106828 2013-01-14 14:41:03 -0800 [Microdata] REGRESSION(r138725): Causes crash in chromium port 2013-01-14 15:06:53 -0800 1 1 1 Unclassified WebKit DOM 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 arko arko abarth haraken japhet rniwa webkit.review.bot oldest_to_newest 806639 0 arko 2013-01-14 14:41:03 -0800 Test : <div id="testDiv" itemscope><div itemprop="bar"> </div></div> <script type="text/javascript"> var testDiv = document.getElementById("testDiv"); alert(testDiv.properties['bar']); </script> Backtrace:: 0x0000555559a2c33b in v8::internal::Handle<v8::internal::Object>::operator* (this=0x7fffd93143c0) at ../../v8/src/handles-inl.h:65 65 ASSERT(reinterpret_cast<Address>(*location_) != kHandleZapValue); (gdb) bt #0 0x0000555559a2c33b in v8::internal::Handle<v8::internal::Object>::operator* (this=0x7fffd93143c0) at ../../v8/src/handles-inl.h:65 #1 0x0000555559a2d1b2 in v8::internal::Handle<v8::internal::Object>::operator-> (this=0x7fffd93143c0) at ../../v8/src/handles.h:64 #2 0x0000555559bec891 in v8::internal::JSObject::GetPropertyWithInterceptor (this=0x346836f807d9, receiver=0x346836f807d9, name=0x21599ca2b2a1, attributes=0x7fffd93145ac) at ../../v8/src/objects.cc:10865 #3 0x0000555559bc65d6 in v8::internal::Object::GetProperty (this=0x346836f807d9, receiver=0x346836f807d9, result=0x7fffd93145d0, name=0x21599ca2b2a1, attributes=0x7fffd93145ac) at ../../v8/src/objects.cc:670 #4 0x0000555559bc5f3c in v8::internal::Object::GetProperty (object=..., receiver=..., result=0x7fffd93145d0, key=..., attributes=0x7fffd93145ac) at ../../v8/src/objects.cc:596 #5 0x0000555559b5137a in v8::internal::LoadIC::Load (this=0x7fffd9314670, state=v8::internal::UNINITIALIZED, object=..., name=...) at ../../v8/src/ic.cc:943 #6 0x0000555559b56b50 in v8::internal::LoadIC_Miss (args=..., isolate=0x7ffff7ea2020) at ../../v8/src/ic.cc:2189 #7 0x0000108caf20654e in ?? () #8 0x0000108caf2064a1 in ?? () #9 0x00007fffd93146b0 in ?? () #10 0x00007fffd9314700 in ?? () #11 0x0000108caf244409 in ?? () #12 0x000021599ca2b2a1 in ?? () #13 0x0000346836f807d9 in ?? () #14 0x0000077bf1d73679 in ?? () #15 0x0000077bf1d04121 in ?? () #16 0x000009f390140921 in ?? () #17 0x0000077bf1d5c1f1 in ?? () #18 0x00007fffd9314738 in ?? () #19 0x0000108caf225467 in ?? () #20 0x0000077bf1d737b1 in ?? () #21 0x000009f390140921 in ?? () #22 0x0000108caf2253a1 in ?? () #23 0x0000000700000000 in ?? () #24 0x0000000000000000 in ?? () 806657 1 182633 arko 2013-01-14 14:55:03 -0800 Created attachment 182633 Patch 806669 2 arko 2013-01-14 15:06:53 -0800 Committed r139673: <http://trac.webkit.org/changeset/139673> 182633 2013-01-14 14:55:03 -0800 2013-01-14 14:59:52 -0800 Patch bug-106828-20130114145203.patch text/plain 3988 arko SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDEzOTY2OCkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE3IEBACisyMDEzLTAxLTE0ICBBcmtvIFNh aGEgIDxhcmtvQG1vdG9yb2xhLmNvbT4KKworICAgICAgICBNaWNyb2RhdGE6IFJFR1JFU1NJT04o cjEzODcyNSk6IENhdXNlcyBjcmFzaCBpbiBjaHJvbWl1bSBwb3J0CisgICAgICAgIGh0dHBzOi8v YnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xMDY4MjgKKworICAgICAgICBSZXZpZXdl ZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBXZSBzaG91bGQgaG9sZCBQcm9wZXJ0eU5v ZGVMaXN0IGluIFJlZlB0cjxQcm9wZXJ0eU5vZGVMaXN0Pi4KKworICAgICAgICBUZXN0OiBmYXN0 L2RvbS9NaWNyb0RhdGEvcHJvcGVydGllc2NvbGxlY3Rpb24tY3Jhc2guaHRtbAorCisgICAgICAg ICogYmluZGluZ3MvdjgvY3VzdG9tL1Y4SFRNTENvbGxlY3Rpb25DdXN0b20uY3BwOgorICAgICAg ICAoV2ViQ29yZTo6VjhIVE1MQ29sbGVjdGlvbjo6bmFtZWRQcm9wZXJ0eUdldHRlcik6CisKIDIw MTMtMDEtMTQgIEFsZWMgRmxldHQgIDxhbGVjZmxldHRAY2hyb21pdW0ub3JnPgogCiAgICAgICAg IEluZGV4ZWREQjogUmVtb3ZlIElEQk9iamVjdFN0b3JlL0luZGV4QmFja2VuZEltcGwgYW5kIHN1 cHBvcnQgZnVuY3Rpb25zCkluZGV4OiBTb3VyY2UvV2ViQ29yZS9iaW5kaW5ncy92OC9jdXN0b20v VjhIVE1MQ29sbGVjdGlvbkN1c3RvbS5jcHAKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNlL1dlYkNvcmUv YmluZGluZ3MvdjgvY3VzdG9tL1Y4SFRNTENvbGxlY3Rpb25DdXN0b20uY3BwCShyZXZpc2lvbiAx Mzk2NjgpCisrKyBTb3VyY2UvV2ViQ29yZS9iaW5kaW5ncy92OC9jdXN0b20vVjhIVE1MQ29sbGVj dGlvbkN1c3RvbS5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTU0LDEwICs1NCwxMCBAQCB2ODo6SGFu ZGxlPHY4OjpWYWx1ZT4gVjhIVE1MQ29sbGVjdGlvbjo6CiAgICAgSFRNTENvbGxlY3Rpb24qIGlt cCA9IFY4SFRNTENvbGxlY3Rpb246OnRvTmF0aXZlKGluZm8uSG9sZGVyKCkpOwogI2lmIEVOQUJM RShNSUNST0RBVEEpCiAgICAgaWYgKGltcC0+dHlwZSgpID09IEl0ZW1Qcm9wZXJ0aWVzKSB7Ci0g ICAgICAgIFByb3BlcnR5Tm9kZUxpc3QqIGl0ZW0gPSBzdGF0aWNfY2FzdDxIVE1MUHJvcGVydGll c0NvbGxlY3Rpb24qPihpbXApLT5wcm9wZXJ0eU5vZGVMaXN0KHRvV2ViQ29yZUF0b21pY1N0cmlu ZyhuYW1lKSkuZ2V0KCk7CisgICAgICAgIFJlZlB0cjxQcm9wZXJ0eU5vZGVMaXN0PiBpdGVtID0g c3RhdGljX2Nhc3Q8SFRNTFByb3BlcnRpZXNDb2xsZWN0aW9uKj4oaW1wKS0+cHJvcGVydHlOb2Rl TGlzdCh0b1dlYkNvcmVBdG9taWNTdHJpbmcobmFtZSkpOwogICAgICAgICBpZiAoIWl0ZW0pCiAg ICAgICAgICAgICByZXR1cm4gdjhVbmRlZmluZWQoKTsKLSAgICAgICAgcmV0dXJuIHRvVjgoaXRl bSwgaW5mby5Ib2xkZXIoKSwgaW5mby5HZXRJc29sYXRlKCkpOworICAgICAgICByZXR1cm4gdG9W OChpdGVtLnJlbGVhc2UoKSwgaW5mby5Ib2xkZXIoKSwgaW5mby5HZXRJc29sYXRlKCkpOwogICAg IH0KICNlbmRpZgogICAgIE5vZGUqIGl0ZW0gPSBpbXAtPm5hbWVkSXRlbSh0b1dlYkNvcmVBdG9t aWNTdHJpbmcobmFtZSkpOwpJbmRleDogTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCj09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0K LS0tIExheW91dFRlc3RzL0NoYW5nZUxvZwkocmV2aXNpb24gMTM5NjY4KQorKysgTGF5b3V0VGVz dHMvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBAIC0xLDMgKzEsMTMgQEAKKzIwMTMtMDEtMTQg IEFya28gU2FoYSAgPGFya29AbW90b3JvbGEuY29tPgorCisgICAgICAgIE1pY3JvZGF0YTogUkVH UkVTU0lPTihyMTM4NzI1KTogQ2F1c2VzIGNyYXNoIGluIGNocm9taXVtIHBvcnQKKyAgICAgICAg aHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTEwNjgyOAorCisgICAgICAg IFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgICogZmFzdC9kb20vTWljcm9E YXRhL3Byb3BlcnRpZXNjb2xsZWN0aW9uLWNyYXNoLWV4cGVjdGVkLnR4dDogQWRkZWQuCisgICAg ICAgICogZmFzdC9kb20vTWljcm9EYXRhL3Byb3BlcnRpZXNjb2xsZWN0aW9uLWNyYXNoLmh0bWw6 IEFkZGVkLgorCiAyMDEzLTAxLTE0ICBFbWlsIEEgRWtsdW5kICA8ZWFlQGNocm9taXVtLm9yZz4K IAogICAgICAgICBVbnJldmlld2VkIGNocm9taXVtIG1hYyByZWJhc2VsaW5lIGZvciByMTM5NjU5 LgpJbmRleDogTGF5b3V0VGVzdHMvZmFzdC9kb20vTWljcm9EYXRhL3Byb3BlcnRpZXNjb2xsZWN0 aW9uLWNyYXNoLWV4cGVjdGVkLnR4dAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9mYXN0L2Rv bS9NaWNyb0RhdGEvcHJvcGVydGllc2NvbGxlY3Rpb24tY3Jhc2gtZXhwZWN0ZWQudHh0CShyZXZp c2lvbiAwKQorKysgTGF5b3V0VGVzdHMvZmFzdC9kb20vTWljcm9EYXRhL3Byb3BlcnRpZXNjb2xs ZWN0aW9uLWNyYXNoLWV4cGVjdGVkLnR4dAkod29ya2luZyBjb3B5KQpAQCAtMCwwICsxLDExIEBA CitUaGlzIHRlc3QgaXMgc3VjY2Vzc2Z1bCBpZiBpdCBkb2VzIG5vdCBjcmFzaC4KKworT24gc3Vj Y2VzcywgeW91IHdpbGwgc2VlIGEgc2VyaWVzIG9mICJQQVNTIiBtZXNzYWdlcywgZm9sbG93ZWQg YnkgIlRFU1QgQ09NUExFVEUiLgorCisKK1BBU1MgdGVzdERpdi5wcm9wZXJ0aWVzWydiYXInXSA9 PSAnW29iamVjdCBQcm9wZXJ0eU5vZGVMaXN0XScgaXMgdHJ1ZQorUEFTUyB0ZXN0RGl2LnByb3Bl cnRpZXNbJ2JhciddLmxlbmd0aCBpcyAxCitQQVNTIHN1Y2Nlc3NmdWxseVBhcnNlZCBpcyB0cnVl CisKK1RFU1QgQ09NUExFVEUKKwpJbmRleDogTGF5b3V0VGVzdHMvZmFzdC9kb20vTWljcm9EYXRh L3Byb3BlcnRpZXNjb2xsZWN0aW9uLWNyYXNoLmh0bWwKPT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVz dHMvZmFzdC9kb20vTWljcm9EYXRhL3Byb3BlcnRpZXNjb2xsZWN0aW9uLWNyYXNoLmh0bWwJKHJl dmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9mYXN0L2RvbS9NaWNyb0RhdGEvcHJvcGVydGllc2Nv bGxlY3Rpb24tY3Jhc2guaHRtbAkod29ya2luZyBjb3B5KQpAQCAtMCwwICsxLDE4IEBACis8IURP Q1RZUEUgaHRtbD4KKzxodG1sPgorPGhlYWQ+Cis8c2NyaXB0IHNyYz0iLi4vLi4vanMvcmVzb3Vy Y2VzL2pzLXRlc3QtcHJlLmpzIj48L3NjcmlwdD4KKzwvaGVhZD4KKzxib2R5PgorPGRpdiBpZD0i dGVzdERpdiIgaXRlbXNjb3BlPjxkaXYgaXRlbXByb3A9ImJhciI+IDwvZGl2PjwvZGl2PgorPHNj cmlwdD4KK2Rlc2NyaXB0aW9uKCJUaGlzIHRlc3QgaXMgc3VjY2Vzc2Z1bCBpZiBpdCBkb2VzIG5v dCBjcmFzaC4iKTsKK3ZhciB0ZXN0RGl2ID0gZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoInRlc3RE aXYiKTsKKworc2hvdWxkQmVUcnVlKCJ0ZXN0RGl2LnByb3BlcnRpZXNbJ2JhciddID09ICdbb2Jq ZWN0IFByb3BlcnR5Tm9kZUxpc3RdJyIpOworc2hvdWxkQmUoInRlc3REaXYucHJvcGVydGllc1sn YmFyJ10ubGVuZ3RoIiwgIjEiKTsKKzwvc2NyaXB0PgorPHNjcmlwdCBzcmM9Ii4uLy4uL2pzL3Jl c291cmNlcy9qcy10ZXN0LXBvc3QuanMiPjwvc2NyaXB0PgorPC9ib2R5PgorPC9odG1sPgorCg==