<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>120087</bug_id>
          
          <creation_ts>2013-08-20 13:58:48 -0700</creation_ts>
          <short_desc>Lion: fast/forms/submit-to-url-fragment.html intermittently crashes</short_desc>
          <delta_ts>2013-08-20 14:22:11 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Page Loading</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>REOPENED</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar, LayoutTestFailure</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Ryosuke Niwa">rniwa</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>andersca</cc>
    
    <cc>ap</cc>
    
    <cc>thorton</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>919210</commentid>
    <comment_count>0</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2013-08-20 13:58:48 -0700</bug_when>
    <thetext>Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x00000000bbadbeef

VM Regions Near 0xbbadbeef:
--&gt; 
    __TEXT                 0000000103565000-00000001035cb000 [  408K] r-x/rwx SM=COW  /Volumes/VOLUME/*

Application Specific Information:
CRASHING TEST: fast/forms/resources/submit-to-blank-multiple-times-form-action.html
objc[41691]: garbage collection is OFF

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore      	0x00000001039a3e2e WTFCrash + 62 (Assertions.cpp:342)
1   DumpRenderTree                	0x000000010359386a -[UIDelegate webView:createWebViewWithRequest:] + 136
2   com.apple.CoreFoundation      	0x00007fff897dcefc __invoking___ + 140
3   com.apple.CoreFoundation      	0x00007fff897dcd94 -[NSInvocation invoke] + 132
4   com.apple.CoreFoundation      	0x00007fff897dcf64 -[NSInvocation invokeWithTarget:] + 52
5   com.apple.CoreFoundation      	0x00007fff897d7fa4 ___forwarding___ + 756
6   com.apple.CoreFoundation      	0x00007fff897d7c38 _CF_forwarding_prep_0 + 232
7   com.apple.WebKit              	0x0000000103d649a3 WebFrameLoaderClient::dispatchCreatePage(WebCore::NavigationAction const&amp;) + 99 (WebFrameLoaderClient.mm:729)
8   com.apple.WebCore             	0x00000001043548cd WebCore::FrameLoader::continueLoadAfterNewWindowPolicy(WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, WTF::String const&amp;, WebCore::NavigationAction const&amp;, bool) + 77 (FrameLoader.cpp:2905)
9   com.apple.WebCore             	0x000000010434f481 WebCore::FrameLoader::callContinueLoadAfterNewWindowPolicy(void*, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, WTF::String const&amp;, WebCore::NavigationAction const&amp;, bool) + 33 (PassRefPtr.h:67)
10  com.apple.WebCore             	0x00000001048e5a48 WebCore::PolicyCallback::call(bool) + 168 (PassRefPtr.h:67)
11  com.apple.WebCore             	0x00000001048e65ca WebCore::PolicyChecker::continueAfterNewWindowPolicy(WebCore::PolicyAction) + 170 (PolicyChecker.cpp:201)
12  com.apple.WebKit              	0x0000000103d6995b -[WebFramePolicyListener receivedPolicyDecision:] + 91 (RefCounted.h:141)
13  com.apple.CoreFoundation      	0x00007fff897dcefc __invoking___ + 140
14  com.apple.CoreFoundation      	0x00007fff897dcd94 -[NSInvocation invoke] + 132
15  com.apple.CoreFoundation      	0x00007fff897dcf64 -[NSInvocation invokeWithTarget:] + 52
16  com.apple.WebKit              	0x0000000103dcd767 -[_WebSafeForwarder forwardInvocation:] + 87 (WebView.mm:3139)
17  com.apple.CoreFoundation      	0x00007fff897d7fa4 ___forwarding___ + 756
18  com.apple.CoreFoundation      	0x00007fff897d7c38 _CF_forwarding_prep_0 + 232
19  com.apple.WebKit              	0x0000000103d64d0d WebFrameLoaderClient::dispatchDecidePolicyForNewWindowAction(void (WebCore::PolicyChecker::*)(WebCore::PolicyAction), WebCore::NavigationAction const&amp;, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, WTF::String const&amp;) + 205 (RetainPtr.h:125)
20  com.apple.WebCore             	0x00000001048e64dc WebCore::PolicyChecker::checkNewWindowPolicy(WebCore::NavigationAction const&amp;, void (*)(void*, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, WTF::String const&amp;, WebCore::NavigationAction const&amp;, bool), WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, WTF::String const&amp;, void*) + 316 (PassRefPtr.h:67)
21  com.apple.WebCore             	0x000000010434df5b WebCore::FrameLoader::loadURL(WebCore::KURL const&amp;, WTF::String const&amp;, WTF::String const&amp;, bool, WebCore::FrameLoadType, WTF::PassRefPtr&lt;WebCore::Event&gt;, WTF::PassRefPtr&lt;WebCore::FormState&gt;) + 843 (PassRefPtr.h:67)
22  com.apple.WebCore             	0x000000010434ab50 WebCore::FrameLoader::loadFrameRequest(WebCore::FrameLoadRequest const&amp;, bool, bool, WTF::PassRefPtr&lt;WebCore::Event&gt;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, WebCore::ShouldSendReferrer) + 800 (PassRefPtr.h:67)
23  com.apple.WebCore             	0x000000010489c4ca WebCore::ScheduledFormSubmission::fire(WebCore::Frame*) + 202 (PassRefPtr.h:67)
24  com.apple.WebCore             	0x000000010489b249 WebCore::NavigationScheduler::timerFired(WebCore::Timer&lt;WebCore::NavigationScheduler&gt;*) + 105 (NavigationScheduler.cpp:427)
25  com.apple.WebCore             	0x0000000104c2bccf WebCore::ThreadTimers::sharedTimerFiredInternal() + 175 (ThreadTimers.cpp:132)
26  com.apple.WebCore             	0x0000000104add6ba _ZN7WebCoreL10timerFiredEP16__CFRunLoopTimerPv + 58 (SharedTimerMac.mm:134)
27  com.apple.CoreFoundation      	0x00007fff8979f934 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20
28  com.apple.CoreFoundation      	0x00007fff8979f486 __CFRunLoopDoTimer + 534
29  com.apple.CoreFoundation      	0x00007fff8977fe11 __CFRunLoopRun + 1617
30  com.apple.CoreFoundation      	0x00007fff8977f486 CFRunLoopRunSpecific + 230
31  DumpRenderTree                	0x000000010357389a _ZL7runTestRKNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEE + 1373
32  DumpRenderTree                	0x00000001035730fd dumpRenderTree(int, char const**) + 1664
33  DumpRenderTree                	0x0000000103573cbd main + 86
34  DumpRenderTree                	0x0000000103567054 start + 52</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>919212</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2013-08-20 13:59:06 -0700</bug_when>
    <thetext>&lt;rdar://problem/14788543&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>919214</commentid>
    <comment_count>2</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2013-08-20 13:59:39 -0700</bug_when>
    <thetext>http://webkit-test-results.appspot.com/dashboards/flakiness_dashboard.html#tests=fast%2Fforms%2Fsubmit-to-url-fragment.html</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>919216</commentid>
    <comment_count>3</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2013-08-20 14:02:17 -0700</bug_when>
    <thetext>Committed r154356: &lt;http://trac.webkit.org/changeset/154356&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>919224</commentid>
    <comment_count>4</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2013-08-20 14:11:17 -0700</bug_when>
    <thetext>Per flakiness dashboard, looks like a very recent regression.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>919226</commentid>
    <comment_count>5</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2013-08-20 14:14:00 -0700</bug_when>
    <thetext>Shouldn&apos;t be closing this.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>