10190 2006-08-01 13:44:39 -0700 REGRESSION: Repro crash when navigating away from an image document that hasn't finished loading 2006-10-01 02:15:45 -0700 1 1 1 Unclassified WebKit Layout and Rendering 420+ Mac OS X 10.4 RESOLVED FIXED Regression P1 Normal --- 1 mitz webkit-unassigned oldest_to_newest 51344 0 mitz 2006-08-01 13:44:39 -0700 You need a slow-loading image in order to reporduce this crash. Open the image URL, and when you start seeing part of the image, but before it finishes loading, go to a different (fast-loading) URL. As the new document is received, you get a crash in RenderBox::calcWidth(), due to dereferencing a null view() pointer. I have a patch, but no test yet. 51345 1 9800 mitz 2006-08-01 13:47:02 -0700 Created attachment 9800 Patch, still no test or change log Other classes' imageChanged() implementations seem safe. 56460 2 10766 mitz 2006-09-25 14:28:08 -0700 Created attachment 10766 Same old patch, but with a change log I tried to make an http+navigationController test for this, but with the current DumpRenderTree functionality (and even with some additions) I couldn't get it to crash. 56463 3 10766 darin 2006-09-25 14:34:17 -0700 Comment on attachment 10766 Same old patch, but with a change log r=me 56864 4 ap 2006-10-01 02:15:45 -0700 Committed revision 16697. 9800 2006-08-01 13:47:02 -0700 2006-09-25 14:28:08 -0700 Patch, still no test or change log 10190_r0.patch text/plain 473 mitz SW5kZXg6IFdlYkNvcmUvcmVuZGVyaW5nL1JlbmRlckltYWdlLmNwcAo9PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBX ZWJDb3JlL3JlbmRlcmluZy9SZW5kZXJJbWFnZS5jcHAJKHJldmlzaW9uIDE1NzM1KQorKysgV2Vi Q29yZS9yZW5kZXJpbmcvUmVuZGVySW1hZ2UuY3BwCSh3b3JraW5nIGNvcHkpCkBAIC05NSw2ICs5 NSw5IEBAIHZvaWQgUmVuZGVySW1hZ2U6OnNldENhY2hlZEltYWdlKENhY2hlZEkKIAogdm9pZCBS ZW5kZXJJbWFnZTo6aW1hZ2VDaGFuZ2VkKENhY2hlZEltYWdlKiBvKQogeworICAgIGlmIChkb2N1 bWVudEJlaW5nRGVzdHJveWVkKCkpCisgICAgICAgIHJldHVybjsKKwogICAgIGlmIChvICE9IG1f Y2FjaGVkSW1hZ2UpIHsKICAgICAgICAgUmVuZGVyUmVwbGFjZWQ6OmltYWdlQ2hhbmdlZChvKTsK ICAgICAgICAgcmV0dXJuOwo= 10766 2006-09-25 14:28:08 -0700 2006-09-25 14:34:17 -0700 Same old patch, but with a change log 10190_r1.patch text/plain 1070 mitz SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n CShyZXZpc2lvbiAxNjU2MCkKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA IC0xLDMgKzEsMTMgQEAKKzIwMDYtMDktMjUgIE1pdHogUGV0dGVsICA8b3BlbmRhcndpbi5vcmdA bWl0enBldHRlbC5jb20+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisK KyAgICAgICAgTm8gdGVzdCBjYXNlIGFkZGVkIChwcm9iYWJseSByZXF1aXJlcyBuZXcgRHVtcFJl bmRlclRyZWUgZnVuY3Rpb25hbGl0eSkKKworICAgICAgICAqIHJlbmRlcmluZy9SZW5kZXJJbWFn ZS5jcHA6CisgICAgICAgIChXZWJDb3JlOjpSZW5kZXJJbWFnZTo6aW1hZ2VDaGFuZ2VkKTogQWRk ZWQgZWFybHkgcmV0dXJuIGlmIHRoZSBkb2N1bWVudCBpcworICAgICAgICBiZWluZyBkZXN0cm95 ZWQuCisKIDIwMDYtMDktMjUgIEFsZXhleSBQcm9za3VyeWFrb3YgIDxhcEBueXBvcC5jb20+CiAK ICAgICAgICAgUmV2aWV3ZWQgYnkgRXJpYy4KSW5kZXg6IFdlYkNvcmUvcmVuZGVyaW5nL1JlbmRl ckltYWdlLmNwcAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09Ci0tLSBXZWJDb3JlL3JlbmRlcmluZy9SZW5kZXJJbWFnZS5j cHAJKHJldmlzaW9uIDE2NTU4KQorKysgV2ViQ29yZS9yZW5kZXJpbmcvUmVuZGVySW1hZ2UuY3Bw CSh3b3JraW5nIGNvcHkpCkBAIC05Niw2ICs5Niw5IEBAIHZvaWQgUmVuZGVySW1hZ2U6OnNldENh Y2hlZEltYWdlKENhY2hlZEkKIAogdm9pZCBSZW5kZXJJbWFnZTo6aW1hZ2VDaGFuZ2VkKENhY2hl ZEltYWdlKiBvKQogeworICAgIGlmIChkb2N1bWVudEJlaW5nRGVzdHJveWVkKCkpCisgICAgICAg IHJldHVybjsKKwogICAgIGlmIChvICE9IG1fY2FjaGVkSW1hZ2UpIHsKICAgICAgICAgUmVuZGVy UmVwbGFjZWQ6OmltYWdlQ2hhbmdlZChvKTsKICAgICAgICAgcmV0dXJuOwo=