16678 2007-12-30 08:08:23 -0800 Unreproducible crash in KJS::JSObject::inherits() after using Web Inspector 2008-01-08 20:49:49 -0800 1 1 1 Unclassified WebKit Web Inspector (Deprecated) 528+ (Nightly build) Mac OS X 10.4 RESOLVED FIXED NeedsReduction P2 Normal --- 1 ddkilzer timothy oldest_to_newest 65749 0 ddkilzer 2007-12-30 08:08:23 -0800 * SUMMARY I've seen two crashes in KJS::JSObject::inherits() now related to the WebInspector. I'm not sure how to reproduce the crash yet. * NOTES No console output reported for the crash. Crash log: Exception: EXC_BAD_ACCESS (0x0001) Codes: KERN_PROTECTION_FAILURE (0x0002) at 0x00000000 Thread 0 Crashed: 0 com.apple.JavaScriptCore 0x0061dad8 KJS::JSObject::inherits(KJS::ClassInfo const*) const + 32 (object.h:526) 1 com.apple.JavaScriptCore 0x005d3944 JSObjectSetPrivate + 68 (JSObjectRef.cpp:254) 2 com.apple.WebCore 0x0126e394 WebCore::InspectorController::~InspectorController [in-charge]() + 220 (InspectorController.cpp:616) 3 com.apple.WebCore 0x018f95c8 void WTF::deleteOwnedPtr<WebCore::InspectorController>(WebCore::InspectorController*) + 52 (OwnPtr.h:52) 4 com.apple.WebCore 0x018f9614 WTF::OwnPtr<WebCore::InspectorController>::~OwnPtr [in-charge]() + 40 (OwnPtr.h:70) 5 com.apple.WebCore 0x01357b58 WebCore::Page::~Page [in-charge]() + 476 (Page.cpp:120) 6 com.apple.WebKit 0x003d91c8 -[WebView(WebPrivate) _close] + 596 (WebView.mm:715) 7 com.apple.Safari 0x00050b60 0x1000 + 326496 8 com.apple.Safari 0x000506c8 0x1000 + 325320 9 com.apple.WebKit 0x003c2874 -[WebView close] + 60 (WebView.mm:2022) 10 com.apple.Safari 0x00053c88 0x1000 + 339080 11 com.apple.Safari 0x00054038 0x1000 + 340024 12 com.apple.AppKit 0x93847d44 -[NSApplication sendAction:to:from:] + 108 13 com.apple.Safari 0x00034ae0 0x1000 + 211680 14 com.apple.AppKit 0x938a25b0 -[NSMenu performActionForItemAtIndex:] + 392 15 com.apple.AppKit 0x938a2334 -[NSCarbonMenuImpl performActionWithHighlightingForItemAtIndex:] + 104 16 com.apple.AppKit 0x938a1ddc -[NSMenu performKeyEquivalent:] + 272 17 com.apple.AppKit 0x938a1a28 -[NSApplication _handleKeyEquivalent:] + 328 18 com.apple.AppKit 0x937ab4e8 -[NSApplication sendEvent:] + 2944 19 com.apple.Safari 0x000304b4 0x1000 + 193716 20 com.apple.AppKit 0x937a2df0 -[NSApplication run] + 508 21 com.apple.AppKit 0x93893974 NSApplicationMain + 452 22 com.apple.Safari 0x0009bad4 0x1000 + 633556 23 com.apple.Safari 0x000022fc 0x1000 + 4860 66616 1 18342 timothy 2008-01-08 20:38:53 -0800 Created attachment 18342 Patch 66620 2 18342 beidson 2008-01-08 20:48:50 -0800 Comment on attachment 18342 Patch r=me 66622 3 timothy 2008-01-08 20:49:49 -0800 Landed a fix in r29335. 18342 2008-01-08 20:38:53 -0800 2008-01-08 20:48:50 -0800 Patch 16678.patch text/plain 1415 timothy SW5kZXg6IENoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBDaGFuZ2VMb2cJKHJldmlzaW9uIDI5MzMz KQorKysgQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBAIC0xLDMgKzEsMTUgQEAKKzIwMDgtMDEt MDggIFRpbW90aHkgSGF0Y2hlciAgPHRpbW90aHlAYXBwbGUuY29tPgorCisgICAgICAgIFJldmll d2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIEJ1ZyAxNjY3ODogVW5yZXByb2R1Y2li bGUgY3Jhc2ggaW4gS0pTOjpKU09iamVjdDo6aW5oZXJpdHMoKSBhZnRlciB1c2luZyBXZWIgSW5z cGVjdG9yCisgICAgICAgIGh0dHA6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE2 Njc4CisKKyAgICAgICAgQWRkIGEgTlVMTCBjaGVjayBmb3IgY29udHJvbGxlciBiZWZvcmUgY2Fs bGluZyBKU09iamVjdFNldFByaXZhdGUuCisKKyAgICAgICAgKiBwYWdlL0luc3BlY3RvckNvbnRy b2xsZXIuY3BwOgorICAgICAgICAoV2ViQ29yZTo6SW5zcGVjdG9yQ29udHJvbGxlcjo6fkluc3Bl Y3RvckNvbnRyb2xsZXIpOgorCiAyMDA4LTAxLTA4ICBUaW1vdGh5IEhhdGNoZXIgIDx0aW1vdGh5 QGFwcGxlLmNvbT4KIAogICAgICAgICBSZXZpZXdlZCBieSBEYXJpbiBBZGxlci4KSW5kZXg6IHBh Z2UvSW5zcGVjdG9yQ29udHJvbGxlci5jcHAKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gcGFnZS9JbnNwZWN0b3JD b250cm9sbGVyLmNwcAkocmV2aXNpb24gMjkzMzMpCisrKyBwYWdlL0luc3BlY3RvckNvbnRyb2xs ZXIuY3BwCSh3b3JraW5nIGNvcHkpCkBAIC01OTQsNyArNTk0LDggQEAgSW5zcGVjdG9yQ29udHJv bGxlcjo6fkluc3BlY3RvckNvbnRyb2xsZQogICAgICAgICBKU09iamVjdFJlZiBnbG9iYWwgPSBK U0NvbnRleHRHZXRHbG9iYWxPYmplY3QobV9zY3JpcHRDb250ZXh0KTsKICAgICAgICAgSlNSZXRh aW5QdHI8SlNTdHJpbmdSZWY+IGNvbnRyb2xsZXJQcm9wZXJ0eShBZG9wdCwgSlNTdHJpbmdDcmVh dGVXaXRoVVRGOENTdHJpbmcoIkluc3BlY3RvckNvbnRyb2xsZXIiKSk7CiAgICAgICAgIEpTT2Jq ZWN0UmVmIGNvbnRyb2xsZXIgPSBKU1ZhbHVlVG9PYmplY3QobV9zY3JpcHRDb250ZXh0LCBKU09i amVjdEdldFByb3BlcnR5KG1fc2NyaXB0Q29udGV4dCwgZ2xvYmFsLCBjb250cm9sbGVyUHJvcGVy dHkuZ2V0KCksIDApLCAwKTsKLSAgICAgICAgSlNPYmplY3RTZXRQcml2YXRlKGNvbnRyb2xsZXIs IDApOworICAgICAgICBpZiAoY29udHJvbGxlcikKKyAgICAgICAgICAgIEpTT2JqZWN0U2V0UHJp dmF0ZShjb250cm9sbGVyLCAwKTsKICAgICB9CiAKICAgICBpZiAobV9wYWdlKQo=