<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>19451</bug_id>
          
          <creation_ts>2008-06-09 14:07:01 -0700</creation_ts>
          <short_desc>Crash: m_disconnectedNodesWithEventListeners not updated when nodes adopted</short_desc>
          <delta_ts>2008-06-10 14:08:02 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Mac</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P1</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Eric Seidel (no email)">eric</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>ap</cc>
    
    <cc>mitz</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>82765</commentid>
    <comment_count>0</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-09 14:07:01 -0700</bug_when>
    <thetext>Crash: m_disconnectedNodesWithEventListeners not updated when nodes adopted

Thus it contains stale pointers.  The test cases crashes Safari every time for me (in debug mode), about to try release mode too.

I don&apos;t believe this is a security issue, but it is a p1 crasher.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82766</commentid>
    <comment_count>1</comment_count>
      <attachid>21597</attachid>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-09 14:09:23 -0700</bug_when>
    <thetext>Created attachment 21597
test case (crashes Safari)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82767</commentid>
    <comment_count>2</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-09 14:14:17 -0700</bug_when>
    <thetext>This crashes Debug mode for me, but might not crash release mode.  A way to make it crash release mode would be to probably force a GC between the two navigations.  I&apos;m not sure I remember how to force a GC (probably allocate 1000 objects).</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82770</commentid>
    <comment_count>3</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-09 14:38:00 -0700</bug_when>
    <thetext>Yup.  Crashes every time in debug mode.  Not sure how to make release mode crash here.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82771</commentid>
    <comment_count>4</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-09 14:38:43 -0700</bug_when>
    <thetext>This is the crashing stack trace, btw:

Process:         Safari [16736]
Path:            /Applications/Safari.app/Contents/MacOS/Safari
Identifier:      com.apple.Safari
Version:         3.1.1 (5525.18)
Build Info:      WebBrowser-55251800~2
Code Type:       X86 (Native)
Parent Process:  perl [16730]

Date/Time:       2008-06-09 14:40:31.842 -0700
OS Version:      Mac OS X 10.5.2 (9C7010)
Report Version:  6

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x0000000065523031
Crashed Thread:  0

Thread 0 Crashed:
0   ???                           	0x65523031 0 + 1699885105
1   com.apple.WebCore             	0x028618bf WebCore::Document::removeAllDisconnectedNodeEventListeners() + 81 (Document.cpp:1323)
2   com.apple.WebCore             	0x02861931 WebCore::Document::removeAllEventListenersFromAllNodes() + 33 (Document.cpp:1302)
3   com.apple.WebCore             	0x0290ceb7 WebCore::FrameLoader::stopLoading(bool) + 541 (FrameLoader.cpp:599)
4   com.apple.WebCore             	0x0290d4d6 WebCore::FrameLoader::closeURL() + 36 (FrameLoader.cpp:661)
5   com.apple.WebCore             	0x0290f7b8 WebCore::FrameLoader::transitionToCommitted(WTF::PassRefPtr&lt;WebCore::CachedPage&gt;) + 262 (FrameLoader.cpp:2697)
6   com.apple.WebCore             	0x0290fd6b WebCore::FrameLoader::commitProvisionalLoad(WTF::PassRefPtr&lt;WebCore::CachedPage&gt;) + 335 (FrameLoader.cpp:2654)
7   com.apple.WebCore             	0x0288af92 WebCore::DocumentLoader::commitIfReady() + 94 (DocumentLoader.cpp:334)
8   com.apple.WebCore             	0x0288b221 WebCore::DocumentLoader::finishedLoading() + 27 (DocumentLoader.cpp:342)
9   com.apple.WebCore             	0x029053c2 WebCore::FrameLoader::finishedLoading() + 72 (FrameLoader.cpp:2908)
10  com.apple.WebCore             	0x02afe11b WebCore::MainResourceLoader::didFinishLoading() + 207 (MainResourceLoader.cpp:321)
11  com.apple.WebCore             	0x02afe725 WebCore::MainResourceLoader::continueAfterContentPolicy(WebCore::PolicyAction, WebCore::ResourceResponse const&amp;) + 1283 (MainResourceLoader.cpp:252)
12  com.apple.WebCore             	0x02afe7fb WebCore::MainResourceLoader::continueAfterContentPolicy(WebCore::PolicyAction) + 183 (MainResourceLoader.cpp:266)
13  com.apple.WebCore             	0x02afe828 WebCore::MainResourceLoader::callContinueAfterContentPolicy(void*, WebCore::PolicyAction) + 24 (MainResourceLoader.cpp:258)
14  com.apple.WebCore             	0x028fee55 WebCore::PolicyCheck::call(WebCore::PolicyAction) + 241 (FrameLoader.cpp:4726)
15  com.apple.WebCore             	0x0290478a WebCore::FrameLoader::continueAfterContentPolicy(WebCore::PolicyAction) + 68 (FrameLoader.cpp:3137)
16  com.apple.WebKit              	0x001bd37e WebFrameLoaderClient::receivedPolicyDecison(WebCore::PolicyAction) + 296 (WebFrameLoaderClient.mm:992)
17  com.apple.WebKit              	0x001bd630 -[WebFramePolicyListener receivedPolicyDecision:] + 134 (WebFrameLoaderClient.mm:1534)
18  com.apple.WebKit              	0x001bd21e -[WebFramePolicyListener use] + 44 (WebFrameLoaderClient.mm:1550)
19  com.apple.Safari              	0x0002441f 0x1000 + 144415
20  com.apple.CoreFoundation      	0x9043cb7d __invoking___ + 29
21  com.apple.CoreFoundation      	0x9043c568 -[NSInvocation invoke] + 136
22  com.apple.CoreFoundation      	0x9043c638 -[NSInvocation invokeWithTarget:] + 72
23  com.apple.WebKit              	0x0021b7a5 -[_WebSafeForwarder forwardInvocation:] + 273 (WebView.mm:1694)
24  com.apple.CoreFoundation      	0x9043caaa ___forwarding___ + 986
25  com.apple.CoreFoundation      	0x9043cb12 _CF_forwarding_prep_0 + 50
26  com.apple.WebKit              	0x001bd596 WebFrameLoaderClient::dispatchDecidePolicyForMIMEType(void (WebCore::FrameLoader::*)(WebCore::PolicyAction), WebCore::String const&amp;, WebCore::ResourceRequest const&amp;) + 206 (WebFrameLoaderClient.mm:584)
27  com.apple.WebCore             	0x0290571b WebCore::FrameLoader::checkContentPolicy(WebCore::String const&amp;, void (*)(void*, WebCore::PolicyAction), void*) + 371 (FrameLoader.cpp:2363)
28  com.apple.WebCore             	0x02aff748 WebCore::MainResourceLoader::didReceiveResponse(WebCore::ResourceResponse const&amp;) + 434 (MainResourceLoader.cpp:292)
29  com.apple.WebCore             	0x02afecc6 WebCore::MainResourceLoader::handleEmptyLoad(WebCore::KURL const&amp;, bool) + 326 (MainResourceLoader.cpp:349)
30  com.apple.WebCore             	0x02afef98 WebCore::MainResourceLoader::loadNow(WebCore::ResourceRequest&amp;) + 692 (MainResourceLoader.cpp:400)
31  com.apple.WebCore             	0x02aff505 WebCore::MainResourceLoader::load(WebCore::ResourceRequest const&amp;, WebCore::SubstituteData const&amp;) + 897 (MainResourceLoader.cpp:445)
32  com.apple.WebCore             	0x028896f0 WebCore::DocumentLoader::startLoadingMainResource(unsigned long) + 276 (DocumentLoader.cpp:797)
33  com.apple.WebCore             	0x028ff9e9 WebCore::FrameLoader::continueLoadAfterWillSubmitForm(WebCore::PolicyAction) + 287 (FrameLoader.cpp:3160)
34  com.apple.WebCore             	0x02904bf2 WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, bool) + 806 (FrameLoader.cpp:3771)
35  com.apple.WebCore             	0x02904c40 WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy(void*, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, bool) + 70 (FrameLoader.cpp:3717)
36  com.apple.WebCore             	0x02901800 WebCore::PolicyCheck::call(bool) + 110 (FrameLoader.cpp:4714)
37  com.apple.WebCore             	0x02904667 WebCore::FrameLoader::continueAfterNavigationPolicy(WebCore::PolicyAction) + 397 (FrameLoader.cpp:3710)
38  com.apple.WebKit              	0x001bd37e WebFrameLoaderClient::receivedPolicyDecison(WebCore::PolicyAction) + 296 (WebFrameLoaderClient.mm:992)
39  com.apple.WebKit              	0x001bd630 -[WebFramePolicyListener receivedPolicyDecision:] + 134 (WebFrameLoaderClient.mm:1534)
40  com.apple.WebKit              	0x001bd21e -[WebFramePolicyListener use] + 44 (WebFrameLoaderClient.mm:1550)
41  com.apple.CoreFoundation      	0x9043cb7d __invoking___ + 29
42  com.apple.CoreFoundation      	0x9043c568 -[NSInvocation invoke] + 136
43  com.apple.CoreFoundation      	0x9043c638 -[NSInvocation invokeWithTarget:] + 72
44  com.apple.WebKit              	0x0021b7a5 -[_WebSafeForwarder forwardInvocation:] + 273 (WebView.mm:1694)
45  com.apple.CoreFoundation      	0x9043caaa ___forwarding___ + 986
46  com.apple.CoreFoundation      	0x9043cb12 _CF_forwarding_prep_0 + 50
47  com.apple.WebKit              	0x001bf7bd WebFrameLoaderClient::dispatchDecidePolicyForNavigationAction(void (WebCore::FrameLoader::*)(WebCore::PolicyAction), WebCore::NavigationAction const&amp;, WebCore::ResourceRequest const&amp;) + 213 (WebFrameLoaderClient.mm:606)
48  com.apple.WebCore             	0x02905bab WebCore::FrameLoader::checkNavigationPolicy(WebCore::ResourceRequest const&amp;, WebCore::DocumentLoader*, WTF::PassRefPtr&lt;WebCore::FormState&gt;, void (*)(void*, WebCore::ResourceRequest const&amp;, WTF::PassRefPtr&lt;WebCore::FormState&gt;, bool), void*) + 709 (FrameLoader.cpp:3680)
49  com.apple.WebCore             	0x0290679c WebCore::FrameLoader::load(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::PassRefPtr&lt;WebCore::FormState&gt;) + 368 (FrameLoader.cpp:2256)
50  com.apple.WebCore             	0x0290721c WebCore::FrameLoader::load(WebCore::ResourceRequest const&amp;, WebCore::NavigationAction const&amp;, WebCore::FrameLoadType, WTF::PassRefPtr&lt;WebCore::FormState&gt;) + 270 (FrameLoader.cpp:2209)
51  com.apple.WebCore             	0x0290880d WebCore::FrameLoader::load(WebCore::KURL const&amp;, WebCore::String const&amp;, WebCore::FrameLoadType, WebCore::String const&amp;, WebCore::Event*, WTF::PassRefPtr&lt;WebCore::FormState&gt;) + 963 (FrameLoader.cpp:2157)
52  com.apple.WebCore             	0x02908634 WebCore::FrameLoader::load(WebCore::KURL const&amp;, WebCore::String const&amp;, WebCore::FrameLoadType, WebCore::String const&amp;, WebCore::Event*, WTF::PassRefPtr&lt;WebCore::FormState&gt;) + 490 (FrameLoader.cpp:2121)
53  com.apple.WebCore             	0x02908f5a WebCore::FrameLoader::load(WebCore::FrameLoadRequest const&amp;, bool, bool, WebCore::Event*, WebCore::HTMLFormElement*, WTF::HashMap&lt;WebCore::String, WebCore::String, WebCore::StringHash, WTF::HashTraits&lt;WebCore::String&gt;, WTF::HashTraits&lt;WebCore::String&gt; &gt; const&amp;) + 936 (FrameLoader.cpp:2093)
54  com.apple.WebCore             	0x0290917c WebCore::FrameLoader::urlSelected(WebCore::FrameLoadRequest const&amp;, WebCore::Event*, bool, bool) + 222 (FrameLoader.cpp:3276)
55  com.apple.WebCore             	0x0290b238 WebCore::FrameLoader::urlSelected(WebCore::ResourceRequest const&amp;, WebCore::String const&amp;, WebCore::Event*, bool, bool) + 372 (FrameLoader.cpp:410)
56  com.apple.WebCore             	0x0290b35d WebCore::FrameLoader::changeLocation(WebCore::KURL const&amp;, WebCore::String const&amp;, bool, bool) + 263 (FrameLoader.cpp:393)
57  com.apple.WebCore             	0x0290b3db WebCore::FrameLoader::changeLocation(WebCore::String const&amp;, WebCore::String const&amp;, bool, bool) + 89 (FrameLoader.cpp:381)
58  com.apple.WebCore             	0x0290b51d WebCore::FrameLoader::redirectionTimerFired(WebCore::Timer&lt;WebCore::FrameLoader&gt;*) + 303 (FrameLoader.cpp:1506)
59  com.apple.WebCore             	0x0291205d WebCore::Timer&lt;WebCore::FrameLoader&gt;::fired() + 89 (Timer.h:99)
60  com.apple.WebCore             	0x02d557fe WebCore::TimerBase::fireTimers(double, WTF::Vector&lt;WebCore::TimerBase*, 0ul&gt; const&amp;) + 198 (Timer.cpp:350)
61  com.apple.WebCore             	0x02d558a6 WebCore::TimerBase::sharedTimerFired() + 110 (Timer.cpp:370)
62  com.apple.WebCore             	0x02d30032 WebCore::timerFired(__CFRunLoopTimer*, void*) + 78 (SharedTimerMac.mm:85)
63  com.apple.CoreFoundation      	0x903bdb5e CFRunLoopRunSpecific + 4494
64  com.apple.CoreFoundation      	0x903bdd18 CFRunLoopRunInMode + 88
65  com.apple.HIToolbox           	0x915e36a0 RunCurrentEventLoopInMode + 283
66  com.apple.HIToolbox           	0x915e34b9 ReceiveNextEventCommon + 374
67  com.apple.HIToolbox           	0x915e332d BlockUntilNextEventMatchingListInMode + 106
68  com.apple.AppKit              	0x904f87d9 _DPSNextEvent + 657
69  com.apple.AppKit              	0x904f808e -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 128
70  com.apple.Safari              	0x00007f2e 0x1000 + 28462
71  com.apple.AppKit              	0x904f10c5 -[NSApplication run] + 795
72  com.apple.AppKit              	0x904be30a NSApplicationMain + 574
73  com.apple.Safari              	0x000b9906 0x1000 + 755974

Thread 1:
0   libSystem.B.dylib             	0x94de2bce __semwait_signal + 10
1   libSystem.B.dylib             	0x94e0d8cd pthread_cond_wait$UNIX2003 + 73
2   com.apple.JavaScriptCore      	0x00512b7f WTF::ThreadCondition::wait(WTF::Mutex&amp;) + 39 (ThreadingPthreads.cpp:207)
3   com.apple.WebCore             	0x029b19a9 WebCore::IconDatabase::syncThreadMainLoop() + 641 (IconDatabase.cpp:1313)
4   com.apple.WebCore             	0x029b1e8c WebCore::IconDatabase::iconDatabaseSyncThread() + 1198 (IconDatabase.cpp:1015)
5   com.apple.WebCore             	0x029b1ebb WebCore::IconDatabase::iconDatabaseSyncThreadStart(void*) + 23 (IconDatabase.cpp:919)
6   libSystem.B.dylib             	0x94e0cc55 _pthread_start + 321
7   libSystem.B.dylib             	0x94e0cb12 thread_start + 34

Thread 2:
0   libSystem.B.dylib             	0x94ddb9e6 mach_msg_trap + 10
1   libSystem.B.dylib             	0x94de31dc mach_msg + 72
2   com.apple.CoreFoundation      	0x903bd0de CFRunLoopRunSpecific + 1806
3   com.apple.CoreFoundation      	0x903bdd18 CFRunLoopRunInMode + 88
4   com.apple.CFNetwork           	0x94ad16cc CFURLCacheWorkerThread(void*) + 396
5   libSystem.B.dylib             	0x94e0cc55 _pthread_start + 321
6   libSystem.B.dylib             	0x94e0cb12 thread_start + 34

Thread 3:
0   libSystem.B.dylib             	0x94ddb9e6 mach_msg_trap + 10
1   libSystem.B.dylib             	0x94de31dc mach_msg + 72
2   com.apple.CoreFoundation      	0x903bd0de CFRunLoopRunSpecific + 1806
3   com.apple.CoreFoundation      	0x903bdd18 CFRunLoopRunInMode + 88
4   com.apple.Foundation          	0x950faac0 +[NSURLConnection(NSURLConnectionReallyInternal) _resourceLoadLoop:] + 320
5   com.apple.Foundation          	0x950975ad -[NSThread main] + 45
6   com.apple.Foundation          	0x95097154 __NSThread__main__ + 308
7   libSystem.B.dylib             	0x94e0cc55 _pthread_start + 321
8   libSystem.B.dylib             	0x94e0cb12 thread_start + 34

Thread 0 crashed with X86 Thread State (32-bit):
  eax: 0x1624e230  ebx: 0x027d4958  ecx: 0xbfffc85c  edx: 0x65523031
  edi: 0x1624e9b0  esi: 0x001b9a8c  ebp: 0xbfffc878  esp: 0xbfffc85c
   ss: 0x0000001f  efl: 0x00010216  eip: 0x65523031   cs: 0x00000017
   ds: 0x0000001f   es: 0x0000001f   fs: 0x00000000   gs: 0x00000037
  cr2: 0x65523031

Binary Images:
    0x1000 -   0x132fef  com.apple.Safari 3.1.1 (5525.18) &lt;7b337979f11e6e15dd50072420a92680&gt; /Applications/Safari.app/Contents/MacOS/Safari
  0x17a000 -   0x292fef  com.apple.WebKit 527+ (527+) &lt;81261c18a11f11f12ea237702d8b8f24&gt; /Users/eseidel/Projects/build/Debug/WebKit.framework/Versions/A/WebKit
  0x43d000 -   0x44cff8  SyndicationUI ??? (???) &lt;d148012be42c8a6e21f9cc58739c8dc7&gt; /System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI
  0x45c000 -   0x54ffe4  com.apple.JavaScriptCore 527+ (527+) &lt;faa504ea8546601384b28a44464d2776&gt; /Users/eseidel/Projects/build/Debug/JavaScriptCore.framework/Versions/A/JavaScriptCore
  0x900000 -   0x905ff3  libCGXCoreImage.A.dylib ??? (???) &lt;978986709159e5fe9e094df5efddac1d&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGXCoreImage.A.dylib
  0xaee000 -   0xbdcfef  com.apple.RawCamera.bundle 2.0.3 (2.0.3) /System/Library/CoreServices/RawCamera.bundle/Contents/MacOS/RawCamera
 0x2702000 -  0x338aff2  com.apple.WebCore 527+ (527+) &lt;b9fb2ba27a5867102ae6b2ddcd6f1356&gt; /Users/eseidel/Projects/build/Debug/WebCore.framework/Versions/A/WebCore
0x8fe00000 - 0x8fe2da53  dyld 96.2 (???) &lt;7af47d3b00b2268947563c7fa8c59a07&gt; /usr/lib/dyld
0x90003000 - 0x90007fff  libmathCommon.A.dylib ??? (???) /usr/lib/system/libmathCommon.A.dylib
0x90009000 - 0x90095ff7  com.apple.LaunchServices 286.5 (286.5) &lt;33c3ae54abb276b61a99d4c764d883e2&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x90096000 - 0x90161fff  com.apple.ColorSync 4.5.0 (4.5.0) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x90205000 - 0x9034aff7  com.apple.ImageIO.framework 2.0.1 (2.0.1) &lt;68ba11e689a9ca30f8310935cd1e02d6&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x9034b000 - 0x9047dfef  com.apple.CoreFoundation 6.5.1 (476.10) &lt;d5bed2688a5eea11a6dc3a3c5c17030e&gt; /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x9047e000 - 0x9049dffa  libJPEG.dylib ??? (???) &lt;0cfb80109d624beb9ceb3c43b6c5ec10&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x9049e000 - 0x904a5fe9  libgcc_s.1.dylib ??? (???) &lt;f53c808e87d1184c0f9df63aef53ce0b&gt; /usr/lib/libgcc_s.1.dylib
0x904a6000 - 0x904a8ff5  libRadiance.dylib ??? (???) &lt;20eadb285da83df96c795c2c5fa20590&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x904a9000 - 0x904b7ffd  libz.1.dylib ??? (???) &lt;5ddd8539ae2ebfd8e7cc1c57525385c7&gt; /usr/lib/libz.1.dylib
0x904b8000 - 0x90cb5fef  com.apple.AppKit 6.5.2 (949.26) &lt;bc4593edd8a224409fb6953a354505a0&gt; /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x90cfe000 - 0x90fd7ff3  com.apple.CoreServices.CarbonCore 785.8 (785.8) &lt;827c228e7d717b397cdb4941eba69553&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x91045000 - 0x91045fff  com.apple.Carbon 136 (136) &lt;98a5e3bc0c4fa44bbb09713bb88707fe&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x912af000 - 0x912befff  libsasl2.2.dylib ??? (???) &lt;b9e1ca0b6612e280b6cbea6df0eec5f6&gt; /usr/lib/libsasl2.2.dylib
0x912bf000 - 0x91319ff7  com.apple.CoreText 2.0.1 (???) &lt;07494945ad1e3f5395599f42748457cc&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x9131a000 - 0x91364fe1  com.apple.securityinterface 3.0 (32532) &lt;f521dae416ce7a3bdd594b0d4e2fb517&gt; /System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
0x91383000 - 0x91383ffb  com.apple.installserver.framework 1.0 (8) /System/Library/PrivateFrameworks/InstallServer.framework/Versions/A/InstallServer
0x91384000 - 0x913bbfff  com.apple.SystemConfiguration 1.9.1 (1.9.1) &lt;8a76e429301afe4eba1330bfeaabd9f2&gt; /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x913c2000 - 0x913c6fff  libGIF.dylib ??? (???) &lt;d4234e6f5e5f530bdafb969157f1f17b&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x913c7000 - 0x91479ffb  libcrypto.0.9.7.dylib ??? (???) &lt;330b0e48e67faffc8c22dfc069ca7a47&gt; /usr/lib/libcrypto.0.9.7.dylib
0x914ac000 - 0x914acffc  com.apple.audio.units.AudioUnit 1.5 (1.5) /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x914ad000 - 0x9152afef  libvMisc.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x9159e000 - 0x915a9fe7  libCSync.A.dylib ??? (???) &lt;df82fc093e498a9eb5490761cb292218&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x915aa000 - 0x915b2fff  com.apple.DiskArbitration 2.2.1 (2.2.1) &lt;75b0c8d8940a8a27816961dddcac8e0f&gt; /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x915b3000 - 0x918bbfff  com.apple.HIToolbox 1.5.2 (???) &lt;7449d6f2da33ded6936243a92e307459&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x918bc000 - 0x918ccffc  com.apple.LangAnalysis 1.6.4 (1.6.4) &lt;cbeb17ab39f28351fe2ab5b82bf465bc&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x918cd000 - 0x918e5fff  com.apple.openscripting 1.2.6 (???) &lt;b8e553df643f2aec68fa968b3b459b2b&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x918e6000 - 0x9196dff7  libsqlite3.0.dylib ??? (???) &lt;6978bbcca4277d6ae9f042beff643f7d&gt; /usr/lib/libsqlite3.0.dylib
0x9196e000 - 0x91979ff9  com.apple.helpdata 1.0 (14) /System/Library/PrivateFrameworks/HelpData.framework/Versions/A/HelpData
0x9197a000 - 0x91a5fff3  com.apple.CoreData 100.1 (186) &lt;8e28162ef2288692615b52acc01f8b54&gt; /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x91a60000 - 0x91ab0feb  com.apple.framework.familycontrols 1.0.2 (1.0.2) &lt;41191d08725b27c8480cd7e90fd73ee8&gt; /System/Library/PrivateFrameworks/FamilyControls.framework/Versions/A/FamilyControls
0x91afe000 - 0x91c7cfff  com.apple.AddressBook.framework 4.1 (687.1) &lt;b2f2f2c925eb080e53b841014e4f9a7c&gt; /System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x91eaa000 - 0x91ecefff  libxslt.1.dylib ??? (???) &lt;4933ddc7f6618743197aadc85b33b5ab&gt; /usr/lib/libxslt.1.dylib
0x91ecf000 - 0x91ecfffd  com.apple.Accelerate 1.4.2 (Accelerate 1.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x91ed0000 - 0x922e0fef  libBLAS.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x922e1000 - 0x92313fff  com.apple.LDAPFramework 1.4.3 (106) &lt;3a5c9df6032143cd6bc2658a9d328d8e&gt; /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x92314000 - 0x9233cfff  libcups.2.dylib ??? (???) &lt;2f0a710a9128882efb2ed92ad139b58c&gt; /usr/lib/libcups.2.dylib
0x9233d000 - 0x9241cfff  libobjc.A.dylib ??? (???) &lt;a53206274b6c2d42691f677863f379ae&gt; /usr/lib/libobjc.A.dylib
0x9241d000 - 0x92541fe3  com.apple.audio.toolbox.AudioToolbox 1.5.1 (1.5.1) /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x92542000 - 0x92552fff  com.apple.speech.synthesis.framework 3.6.59 (3.6.59) &lt;4ffef145fad3d4d787e0c33eab26b336&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x93604000 - 0x93660ff7  com.apple.htmlrendering 68 (1.1.3) &lt;fe87a9dede38db00e6c8949942c6bd4f&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x93661000 - 0x936a3fef  com.apple.NavigationServices 3.5.1 (161) &lt;cc6bd78eabf1e2e7166914e9f12f5850&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x936a4000 - 0x936e9fef  com.apple.Metadata 10.5.2 (398.7) &lt;73a6424c06effc474e699cde6883de99&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x936ea000 - 0x936feff3  com.apple.ImageCapture 4.0 (5.0.0) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x936ff000 - 0x93727ff7  com.apple.shortcut 1 (1.0) &lt;057783867138902b52bc0941fedb74d1&gt; /System/Library/PrivateFrameworks/Shortcut.framework/Versions/A/Shortcut
0x93728000 - 0x93766ff7  libGLImage.dylib ??? (???) &lt;090de775838db03ddc710f57abbf6218&gt; /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x93768000 - 0x93c3bfde  libGLProgrammability.dylib ??? (???) &lt;a3d68f17f37ff55a3e61aca1e3aee522&gt; /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib
0x93c8b000 - 0x93d1efff  com.apple.ink.framework 101.3 (86) &lt;bf3fa8927b4b8baae92381a976fd2079&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x93d2d000 - 0x93d92ffb  com.apple.ISSupport 1.6 (34) /System/Library/PrivateFrameworks/ISSupport.framework/Versions/A/ISSupport
0x940ba000 - 0x940f4fff  com.apple.coreui 1.1 (61) /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI
0x940f5000 - 0x940f7fff  com.apple.securityhi 3.0 (30817) &lt;2b2854123fed609d1820d2779e2e0963&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x940f8000 - 0x94172ff8  com.apple.print.framework.PrintCore 5.5.2 (245.1) &lt;3c9de512e95fbd838694ee5008d56a28&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x94173000 - 0x941f2ff5  com.apple.SearchKit 1.2.0 (1.2.0) &lt;277b460da86bc222785159fe77e2e2ed&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x941f3000 - 0x945b1fea  libLAPACK.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x945b2000 - 0x945b2ffa  com.apple.CoreServices 32 (32) &lt;2fcc8f3bd5bbfc000b476cad8e6a3dd2&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x945b3000 - 0x945ecffe  com.apple.securityfoundation 3.0 (32989) &lt;e9171eda22c69c884a04a001aeb526e0&gt; /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x945ed000 - 0x94694feb  com.apple.QD 3.11.52 (???) &lt;c72bd7bd2ce12694c3640a731d1ad878&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x94695000 - 0x946cbfef  libtidy.A.dylib ??? (???) &lt;e4d3e7399fb83d7f145f9b4ec8196242&gt; /usr/lib/libtidy.A.dylib
0x946cc000 - 0x946ccffd  com.apple.Accelerate.vecLib 3.4.2 (vecLib 3.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x946cd000 - 0x94749feb  com.apple.audio.CoreAudio 3.1.0 (3.1) &lt;70bb7c657061631491029a61babe0b26&gt; /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x94752000 - 0x9491dff7  com.apple.security 5.0.2 (33001) &lt;0788969ffe7961153219be10786da436&gt; /System/Library/Frameworks/Security.framework/Versions/A/Security
0x9491e000 - 0x9491fffc  libffi.dylib ??? (???) &lt;a3b573eb950ca583290f7b2b4c486d09&gt; /usr/lib/libffi.dylib
0x94920000 - 0x9494dfeb  libvDSP.dylib ??? (???) &lt;b232c018ddd040ec4e2c2af632dd497f&gt; /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x9494e000 - 0x9494eff8  com.apple.ApplicationServices 34 (34) &lt;8f910fa65f01d401ad8d04cc933cf887&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x9494f000 - 0x9494fffd  com.apple.vecLib 3.4.2 (vecLib 3.4.2) /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib
0x94985000 - 0x94a86fef  com.apple.PubSub 1.0.3 (65.1) /System/Library/Frameworks/PubSub.framework/Versions/A/PubSub
0x94ac6000 - 0x94b3dfe3  com.apple.CFNetwork 221.5 (221.5) &lt;5474cdd7d2a8b2e8059de249c702df9e&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x94b3e000 - 0x94b41fff  com.apple.help 1.1 (36) &lt;b507b08e484cb89033e9cf23062d77de&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x94b42000 - 0x94b49ffe  libbsm.dylib ??? (???) &lt;d25c63378a5029648ffd4b4669be31bf&gt; /usr/lib/libbsm.dylib
0x94b4a000 - 0x94b50fff  com.apple.print.framework.Print 218.0.2 (220.1) &lt;8bf7ef71216376d12fcd5ec17e43742c&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x94b5e000 - 0x94b8dfe3  com.apple.AE 402.2 (402.2) &lt;e01596187e91af5d48653920017b8c8e&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x94b8e000 - 0x94b92fff  com.apple.OpenDirectory 10.5 (10.5) &lt;e7e4507f5ecd8c8cdcdb2fc0675da0b4&gt; /System/Library/PrivateFrameworks/OpenDirectory.framework/Versions/A/OpenDirectory
0x94b93000 - 0x94b98fff  com.apple.backup.framework 1.0 (1.0) /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup
0x94b99000 - 0x94bbdfeb  libssl.0.9.7.dylib ??? (???) &lt;acee7fc534674498dcac211318aa23e8&gt; /usr/lib/libssl.0.9.7.dylib
0x94bbe000 - 0x94bdeff2  libGL.dylib ??? (???) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x94bdf000 - 0x94bfaffb  libPng.dylib ??? (???) &lt;b6abcac36ec7654ff3e1cfa786b0117b&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x94bfb000 - 0x94cdcff7  libxml2.2.dylib ??? (???) &lt;3cd4cccd4ca35dffa4688436aa0cd908&gt; /usr/lib/libxml2.2.dylib
0x94d9b000 - 0x94ddafef  libTIFF.dylib ??? (???) &lt;6d0f80e9d4d81f3f64c876aca005bd53&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x94ddb000 - 0x94f3aff3  libSystem.B.dylib ??? (???) &lt;4899376234e55593b22fc370935f8cdf&gt; /usr/lib/libSystem.B.dylib
0x94f3b000 - 0x94f40fff  com.apple.CommonPanels 1.2.4 (85) &lt;ea0665f57cd267609466ed8b2b20e893&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x95036000 - 0x9507afeb  com.apple.DirectoryService.PasswordServerFramework 3.0.2 (3.0.2) &lt;cded450287baf9b5de8856b540653322&gt; /System/Library/PrivateFrameworks/PasswordServer.framework/Versions/A/PasswordServer
0x9507b000 - 0x9508cffe  com.apple.CFOpenDirectory 10.5 (10.5) &lt;6a7f55108d77db7384d0e2219d07e9f8&gt; /System/Library/PrivateFrameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Versions/A/CFOpenDirectory
0x9508d000 - 0x95307fe7  com.apple.Foundation 6.5.4 (677.15) &lt;6216196287f98a65ddb654d04d773e7b&gt; /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x95308000 - 0x95365ffb  libstdc++.6.dylib ??? (???) &lt;04b812dcec670daa8b7d2852ab14be60&gt; /usr/lib/libstdc++.6.dylib
0x95366000 - 0x953f9ff3  com.apple.ApplicationServices.ATS 3.2 (???) &lt;cdf31bd0ac7de54a35ee2d27cf86b6be&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x953fa000 - 0x95418fff  libresolv.9.dylib ??? (???) &lt;0629b6dcd71f4aac6a891cbe26253e85&gt; /usr/lib/libresolv.9.dylib
0x95419000 - 0x95437ff3  com.apple.DirectoryService.Framework 3.5.1 (3.5.1) &lt;96407dca4d6b1d10ae5ca1881e31b27a&gt; /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x95438000 - 0x9544efe7  com.apple.CoreVideo 1.5.0 (1.5.0) &lt;bad2d3a9a92fdecd02e64f0b73a76f27&gt; /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo
0x954f0000 - 0x95506fff  com.apple.DictionaryServices 1.0.0 (1.0.0) &lt;ad0aa0252e3323d182e17f50defe56fc&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices
0x955d6000 - 0x95617fe7  libRIP.A.dylib ??? (???) &lt;9d42e83d860433f9126c4871d1fe0ce8&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x95618000 - 0x95750ff7  libicucore.A.dylib ??? (???) &lt;afcea652ff2ec36885b2c81c57d06d4c&gt; /usr/lib/libicucore.A.dylib
0x95925000 - 0x959b0fff  com.apple.framework.IOKit 1.5.1 (???) &lt;a17f9f5ea7e8016a467e67349f4d3d03&gt; /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x95ae9000 - 0x95e7fff7  com.apple.QuartzCore 1.5.1 (1.5.1) &lt;665c80f6e28555b303020c8007c36b8b&gt; /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x95e80000 - 0x95f30fff  edu.mit.Kerberos 6.0.12 (6.0.12) &lt;3dd13466876a8fe4549cfc1354233ec3&gt; /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
0x95f31000 - 0x95f38ff7  libCGATS.A.dylib ??? (???) &lt;9b29a5500efe01cc3adea67bbc42568e&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib
0x95f39000 - 0x95f45fe7  com.apple.opengl 1.5.6 (1.5.6) &lt;d599b1bb0f8a8da6fd125e2587b27776&gt; /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x95f46000 - 0x965dffff  com.apple.CoreGraphics 1.351.21 (???) &lt;6c93fd21149f389129fe47fa6ef71880&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x965e0000 - 0x965eafeb  com.apple.audio.SoundManager 3.9.2 (3.9.2) &lt;0f2ba6e891d3761212cf5a5e6134d683&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x966cb000 - 0x96785fe3  com.apple.CoreServices.OSServices 224.4 (224.4) &lt;ff5007ab220908ac54b6c661e447d593&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x96786000 - 0x967d6ff7  com.apple.HIServices 1.7.0 (???) &lt;f7e78891a6d08265c83dca8e378be1ea&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x967d7000 - 0x967d9fff  com.apple.CrashReporterSupport 10.5.0 (156) &lt;3088b785b10d03504ed02f3fee5d3aab&gt; /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/CrashReporterSupport
0x967da000 - 0x967e9ffe  com.apple.DSObjCWrappers.Framework 1.2.1 (1.2.1) &lt;eac1c7b7c07ed3148c85934b6f656308&gt; /System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
0x967ea000 - 0x967eaff8  com.apple.Cocoa 6.5 (???) &lt;e064f94d969ce25cb7de3cfb980c3249&gt; /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x967eb000 - 0x96844ff7  libGLU.dylib ??? (???) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x96ff1000 - 0x96ffafff  com.apple.speech.recognition.framework 3.7.24 (3.7.24) &lt;d3180f9edbd9a5e6f283d6156aa3c602&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x96ffb000 - 0x97026fe7  libauto.dylib ??? (???) &lt;42d8422dc23a18071869fdf7b5d8fab5&gt; /usr/lib/libauto.dylib
0x97027000 - 0x970eeff2  com.apple.vImage 3.0 (3.0) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x9711a000 - 0x971a3fe3  com.apple.DesktopServices 1.4.5 (1.4.5) &lt;8b264cd6abbbd750928c637e1247269d&gt; /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0xfffe8000 - 0xfffebfff  libobjc.A.dylib ??? (???) /usr/lib/libobjc.A.dylib
0xffff0000 - 0xffff1780  libSystem.B.dylib ??? (???) /usr/lib/libSystem.B.dylib


</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82783</commentid>
    <comment_count>5</comment_count>
    <who name="">mitz</who>
    <bug_when>2008-06-09 19:52:59 -0700</bug_when>
    <thetext>(In reply to comment #4)
&gt; This is the crashing stack trace, btw:

I can see the value in including the backtrace in a comment rather than as an attachment (it facilitates searches), but please do not paste all threads and the Binary Images section (I am sure you are not using unsupported extensions :-) ). Thanks!</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82850</commentid>
    <comment_count>6</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-10 12:27:50 -0700</bug_when>
    <thetext>(In reply to comment #5)
&gt; (In reply to comment #4)
&gt; &gt; This is the crashing stack trace, btw:
&gt; 
&gt; I can see the value in including the backtrace in a comment rather than as an
&gt; attachment (it facilitates searches), but please do not paste all threads and
&gt; the Binary Images section (I am sure you are not using unsupported extensions
&gt; :-) ). Thanks!

I&apos;m still in favor of this approach (the whole backtrace).  I find them easy to skip over (and most useful when pasted in their entirety).  But I&apos;ll try not to paste more than 1 in future bugs.  
</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82853</commentid>
    <comment_count>7</comment_count>
      <attachid>21608</attachid>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-10 13:35:54 -0700</bug_when>
    <thetext>Created attachment 21608
Fix disconneted event listener crasher

 WebCore/ChangeLog               |   19 +++++++++++++++++++
 WebCore/dom/EventTarget.cpp     |   12 ++++++++++++
 WebCore/dom/EventTarget.h       |    2 ++
 WebCore/dom/EventTargetNode.cpp |   12 ++++++++++++
 WebCore/dom/EventTargetNode.h   |    2 ++
 5 files changed, 47 insertions(+), 0 deletions(-)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82855</commentid>
    <comment_count>8</comment_count>
      <attachid>21608</attachid>
    <who name="Maciej Stachowiak">mjs</who>
    <bug_when>2008-06-10 13:59:21 -0700</bug_when>
    <thetext>Comment on attachment 21608
Fix disconneted event listener crasher

r=me

I&apos;m not a fan of the pattern where EventTarget has methods that are really EventTargetNode-specific, but I guess it could be worse.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82858</commentid>
    <comment_count>9</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-10 14:08:02 -0700</bug_when>
    <thetext>http://trac.webkit.org/changeset/34485</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>21597</attachid>
            <date>2008-06-09 14:09:23 -0700</date>
            <delta_ts>2008-06-09 14:09:23 -0700</delta_ts>
            <desc>test case (crashes Safari)</desc>
            <filename>test-1.html</filename>
            <type>text/html</type>
            <size>606</size>
            <attacher name="Eric Seidel (no email)">eric</attacher>
            
              <data encoding="base64">PGh0bWw+DQo8c2NyaXB0Pg0KZnVuY3Rpb24gdHJhbnNmZXJOb2RlKCkgew0KICB2YXIgbmV3RG9j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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>21608</attachid>
            <date>2008-06-10 13:35:54 -0700</date>
            <delta_ts>2008-06-10 13:59:21 -0700</delta_ts>
            <desc>Fix disconneted event listener crasher</desc>
            <filename>Fix-disconneted-event-listener-crasher.patch</filename>
            <type>text/plain</type>
            <size>3910</size>
            <attacher name="Eric Seidel (no email)">eric</attacher>
            
              <data encoding="base64">NTAxZmU5ZGUwMzc4YmMzYzJjZjk0ZDUwYzdlNDAxNWM3Njc4OTkzZApkaWZmIC0tZ2l0IGEvV2Vi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</data>
<flag name="review"
          id="9473"
          type_id="1"
          status="+"
          setter="mjs"
    />
          </attachment>
      

    </bug>

</bugzilla>