<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>10886</bug_id>
          
          <creation_ts>2006-09-16 05:39:43 -0700</creation_ts>
          <short_desc>REGRESSION (r16387): Reproducible crash when mousing over HTML document</short_desc>
          <delta_ts>2006-09-16 08:05:06 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebCore Misc.</component>
          <version>420+</version>
          <rep_platform>Mac</rep_platform>
          <op_sys>OS X 10.4</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>Regression</keywords>
          <priority>P1</priority>
          <bug_severity>Critical</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>mitz</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>kevin</cc>
    
    <cc>sam</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>55651</commentid>
    <comment_count>0</comment_count>
    <who name="">mitz</who>
    <bug_when>2006-09-16 05:39:43 -0700</bug_when>
    <thetext>Safari crashes as soon as you mouse over an HTML document. The reason appears to be that the auto-generated -[DOMNode ownerDocument] calls Node::ownerDocument(), which returns 0 for the document itself. The old version in called Node::document(). You should keep (or generate) that custom behavior.

Thread 0 Crashed:
0    WebCore::Document::frame() const + 28 (Document.cpp:773)
1    +[WebCoreFrameBridge bridgeForDOMDocument:] + 76 (WebCoreFrameBridge.mm:459)
2    -[DOMNode(WebDOMNodeOperations) _bridge] + 112 (WebDOMOperations.m:45)
3    -[DOMDocument(WebDOMDocumentOperations) webFrame] + 64 (WebDOMOperations.m:89)
4    -[WebHTMLView(WebDocumentInternalProtocols) elementAtPoint:allowShadowContent:] + 244 (WebHTMLView.m:5835)
5    -[WebHTMLView(WebDocumentInternalProtocols) elementAtPoint:] + 84 (WebHTMLView.m:5826)
6    -[WebHTMLView(WebPrivate) _updateMouseoverWithEvent:] + 1492 (WebHTMLView.m:1192)
7    -[WebHTMLView(WebPrivate) _updateMouseoverWithFakeEvent] + 580 (WebHTMLView.m:800)
8    __NSFireDelayedPerform + 304
9    __CFRunLoopDoTimer + 184</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>55655</commentid>
    <comment_count>1</comment_count>
      <attachid>10588</attachid>
    <who name="Sam Weinig">sam</who>
    <bug_when>2006-09-16 07:27:46 -0700</bug_when>
    <thetext>Created attachment 10588
patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>55656</commentid>
    <comment_count>2</comment_count>
      <attachid>10588</attachid>
    <who name="Sam Weinig">sam</who>
    <bug_when>2006-09-16 07:29:15 -0700</bug_when>
    <thetext>Comment on attachment 10588
patch

oops, thats not right</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>55657</commentid>
    <comment_count>3</comment_count>
      <attachid>10589</attachid>
    <who name="Sam Weinig">sam</who>
    <bug_when>2006-09-16 07:33:26 -0700</bug_when>
    <thetext>Created attachment 10589
patch without the type</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>55661</commentid>
    <comment_count>4</comment_count>
    <who name="">mitz</who>
    <bug_when>2006-09-16 07:52:49 -0700</bug_when>
    <thetext>*** Bug 10888 has been marked as a duplicate of this bug. ***</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>55663</commentid>
    <comment_count>5</comment_count>
      <attachid>10589</attachid>
    <who name="Anders Carlsson">andersca</who>
    <bug_when>2006-09-16 08:00:53 -0700</bug_when>
    <thetext>Comment on attachment 10589
patch without the type

Could you file a new bug about the incorrect behavior and reference the url in the FIXME comment?

Otherwise r=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>55665</commentid>
    <comment_count>6</comment_count>
    <who name="Sam Weinig">sam</who>
    <bug_when>2006-09-16 08:05:06 -0700</bug_when>
    <thetext>Landed in r16391.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>10588</attachid>
            <date>2006-09-16 07:27:46 -0700</date>
            <delta_ts>2006-09-16 07:29:15 -0700</delta_ts>
            <desc>patch</desc>
            <filename>autoDOMNodeFix.diff</filename>
            <type>text/plain</type>
            <size>2389</size>
            <attacher name="Sam Weinig">sam</attacher>
            
              <data encoding="base64">SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n
CShyZXZpc2lvbiAxNjM5MCkKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA
IC0xLDMgKzEsMTYgQEAKKzIwMDYtMDktMTYgIFNhbSBXZWluaWcgIDxzYW0ud2VpbmlnQGdtYWls
LmNvbT4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBG
aXggZm9yIGh0dHA6Ly9idWd6aWxsYS5vcGVuZGFyd2luLm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTA4
ODYKKyAgICAgICAgUkVHUkVTU0lPTiAocjE2Mzg3KTogUmVwcm9kdWNpYmxlIGNyYXNoIHdoZW4g
bW91c2luZyBvdmVyIEhUTUwgZG9jdW1lbnQKKworICAgICAgICAtIFNwZWNpYWwgY2FzZSBtZXRo
b2QgW0RPTU5vZGUgb3duZXJEb2N1bWVudF0gdG8gY2FsbCBkb2N1bWVudCgpIGluc3RlYWQKKyAg
ICAgICAgICBvciBvd25lckRvY3VtZW50KCkgdG8gcmV0dXJuIHRvIHRoZSBvbGQgYmVoYXZpb3Iu
IAorCisgICAgICAgICogV2ViQ29yZS54Y29kZXByb2ovcHJvamVjdC5wYnhwcm9qOgorICAgICAg
ICAqIGJpbmRpbmdzL3NjcmlwdHMvQ29kZUdlbmVyYXRvck9iakMucG06CisKIDIwMDYtMDktMTUg
IEJyYWR5IEVpZHNvbiAgPGJlaWRzb25AYXBwbGUuY29tPgogCiAgICAgICAgIFJldmlld2VkIGJ5
IFRpbSBIYXRjaGVyCkluZGV4OiBXZWJDb3JlL1dlYkNvcmUueGNvZGVwcm9qL3Byb2plY3QucGJ4
cHJvago9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09Ci0tLSBXZWJDb3JlL1dlYkNvcmUueGNvZGVwcm9qL3Byb2plY3QucGJ4
cHJvagkocmV2aXNpb24gMTYzOTApCisrKyBXZWJDb3JlL1dlYkNvcmUueGNvZGVwcm9qL3Byb2pl
Y3QucGJ4cHJvagkod29ya2luZyBjb3B5KQpAQCAtODQyMSw3ICs4NDIxLDYgQEAKIAkJMDg2N0Q2
OTBGRTg0MDI4RkMwMkFBQzA3IC8qIFByb2plY3Qgb2JqZWN0ICovID0gewogCQkJaXNhID0gUEJY
UHJvamVjdDsKIAkJCWJ1aWxkQ29uZmlndXJhdGlvbkxpc3QgPSAxNDlDMjg0MzA4OTAyQjExMDA4
QTlFRkMgLyogQnVpbGQgY29uZmlndXJhdGlvbiBsaXN0IGZvciBQQlhQcm9qZWN0ICJXZWJDb3Jl
IiAqLzsKLQkJCWNvbXBhdGliaWxpdHlWZXJzaW9uID0gIlhjb2RlIDIuNCI7CiAJCQloYXNTY2Fu
bmVkRm9yRW5jb2RpbmdzID0gMTsKIAkJCWtub3duUmVnaW9ucyA9ICgKIAkJCQlFbmdsaXNoLApA
QCAtODQzNiw3ICs4NDM1LDYgQEAKIAkJCXByb2R1Y3RSZWZHcm91cCA9IDAzNDc2OERGRkYzOEE1
MDQxMURCOUM4QiAvKiBQcm9kdWN0cyAqLzsKIAkJCXByb2plY3REaXJQYXRoID0gIiI7CiAJCQlw
cm9qZWN0Um9vdCA9ICIiOwotCQkJc2hvdWxkQ2hlY2tDb21wYXRpYmlsaXR5ID0gMTsKIAkJCXRh
cmdldHMgPSAoCiAJCQkJOTNGMTk4QTUwODI0NUU1OTAwMUU5QUJDIC8qIFdlYkNvcmUgKi8sCiAJ
CQkJREQwNDFGQkUwOUQ5RERCRTAwMTBBRjJBIC8qIERlcml2ZWQgU291cmNlcyAqLywKSW5kZXg6
IFdlYkNvcmUvYmluZGluZ3Mvc2NyaXB0cy9Db2RlR2VuZXJhdG9yT2JqQy5wbQo9PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
Ci0tLSBXZWJDb3JlL2JpbmRpbmdzL3NjcmlwdHMvQ29kZUdlbmVyYXRvck9iakMucG0JKHJldmlz
aW9uIDE2MzkwKQorKysgV2ViQ29yZS9iaW5kaW5ncy9zY3JpcHRzL0NvZGVHZW5lcmF0b3JPYmpD
LnBtCSh3b3JraW5nIGNvcHkpCkBAIC03NDQsNiArNzQ0LDEwIEBAIHN1YiBHZW5lcmF0ZUltcGxl
bWVudGF0aW9uCiAgICAgICAgICAgICB9IGVsc2lmICgkYXR0cmlidXRlTmFtZSBlcSAiZnJhbWUi
KSB7CiAgICAgICAgICAgICAgICAgIyBTcGVjaWFsIGNhc2UgYXR0cmlidXRlIGZyYW1lIHRvIGJl
IGZyYW1lQm9yZGVycy4KICAgICAgICAgICAgICAgICAkYXR0cmlidXRlSW50ZXJmYWNlTmFtZSAu
PSAiQm9yZGVycyI7CisgICAgICAgICAgICB9IGVsc2lmICgkYXR0cmlidXRlTmFtZSBlcSAib3du
ZWREb2N1bWVudCIpIHsKKyAgICAgICAgICAgICAgICAjIEZJWE1FOiBmb3Igbm93IHNwZWNpYWwg
Y2FzZSBhdHRyaWJ1dGUgb3duZXJEb2N1bWVudCB0byBjYWxsIGRvY3VtZW50LCB0aGlzIGlzIGlu
Y29ycmVjdAorICAgICAgICAgICAgICAgICMgbGVnYWN5IGJlaGF2aW9yLgorICAgICAgICAgICAg
ICAgICRhdHRyaWJ1dGVOYW1lID0gImRvY3VtZW50IjsKICAgICAgICAgICAgIH0KIAogICAgICAg
ICAgICAgJGF0dHJpYnV0ZU5hbWVzeyRhdHRyaWJ1dGVJbnRlcmZhY2VOYW1lfSA9IDE7Cg==
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>10589</attachid>
            <date>2006-09-16 07:33:26 -0700</date>
            <delta_ts>2006-09-16 08:00:53 -0700</delta_ts>
            <desc>patch without the type</desc>
            <filename>autoDOMNodeFix.diff</filename>
            <type>text/plain</type>
            <size>2389</size>
            <attacher name="Sam Weinig">sam</attacher>
            
              <data encoding="base64">SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09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==
</data>
<flag name="review"
          id="3442"
          type_id="1"
          status="+"
          setter="andersca"
    />
          </attachment>
      

    </bug>

</bugzilla>