113937 2013-04-04 08:50:47 -0700 WebSpeech: crash at WebCore::SpeechSynthesis::speak 2013-05-13 14:42:54 -0700 1 1 1 Unclassified WebKit Accessibility 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 cfleizach cfleizach commit-queue jcraig thorton webkit-bug-importer oldest_to_newest 869174 0 cfleizach 2013-04-04 08:50:47 -0700 WebKit crashes when you send speechSynthesis.speak() a string value instead of a SpeechSynthesisUtterance object. speechSynthesis.speak('Hello World'); * BACKTRACE ('>' indicates stack frame used for CrashTracer aggregation) > 1 com.apple.WebCore 0x7fff84612eb2 WebCore::SpeechSynthesis::speak(WebCore::SpeechSynthesisUtterance*) + 0x92 2 com.apple.WebCore 0x7fff8435a91e WebCore::jsSpeechSynthesisPrototypeFunctionSpeak(JSC::ExecState*) + 0xce 3 0x00004830df601045 0 + 79374743244869 4 com.apple.JavaScriptCore 0x7fff902fda78 JSC::Interpreter::execute(JSC::EvalExecutable*, JSC::ExecState*, JSC::JSValue, JSC::JSScope*) + 0x5a8 5 com.apple.JavaScriptCore 0x7fff901e363f JSC::globalFuncEval(JSC::ExecState*) + 0x41f 6 com.apple.JavaScriptCore 0x7fff9016e1e1 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 0x241 869175 1 196481 cfleizach 2013-04-04 08:52:31 -0700 Created attachment 196481 patch 869177 2 cfleizach 2013-04-04 08:53:21 -0700 adding Tim to help with review. 870082 3 196481 cfleizach 2013-04-05 14:41:23 -0700 Comment on attachment 196481 patch Thanks! 870088 4 196481 commit-queue 2013-04-05 14:49:44 -0700 Comment on attachment 196481 patch Clearing flags on attachment: 196481 Committed r147800: <http://trac.webkit.org/changeset/147800> 870089 5 commit-queue 2013-04-05 14:49:46 -0700 All reviewed patches have been landed. Closing bug. 888530 6 jcraig 2013-05-13 14:42:54 -0700 <rdar://problem/13572670> 196481 2013-04-04 08:52:31 -0700 2013-04-05 14:49:44 -0700 patch patch text/plain 4763 cfleizach SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDE0NzYzMykKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE5IEBACisyMDEzLTA0LTA0ICBDaHJpcyBG bGVpemFjaCAgPGNmbGVpemFjaEBhcHBsZS5jb20+CisKKyAgICAgICAgV2ViU3BlZWNoOiBjcmFz aCBhdCBXZWJDb3JlOjpTcGVlY2hTeW50aGVzaXM6OnNwZWFrCisgICAgICAgIGh0dHBzOi8vYnVn cy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xMTM5MzcKKworICAgICAgICBSZXZpZXdlZCBi eSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBQcm90ZWN0IGFnYWluc3QgdGhlIGNhc2Ugd2hl biBpbnZhbGlkIGRhdGEgaXMgcGFzc2VkIGluLgorCisgICAgICAgIFRlc3Q6IHBsYXRmb3JtL21h Yy9mYXN0L3NwZWVjaHN5bnRoZXNpcy9zcGVlY2gtc3ludGhlc2lzLWNyYXNoLW9uLWJhZC11dHRl cmFuY2UuaHRtbAorCisgICAgICAgICogTW9kdWxlcy9zcGVlY2gvU3BlZWNoU3ludGhlc2lzLmNw cDoKKyAgICAgICAgKFdlYkNvcmU6OlNwZWVjaFN5bnRoZXNpczo6c3BlYWspOgorICAgICAgICAq IE1vZHVsZXMvc3BlZWNoL1NwZWVjaFN5bnRoZXNpc1V0dGVyYW5jZS5jcHA6CisgICAgICAgIChX ZWJDb3JlOjpTcGVlY2hTeW50aGVzaXNVdHRlcmFuY2U6OnNldFZvaWNlKToKKwogMjAxMy0wNC0w NCAgWGFiaWVyIFJvZHJpZ3VleiBDYWx2YXIgIDxjYWx2YXJpc0BpZ2FsaWEuY29tPgogCiAgICAg ICAgIFtHU3RyZWFtZXJdIFZpcnR1YWwgbW9kaWZpZXIgZm9yIE1lZGlhUGxheWVyOjpzaW11bGF0 ZUF1ZGlvSW50ZXJydXB0aW9uIG11c3QgZ28KSW5kZXg6IFNvdXJjZS9XZWJDb3JlL01vZHVsZXMv c3BlZWNoL1NwZWVjaFN5bnRoZXNpcy5jcHAKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNlL1dlYkNvcmUv TW9kdWxlcy9zcGVlY2gvU3BlZWNoU3ludGhlc2lzLmNwcAkocmV2aXNpb24gMTQ3NjEyKQorKysg U291cmNlL1dlYkNvcmUvTW9kdWxlcy9zcGVlY2gvU3BlZWNoU3ludGhlc2lzLmNwcAkod29ya2lu ZyBjb3B5KQpAQCAtMTAyLDYgKzEwMiw5IEBACiAKIHZvaWQgU3BlZWNoU3ludGhlc2lzOjpzcGVh ayhTcGVlY2hTeW50aGVzaXNVdHRlcmFuY2UqIHV0dGVyYW5jZSkKIHsKKyAgICBpZiAoIXV0dGVy YW5jZSkKKyAgICAgICAgcmV0dXJuOworICAgIAogICAgIG1fdXR0ZXJhbmNlUXVldWUuYXBwZW5k KHV0dGVyYW5jZSk7CiAgICAgCiAgICAgLy8gSWYgdGhlIHF1ZXVlIHdhcyBlbXB0eSwgc3BlYWsg dGhpcyBpbW1lZGlhdGVseSBhbmQgYWRkIGl0IHRvIHRoZSBxdWV1ZS4KSW5kZXg6IFNvdXJjZS9X ZWJDb3JlL01vZHVsZXMvc3BlZWNoL1NwZWVjaFN5bnRoZXNpc1V0dGVyYW5jZS5jcHAKPT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQotLS0gU291cmNlL1dlYkNvcmUvTW9kdWxlcy9zcGVlY2gvU3BlZWNoU3ludGhlc2lzVXR0 ZXJhbmNlLmNwcAkocmV2aXNpb24gMTQ3NjEyKQorKysgU291cmNlL1dlYkNvcmUvTW9kdWxlcy9z cGVlY2gvU3BlZWNoU3ludGhlc2lzVXR0ZXJhbmNlLmNwcAkod29ya2luZyBjb3B5KQpAQCAtNjQs NiArNjQsOSBAQAogCiB2b2lkIFNwZWVjaFN5bnRoZXNpc1V0dGVyYW5jZTo6c2V0Vm9pY2UoU3Bl ZWNoU3ludGhlc2lzVm9pY2UqIHZvaWNlKQogeworICAgIGlmICghdm9pY2UpCisgICAgICAgIHJl dHVybjsKKyAgICAKICAgICAvLyBDYWNoZSBvdXIgb3duIHZlcnNpb24gb2YgdGhlIFNwZWVjaFN5 bnRoZXNpc1ZvaWNlIHNvIHRoYXQgd2UgZG9uJ3QgaGF2ZSB0byBkbyBzb21lIGxvb2t1cAogICAg IC8vIHRvIGdvIGZyb20gdGhlIHBsYXRmb3JtIHZvaWNlIGJhY2sgdG8gdGhlIHNwZWVjaCBzeW50 aGVzaXMgdm9pY2UgaW4gdGhlIHJlYWQgcHJvcGVydHkuCiAgICAgbV92b2ljZSA9IHZvaWNlOwpJ bmRleDogTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL0No YW5nZUxvZwkocmV2aXNpb24gMTQ3NjMzKQorKysgTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCSh3b3Jr aW5nIGNvcHkpCkBAIC0xLDMgKzEsMTMgQEAKKzIwMTMtMDQtMDQgIENocmlzIEZsZWl6YWNoICA8 Y2ZsZWl6YWNoQGFwcGxlLmNvbT4KKworICAgICAgICBXZWJTcGVlY2g6IGNyYXNoIGF0IFdlYkNv cmU6OlNwZWVjaFN5bnRoZXNpczo6c3BlYWsKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5v cmcvc2hvd19idWcuY2dpP2lkPTExMzkzNworCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAo T09QUyEpLgorCisgICAgICAgICogcGxhdGZvcm0vbWFjL2Zhc3Qvc3BlZWNoc3ludGhlc2lzL3Nw ZWVjaC1zeW50aGVzaXMtY3Jhc2gtb24tYmFkLXV0dGVyYW5jZS1leHBlY3RlZC50eHQ6IEFkZGVk LgorICAgICAgICAqIHBsYXRmb3JtL21hYy9mYXN0L3NwZWVjaHN5bnRoZXNpcy9zcGVlY2gtc3lu dGhlc2lzLWNyYXNoLW9uLWJhZC11dHRlcmFuY2UuaHRtbDogQWRkZWQuCisKIDIwMTMtMDQtMDQg IENocmlzdG9waGUgRHVtZXogIDxjaC5kdW1lekBzaXNhLnNhbXN1bmcuY29tPgogCiAgICAgICAg IFJlZ3Jlc3Npb24ocjE0Mjc2NSkgQnJva2UgQ3VzdG9tIFNWRyBjdXJzb3JzIGFuZCBTVkcgY2Fu dmFzIGRyYXdpbmcgZm9yIENocm9taXVtCkluZGV4OiBMYXlvdXRUZXN0cy9wbGF0Zm9ybS9tYWMv ZmFzdC9zcGVlY2hzeW50aGVzaXMvc3BlZWNoLXN5bnRoZXNpcy1jcmFzaC1vbi1iYWQtdXR0ZXJh bmNlLWV4cGVjdGVkLnR4dAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9wbGF0Zm9ybS9tYWMv ZmFzdC9zcGVlY2hzeW50aGVzaXMvc3BlZWNoLXN5bnRoZXNpcy1jcmFzaC1vbi1iYWQtdXR0ZXJh bmNlLWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL3BsYXRmb3JtL21h Yy9mYXN0L3NwZWVjaHN5bnRoZXNpcy9zcGVlY2gtc3ludGhlc2lzLWNyYXNoLW9uLWJhZC11dHRl cmFuY2UtZXhwZWN0ZWQudHh0CSh3b3JraW5nIGNvcHkpCkBAIC0wLDAgKzEsOSBAQAorVGhpcyB0 ZXN0cyB0aGF0IHBhc3NpbmcgaW4gdGhlIHdyb25nIHR5cGUgb2YgZGF0YSB3b24ndCBjcmFzaCBz cGVlY2ggc3ludGhlc2lzIGNvZGUKKworT24gc3VjY2VzcywgeW91IHdpbGwgc2VlIGEgc2VyaWVz IG9mICJQQVNTIiBtZXNzYWdlcywgZm9sbG93ZWQgYnkgIlRFU1QgQ09NUExFVEUiLgorCisKK1BB U1Mgc3VjY2Vzc2Z1bGx5UGFyc2VkIGlzIHRydWUKKworVEVTVCBDT01QTEVURQorCkluZGV4OiBM YXlvdXRUZXN0cy9wbGF0Zm9ybS9tYWMvZmFzdC9zcGVlY2hzeW50aGVzaXMvc3BlZWNoLXN5bnRo ZXNpcy1jcmFzaC1vbi1iYWQtdXR0ZXJhbmNlLmh0bWwKPT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVz dHMvcGxhdGZvcm0vbWFjL2Zhc3Qvc3BlZWNoc3ludGhlc2lzL3NwZWVjaC1zeW50aGVzaXMtY3Jh c2gtb24tYmFkLXV0dGVyYW5jZS5odG1sCShyZXZpc2lvbiAwKQorKysgTGF5b3V0VGVzdHMvcGxh dGZvcm0vbWFjL2Zhc3Qvc3BlZWNoc3ludGhlc2lzL3NwZWVjaC1zeW50aGVzaXMtY3Jhc2gtb24t YmFkLXV0dGVyYW5jZS5odG1sCSh3b3JraW5nIGNvcHkpCkBAIC0wLDAgKzEsMjggQEAKKzwhRE9D VFlQRSBIVE1MIFBVQkxJQyAiLS8vSUVURi8vRFREIEhUTUwvL0VOIj4KKzxodG1sPgorPGhlYWQ+ Cis8c2NyaXB0IHNyYz0iLi4vLi4vLi4vLi4vZmFzdC9qcy9yZXNvdXJjZXMvanMtdGVzdC1wcmUu anMiPjwvc2NyaXB0PgorPC9oZWFkPgorPGJvZHkgaWQ9ImJvZHkiPgorCis8ZGl2IGlkPSJjb25z b2xlIj48L2Rpdj4KKworPHNjcmlwdD4KKworICAgIGRlc2NyaXB0aW9uKCJUaGlzIHRlc3RzIHRo YXQgcGFzc2luZyBpbiB0aGUgd3JvbmcgdHlwZSBvZiBkYXRhIHdvbid0IGNyYXNoIHNwZWVjaCBz eW50aGVzaXMgY29kZSIpOworCisgICAgIC8vIERvbid0IGNyYXNoLiBTcGVhayBpcyBzdXBwb3Nl ZCB0byB0YWtlIGFuIHV0dGVyYW5jZSwgbm90IGEgc3RyaW5nLgorICAgICBzcGVlY2hTeW50aGVz aXMuc3BlYWsoJ0hlbGxvIFdvcmxkJyk7CisKKyAgICAgLy8gRG9uJ3QgY3Jhc2guIEFuIHV0dGVy YW5jZSB2b2ljZSBpcyBzdXBwb3NlZCB0byB0YWtlIGEgdm9pY2Ugb2JqZWN0LCBub3QgYSBzdHJp bmcuCisgICAgIHZhciB4ID0gbmV3IFNwZWVjaFN5bnRoZXNpc1V0dGVyYW5jZSgnSGVsbG8gV29y bGQnKTsKKyAgICAgeC52b2ljZSA9ICJhc2RmIjsKKworICAgICAvLyBEb24ndCBjcmFzaC4gQW4g dXR0ZXJhbmNlIGlzIHN1cHBvc2VkIHRvIHRha2UgYSBzdHJpbmcsIG5vdCBhIG51bWJlci4KKyAg ICAgeCA9IG5ldyBTcGVlY2hTeW50aGVzaXNVdHRlcmFuY2UoMjIzKTsKKworPC9zY3JpcHQ+CisK KzxzY3JpcHQgc3JjPSIuLi8uLi8uLi8uLi9mYXN0L2pzL3Jlc291cmNlcy9qcy10ZXN0LXBvc3Qu anMiPjwvc2NyaXB0PgorPC9ib2R5PgorPC9odG1sPgo=