<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>16603</bug_id>
          
          <creation_ts>2007-12-25 07:18:43 -0800</creation_ts>
          <short_desc>Crash when resizing text field</short_desc>
          <delta_ts>2007-12-27 19:23:09 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Layout and Rendering</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Mac</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc>http://nontroppo.org/</bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>HasReduction, InRadar</keywords>
          <priority>P1</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Nicholas Shanks">nickshanks</reporter>
          <assigned_to>mitz</assigned_to>
          <cc>mitz</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>65244</commentid>
    <comment_count>0</comment_count>
    <who name="Nicholas Shanks">nickshanks</who>
    <bug_when>2007-12-25 07:18:43 -0800</bug_when>
    <thetext>Go to the site above and hover the mouse over the &quot;Email Me&quot; text. A form will appear that disappears again if the mouse moves. Resist the urge to call the web designer a complete twat and instead try and enlarge the text field. I am going to see if I can reduce it. Will update the bug if I can.

Process:         Safari [893]
Path:            /Applications/WebKit.app/Contents/MacOS/WebKit
Identifier:      org.webkit.nightly.WebKit
Version:         r28949 (28949)
Code Type:       X86 (Native)
Parent Process:  launchd [83]

Date/Time:       2007-12-25 14:44:38.382 +0000
OS Version:      Mac OS X 10.5.1 (9B18)
Report Version:  6

Exception Type:  EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000004
Crashed Thread:  0

Thread 0 Crashed:
0   com.apple.WebCore             	0x00db6dda WebCore::RenderLayer::resize(WebCore::PlatformMouseEvent const&amp;, WebCore::IntSize const&amp;) + 90
1   com.apple.WebCore             	0x00b5a3c8 WebCore::EventHandler::handleMouseMoveEvent(WebCore::PlatformMouseEvent const&amp;, WebCore::HitTestResult*) + 1400
2   com.apple.WebCore             	0x00b5d090 WebCore::EventHandler::mouseDragged(NSEvent*) + 384
3   com.apple.WebKit              	0x001b7d85 -[WebHTMLView mouseDragged:] + 229
4   com.apple.AppKit              	0x9309f8e2 -[NSWindow sendEvent:] + 8249
5   com.apple.Safari              	0x000329d3 0x1000 + 203219
6   com.apple.AppKit              	0x9306ba2c -[NSApplication sendEvent:] + 2766
7   com.apple.Safari              	0x000324a8 0x1000 + 201896
8   com.apple.AppKit              	0x92fc9705 -[NSApplication run] + 847
9   com.apple.AppKit              	0x92f969ba NSApplicationMain + 574
10  com.apple.Safari              	0x00002876 0x1000 + 6262</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>65417</commentid>
    <comment_count>1</comment_count>
      <attachid>18134</attachid>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2007-12-27 16:59:48 -0800</bug_when>
    <thetext>Created attachment 18134
first pass reduction

Well, I was trying to build a reduction, and my first pass worked!  So I&apos;m posting it.  We can definitely refine this further for DRT.

Just mouse over the blue area, and try and resize the text field (if you can actually grab ahold of it). :)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>65420</commentid>
    <comment_count>2</comment_count>
    <who name="David Kilzer (:ddkilzer)">ddkilzer</who>
    <bug_when>2007-12-27 18:16:37 -0800</bug_when>
    <thetext>&lt;rdar://problem/5664199&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>65423</commentid>
    <comment_count>3</comment_count>
      <attachid>18136</attachid>
    <who name="">mitz</who>
    <bug_when>2007-12-27 19:11:59 -0800</bug_when>
    <thetext>Created attachment 18136
Reset EventHandler&apos;s m_resizeLayer when a resizing layer is being destroyed

Includes change log and layout test that crashes the unpatched release build.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>65424</commentid>
    <comment_count>4</comment_count>
    <who name="">mitz</who>
    <bug_when>2007-12-27 19:23:09 -0800</bug_when>
    <thetext>Fixed in &lt;http://trac.webkit.org/projects/webkit/changeset/29010&gt;.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>18134</attachid>
            <date>2007-12-27 16:59:48 -0800</date>
            <delta_ts>2007-12-27 16:59:48 -0800</delta_ts>
            <desc>first pass reduction</desc>
            <filename>crash.html</filename>
            <type>text/html</type>
            <size>484</size>
            <attacher name="Eric Seidel (no email)">eric</attacher>
            
              <data encoding="base64">PHN0eWxlPgpkaXYgewogIG92ZXJmbG93OiBoaWRkZW47CiAgYmFja2dyb3VuZDogYmx1ZTsKICB3
aWR0aDogMzAwcHg7CiAgaGVpZ2h0OiAzMDBweDsKfQoKdGV4dGFyZWEgewogIGRpc3BsYXk6IG5v
bmU7CiAgcmVzaXplOiBib3RoOwp9Cjwvc3R5bGU+CjxzY3JpcHQ+CnZhciBzaG93aW5nVGV4dCA9
IDA7CiAgZnVuY3Rpb24gdG9nZ2xlVGV4dCgpIHsKICAgIHZhciB0ZXN0ID0gZG9jdW1lbnQuZ2V0
RWxlbWVudEJ5SWQoInRlc3QiKTsKICAgIGlmIChzaG93aW5nVGV4dCkgewogICAgICB0ZXN0LnN0
eWxlLmRpc3BsYXkgPSAiYmxvY2siOwogICAgfSBlbHNlIHsKICAgICAgdGVzdC5zdHlsZS5kaXNw
bGF5ID0gIm5vbmUiOwogICAgfQogICAgc2hvd2luZ1RleHQgPSAhc2hvd2luZ1RleHQ7CiAgfQo8
L3NjcmlwdD4KPGRpdiBvbm1vdXNlb3Zlcj0idG9nZ2xlVGV4dCgpIj4KICA8dGV4dGFyZWEgaWQ9
InRlc3QiPgogIDwvdGV4dGFyZWE+CjwvZGl2Pg==
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>18136</attachid>
            <date>2007-12-27 19:11:59 -0800</date>
            <delta_ts>2007-12-27 19:21:02 -0800</delta_ts>
            <desc>Reset EventHandler&apos;s m_resizeLayer when a resizing layer is being destroyed</desc>
            <filename>16603_r1.diff</filename>
            <type>text/plain</type>
            <size>5408</size>
            <attacher>mitz</attacher>
            
              <data encoding="base64">SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n
CShyZXZpc2lvbiAyOTAwOSkKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA
IC0xLDMgKzEsMjQgQEAKKzIwMDctMTItMjcgIERhbiBCZXJuc3RlaW4gIDxtaXR6QGFwcGxlLmNv
bT4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICAtIGZp
eCBodHRwOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xNjYwMworICAgICAgICAg
IDxyZGFyOi8vcHJvYmxlbS81NjY0MTk5PiBDcmFzaCB3aGVuIHJlc2l6aW5nIHRleHQgZmllbGQK
KworICAgICAgICBUZXN0OiBmYXN0L2xheWVycy9yZXNpemUtbGF5ZXItZGVsZXRpb24tY3Jhc2gu
aHRtbAorCisgICAgICAgIFRoZSBldmVudCBoYW5kbGVyIGhhcyBvbmx5IGEgd2VhayByZWZlcmVu
Y2UgdG8gdGhlIGxheWVyIHRoYXQgaXMKKyAgICAgICAgY3VycmVudGx5IGluIHJlc2l6ZSBtb2Rl
LCBzbyBpdCBpcyB0aGUgbGF5ZXIncyByZXNwb25zaWJpbGl0eSB0byBsZXQKKyAgICAgICAgdGhl
IGV2ZW50IGhhbmRsZXIga25vdyBpZiBpdCBoYXMgYmVlbiBkZXN0cm95ZWQgd2hpbGUgaW4gdGhh
dCBtb2RlLgorCisgICAgICAgICogcGFnZS9FdmVudEhhbmRsZXIuY3BwOgorICAgICAgICAoV2Vi
Q29yZTo6RXZlbnRIYW5kbGVyOjpyZXNpemVMYXllckRlc3Ryb3llZCk6IEFkZGVkLiBSZXNldHMK
KyAgICAgICAgbV9yZXNpemVMYXllciB0byAwLgorICAgICAgICAqIHBhZ2UvRXZlbnRIYW5kbGVy
Lmg6CisgICAgICAgICogcmVuZGVyaW5nL1JlbmRlckxheWVyLmNwcDoKKyAgICAgICAgKFdlYkNv
cmU6OlJlbmRlckxheWVyOjp+UmVuZGVyTGF5ZXIpOiBBZGRlZCBhIGNhbGwgdG8KKyAgICAgICAg
RXZlbnRIYW5kbGVyOjpyZXNpemVMYXllckRlc3Ryb3llZCgpIGlmIHRoZSBsYXllciBpcyBpbiBy
ZXNpemUgbW9kZS4KKwogMjAwNy0xMi0yNyAgQ29sbGluIEphY2tzb24gIDx3ZWJraXRAY29sbGlu
amFja3Nvbi5jb20+CiAKICAgICAgICAgUmV2aWV3ZWQgYnkgU2FtIFdlaW5pZy4KSW5kZXg6IFdl
YkNvcmUvcGFnZS9FdmVudEhhbmRsZXIuY3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvcGFnZS9F
dmVudEhhbmRsZXIuY3BwCShyZXZpc2lvbiAyOTAwOSkKKysrIFdlYkNvcmUvcGFnZS9FdmVudEhh
bmRsZXIuY3BwCSh3b3JraW5nIGNvcHkpCkBAIC0xNDM3LDYgKzE0MzcsMTIgQEAgdm9pZCBFdmVu
dEhhbmRsZXI6OnNldFJlc2l6aW5nRnJhbWVTZXQoSAogICAgIG1fZnJhbWVTZXRCZWluZ1Jlc2l6
ZWQgPSBmcmFtZVNldDsKIH0KIAordm9pZCBFdmVudEhhbmRsZXI6OnJlc2l6ZUxheWVyRGVzdHJv
eWVkKCkKK3sKKyAgICBBU1NFUlQobV9yZXNpemVMYXllcik7CisgICAgbV9yZXNpemVMYXllciA9
IDA7Cit9CisKIHZvaWQgRXZlbnRIYW5kbGVyOjpob3ZlclRpbWVyRmlyZWQoVGltZXI8RXZlbnRI
YW5kbGVyPiopCiB7CiAgICAgbV9ob3ZlclRpbWVyLnN0b3AoKTsKSW5kZXg6IFdlYkNvcmUvcGFn
ZS9FdmVudEhhbmRsZXIuaAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBXZWJDb3JlL3BhZ2UvRXZlbnRIYW5kbGVy
LmgJKHJldmlzaW9uIDI5MDA5KQorKysgV2ViQ29yZS9wYWdlL0V2ZW50SGFuZGxlci5oCSh3b3Jr
aW5nIGNvcHkpCkBAIC0xMDgsNiArMTA4LDggQEAgcHVibGljOgogCiAgICAgdm9pZCBzZXRSZXNp
emluZ0ZyYW1lU2V0KEhUTUxGcmFtZVNldEVsZW1lbnQqKTsKIAorICAgIHZvaWQgcmVzaXplTGF5
ZXJEZXN0cm95ZWQoKTsKKwogICAgIEludFBvaW50IGN1cnJlbnRNb3VzZVBvc2l0aW9uKCkgY29u
c3Q7CiAKICAgICB2b2lkIHNldElnbm9yZVdoZWVsRXZlbnRzKGJvb2wpOwpJbmRleDogV2ViQ29y
ZS9yZW5kZXJpbmcvUmVuZGVyTGF5ZXIuY3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvcmVuZGVy
aW5nL1JlbmRlckxheWVyLmNwcAkocmV2aXNpb24gMjkwMDkpCisrKyBXZWJDb3JlL3JlbmRlcmlu
Zy9SZW5kZXJMYXllci5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTE2MCw2ICsxNjAsMTEgQEAgUmVu
ZGVyTGF5ZXI6OlJlbmRlckxheWVyKFJlbmRlck9iamVjdCogbwogCiBSZW5kZXJMYXllcjo6flJl
bmRlckxheWVyKCkKIHsKKyAgICBpZiAoaW5SZXNpemVNb2RlKCkpIHsKKyAgICAgICAgaWYgKEZy
YW1lKiBmcmFtZSA9IHJlbmRlcmVyKCktPmRvY3VtZW50KCktPmZyYW1lKCkpCisgICAgICAgICAg
ICBmcmFtZS0+ZXZlbnRIYW5kbGVyKCktPnJlc2l6ZUxheWVyRGVzdHJveWVkKCk7CisgICAgfQor
CiAgICAgZGVzdHJveVNjcm9sbGJhcihIb3Jpem9udGFsU2Nyb2xsYmFyKTsKICAgICBkZXN0cm95
U2Nyb2xsYmFyKFZlcnRpY2FsU2Nyb2xsYmFyKTsKIApJbmRleDogTGF5b3V0VGVzdHMvQ2hhbmdl
TG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL0NoYW5nZUxvZwkocmV2aXNpb24gMjkwMDkp
CisrKyBMYXlvdXRUZXN0cy9DaGFuZ2VMb2cJKHdvcmtpbmcgY29weSkKQEAgLTEsMyArMSwxMyBA
QAorMjAwNy0xMi0yNyAgRGFuIEJlcm5zdGVpbiAgPG1pdHpAYXBwbGUuY29tPgorCisgICAgICAg
IFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIC0gdGVzdCBmb3IgaHR0cDov
L2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTY2MDMKKyAgICAgICAgICA8cmRhcjov
L3Byb2JsZW0vNTY2NDE5OT4gQ3Jhc2ggd2hlbiByZXNpemluZyB0ZXh0IGZpZWxkCisKKyAgICAg
ICAgKiBmYXN0L2xheWVycy9yZXNpemUtbGF5ZXItZGVsZXRpb24tY3Jhc2gtZXhwZWN0ZWQudHh0
OiBBZGRlZC4KKyAgICAgICAgKiBmYXN0L2xheWVycy9yZXNpemUtbGF5ZXItZGVsZXRpb24tY3Jh
c2guaHRtbDogQWRkZWQuCisKIDIwMDctMTItMjcgIFNhbSBXZWluaWcgIDxzYW1Ad2Via2l0Lm9y
Zz4KIAogICAgICAgICBSZXZpZXdlZCBieSBBbGljZSBMaXUuCkluZGV4OiBMYXlvdXRUZXN0cy9m
YXN0L2xheWVycy9yZXNpemUtbGF5ZXItZGVsZXRpb24tY3Jhc2gtZXhwZWN0ZWQudHh0Cj09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT0KLS0tIExheW91dFRlc3RzL2Zhc3QvbGF5ZXJzL3Jlc2l6ZS1sYXllci1kZWxldGlvbi1j
cmFzaC1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9mYXN0L2xheWVy
cy9yZXNpemUtbGF5ZXItZGVsZXRpb24tY3Jhc2gtZXhwZWN0ZWQudHh0CShyZXZpc2lvbiAwKQpA
QCAtMCwwICsxLDMgQEAKK1Rlc3QgZm9yIGh0dHA6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcu
Y2dpP2lkPTE2NjAzIENyYXNoIHdoZW4gcmVzaXppbmcgdGV4dCBmaWVsZC4KKworRHJhZyB0aGUg
Ym90dG9tIHJpZ2h0IGNvcm5lciBvZiB0aGUgYmxhY2sgYm94IG92ZXIgdGhlIGJsdWUgc3F1YXJl
LiBUaGUgYmxhY2sgYm94IHNob3VsZCBkaXNhcHBlYXIgYnV0IHRoZSBicm93c2VyIHNob3VsZCBu
b3QgY3Jhc2guCkluZGV4OiBMYXlvdXRUZXN0cy9mYXN0L2xheWVycy9yZXNpemUtbGF5ZXItZGVs
ZXRpb24tY3Jhc2guaHRtbAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9mYXN0L2xheWVycy9y
ZXNpemUtbGF5ZXItZGVsZXRpb24tY3Jhc2guaHRtbAkocmV2aXNpb24gMCkKKysrIExheW91dFRl
c3RzL2Zhc3QvbGF5ZXJzL3Jlc2l6ZS1sYXllci1kZWxldGlvbi1jcmFzaC5odG1sCShyZXZpc2lv
biAwKQpAQCAtMCwwICsxLDMzIEBACis8aHRtbD4KKzxoZWFkPgorICAgIDxzY3JpcHQ+CisgICAg
ICAgIGZ1bmN0aW9uIHRlc3QoKQorICAgICAgICB7CisgICAgICAgICAgICBpZiAoIXdpbmRvdy5s
YXlvdXRUZXN0Q29udHJvbGxlcikKKyAgICAgICAgICAgICAgICByZXR1cm47CisgICAgICAgICAg
ICBsYXlvdXRUZXN0Q29udHJvbGxlci5kdW1wQXNUZXh0KCk7CisgICAgICAgICAgICBkb2N1bWVu
dC5ib2R5Lm9mZnNldFRvcDsKKyAgICAgICAgICAgIGV2ZW50U2VuZGVyLm1vdXNlTW92ZVRvKDUw
LCA1MCk7CisgICAgICAgICAgICBldmVudFNlbmRlci5tb3VzZURvd24oKTsKKyAgICAgICAgICAg
IGV2ZW50U2VuZGVyLm1vdXNlTW92ZVRvKDEyNSwgMTI1KTsKKyAgICAgICAgICAgIGV2ZW50U2Vu
ZGVyLm1vdXNlTW92ZVRvKDEzNSwgMTM1KTsKKyAgICAgICAgICAgIGV2ZW50U2VuZGVyLm1vdXNl
VXAoKTsKKyAgICAgICAgICAgIGxheW91dFRlc3RDb250cm9sbGVyLm5vdGlmeURvbmUoKTsKKyAg
ICAgICAgfQorICAgIDwvc2NyaXB0PgorPC9oZWFkPgorPGJvZHkgc3R5bGU9Im1hcmdpbjogMCIg
b25sb2FkPSJ0ZXN0KCkiPgorICAgIDxkaXYgaWQ9InEiIHN0eWxlPSJ3aWR0aDogNTBweDsgaGVp
Z2h0OiA1MHB4OyBvdmVyZmxvdzogaGlkZGVuOyByZXNpemU6IGJvdGg7IGJvcmRlcjogc29saWQ7
Ij48L2Rpdj4KKyAgICA8ZGl2IHN0eWxlPSJwb3NpdGlvbjogYWJzb2x1dGU7IGxlZnQ6IDEyMHB4
OyB0b3A6IDEyMHB4OyBoZWlnaHQ6IDEwMHB4OyB3aWR0aDogMjBweDsgaGVpZ2h0OiAyMHB4OyBi
YWNrZ3JvdW5kLWNvbG9yOiBibHVlOyIgb25tb3VzZW92ZXI9InEuc3R5bGUuZGlzcGxheT0nbm9u
ZSc7Ij48L2Rpdj4KKyAgICA8ZGl2IHN0eWxlPSJwb3NpdGlvbjogYWJzb2x1dGU7IGxlZnQ6IDhw
eDsgcmlnaHQ6IDhwOyB0b3A6IDE1MHB4OyI+CisgICAgICAgIDxwPgorICAgICAgICAgICAgVGVz
dCBmb3IgPGk+PGEgaHJlZj0iaHR0cDovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9
MTY2MDMiPmh0dHA6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE2NjAzPC9hPgor
ICAgICAgICAgICAgQ3Jhc2ggd2hlbiByZXNpemluZyB0ZXh0IGZpZWxkPC9pPi4KKyAgICAgICAg
PC9wPgorICAgICAgICA8cD4KKyAgICAgICAgICAgIERyYWcgdGhlIGJvdHRvbSByaWdodCBjb3Ju
ZXIgb2YgdGhlIGJsYWNrIGJveCBvdmVyIHRoZSBibHVlIHNxdWFyZS4KKyAgICAgICAgICAgIFRo
ZSBibGFjayBib3ggc2hvdWxkIGRpc2FwcGVhciBidXQgdGhlIGJyb3dzZXIgc2hvdWxkIG5vdCBj
cmFzaC4KKyAgICAgICAgPC9wPgorICAgIDwvZGl2PgorPC9ib2R5PgorPC9odG1sPgo=
</data>
<flag name="review"
          id="7873"
          type_id="1"
          status="+"
          setter="oliver"
    />
          </attachment>
      

    </bug>

</bugzilla>