration 1.8.3	/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x91421000 - 0x9142cfff libgcc_s.1.dylib 	/usr/lib/libgcc_s.1.dylib
0x91431000 - 0x91439fff libbsm.dylib 	/usr/lib/libbsm.dylib
0x9143d000 - 0x914b8fff com.apple.audio.CoreAudio 3.0.4	/System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x914f5000 - 0x914f5fff com.apple.ApplicationServices 10.4 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x914f7000 - 0x9152ffff com.apple.AE 1.5 (297)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x9154a000 - 0x91617fff com.apple.ColorSync 4.4.4	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x9166c000 - 0x916fdfff com.apple.print.framework.PrintCore 4.6 (177.13)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x91744000 - 0x917fbfff com.apple.QD 3.10.20 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x91838000 - 0x91896fff com.apple.HIServices 1.5.3 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x918c5000 - 0x918e9fff com.apple.LangAnalysis 1.6.1	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x918fd000 - 0x91922fff com.apple.FindByContent 1.5	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/FindByContent.framework/Versions/A/FindByContent
0x91935000 - 0x91977fff com.apple.LaunchServices 180	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x91993000 - 0x919a7fff com.apple.speech.synthesis.framework 3.3	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x919b5000 - 0x919f5fff com.apple.ImageIO.framework 1.4.7	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x91a0b000 - 0x91ad3fff libcrypto.0.9.7.dylib 	/usr/lib/libcrypto.0.9.7.dylib
0x91b21000 - 0x91b36fff libcups.2.dylib 	/usr/lib/libcups.2.dylib
0x91b3b000 - 0x91b58fff libJPEG.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x91b5d000 - 0x91bccfff libJP2.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib
0x91be3000 - 0x91be7fff libGIF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x91be9000 - 0x91c31fff libRaw.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRaw.dylib
0x91c36000 - 0x91c73fff libTIFF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x91c7a000 - 0x91c93fff libPng.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x91c98000 - 0x91c9bfff libRadiance.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x91c9d000 - 0x91c9dfff com.apple.Accelerate 1.2.2 (Accelerate 1.2.2)	/System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x91c9f000 - 0x91d84fff com.apple.vImage 2.4	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x91d8c000 - 0x91dabfff com.apple.Accelerate.vecLib 3.2.2 (vecLib 3.2.2)	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x91e17000 - 0x91e85fff libvMisc.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x91e90000 - 0x91f25fff libvDSP.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x91f3f000 - 0x924c7fff libBLAS.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x924fa000 - 0x92825fff libLAPACK.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x92855000 - 0x928ddfff com.apple.DesktopServices 1.3.4	/System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x9291e000 - 0x92b49fff com.apple.Foundation 6.4.6 (567.27)	/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x92c67000 - 0x92d45fff libxml2.2.dylib 	/usr/lib/libxml2.2.dylib
0x92d65000 - 0x92e53fff libiconv.2.dylib 	/usr/lib/libiconv.2.dylib
0x92e65000 - 0x92e83fff libGL.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x92e8e000 - 0x92ee8fff libGLU.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x92f06000 - 0x92f06fff com.apple.Carbon 10.4 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x92f08000 - 0x92f1cfff com.apple.ImageCapture 3.0	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x92f34000 - 0x92f44fff com.apple.speech.recognition.framework 3.4	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x92f50000 - 0x92f65fff com.apple.securityhi 2.0 (203)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x92f77000 - 0x92ffefff com.apple.ink.framework 101.2 (69)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x93012000 - 0x9301dfff com.apple.help 1.0.3 (32)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x93027000 - 0x93054fff com.apple.openscripting 1.2.5 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x9306e000 - 0x9307efff com.apple.print.framework.Print 5.0 (190.1)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x9308a000 - 0x930f0fff com.apple.htmlrendering 1.1.2	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x93121000 - 0x93170fff com.apple.NavigationServices 3.4.4 (3.4.3)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x9319e000 - 0x931bbfff com.apple.audio.SoundManager 3.9	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x931cd000 - 0x931dafff com.apple.CommonPanels 1.2.2 (73)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x931e3000 - 0x934f0fff com.apple.HIToolbox 1.4.8 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x9363f000 - 0x9364bfff com.apple.opengl 1.4.7	/System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x93650000 - 0x93670fff com.apple.DirectoryService.Framework 3.1	/System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x936e4000 - 0x936e4fff com.apple.Cocoa 6.4 (???)	/System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x936e6000 - 0x93d19fff com.apple.AppKit 6.4.7 (824.41)	/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x940a6000 - 0x94116fff com.apple.CoreData 80	/System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x9414f000 - 0x94212fff com.apple.audio.toolbox.AudioToolbox 1.4.3	/System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x94264000 - 0x94264fff com.apple.audio.units.AudioUnit 1.4	/System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x94266000 - 0x94419fff com.apple.QuartzCore 1.4.8	/System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x9446c000 - 0x944a9fff libsqlite3.0.dylib 	/usr/lib/libsqlite3.0.dylib
0x944b1000 - 0x94501fff libGLImage.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x94591000 - 0x945d3fff com.apple.vmutils 4.0.2 (93.1)	/System/Library/PrivateFrameworks/vmutils.framework/Versions/A/vmutils
0x94617000 - 0x94633fff com.apple.securityfoundation 2.2 (27710)	/System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x94647000 - 0x9468bfff com.apple.securityinterface 2.2 (27692)	/System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
0x946af000 - 0x946befff libCGATS.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib
0x946c6000 - 0x946d2fff libCSync.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x94718000 - 0x94730fff libRIP.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x94aaf000 - 0x94b20fff libstdc++.6.dylib 	/usr/lib/libstdc++.6.dylib
0x94cbb000 - 0x94debfff com.apple.AddressBook.framework 4.0.4 (485.1)	/System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x94e7d000 - 0x94e8cfff com.apple.DSObjCWrappers.Framework 1.1	/System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
0x94e94000 - 0x94ec1fff com.apple.LDAPFramework 1.4.1 (69.0.1)	/System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x94ec8000 - 0x94ed8fff libsasl2.2.dylib 	/usr/lib/libsasl2.2.dylib
0x94edc000 - 0x94f0bfff libssl.0.9.7.dylib 	/usr/lib/libssl.0.9.7.dylib
0x94f1b000 - 0x94f38fff libresolv.9.dylib 	/usr/lib/libresolv.9.dylib
0x96111000 - 0x9613afff libxslt.1.dylib 	/usr/lib/libxslt.1.dylib
0x9b144000 - 0x9b17afff com.apple.Syndication 1.0.6 (54)	/System/Library/PrivateFrameworks/Syndication.framework/Versions/A/Syndication
0x9b197000 - 0x9b1a9fff com.apple.SyndicationUI 1.0.6 (54)	/System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI

Model: PowerBook5,4, BootROM 4.8.6f0, 1 processors, PowerPC G4  (1.1), 1.5 GHz, 1 GB
Graphics: ATI Mobility Radeon 9700, ATY,RV360M11, AGP, 128 MB
Memory Module: SODIMM1/J25UPPER, 1 GB, DDR SDRAM, PC2700U-25330
AirPort: AirPort Extreme, 404.2 (3.90.34.0.p16)
Modem: Jump, , V.92, Version 1.0, 
Bluetooth: Version 1.7.5f10, 2 service, 0 devices, 1 incoming serial ports
Network Service: AirPort, AirPort, en1
PCI Card: TXN,PCIXXXX-00, cardbus, PC Card
Parallel ATA Device: MATSHITADVD-R   UJ-825, 
Parallel ATA Device: Hitachi HTS548080M9AT00, 74.53 GB
USB Device: Hub, , Up to 480 Mb/sec, 500 mA
USB Device: Apple Optical USB Mouse, Mitsumi Electric, Up to 1.5 Mb/sec, 500 mA
USB Device: Apple Cinema HD Display, , Up to 1.5 Mb/sec, 500 mA
USB Device: Bluetooth HCI, , Up to 12 Mb/sec, 500 mA
FireWire Device: iSight, Apple Computer, Inc., Up to 400 Mb/sec
FireWire Device: unknown_device, unknown_value, Up to 400 Mb/sec

[David Kilzer (:ddkilzer)]

Created attachment 9366 [details]
Another crash from 2006-07-11

I'm hating myself for not putting the other crash logs in attachments now, so here is another example of the same crash as an attachment.

This time, though, I modified line 1118 in WebHTMLView.m from this:

1118: NSRect visibleRect = [[[[lastHitView _frame] frameView] _scrollView] documentVisibleRect];

To this:

1118: WebFrame* frame = [lastHitView _frame];
1119: WebFrameView* frameView = [frame frameView];
1120: NSScrollView* scrollView = [frameView _scrollView];
1121: NSRect visibleRect = [scrollView documentVisibleRect];

The crash log still notes line 1118, which means it's failing on the first call.  I don't have any idea what "objc_msgSend_rtp" means, though.  Looks like a Very Bad Thing(tm) is happening with an internal ObjC method.

[David Kilzer (:ddkilzer)]

(In reply to comment #4)
> I don't have any idea what "objc_msgSend_rtp" means, though.  Looks like
> a Very Bad Thing(tm) is happening with an internal ObjC method.

Doing some Google research, this points to an object either being over-released:

http://www.cocoabuilder.com/archive/message/cocoa/2005/6/10/138462

Or being under-retained:

http://www.cocoabuilder.com/archive/message/cocoa/2005/12/24/153164

I'm not sure if this helps or not.  I guess I should review where _frame is being retained and released to find out.  (This only happens on reloads, so it may be some kind of race condition.)  Should I run WebKit+Safari with MallocScribble on until it crashes again?

Since I'm seeing this bug intermittently (although I can't reproduce it on demand), I'm marking this as a regression and a P1 with the NeedsRadar keyword.

(In reply to comment #4)
> 1118: WebFrame* frame = [lastHitView _frame];
> 
> The crash log still notes line 1118, which means it's failing on the first
> call.  I don't have any idea what "objc_msgSend_rtp" means, though.  Looks like
> a Very Bad Thing(tm) is happening with an internal ObjC method.

It most likely means that lastHitView points to a deallocated object. Enabling zombies might help with debugging this crash.
See http://developer.apple.com/technotes/tn2004/tn2124.html#SECFOUNDATION

Bug 9850 might be related.

[Alice Liu]

<rdar://problem/4622601>

Sometimes I start getting these in the console, one per movement of the mouse over the affected window:

2006-07-12 10:21:44.714 Safari[4187] Exception raised during posting of notification.  Ignored.  exception: *** -[NSToolbarItemViewer _frame]: selector not recognized [self = 0x19b580b0]
2006-07-12 10:21:44.731 Safari[4187] *** -[NSToolbarItemViewer _frame]: selector not recognized [self = 0x19b580b0]

Again, looks like the lastHitView has been released and a different object (NSToolbarItemViewer) has taken its place.

This crash can happen after those situations where -[WebHTMLView close] is called a second time. The second time it's called (from -dealloc), it returns immediately, but by that time, things that -close cleans up could have gotten dirty again. Before r15106, the cleanup was done unconditionally in -dealloc. The real solution is to make sure no "dirtying" takes place when _private->closed is true. A quick hackish fix is to change -close to do its thing unconditionally.

Created attachment 9402 [details]
Possible fix (with logging)

Comment on attachment 9402 [details]
Possible fix (with logging)

David Kilzer and I applied the patch locally, and so far both of us have gotten the "_private->closed" condition logged multiple times, but the crash doesn't happen (nor bug 9850 or the "selector not recognized" exceptions).

[David Kilzer (:ddkilzer)]

(In reply to comment #12)
> (From update of attachment 9402 [details] [edit])
> David Kilzer and I applied the patch locally, and so far both of us have gotten
> the "_private->closed" condition logged multiple times, but the crash doesn't
> happen (nor bug 9850 or the "selector not recognized" exceptions).

And one action in Safari (like a "Back" button hit or a page reload) generates tens (if not over 100) log messages to the console.

Created attachment 9430 [details]
Return immediately from _updateMouseoverWithEvent when already closed

I'm pretty sure now that this is the fix.

[Darin Adler]

Comment on attachment 9430 [details]
Return immediately from _updateMouseoverWithEvent when already closed

r=me

[Beth Dakin]

I committed this with r15416

[David Kilzer (:ddkilzer)]

*sigh*  Reopening bug.  I just got another similar crash today.  Crash log and details up next.

[David Kilzer (:ddkilzer)]

Comment on attachment 9430 [details]
Return immediately from _updateMouseoverWithEvent when already closed

Clearing darin's r+ on committed patch since this bug has been reopened.

[David Kilzer (:ddkilzer)]

Created attachment 9815 [details]
Crash log from locally-built debug build of r15751

In this crash, I had right-clicked on a tab and selected "Reload All Tabs".  There were four tabs in the set that were originally opened via "Open in Tabs" from the Bookmarks menu.  The first URL is a saved Bugzilla search, so I will post the actual search rather than the saved one (since no one else will be able to access it).

1. http://bugzilla.opendarwin.org/buglist.cgi?query_format=advanced&short_desc_type=allwordssubstr&short_desc=&product=WebKit&component=Accessibility&component=CSS&component=Drosera&component=Evangelism&component=Forms&component=Frames&component=History&component=HTML+DOM&component=HTML+Editing&component=Images&component=Java&component=JavaScriptCore&component=JavaScriptGlue&component=Layout+and+Rendering&component=New+Bugs&component=Page+Loading&component=PDF&component=Platform&component=Plug-ins&component=Printing&component=Reindeer&component=SVG&component=Tables&component=Text&component=Tools&component=Web+Inspector&component=Web+Template+Framework&component=WebCore+JavaScript&component=WebCore+Misc.&component=WebKit+API&component=WebKit+Misc.&component=WebKit+Website&component=XML&component=XML+DOM&version=312.x&version=412&version=412.x&version=416.x&version=417.x&version=418.x&version=419.x&version=420%2B+%28nightly%29&long_desc_type=substring&long_desc=&bug_file_loc_type=allwordssubstr&bug_file_loc=&keywords_type=allwords&keywords=&emailassigned_to1=1&emailtype1=substring&email1=&emailassigned_to2=1&emailreporter2=1&emailcc2=1&emailtype2=substring&email2=&bugidtype=include&bug_id=&votes=&chfieldfrom=&chfieldto=Now&chfieldvalue=&cmdtype=doit&order=Reuse+same+sort+as+last+time&query_based_on=WebKit+Daily+Changes&field0-0-0=%28TO_DAYS%28NOW%28%29%29+-+TO_DAYS%28bugs.delta_ts%29%29&type0-0-0=lessthan&value0-0-0=1

2. http://build.webkit.org/

3. http://cia.navi.cx/stats/project/webkit

4. http://www.opendarwin.org/pipermail/webkit-unassigned/2006-August/date.html

This was not the first time I had reloaded the tab set.  After selecting "Reload All Tabs" from the contextual menu, I did use Cmd-Tab to switch to another application (probably Mail.app).  The crash either started just before or just after I switched since I noticed a CPU spike, then Activity Monitor's process list had "crashreport..." listed in it.

[David Kilzer (:ddkilzer)]

(In reply to comment #19)
> Created an attachment (id=9815) [edit]
> Crash log from locally-built debug build of r15751

And for what it's worth, I right-clicked on Tab #4 to get the contextual menu, and Tab #4 was currently being displayed when I reloaded the tabs.

I think now that the only short term fix is to close unconditionally (or just set _private->closed to NO prior to calling [self close]).

[Timothy Hatcher]

In [WebHTMLView close] I think we need to call:

[NSObject cancelPreviousPerformRequestsWithTarget:self selector:@selector(_updateMouseoverWithFakeEvent) object:nil];

Since _updateMouseoverWithFakeEvent is being fired from __NSFireDelayedPerform.

[Timothy Hatcher]

We should cancel other delayed selector calls too.

_updateActiveState and _delayedEndPrintMode:

[Darin Adler]

Tim's comments are definitely pointers in the right direction. We need to stop any timers. We also need to make sure that code (JavaScript, etc.) running in other WebView instances will not find this frame even after it's closed.

[David Kilzer (:ddkilzer)]

(In reply to comment #19)
> Created an attachment (id=9815) [edit]
> Crash log from locally-built debug build of r15751

I haven't had a crash involving _updateMouseoverWithEvent: since this one on 2006-08-02.  Closing.