<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>19455</bug_id>
          
          <creation_ts>2008-06-09 18:27:39 -0700</creation_ts>
          <short_desc>Crash at RenderObject::childAt during JustifyCenter</short_desc>
          <delta_ts>2008-06-11 11:32:09 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>HTML Editing</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Mac</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P1</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>18858</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Eric Seidel (no email)">eric</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>justin.garcia</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>82780</commentid>
    <comment_count>0</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-09 18:27:39 -0700</bug_when>
    <thetext>I ran the editing fuzzer again this afternoon and got all the way to 1457

The last command executed was &quot;justifycenter&quot;:

[snip] // thousands of commands...

// START RUN, seed: 1457
doc.designMode = &apos;off&apos;;
doc.designMode = &apos;on&apos;;
doc.execCommand(&apos;justifycenter&apos;, 1, &apos;&apos;);


I have not yet tried to reduce this crasher by feeding the commands into the reducers attached to bug 18858.  I&apos;ll do that when I get a chance.


Process:         Safari [27985]
Path:            /Applications/Safari.app/Contents/MacOS/Safari
Identifier:      com.apple.Safari
Version:         3.1.1 (5525.20)
Build Info:      WebBrowser-55252000~1
Code Type:       X86 (Native)
Parent Process:  perl [27974]

Date/Time:       2008-06-09 18:24:04.311 -0700
OS Version:      Mac OS X 10.5.3 (9D34)
Report Version:  6

Exception Type:  EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x000000000000008c
Crashed Thread:  0

Thread 0 Crashed:
0   com.apple.WebCore             	0x028ba040 WebCore::RenderObject::childAt(unsigned int) const + 14 (RenderObject.cpp:349)
1   com.apple.WebCore             	0x0290a73f WebCore::rendererAfterPosition(WebCore::RenderObject*, unsigned int) + 39 (RenderView.cpp:233)
2   com.apple.WebCore             	0x0290ba0f WebCore::RenderView::setSelection(WebCore::RenderObject*, int, WebCore::RenderObject*, int) + 229 (RenderView.cpp:304)
3   com.apple.WebCore             	0x026076ef WebCore::Frame::selectionLayoutChanged() + 999 (Frame.cpp:631)
4   com.apple.WebCore             	0x0260779a WebCore::Frame::invalidateSelection() + 44 (Frame.cpp:524)
5   com.apple.WebCore             	0x02632087 WebCore::FrameView::layout(bool) + 2161 (FrameView.cpp:491)
6   com.apple.WebCore             	0x02578df3 WebCore::Document::updateLayout() + 175 (Document.cpp:1198)
7   com.apple.WebCore             	0x02587021 WebCore::Document::updateLayoutIgnorePendingStylesheets() + 199 (Document.cpp:1230)
8   com.apple.WebCore             	0x02a70e4b WebCore::VisiblePosition::canonicalPosition(WebCore::Position const&amp;) + 71 (VisiblePosition.cpp:464)
9   com.apple.WebCore             	0x02a7124a WebCore::VisiblePosition::init(WebCore::Position const&amp;, WebCore::EAffinity) + 40 (VisiblePosition.cpp:60)
10  com.apple.WebCore             	0x02a7131a WebCore::VisiblePosition::VisiblePosition(WebCore::Position const&amp;, WebCore::EAffinity) + 42
11  com.apple.WebCore             	0x02a38db2 WebCore::Selection::validate() + 90 (Selection.cpp:201)
12  com.apple.WebCore             	0x02a3a48d WebCore::Selection::Selection(WebCore::Position const&amp;, WebCore::Position const&amp;, WebCore::EAffinity) + 103
13  com.apple.WebCore             	0x02432ba1 WebCore::ApplyStyleCommand::updateStartEnd(WebCore::Position const&amp;, WebCore::Position const&amp;) + 227 (ApplyStyleCommand.cpp:316)
14  com.apple.WebCore             	0x02439376 WebCore::ApplyStyleCommand::applyBlockStyle(WebCore::CSSMutableStyleDeclaration*) + 2040 (ApplyStyleCommand.cpp:419)
15  com.apple.WebCore             	0x024395eb WebCore::ApplyStyleCommand::doApply() + 481 (ApplyStyleCommand.cpp:360)
16  com.apple.WebCore             	0x025b1b98 WebCore::EditCommand::apply() + 408 (EditCommand.cpp:96)
17  com.apple.WebCore             	0x025b1c9d WebCore::applyCommand(WTF::PassRefPtr&lt;WebCore::EditCommand&gt;) + 25 (EditCommand.cpp:253)
18  com.apple.WebCore             	0x025b485a WebCore::Editor::applyParagraphStyle(WebCore::CSSStyleDeclaration*, WebCore::EditAction) + 200 (Editor.cpp:625)
19  com.apple.WebCore             	0x025bd822 WebCore::executeApplyParagraphStyle(WebCore::Frame*, WebCore::EditorCommandSource, WebCore::EditAction, int, WebCore::String const&amp;) + 176 (EditorCommand.cpp:160)
20  com.apple.WebCore             	0x025bf5f6 WebCore::executeJustifyCenter(WebCore::Frame*, WebCore::Event*, WebCore::EditorCommandSource, WebCore::String const&amp;) + 76 (EditorCommand.cpp:510)
21  com.apple.WebCore             	0x025bd4e4 WebCore::Editor::Command::execute(WebCore::String const&amp;, WebCore::Event*) const + 210 (EditorCommand.cpp:1371)
22  com.apple.WebCore             	0x0257a322 WebCore::Document::execCommand(WebCore::String const&amp;, bool, WebCore::String const&amp;) + 62 (Document.cpp:3089)
23  com.apple.WebCore             	0x02737d97 WebCore::jsDocumentPrototypeFunctionExecCommand(KJS::ExecState*, KJS::JSObject*, KJS::List const&amp;) + 299 (JSDocument.cpp:800)
24  com.apple.JavaScriptCore      	0x00434380 KJS::PrototypeFunction::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&amp;) + 34 (function.cpp:734)
25  com.apple.JavaScriptCore      	0x004570b7 KJS::functionProtoFuncApply(KJS::ExecState*, KJS::JSObject*, KJS::List const&amp;) + 443 (function_object.cpp:107)
26  com.apple.JavaScriptCore      	0x00434380 KJS::PrototypeFunction::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&amp;) + 34 (function.cpp:734)
27  com.apple.JavaScriptCore      	0x004d2fcb KJS::Machine::privateExecute(KJS::Machine::ExecutionFlag, KJS::ExecState*, KJS::RegisterFile*, KJS::Register*, KJS::ScopeChainNode*, KJS::CodeBlock*, KJS::JSValue**) + 23273 (Machine.cpp:2093)
28  com.apple.JavaScriptCore      	0x004d4d3c KJS::Machine::execute(KJS::ProgramNode*, KJS::ExecState*, KJS::ScopeChainNode*, KJS::JSObject*, KJS::RegisterFileStack*, KJS::JSValue**) + 500 (Machine.cpp:672)
29  com.apple.JavaScriptCore      	0x00478558 KJS::Interpreter::evaluate(KJS::ExecState*, KJS::ScopeChain&amp;, KJS::UString const&amp;, int, WTF::PassRefPtr&lt;KJS::SourceProvider&gt;, KJS::JSValue*) + 440 (interpreter.cpp:81)
30  com.apple.WebCore             	0x02acc0f2 WebCore::KJSProxy::evaluate(WebCore::String const&amp;, int, WebCore::String const&amp;) + 268 (kjs_proxy.cpp:89)
31  com.apple.WebCore             	0x02622799 WebCore::FrameLoader::executeScript(WebCore::String const&amp;, int, WebCore::String const&amp;) + 149 (FrameLoader.cpp:785)
32  com.apple.WebCore             	0x0262282c WebCore::FrameLoader::executeScript(WebCore::String const&amp;, bool) + 96 (FrameLoader.cpp:772)
33  com.apple.WebCore             	0x02a2efc9 WebCore::ScheduledAction::execute(WebCore::JSDOMWindowShell*) + 859 (ScheduledAction.cpp:92)
34  com.apple.WebCore             	0x02b29bd9 WebCore::JSDOMWindowBase::timerFired(WebCore::DOMWindowTimer*) + 83 (JSDOMWindowBase.cpp:1264)
35  com.apple.WebCore             	0x02b29db4 WebCore::DOMWindowTimer::fired() + 48 (JSDOMWindowBase.cpp:1315)
36  com.apple.WebCore             	0x02a69626 WebCore::TimerBase::fireTimers(double, WTF::Vector&lt;WebCore::TimerBase*, 0ul&gt; const&amp;) + 198 (Timer.cpp:350)
37  com.apple.WebCore             	0x02a696ce WebCore::TimerBase::sharedTimerFired() + 110 (Timer.cpp:370)
38  com.apple.WebCore             	0x02a434a4 WebCore::timerFired(__CFRunLoopTimer*, void*) + 78 (SharedTimerMac.mm:85)
39  com.apple.CoreFoundation      	0x9689db3e CFRunLoopRunSpecific + 4494
40  com.apple.CoreFoundation      	0x9689dcf8 CFRunLoopRunInMode + 88
41  com.apple.HIToolbox           	0x95e52da4 RunCurrentEventLoopInMode + 283
42  com.apple.HIToolbox           	0x95e52bbd ReceiveNextEventCommon + 374
43  com.apple.HIToolbox           	0x95e52a31 BlockUntilNextEventMatchingListInMode + 106
44  com.apple.AppKit              	0x936d4505 _DPSNextEvent + 657
45  com.apple.AppKit              	0x936d3db8 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 128
46  com.apple.Safari              	0x000086be 0x1000 + 30398
47  com.apple.AppKit              	0x936ccdf3 -[NSApplication run] + 795
48  com.apple.AppKit              	0x9369a030 NSApplicationMain + 574
49  com.apple.Safari              	0x000ba4d6 0x1000 + 758998

Thread 1:
0   libSystem.B.dylib             	0x970db68e __semwait_signal + 10
1   libSystem.B.dylib             	0x9710636d pthread_cond_wait$UNIX2003 + 73
2   com.apple.JavaScriptCore      	0x004e22bb WTF::ThreadCondition::wait(WTF::Mutex&amp;) + 39 (ThreadingPthreads.cpp:207)
3   com.apple.WebCore             	0x026ca735 WebCore::IconDatabase::syncThreadMainLoop() + 641 (IconDatabase.cpp:1313)
4   com.apple.WebCore             	0x026cac18 WebCore::IconDatabase::iconDatabaseSyncThread() + 1198 (IconDatabase.cpp:1015)
5   com.apple.WebCore             	0x026cac47 WebCore::IconDatabase::iconDatabaseSyncThreadStart(void*) + 23 (IconDatabase.cpp:919)
6   libSystem.B.dylib             	0x971056f5 _pthread_start + 321
7   libSystem.B.dylib             	0x971055b2 thread_start + 34

Thread 2:
0   libSystem.B.dylib             	0x970d44a6 mach_msg_trap + 10
1   libSystem.B.dylib             	0x970dbc9c mach_msg + 72
2   com.apple.CoreFoundation      	0x9689d0be CFRunLoopRunSpecific + 1806
3   com.apple.CoreFoundation      	0x9689dcf8 CFRunLoopRunInMode + 88
4   com.apple.CFNetwork           	0x96735afe CFURLCacheWorkerThread(void*) + 396
5   libSystem.B.dylib             	0x971056f5 _pthread_start + 321
6   libSystem.B.dylib             	0x971055b2 thread_start + 34

Thread 3:
0   libSystem.B.dylib             	0x970d44a6 mach_msg_trap + 10
1   libSystem.B.dylib             	0x970dbc9c mach_msg + 72
2   com.apple.CoreFoundation      	0x9689d0be CFRunLoopRunSpecific + 1806
3   com.apple.CoreFoundation      	0x9689dcf8 CFRunLoopRunInMode + 88
4   com.apple.Foundation          	0x959b6460 +[NSURLConnection(NSURLConnectionReallyInternal) _resourceLoadLoop:] + 320
5   com.apple.Foundation          	0x95952f1d -[NSThread main] + 45
6   com.apple.Foundation          	0x95952ac4 __NSThread__main__ + 308
7   libSystem.B.dylib             	0x971056f5 _pthread_start + 321
8   libSystem.B.dylib             	0x971055b2 thread_start + 34

Thread 0 crashed with X86 Thread State (32-bit):
  eax: 0x0000008c  ebx: 0x02631827  ecx: 0x9044de20  edx: 0x00000000
  edi: 0x05132200  esi: 0x00000000  ebp: 0xbfffc2e8  esp: 0xbfffc2c0
   ss: 0x0000001f  efl: 0x00010202  eip: 0x028ba040   cs: 0x00000017
   ds: 0x0000001f   es: 0x0000001f   fs: 0x00000000   gs: 0x00000037
  cr2: 0x0000008c

Binary Images:
    0x1000 -   0x133fef  com.apple.Safari 3.1.1 (5525.20) &lt;4869cc1f3ee39145836097e9470d9036&gt; /Applications/Safari.app/Contents/MacOS/Safari
  0x17b000 -   0x290fef  com.apple.WebKit 527+ (527+) &lt;3be5ccc46bef504fd36d588d1f1d4e56&gt; /Users/eseidel/Projects/build/Debug/WebKit.framework/Versions/A/WebKit
  0x413000 -   0x422ff8  SyndicationUI ??? (???) &lt;edde0133829971dbd8a0f3473cdb85fc&gt; /System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI
  0x432000 -   0x51efe4  com.apple.JavaScriptCore 527+ (527+) &lt;cc1e8bc89afd84fe0889ad1fe231e874&gt; /Users/eseidel/Projects/build/Debug/JavaScriptCore.framework/Versions/A/JavaScriptCore
  0x800000 -   0x90afef  com.apple.RawCamera.bundle 2.0.5 (2.0.5) /System/Library/CoreServices/RawCamera.bundle/Contents/MacOS/RawCamera
  0xada000 -   0xadfff3  libCGXCoreImage.A.dylib ??? (???) &lt;32265ec157db98a33c5dcf0e6687dec2&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGXCoreImage.A.dylib
 0x2420000 -  0x309aff2  com.apple.WebCore 527+ (527+) &lt;b0a4d43431cf36f15177a21d24e887c2&gt; /Users/eseidel/Projects/build/Debug/WebCore.framework/Versions/A/WebCore
0x1a6d5000 - 0x1a6dafff  com.apple.DictionaryServiceComponent 1.1 (1.1) &lt;8edc1180f52db18e9ddfb4e95debe61b&gt; /System/Library/Components/DictionaryService.component/Contents/MacOS/DictionaryService
0x1a768000 - 0x1a7d9fff +com.DivXInc.DivXDecoder 6.4.0 (6.4.0) /Library/QuickTime/DivX Decoder.component/Contents/MacOS/DivX Decoder
0x1a7ee000 - 0x1a7efff3  ATSHI.dylib ??? (???) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/ATSHI.dylib
0x8fe00000 - 0x8fe2da53  dyld 96.2 (???) &lt;7af47d3b00b2268947563c7fa8c59a07&gt; /usr/lib/dyld
0x90003000 - 0x90005fff  com.apple.securityhi 3.0 (30817) &lt;2b2854123fed609d1820d2779e2e0963&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x90031000 - 0x90031ffc  com.apple.audio.units.AudioUnit 1.5 (1.5) /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x90032000 - 0x9005afff  libcups.2.dylib ??? (???) &lt;ece20dff2a2c8ed3ae6ef735ef440c37&gt; /usr/lib/libcups.2.dylib
0x9005b000 - 0x90073fff  com.apple.openscripting 1.2.6 (???) &lt;b8e553df643f2aec68fa968b3b459b2b&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x90074000 - 0x90198fe3  com.apple.audio.toolbox.AudioToolbox 1.5.1 (1.5.1) /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x90199000 - 0x90225ff7  com.apple.LaunchServices 289.2 (289.2) &lt;3577886e3a6d56ee3949850c4fde76c9&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x90226000 - 0x902cdfeb  com.apple.QD 3.11.52 (???) &lt;c72bd7bd2ce12694c3640a731d1ad878&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x902ce000 - 0x90395ff2  com.apple.vImage 3.0 (3.0) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x90396000 - 0x903c8fff  com.apple.LDAPFramework 1.4.3 (106) &lt;3a5c9df6032143cd6bc2658a9d328d8e&gt; /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x903c9000 - 0x903e4ff3  libPng.dylib ??? (???) &lt;c0484bec6e2432b406755591924fe664&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x903e5000 - 0x903fbfe7  com.apple.CoreVideo 1.5.0 (1.5.0) &lt;bad2d3a9a92fdecd02e64f0b73a76f27&gt; /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo
0x903fc000 - 0x903fcffd  com.apple.Accelerate.vecLib 3.4.2 (vecLib 3.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x9042e000 - 0x9050dfff  libobjc.A.dylib ??? (???) &lt;a53206274b6c2d42691f677863f379ae&gt; /usr/lib/libobjc.A.dylib
0x905d7000 - 0x905e2ff9  com.apple.helpdata 1.0 (14) /System/Library/PrivateFrameworks/HelpData.framework/Versions/A/HelpData
0x905e3000 - 0x905e4ffc  libffi.dylib ??? (???) &lt;a3b573eb950ca583290f7b2b4c486d09&gt; /usr/lib/libffi.dylib
0x905e6000 - 0x905e9fff  com.apple.help 1.1 (36) &lt;b507b08e484cb89033e9cf23062d77de&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x905ea000 - 0x90671ff7  libsqlite3.0.dylib ??? (???) &lt;6978bbcca4277d6ae9f042beff643f7d&gt; /usr/lib/libsqlite3.0.dylib
0x906c1000 - 0x906c1ffb  com.apple.installserver.framework 1.0 (8) /System/Library/PrivateFrameworks/InstallServer.framework/Versions/A/InstallServer
0x90d13000 - 0x90d13ffa  com.apple.CoreServices 32 (32) &lt;2fcc8f3bd5bbfc000b476cad8e6a3dd2&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x90d14000 - 0x90d23fff  libsasl2.2.dylib ??? (???) &lt;b9e1ca0b6612e280b6cbea6df0eec5f6&gt; /usr/lib/libsasl2.2.dylib
0x90e0b000 - 0x90e15feb  com.apple.audio.SoundManager 3.9.2 (3.9.2) &lt;0f2ba6e891d3761212cf5a5e6134d683&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x90f0b000 - 0x90f0ffff  libmathCommon.A.dylib ??? (???) /usr/lib/system/libmathCommon.A.dylib
0x90f10000 - 0x913e3ffe  libGLProgrammability.dylib ??? (???) &lt;475db64244e011cd8811e076035b2632&gt; /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib
0x913e4000 - 0x91404ff2  libGL.dylib ??? (???) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x914d9000 - 0x91517ff7  libGLImage.dylib ??? (???) &lt;093b1b698ca93a0380f5fa262459ea28&gt; /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x91518000 - 0x91838fe2  com.apple.QuickTime 7.4.5 (67) &lt;520cbf4ae05622466ad1b89f1ba3a4e1&gt; /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x91839000 - 0x91840ffe  libbsm.dylib ??? (???) &lt;d25c63378a5029648ffd4b4669be31bf&gt; /usr/lib/libbsm.dylib
0x91841000 - 0x91987ff7  com.apple.ImageIO.framework 2.0.2 (2.0.2) &lt;77dfee73f4c0d230425a5151ee0bce05&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x91988000 - 0x91c62ff3  com.apple.CoreServices.CarbonCore 786.4 (786.4) &lt;059c4803a7a95e3c1a95a332baeb1edf&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x91c63000 - 0x91ff9fff  com.apple.QuartzCore 1.5.3 (1.5.3) &lt;1b65c05f89e81a499302fd63295b242d&gt; /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x92017000 - 0x9205bfeb  com.apple.DirectoryService.PasswordServerFramework 3.0.3 (3.0.3) &lt;7e80635e8f1380dbf4af27e17e709fcb&gt; /System/Library/PrivateFrameworks/PasswordServer.framework/Versions/A/PasswordServer
0x9205c000 - 0x920d6ff8  com.apple.print.framework.PrintCore 5.5.3 (245.3) &lt;222dade7b33b99708b8c09d1303f93fc&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x920d7000 - 0x92119fef  com.apple.NavigationServices 3.5.2 (163) &lt;91844980804067b07a0b6124310d3f31&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x9211a000 - 0x921cafff  edu.mit.Kerberos 6.0.12 (6.0.12) &lt;1dc515ebe407292db8e603938c72d4e8&gt; /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
0x921cb000 - 0x922acff7  libxml2.2.dylib ??? (???) &lt;1baef3d4972ee789d8fa6c1fa44da45c&gt; /usr/lib/libxml2.2.dylib
0x922ad000 - 0x9242cfff  com.apple.AddressBook.framework 4.1.1 (695) &lt;24a448ba4f9f784189bd3183e3474d81&gt; /System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x9242d000 - 0x924acff5  com.apple.SearchKit 1.2.0 (1.2.0) &lt;277b460da86bc222785159fe77e2e2ed&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x924ad000 - 0x92529feb  com.apple.audio.CoreAudio 3.1.0 (3.1) &lt;70bb7c657061631491029a61babe0b26&gt; /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x9252a000 - 0x92590ffb  com.apple.ISSupport 1.7 (38) /System/Library/PrivateFrameworks/ISSupport.framework/Versions/A/ISSupport
0x92591000 - 0x925cbfff  com.apple.coreui 1.1 (61) /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI
0x925cc000 - 0x925cefff  com.apple.CrashReporterSupport 10.5.0 (156) &lt;3088b785b10d03504ed02f3fee5d3aab&gt; /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/CrashReporterSupport
0x9278b000 - 0x927dbff7  com.apple.HIServices 1.7.0 (???) &lt;f7e78891a6d08265c83dca8e378be1ea&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x927dc000 - 0x927dcfff  com.apple.Carbon 136 (136) &lt;98a5e3bc0c4fa44bbb09713bb88707fe&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x92915000 - 0x92929ff3  com.apple.ImageCapture 4.0 (5.0.0) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x9292a000 - 0x92fc6fff  com.apple.CoreGraphics 1.351.31 (???) &lt;c97a42498636b2596764e48669f98e00&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x92fc7000 - 0x92fd3fe7  com.apple.opengl 1.5.6 (1.5.6) &lt;125de77ea2434a91364e79a0905a7771&gt; /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x93025000 - 0x9302dfff  com.apple.DiskArbitration 2.2.1 (2.2.1) &lt;75b0c8d8940a8a27816961dddcac8e0f&gt; /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x9302e000 - 0x9303cffd  libz.1.dylib ??? (???) &lt;5ddd8539ae2ebfd8e7cc1c57525385c7&gt; /usr/lib/libz.1.dylib
0x9303d000 - 0x930dfff3  com.apple.QuickTimeImporters.component 7.4.5 (67) /System/Library/QuickTime/QuickTimeImporters.component/Contents/MacOS/QuickTimeImporters
0x930e0000 - 0x9313aff7  com.apple.CoreText 2.0.2 (???) &lt;9fde11f84a72e890bbf2aa8b0b13b79a&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x9313b000 - 0x9313bffd  com.apple.Accelerate 1.4.2 (Accelerate 1.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x9313c000 - 0x931eeffb  libcrypto.0.9.7.dylib ??? (???) &lt;330b0e48e67faffc8c22dfc069ca7a47&gt; /usr/lib/libcrypto.0.9.7.dylib
0x931ef000 - 0x9327afff  com.apple.framework.IOKit 1.5.1 (???) &lt;60cfc4b175c4ef60bb8e9036716a29f4&gt; /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x93280000 - 0x93365ff3  com.apple.CoreData 100.1 (186) &lt;8e28162ef2288692615b52acc01f8b54&gt; /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x93366000 - 0x9337cfff  com.apple.DictionaryServices 1.0.0 (1.0.0) &lt;ad0aa0252e3323d182e17f50defe56fc&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices
0x93387000 - 0x93398ffe  com.apple.CFOpenDirectory 10.5 (10.5) &lt;6a7f55108d77db7384d0e2219d07e9f8&gt; /System/Library/PrivateFrameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Versions/A/CFOpenDirectory
0x93399000 - 0x933a8ffe  com.apple.DSObjCWrappers.Framework 1.2.1 (1.2.1) &lt;eac1c7b7c07ed3148c85934b6f656308&gt; /System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
0x933a9000 - 0x934e1ff7  libicucore.A.dylib ??? (???) &lt;5031226ea28b371d8dfdbb32acfb48b5&gt; /usr/lib/libicucore.A.dylib
0x93550000 - 0x93651fef  com.apple.PubSub 1.0.3 (65.1.1) /System/Library/Frameworks/PubSub.framework/Versions/A/PubSub
0x93652000 - 0x93693fe7  libRIP.A.dylib ??? (???) &lt;c8d988d3880d7268468112c64c626d86&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x93694000 - 0x93e91fef  com.apple.AppKit 6.5.3 (949.33) &lt;84b236f43802f4c15011513d18efa101&gt; /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x93e92000 - 0x93e97fff  com.apple.backup.framework 1.0 (1.0) /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup
0x93e98000 - 0x93ed7fef  libTIFF.dylib ??? (???) &lt;6d0f80e9d4d81f3f64c876aca005bd53&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x93eec000 - 0x93eecff8  com.apple.ApplicationServices 34 (34) &lt;8f910fa65f01d401ad8d04cc933cf887&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x93eed000 - 0x942abfea  libLAPACK.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x942ac000 - 0x9433fff3  com.apple.ApplicationServices.ATS 3.3 (???) &lt;064eb6d96417afa38a80b1735c4113aa&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x94346000 - 0x94411fff  com.apple.ColorSync 4.5.0 (4.5.0) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x9467b000 - 0x946a6fe7  libauto.dylib ??? (???) &lt;42d8422dc23a18071869fdf7b5d8fab5&gt; /usr/lib/libauto.dylib
0x946a7000 - 0x946acfff  com.apple.CommonPanels 1.2.4 (85) &lt;ea0665f57cd267609466ed8b2b20e893&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x946ad000 - 0x946b4fff  com.apple.agl 3.0.9 (AGL-3.0.9) &lt;7dac4a7cb0de2f6d08ae71c1249379e3&gt; /System/Library/Frameworks/AGL.framework/Versions/A/AGL
0x946b5000 - 0x946b7ff5  libRadiance.dylib ??? (???) &lt;20eadb285da83df96c795c2c5fa20590&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x946b8000 - 0x946c8fff  com.apple.speech.synthesis.framework 3.7.1 (3.7.1) &lt;06d8fc0307314f8ffc16f206ad3dbf44&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x946c9000 - 0x95779ff6  com.apple.QuickTimeComponents.component 7.4.5 (67) /System/Library/QuickTime/QuickTimeComponents.component/Contents/MacOS/QuickTimeComponents
0x9577a000 - 0x95834fe3  com.apple.CoreServices.OSServices 226.3 (226.3) &lt;456bdd65b936baf1ef497b74b4f960a8&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x95835000 - 0x95839fff  com.apple.OpenDirectory 10.5 (10.5) &lt;e7e4507f5ecd8c8cdcdb2fc0675da0b4&gt; /System/Library/PrivateFrameworks/OpenDirectory.framework/Versions/A/OpenDirectory
0x9583a000 - 0x95873ffe  com.apple.securityfoundation 3.0 (32989) &lt;e9171eda22c69c884a04a001aeb526e0&gt; /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x95874000 - 0x95892ff3  com.apple.DirectoryService.Framework 3.5.3 (3.5.3) &lt;a3277abd826960efb44258699adafc17&gt; /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x95893000 - 0x9589aff7  libCGATS.A.dylib ??? (???) &lt;9b29a5500efe01cc3adea67bbc42568e&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib
0x9589b000 - 0x958c8feb  libvDSP.dylib ??? (???) &lt;b232c018ddd040ec4e2c2af632dd497f&gt; /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x958c9000 - 0x95922ff7  libGLU.dylib ??? (???) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x95923000 - 0x95947fff  libxslt.1.dylib ??? (???) &lt;4933ddc7f6618743197aadc85b33b5ab&gt; /usr/lib/libxslt.1.dylib
0x95948000 - 0x95bc3fe7  com.apple.Foundation 6.5.5 (677.19) &lt;bfd4ebea1a7739dd6b523f15dca01a37&gt; /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x95c3f000 - 0x95c43fff  libGIF.dylib ??? (???) &lt;d4234e6f5e5f530bdafb969157f1f17b&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x95cb7000 - 0x95cdfff7  com.apple.shortcut 1 (1.0) &lt;057783867138902b52bc0941fedb74d1&gt; /System/Library/PrivateFrameworks/Shortcut.framework/Versions/A/Shortcut
0x95d53000 - 0x95de6fff  com.apple.ink.framework 101.3 (86) &lt;bf3fa8927b4b8baae92381a976fd2079&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x95de7000 - 0x95dedfff  com.apple.print.framework.Print 218.0.2 (220.1) &lt;8bf7ef71216376d12fcd5ec17e43742c&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x95e23000 - 0x9612aff7  com.apple.HIToolbox 1.5.3 (???) &lt;e36f5c553e5a32f64b7eb458dadadc71&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x9612b000 - 0x9617bfeb  com.apple.framework.familycontrols 1.0.2 (1.0.2) &lt;90f740755beef77835545ede9e5e975d&gt; /System/Library/PrivateFrameworks/FamilyControls.framework/Versions/A/FamilyControls
0x96209000 - 0x96238fe3  com.apple.AE 402.2 (402.2) &lt;e01596187e91af5d48653920017b8c8e&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x96239000 - 0x96249ffc  com.apple.LangAnalysis 1.6.4 (1.6.4) &lt;cbeb17ab39f28351fe2ab5b82bf465bc&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x9624a000 - 0x962d4fe3  com.apple.DesktopServices 1.4.6 (1.4.6) &lt;94d1a28b351b7dff77becadab0967772&gt; /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x962db000 - 0x962e6fe7  libCSync.A.dylib ??? (???) &lt;8011fc1963cebdde0c6f101dbee5afd7&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x962e7000 - 0x962e7ffd  com.apple.vecLib 3.4.2 (vecLib 3.4.2) /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib
0x962e8000 - 0x964b5fe7  com.apple.security 5.0.3 (33532) &lt;3bef414f3c6f433e707ac5abee340e16&gt; /System/Library/Frameworks/Security.framework/Versions/A/Security
0x964b6000 - 0x964bdfe9  libgcc_s.1.dylib ??? (???) &lt;f53c808e87d1184c0f9df63aef53ce0b&gt; /usr/lib/libgcc_s.1.dylib
0x964be000 - 0x96504fef  com.apple.Metadata 10.5.2 (398.18) &lt;adbb3a14e8f7da444e16d2fd61862771&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x96505000 - 0x9654ffe1  com.apple.securityinterface 3.0 (32532) &lt;f521dae416ce7a3bdd594b0d4e2fb517&gt; /System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
0x96550000 - 0x96587fff  com.apple.SystemConfiguration 1.9.2 (1.9.2) &lt;8b26ebf26a009a098484f1ed01ec499c&gt; /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x966f3000 - 0x966fcfff  com.apple.speech.recognition.framework 3.7.24 (3.7.24) &lt;d3180f9edbd9a5e6f283d6156aa3c602&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x966fd000 - 0x966fdff8  com.apple.Cocoa 6.5 (???) &lt;e064f94d969ce25cb7de3cfb980c3249&gt; /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x9670a000 - 0x96729ffa  libJPEG.dylib ??? (???) &lt;0cfb80109d624beb9ceb3c43b6c5ec10&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x9672a000 - 0x967acffb  com.apple.CFNetwork 330 (330) &lt;6c5eda16e640b09334809ba4c1df985d&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x967ad000 - 0x9682afef  libvMisc.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x9682b000 - 0x9695dfff  com.apple.CoreFoundation 6.5.2 (476.13) &lt;b633d15f2901d73670cb1475628df1b3&gt; /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x9695e000 - 0x96994fef  libtidy.A.dylib ??? (???) &lt;f1d1742e06280444baa5637b209fd0af&gt; /usr/lib/libtidy.A.dylib
0x96995000 - 0x969f2ffb  libstdc++.6.dylib ??? (???) &lt;04b812dcec670daa8b7d2852ab14be60&gt; /usr/lib/libstdc++.6.dylib
0x969f3000 - 0x96e03fef  libBLAS.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x96e22000 - 0x96e40fff  libresolv.9.dylib ??? (???) &lt;0629b6dcd71f4aac6a891cbe26253e85&gt; /usr/lib/libresolv.9.dylib
0x96e80000 - 0x96edcff7  com.apple.htmlrendering 68 (1.1.3) &lt;fe87a9dede38db00e6c8949942c6bd4f&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x96ff0000 - 0x97014feb  libssl.0.9.7.dylib ??? (???) &lt;acee7fc534674498dcac211318aa23e8&gt; /usr/lib/libssl.0.9.7.dylib
0x970d3000 - 0x97233ff3  libSystem.B.dylib ??? (???) &lt;a12f397abf2285077b89bd726bff5b18&gt; /usr/lib/libSystem.B.dylib
0xba900000 - 0xba916fff  libJapaneseConverter.dylib ??? (???) &lt;7b0248c392848338f5d6ed093313eeef&gt; /System/Library/CoreServices/Encodings/libJapaneseConverter.dylib
0xfffe8000 - 0xfffebfff  libobjc.A.dylib ??? (???) /usr/lib/libobjc.A.dylib
0xffff0000 - 0xffff1780  libSystem.B.dylib ??? (???) /usr/lib/libSystem.B.dylib</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82782</commentid>
    <comment_count>1</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-09 18:30:05 -0700</bug_when>
    <thetext>I have the sequence of 91001 editing commands needed saved on my machine.  I&apos;ll reduce it later.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82812</commentid>
    <comment_count>2</comment_count>
      <attachid>21601</attachid>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-09 23:46:43 -0700</bug_when>
    <thetext>Created attachment 21601
test case (crashes Safari)

The sequence of crashing commands is:

  doc.designMode = &apos;on&apos;;
  doc.execCommand(&apos;inserthorizontalrule&apos;, 0, &apos;data:text/html,&lt;h1&gt;hello&lt;/h1&gt;&apos;);
  doc.execCommand(&apos;insertparagraph&apos;, 1, &apos;data:text/html,&lt;h1&gt;hello&lt;/h1&gt;&apos;);
  doc.execCommand(&apos;delete&apos;, 0, &apos;&lt;iframe src=about:blank&gt;&apos;);
  doc.execCommand(&apos;inserthorizontalrule&apos;, 1, &apos;&lt;/td&gt;&apos;);
  doc.execCommand(&apos;justifycenter&apos;, 0, &apos;&lt;pre&gt;&apos;);
  doc.execCommand(&apos;formatblock&apos;, 0, &apos;&lt;pre&gt;&apos;);
  doc.execCommand(&apos;inserthorizontalrule&apos;, 0, &apos;courier&apos;);
  doc.execCommand(&apos;insertparagraph&apos;, 0, &apos;&lt;pre&gt;&apos;);
  doc.execCommand(&apos;selectall&apos;, 0, &apos;&lt;iframe src=about:blank&gt;&apos;);
  doc.execCommand(&apos;createLink&apos;, 1, &apos;&lt;td&gt;&apos;);
  doc.execCommand(&apos;selectall&apos;, 1, &apos;&lt;table&gt;&apos;);
  doc.execCommand(&apos;justifycenter&apos;, 1, &apos;&apos;);</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82813</commentid>
    <comment_count>3</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-09 23:47:35 -0700</bug_when>
    <thetext>Bah.  Actually, my reduced version crashes in a slightly different place:

Process:         Safari [2024]
Path:            /Applications/Safari.app/Contents/MacOS/Safari
Identifier:      com.apple.Safari
Version:         3.1.1 (5525.20)
Build Info:      WebBrowser-55252000~1
Code Type:       X86 (Native)
Parent Process:  perl [2018]

Date/Time:       2008-06-09 23:48:35.985 -0700
OS Version:      Mac OS X 10.5.3 (9D34)
Report Version:  6

Exception Type:  EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000000
Crashed Thread:  0

Thread 0 Crashed:
0   ???                           	0000000000 0 + 0
1   com.apple.WebCore             	0x0290a73f WebCore::rendererAfterPosition(WebCore::RenderObject*, unsigned int) + 39 (RenderView.cpp:233)
2   com.apple.WebCore             	0x0290ba0f WebCore::RenderView::setSelection(WebCore::RenderObject*, int, WebCore::RenderObject*, int) + 229 (RenderView.cpp:304)
3   com.apple.WebCore             	0x026076ef WebCore::Frame::selectionLayoutChanged() + 999 (Frame.cpp:631)
4   com.apple.WebCore             	0x0260779a WebCore::Frame::invalidateSelection() + 44 (Frame.cpp:524)
5   com.apple.WebCore             	0x02632087 WebCore::FrameView::layout(bool) + 2161 (FrameView.cpp:491)
6   com.apple.WebCore             	0x02578df3 WebCore::Document::updateLayout() + 175 (Document.cpp:1198)
7   com.apple.WebCore             	0x02587021 WebCore::Document::updateLayoutIgnorePendingStylesheets() + 199 (Document.cpp:1230)
8   com.apple.WebCore             	0x02a70e4b WebCore::VisiblePosition::canonicalPosition(WebCore::Position const&amp;) + 71 (VisiblePosition.cpp:464)
9   com.apple.WebCore             	0x02a7124a WebCore::VisiblePosition::init(WebCore::Position const&amp;, WebCore::EAffinity) + 40 (VisiblePosition.cpp:60)
10  com.apple.WebCore             	0x02a7131a WebCore::VisiblePosition::VisiblePosition(WebCore::Position const&amp;, WebCore::EAffinity) + 42
11  com.apple.WebCore             	0x02a38db2 WebCore::Selection::validate() + 90 (Selection.cpp:201)
12  com.apple.WebCore             	0x02a3a48d WebCore::Selection::Selection(WebCore::Position const&amp;, WebCore::Position const&amp;, WebCore::EAffinity) + 103
13  com.apple.WebCore             	0x02432ba1 WebCore::ApplyStyleCommand::updateStartEnd(WebCore::Position const&amp;, WebCore::Position const&amp;) + 227 (ApplyStyleCommand.cpp:316)
14  com.apple.WebCore             	0x02439376 WebCore::ApplyStyleCommand::applyBlockStyle(WebCore::CSSMutableStyleDeclaration*) + 2040 (ApplyStyleCommand.cpp:419)
15  com.apple.WebCore             	0x024395eb WebCore::ApplyStyleCommand::doApply() + 481 (ApplyStyleCommand.cpp:360)
16  com.apple.WebCore             	0x025b1b98 WebCore::EditCommand::apply() + 408 (EditCommand.cpp:96)
17  com.apple.WebCore             	0x025b1c9d WebCore::applyCommand(WTF::PassRefPtr&lt;WebCore::EditCommand&gt;) + 25 (EditCommand.cpp:253)
18  com.apple.WebCore             	0x025b485a WebCore::Editor::applyParagraphStyle(WebCore::CSSStyleDeclaration*, WebCore::EditAction) + 200 (Editor.cpp:625)
19  com.apple.WebCore             	0x025bd822 WebCore::executeApplyParagraphStyle(WebCore::Frame*, WebCore::EditorCommandSource, WebCore::EditAction, int, WebCore::String const&amp;) + 176 (EditorCommand.cpp:160)
20  com.apple.WebCore             	0x025bf5f6 WebCore::executeJustifyCenter(WebCore::Frame*, WebCore::Event*, WebCore::EditorCommandSource, WebCore::String const&amp;) + 76 (EditorCommand.cpp:510)
21  com.apple.WebCore             	0x025bd4e4 WebCore::Editor::Command::execute(WebCore::String const&amp;, WebCore::Event*) const + 210 (EditorCommand.cpp:1371)
22  com.apple.WebCore             	0x0257a322 WebCore::Document::execCommand(WebCore::String const&amp;, bool, WebCore::String const&amp;) + 62 (Document.cpp:3089)
23  com.apple.WebCore             	0x02737d97 WebCore::jsDocumentPrototypeFunctionExecCommand(KJS::ExecState*, KJS::JSObject*, KJS::List const&amp;) + 299 (JSDocument.cpp:800)
24  com.apple.JavaScriptCore      	0x004343d4 KJS::PrototypeFunction::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&amp;) + 34 (function.cpp:734)
25  com.apple.JavaScriptCore      	0x004d2fe3 KJS::Machine::privateExecute(KJS::Machine::ExecutionFlag, KJS::ExecState*, KJS::RegisterFile*, KJS::Register*, KJS::ScopeChainNode*, KJS::CodeBlock*, KJS::JSValue**) + 23273 (Machine.cpp:2093)
26  com.apple.JavaScriptCore      	0x004d4b27 KJS::Machine::execute(KJS::FunctionBodyNode*, KJS::ExecState*, KJS::FunctionImp*, KJS::JSObject*, KJS::List const&amp;, KJS::RegisterFileStack*, KJS::ScopeChainNode*, KJS::JSValue**) + 681 (Machine.cpp:733)
27  com.apple.JavaScriptCore      	0x0043fde1 KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&amp;) + 321 (function.cpp:95)
28  com.apple.WebCore             	0x02ac78d4 WebCore::JSAbstractEventListener::handleEvent(WebCore::Event*, bool) + 664 (kjs_events.cpp:93)
29  com.apple.WebCore             	0x025d7b27 WebCore::EventTarget::handleLocalEvents(WebCore::EventTargetNode*, WebCore::Event*, bool) + 385 (EventTarget.cpp:311)
30  com.apple.WebCore             	0x025d8bf4 WebCore::EventTargetNode::handleLocalEvents(WebCore::Event*, bool) + 118 (EventTargetNode.cpp:106)
31  com.apple.WebCore             	0x025d8011 WebCore::EventTarget::dispatchGenericEvent(WebCore::EventTargetNode*, WTF::PassRefPtr&lt;WebCore::Event&gt;, int&amp;, bool) + 769 (EventTarget.cpp:191)
32  com.apple.WebCore             	0x025d91c4 WebCore::EventTargetNode::dispatchEvent(WTF::PassRefPtr&lt;WebCore::Event&gt;, int&amp;, bool) + 364 (EventTargetNode.cpp:121)
33  com.apple.WebCore             	0x025d9c63 WebCore::EventTargetNode::dispatchMouseEvent(WebCore::AtomicString const&amp;, int, int, int, int, int, int, bool, bool, bool, bool, bool, WebCore::Node*, WTF::PassRefPtr&lt;WebCore::Event&gt;) + 697 (EventTargetNode.cpp:296)
34  com.apple.WebCore             	0x025da423 WebCore::EventTargetNode::dispatchMouseEvent(WebCore::PlatformMouseEvent const&amp;, WebCore::AtomicString const&amp;, int, WebCore::Node*) + 497 (EventTargetNode.cpp:214)
35  com.apple.WebCore             	0x025cf2c2 WebCore::EventHandler::dispatchMouseEvent(WebCore::AtomicString const&amp;, WebCore::Node*, bool, int, WebCore::PlatformMouseEvent const&amp;, bool) + 148 (EventHandler.cpp:1278)
36  com.apple.WebCore             	0x025cfb1a WebCore::EventHandler::handleMouseReleaseEvent(WebCore::PlatformMouseEvent const&amp;) + 900 (EventHandler.cpp:1100)
37  com.apple.WebCore             	0x025d546f WebCore::EventHandler::mouseUp(NSEvent*) + 435 (EventHandlerMac.mm:541)
38  com.apple.WebKit              	0x001d3264 -[WebHTMLView mouseUp:] + 274 (WebHTMLView.mm:3244)
39  com.apple.WebCore             	0x025d448c WebCore::EventHandler::passSubframeEventToSubframe(WebCore::MouseEventWithHitTestResults&amp;, WebCore::Frame*, WebCore::HitTestResult*) + 968 (EventHandlerMac.mm:427)
40  com.apple.WebCore             	0x025d505f WebCore::EventHandler::passMouseReleaseEventToSubframe(WebCore::MouseEventWithHitTestResults&amp;, WebCore::Frame*) + 39 (EventHandlerMac.mm:645)
41  com.apple.WebCore             	0x025cf9e7 WebCore::EventHandler::handleMouseReleaseEvent(WebCore::PlatformMouseEvent const&amp;) + 593 (EventHandler.cpp:1090)
42  com.apple.WebCore             	0x025d546f WebCore::EventHandler::mouseUp(NSEvent*) + 435 (EventHandlerMac.mm:541)
43  com.apple.WebKit              	0x001d3264 -[WebHTMLView mouseUp:] + 274 (WebHTMLView.mm:3244)
44  com.apple.AppKit              	0x937a2929 -[NSWindow sendEvent:] + 5539
45  com.apple.Safari              	0x0002bb53 0x1000 + 174931
46  com.apple.AppKit              	0x9376f431 -[NSApplication sendEvent:] + 2941
47  com.apple.Safari              	0x0002b5d8 0x1000 + 173528
48  com.apple.AppKit              	0x936cce27 -[NSApplication run] + 847
49  com.apple.AppKit              	0x9369a030 NSApplicationMain + 574
50  com.apple.Safari              	0x000ba4d6 0x1000 + 758998

Thread 1:
0   libSystem.B.dylib             	0x970db68e __semwait_signal + 10
1   libSystem.B.dylib             	0x9710636d pthread_cond_wait$UNIX2003 + 73
2   com.apple.JavaScriptCore      	0x004e22d3 WTF::ThreadCondition::wait(WTF::Mutex&amp;) + 39 (ThreadingPthreads.cpp:207)
3   com.apple.WebCore             	0x026ca735 WebCore::IconDatabase::syncThreadMainLoop() + 641 (IconDatabase.cpp:1313)
4   com.apple.WebCore             	0x026cac18 WebCore::IconDatabase::iconDatabaseSyncThread() + 1198 (IconDatabase.cpp:1015)
5   com.apple.WebCore             	0x026cac47 WebCore::IconDatabase::iconDatabaseSyncThreadStart(void*) + 23 (IconDatabase.cpp:919)
6   libSystem.B.dylib             	0x971056f5 _pthread_start + 321
7   libSystem.B.dylib             	0x971055b2 thread_start + 34

Thread 2:
0   libSystem.B.dylib             	0x970d44a6 mach_msg_trap + 10
1   libSystem.B.dylib             	0x970dbc9c mach_msg + 72
2   com.apple.CoreFoundation      	0x9689d0be CFRunLoopRunSpecific + 1806
3   com.apple.CoreFoundation      	0x9689dcf8 CFRunLoopRunInMode + 88
4   com.apple.CFNetwork           	0x96735afe CFURLCacheWorkerThread(void*) + 396
5   libSystem.B.dylib             	0x971056f5 _pthread_start + 321
6   libSystem.B.dylib             	0x971055b2 thread_start + 34

Thread 3:
0   libSystem.B.dylib             	0x970d44a6 mach_msg_trap + 10
1   libSystem.B.dylib             	0x970dbc9c mach_msg + 72
2   com.apple.CoreFoundation      	0x9689d0be CFRunLoopRunSpecific + 1806
3   com.apple.CoreFoundation      	0x9689dcf8 CFRunLoopRunInMode + 88
4   com.apple.Foundation          	0x959b6460 +[NSURLConnection(NSURLConnectionReallyInternal) _resourceLoadLoop:] + 320
5   com.apple.Foundation          	0x95952f1d -[NSThread main] + 45
6   com.apple.Foundation          	0x95952ac4 __NSThread__main__ + 308
7   libSystem.B.dylib             	0x971056f5 _pthread_start + 321
8   libSystem.B.dylib             	0x971055b2 thread_start + 34

Thread 0 crashed with X86 Thread State (32-bit):
  eax: 0x1a04acbc  ebx: 0x02631827  ecx: 0x9044de20  edx: 0x00000000
  edi: 0x0512ca00  esi: 0x00000000  ebp: 0xbfffc728  esp: 0xbfffc6fc
   ss: 0x0000001f  efl: 0x00010206  eip: 0x00000000   cs: 0x00000017
   ds: 0x0000001f   es: 0x0000001f   fs: 0x00000000   gs: 0x00000037
  cr2: 0x00000000

Binary Images:
    0x1000 -   0x133fef  com.apple.Safari 3.1.1 (5525.20) &lt;4869cc1f3ee39145836097e9470d9036&gt; /Applications/Safari.app/Contents/MacOS/Safari
  0x17b000 -   0x290fef  com.apple.WebKit 527+ (527+) &lt;3be5ccc46bef504fd36d588d1f1d4e56&gt; /Users/eseidel/Projects/build/Debug/WebKit.framework/Versions/A/WebKit
  0x413000 -   0x422ff8  SyndicationUI ??? (???) &lt;edde0133829971dbd8a0f3473cdb85fc&gt; /System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI
  0x432000 -   0x51efe4  com.apple.JavaScriptCore 527+ (527+) &lt;0e08310aaf8b461871715211c2d0aa68&gt; /Users/eseidel/Projects/build/Debug/JavaScriptCore.framework/Versions/A/JavaScriptCore
  0x800000 -   0x90afef  com.apple.RawCamera.bundle 2.0.5 (2.0.5) /System/Library/CoreServices/RawCamera.bundle/Contents/MacOS/RawCamera
  0xad3000 -   0xad8ff3  libCGXCoreImage.A.dylib ??? (???) &lt;32265ec157db98a33c5dcf0e6687dec2&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGXCoreImage.A.dylib
 0x2420000 -  0x309aff2  com.apple.WebCore 527+ (527+) &lt;b0a4d43431cf36f15177a21d24e887c2&gt; /Users/eseidel/Projects/build/Debug/WebCore.framework/Versions/A/WebCore
0x1a7e7000 - 0x1a7ecfff  com.apple.DictionaryServiceComponent 1.1 (1.1) &lt;8edc1180f52db18e9ddfb4e95debe61b&gt; /System/Library/Components/DictionaryService.component/Contents/MacOS/DictionaryService
0x1a876000 - 0x1a8e7fff +com.DivXInc.DivXDecoder 6.4.0 (6.4.0) /Library/QuickTime/DivX Decoder.component/Contents/MacOS/DivX Decoder
0x8fe00000 - 0x8fe2da53  dyld 96.2 (???) &lt;7af47d3b00b2268947563c7fa8c59a07&gt; /usr/lib/dyld
0x90003000 - 0x90005fff  com.apple.securityhi 3.0 (30817) &lt;2b2854123fed609d1820d2779e2e0963&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x90031000 - 0x90031ffc  com.apple.audio.units.AudioUnit 1.5 (1.5) /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x90032000 - 0x9005afff  libcups.2.dylib ??? (???) &lt;ece20dff2a2c8ed3ae6ef735ef440c37&gt; /usr/lib/libcups.2.dylib
0x9005b000 - 0x90073fff  com.apple.openscripting 1.2.6 (???) &lt;b8e553df643f2aec68fa968b3b459b2b&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x90074000 - 0x90198fe3  com.apple.audio.toolbox.AudioToolbox 1.5.1 (1.5.1) /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x90199000 - 0x90225ff7  com.apple.LaunchServices 289.2 (289.2) &lt;3577886e3a6d56ee3949850c4fde76c9&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x90226000 - 0x902cdfeb  com.apple.QD 3.11.52 (???) &lt;c72bd7bd2ce12694c3640a731d1ad878&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x902ce000 - 0x90395ff2  com.apple.vImage 3.0 (3.0) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x90396000 - 0x903c8fff  com.apple.LDAPFramework 1.4.3 (106) &lt;3a5c9df6032143cd6bc2658a9d328d8e&gt; /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x903c9000 - 0x903e4ff3  libPng.dylib ??? (???) &lt;c0484bec6e2432b406755591924fe664&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x903e5000 - 0x903fbfe7  com.apple.CoreVideo 1.5.0 (1.5.0) &lt;bad2d3a9a92fdecd02e64f0b73a76f27&gt; /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo
0x903fc000 - 0x903fcffd  com.apple.Accelerate.vecLib 3.4.2 (vecLib 3.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x9042e000 - 0x9050dfff  libobjc.A.dylib ??? (???) &lt;a53206274b6c2d42691f677863f379ae&gt; /usr/lib/libobjc.A.dylib
0x905d7000 - 0x905e2ff9  com.apple.helpdata 1.0 (14) /System/Library/PrivateFrameworks/HelpData.framework/Versions/A/HelpData
0x905e3000 - 0x905e4ffc  libffi.dylib ??? (???) &lt;a3b573eb950ca583290f7b2b4c486d09&gt; /usr/lib/libffi.dylib
0x905e6000 - 0x905e9fff  com.apple.help 1.1 (36) &lt;b507b08e484cb89033e9cf23062d77de&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x905ea000 - 0x90671ff7  libsqlite3.0.dylib ??? (???) &lt;6978bbcca4277d6ae9f042beff643f7d&gt; /usr/lib/libsqlite3.0.dylib
0x906c1000 - 0x906c1ffb  com.apple.installserver.framework 1.0 (8) /System/Library/PrivateFrameworks/InstallServer.framework/Versions/A/InstallServer
0x90d13000 - 0x90d13ffa  com.apple.CoreServices 32 (32) &lt;2fcc8f3bd5bbfc000b476cad8e6a3dd2&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x90d14000 - 0x90d23fff  libsasl2.2.dylib ??? (???) &lt;b9e1ca0b6612e280b6cbea6df0eec5f6&gt; /usr/lib/libsasl2.2.dylib
0x90e0b000 - 0x90e15feb  com.apple.audio.SoundManager 3.9.2 (3.9.2) &lt;0f2ba6e891d3761212cf5a5e6134d683&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x90f0b000 - 0x90f0ffff  libmathCommon.A.dylib ??? (???) /usr/lib/system/libmathCommon.A.dylib
0x90f10000 - 0x913e3ffe  libGLProgrammability.dylib ??? (???) &lt;475db64244e011cd8811e076035b2632&gt; /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib
0x913e4000 - 0x91404ff2  libGL.dylib ??? (???) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x914d9000 - 0x91517ff7  libGLImage.dylib ??? (???) &lt;093b1b698ca93a0380f5fa262459ea28&gt; /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x91518000 - 0x91838fe2  com.apple.QuickTime 7.4.5 (67) &lt;520cbf4ae05622466ad1b89f1ba3a4e1&gt; /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x91839000 - 0x91840ffe  libbsm.dylib ??? (???) &lt;d25c63378a5029648ffd4b4669be31bf&gt; /usr/lib/libbsm.dylib
0x91841000 - 0x91987ff7  com.apple.ImageIO.framework 2.0.2 (2.0.2) &lt;77dfee73f4c0d230425a5151ee0bce05&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x91988000 - 0x91c62ff3  com.apple.CoreServices.CarbonCore 786.4 (786.4) &lt;059c4803a7a95e3c1a95a332baeb1edf&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x91c63000 - 0x91ff9fff  com.apple.QuartzCore 1.5.3 (1.5.3) &lt;1b65c05f89e81a499302fd63295b242d&gt; /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x92017000 - 0x9205bfeb  com.apple.DirectoryService.PasswordServerFramework 3.0.3 (3.0.3) &lt;7e80635e8f1380dbf4af27e17e709fcb&gt; /System/Library/PrivateFrameworks/PasswordServer.framework/Versions/A/PasswordServer
0x9205c000 - 0x920d6ff8  com.apple.print.framework.PrintCore 5.5.3 (245.3) &lt;222dade7b33b99708b8c09d1303f93fc&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x920d7000 - 0x92119fef  com.apple.NavigationServices 3.5.2 (163) &lt;91844980804067b07a0b6124310d3f31&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x9211a000 - 0x921cafff  edu.mit.Kerberos 6.0.12 (6.0.12) &lt;1dc515ebe407292db8e603938c72d4e8&gt; /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
0x921cb000 - 0x922acff7  libxml2.2.dylib ??? (???) &lt;1baef3d4972ee789d8fa6c1fa44da45c&gt; /usr/lib/libxml2.2.dylib
0x922ad000 - 0x9242cfff  com.apple.AddressBook.framework 4.1.1 (695) &lt;24a448ba4f9f784189bd3183e3474d81&gt; /System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x9242d000 - 0x924acff5  com.apple.SearchKit 1.2.0 (1.2.0) &lt;277b460da86bc222785159fe77e2e2ed&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x924ad000 - 0x92529feb  com.apple.audio.CoreAudio 3.1.0 (3.1) &lt;70bb7c657061631491029a61babe0b26&gt; /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x9252a000 - 0x92590ffb  com.apple.ISSupport 1.7 (38) /System/Library/PrivateFrameworks/ISSupport.framework/Versions/A/ISSupport
0x92591000 - 0x925cbfff  com.apple.coreui 1.1 (61) /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI
0x925cc000 - 0x925cefff  com.apple.CrashReporterSupport 10.5.0 (156) &lt;3088b785b10d03504ed02f3fee5d3aab&gt; /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/CrashReporterSupport
0x9278b000 - 0x927dbff7  com.apple.HIServices 1.7.0 (???) &lt;f7e78891a6d08265c83dca8e378be1ea&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x927dc000 - 0x927dcfff  com.apple.Carbon 136 (136) &lt;98a5e3bc0c4fa44bbb09713bb88707fe&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x92915000 - 0x92929ff3  com.apple.ImageCapture 4.0 (5.0.0) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x9292a000 - 0x92fc6fff  com.apple.CoreGraphics 1.351.31 (???) &lt;c97a42498636b2596764e48669f98e00&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x92fc7000 - 0x92fd3fe7  com.apple.opengl 1.5.6 (1.5.6) &lt;125de77ea2434a91364e79a0905a7771&gt; /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x93025000 - 0x9302dfff  com.apple.DiskArbitration 2.2.1 (2.2.1) &lt;75b0c8d8940a8a27816961dddcac8e0f&gt; /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x9302e000 - 0x9303cffd  libz.1.dylib ??? (???) &lt;5ddd8539ae2ebfd8e7cc1c57525385c7&gt; /usr/lib/libz.1.dylib
0x9303d000 - 0x930dfff3  com.apple.QuickTimeImporters.component 7.4.5 (67) /System/Library/QuickTime/QuickTimeImporters.component/Contents/MacOS/QuickTimeImporters
0x930e0000 - 0x9313aff7  com.apple.CoreText 2.0.2 (???) &lt;9fde11f84a72e890bbf2aa8b0b13b79a&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x9313b000 - 0x9313bffd  com.apple.Accelerate 1.4.2 (Accelerate 1.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x9313c000 - 0x931eeffb  libcrypto.0.9.7.dylib ??? (???) &lt;330b0e48e67faffc8c22dfc069ca7a47&gt; /usr/lib/libcrypto.0.9.7.dylib
0x931ef000 - 0x9327afff  com.apple.framework.IOKit 1.5.1 (???) &lt;60cfc4b175c4ef60bb8e9036716a29f4&gt; /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x93280000 - 0x93365ff3  com.apple.CoreData 100.1 (186) &lt;8e28162ef2288692615b52acc01f8b54&gt; /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x93366000 - 0x9337cfff  com.apple.DictionaryServices 1.0.0 (1.0.0) &lt;ad0aa0252e3323d182e17f50defe56fc&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices
0x93387000 - 0x93398ffe  com.apple.CFOpenDirectory 10.5 (10.5) &lt;6a7f55108d77db7384d0e2219d07e9f8&gt; /System/Library/PrivateFrameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Versions/A/CFOpenDirectory
0x93399000 - 0x933a8ffe  com.apple.DSObjCWrappers.Framework 1.2.1 (1.2.1) &lt;eac1c7b7c07ed3148c85934b6f656308&gt; /System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
0x933a9000 - 0x934e1ff7  libicucore.A.dylib ??? (???) &lt;5031226ea28b371d8dfdbb32acfb48b5&gt; /usr/lib/libicucore.A.dylib
0x93550000 - 0x93651fef  com.apple.PubSub 1.0.3 (65.1.1) /System/Library/Frameworks/PubSub.framework/Versions/A/PubSub
0x93652000 - 0x93693fe7  libRIP.A.dylib ??? (???) &lt;c8d988d3880d7268468112c64c626d86&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x93694000 - 0x93e91fef  com.apple.AppKit 6.5.3 (949.33) &lt;84b236f43802f4c15011513d18efa101&gt; /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x93e92000 - 0x93e97fff  com.apple.backup.framework 1.0 (1.0) /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup
0x93e98000 - 0x93ed7fef  libTIFF.dylib ??? (???) &lt;6d0f80e9d4d81f3f64c876aca005bd53&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x93eec000 - 0x93eecff8  com.apple.ApplicationServices 34 (34) &lt;8f910fa65f01d401ad8d04cc933cf887&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x93eed000 - 0x942abfea  libLAPACK.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x942ac000 - 0x9433fff3  com.apple.ApplicationServices.ATS 3.3 (???) &lt;064eb6d96417afa38a80b1735c4113aa&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x94346000 - 0x94411fff  com.apple.ColorSync 4.5.0 (4.5.0) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x9467b000 - 0x946a6fe7  libauto.dylib ??? (???) &lt;42d8422dc23a18071869fdf7b5d8fab5&gt; /usr/lib/libauto.dylib
0x946a7000 - 0x946acfff  com.apple.CommonPanels 1.2.4 (85) &lt;ea0665f57cd267609466ed8b2b20e893&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x946ad000 - 0x946b4fff  com.apple.agl 3.0.9 (AGL-3.0.9) &lt;7dac4a7cb0de2f6d08ae71c1249379e3&gt; /System/Library/Frameworks/AGL.framework/Versions/A/AGL
0x946b5000 - 0x946b7ff5  libRadiance.dylib ??? (???) &lt;20eadb285da83df96c795c2c5fa20590&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x946b8000 - 0x946c8fff  com.apple.speech.synthesis.framework 3.7.1 (3.7.1) &lt;06d8fc0307314f8ffc16f206ad3dbf44&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x946c9000 - 0x95779ff6  com.apple.QuickTimeComponents.component 7.4.5 (67) /System/Library/QuickTime/QuickTimeComponents.component/Contents/MacOS/QuickTimeComponents
0x9577a000 - 0x95834fe3  com.apple.CoreServices.OSServices 226.3 (226.3) &lt;456bdd65b936baf1ef497b74b4f960a8&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x95835000 - 0x95839fff  com.apple.OpenDirectory 10.5 (10.5) &lt;e7e4507f5ecd8c8cdcdb2fc0675da0b4&gt; /System/Library/PrivateFrameworks/OpenDirectory.framework/Versions/A/OpenDirectory
0x9583a000 - 0x95873ffe  com.apple.securityfoundation 3.0 (32989) &lt;e9171eda22c69c884a04a001aeb526e0&gt; /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x95874000 - 0x95892ff3  com.apple.DirectoryService.Framework 3.5.3 (3.5.3) &lt;a3277abd826960efb44258699adafc17&gt; /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x95893000 - 0x9589aff7  libCGATS.A.dylib ??? (???) &lt;9b29a5500efe01cc3adea67bbc42568e&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib
0x9589b000 - 0x958c8feb  libvDSP.dylib ??? (???) &lt;b232c018ddd040ec4e2c2af632dd497f&gt; /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x958c9000 - 0x95922ff7  libGLU.dylib ??? (???) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x95923000 - 0x95947fff  libxslt.1.dylib ??? (???) &lt;4933ddc7f6618743197aadc85b33b5ab&gt; /usr/lib/libxslt.1.dylib
0x95948000 - 0x95bc3fe7  com.apple.Foundation 6.5.5 (677.19) &lt;bfd4ebea1a7739dd6b523f15dca01a37&gt; /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x95c3f000 - 0x95c43fff  libGIF.dylib ??? (???) &lt;d4234e6f5e5f530bdafb969157f1f17b&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x95cb7000 - 0x95cdfff7  com.apple.shortcut 1 (1.0) &lt;057783867138902b52bc0941fedb74d1&gt; /System/Library/PrivateFrameworks/Shortcut.framework/Versions/A/Shortcut
0x95d53000 - 0x95de6fff  com.apple.ink.framework 101.3 (86) &lt;bf3fa8927b4b8baae92381a976fd2079&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x95de7000 - 0x95dedfff  com.apple.print.framework.Print 218.0.2 (220.1) &lt;8bf7ef71216376d12fcd5ec17e43742c&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x95e23000 - 0x9612aff7  com.apple.HIToolbox 1.5.3 (???) &lt;e36f5c553e5a32f64b7eb458dadadc71&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x9612b000 - 0x9617bfeb  com.apple.framework.familycontrols 1.0.2 (1.0.2) &lt;90f740755beef77835545ede9e5e975d&gt; /System/Library/PrivateFrameworks/FamilyControls.framework/Versions/A/FamilyControls
0x96209000 - 0x96238fe3  com.apple.AE 402.2 (402.2) &lt;e01596187e91af5d48653920017b8c8e&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x96239000 - 0x96249ffc  com.apple.LangAnalysis 1.6.4 (1.6.4) &lt;cbeb17ab39f28351fe2ab5b82bf465bc&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x9624a000 - 0x962d4fe3  com.apple.DesktopServices 1.4.6 (1.4.6) &lt;94d1a28b351b7dff77becadab0967772&gt; /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x962db000 - 0x962e6fe7  libCSync.A.dylib ??? (???) &lt;8011fc1963cebdde0c6f101dbee5afd7&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x962e7000 - 0x962e7ffd  com.apple.vecLib 3.4.2 (vecLib 3.4.2) /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib
0x962e8000 - 0x964b5fe7  com.apple.security 5.0.3 (33532) &lt;3bef414f3c6f433e707ac5abee340e16&gt; /System/Library/Frameworks/Security.framework/Versions/A/Security
0x964b6000 - 0x964bdfe9  libgcc_s.1.dylib ??? (???) &lt;f53c808e87d1184c0f9df63aef53ce0b&gt; /usr/lib/libgcc_s.1.dylib
0x964be000 - 0x96504fef  com.apple.Metadata 10.5.2 (398.18) &lt;adbb3a14e8f7da444e16d2fd61862771&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x96505000 - 0x9654ffe1  com.apple.securityinterface 3.0 (32532) &lt;f521dae416ce7a3bdd594b0d4e2fb517&gt; /System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
0x96550000 - 0x96587fff  com.apple.SystemConfiguration 1.9.2 (1.9.2) &lt;8b26ebf26a009a098484f1ed01ec499c&gt; /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x966f3000 - 0x966fcfff  com.apple.speech.recognition.framework 3.7.24 (3.7.24) &lt;d3180f9edbd9a5e6f283d6156aa3c602&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x966fd000 - 0x966fdff8  com.apple.Cocoa 6.5 (???) &lt;e064f94d969ce25cb7de3cfb980c3249&gt; /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x9670a000 - 0x96729ffa  libJPEG.dylib ??? (???) &lt;0cfb80109d624beb9ceb3c43b6c5ec10&gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x9672a000 - 0x967acffb  com.apple.CFNetwork 330 (330) &lt;6c5eda16e640b09334809ba4c1df985d&gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x967ad000 - 0x9682afef  libvMisc.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x9682b000 - 0x9695dfff  com.apple.CoreFoundation 6.5.2 (476.13) &lt;b633d15f2901d73670cb1475628df1b3&gt; /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x9695e000 - 0x96994fef  libtidy.A.dylib ??? (???) &lt;f1d1742e06280444baa5637b209fd0af&gt; /usr/lib/libtidy.A.dylib
0x96995000 - 0x969f2ffb  libstdc++.6.dylib ??? (???) &lt;04b812dcec670daa8b7d2852ab14be60&gt; /usr/lib/libstdc++.6.dylib
0x969f3000 - 0x96e03fef  libBLAS.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x96e22000 - 0x96e40fff  libresolv.9.dylib ??? (???) &lt;0629b6dcd71f4aac6a891cbe26253e85&gt; /usr/lib/libresolv.9.dylib
0x96e80000 - 0x96edcff7  com.apple.htmlrendering 68 (1.1.3) &lt;fe87a9dede38db00e6c8949942c6bd4f&gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x96ff0000 - 0x97014feb  libssl.0.9.7.dylib ??? (???) &lt;acee7fc534674498dcac211318aa23e8&gt; /usr/lib/libssl.0.9.7.dylib
0x970d3000 - 0x97233ff3  libSystem.B.dylib ??? (???) &lt;a12f397abf2285077b89bd726bff5b18&gt; /usr/lib/libSystem.B.dylib
0xfffe8000 - 0xfffebfff  libobjc.A.dylib ??? (???) /usr/lib/libobjc.A.dylib
0xffff0000 - 0xffff1780  libSystem.B.dylib ??? (???) /usr/lib/libSystem.B.dylib

</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82814</commentid>
    <comment_count>4</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-09 23:48:46 -0700</bug_when>
    <thetext>nm.  The two stack traces are functionally equivalent. </thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82836</commentid>
    <comment_count>5</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-10 10:31:29 -0700</bug_when>
    <thetext>I think the RenderView&apos;s m_selectionEnd was deleted, but it was somehow not told... not sure.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82839</commentid>
    <comment_count>6</comment_count>
      <attachid>21603</attachid>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-10 10:50:09 -0700</bug_when>
    <thetext>Created attachment 21603
Slightly smaller reduction

Slightly simpler reduction:
&lt;body&gt;&lt;script&gt;
document.execCommand(&apos;selectall&apos;)
document.designMode = &apos;on&apos;
document.execCommand(&apos;inserthorizontalrule&apos;)
document.execCommand(&apos;insertparagraph&apos;)
document.execCommand(&apos;delete&apos;)
document.execCommand(&apos;inserthorizontalrule&apos;)
document.execCommand(&apos;justifycenter&apos;)
document.execCommand(&apos;formatblock&apos;, 0, &apos;&lt;pre&gt;&apos;)
document.execCommand(&apos;inserthorizontalrule&apos;)
document.execCommand(&apos;insertparagraph&apos;)
document.execCommand(&apos;selectall&apos;)
document.execCommand(&apos;createLink&apos;, 0, &apos;foo&apos;)
document.execCommand(&apos;selectall&apos;)
document.execCommand(&apos;justifycenter&apos;)
&lt;/script&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82841</commentid>
    <comment_count>7</comment_count>
      <attachid>21604</attachid>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-10 11:06:17 -0700</bug_when>
    <thetext>Created attachment 21604
Stacks for creation, destruction, and bad-access

Stacks from my most recent debugging section.  This is the &lt;a&gt; tag which is being created around the entire document, then we&apos;re selecting everything again and center justifying it, and that&apos;s when the &lt;a&gt; tag has already been destroyed and we crash.  It&apos;s destroyed earlier in the justifyCenter command.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82863</commentid>
    <comment_count>8</comment_count>
      <attachid>21611</attachid>
    <who name="Justin Garcia">justin.garcia</who>
    <bug_when>2008-06-10 14:30:28 -0700</bug_when>
    <thetext>Created attachment 21611
even smaller reduction</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82920</commentid>
    <comment_count>9</comment_count>
      <attachid>21618</attachid>
    <who name="Justin Garcia">justin.garcia</who>
    <bug_when>2008-06-11 00:51:37 -0700</bug_when>
    <thetext>Created attachment 21618
patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82921</commentid>
    <comment_count>10</comment_count>
      <attachid>21618</attachid>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2008-06-11 00:56:18 -0700</bug_when>
    <thetext>Comment on attachment 21618
patch

Looks good to me.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>82978</commentid>
    <comment_count>11</comment_count>
    <who name="Justin Garcia">justin.garcia</who>
    <bug_when>2008-06-11 11:32:09 -0700</bug_when>
    <thetext>http://trac.webkit.org/changeset/34495</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="0"
              isprivate="0"
          >
            <attachid>21601</attachid>
            <date>2008-06-09 23:46:43 -0700</date>
            <delta_ts>2008-06-10 10:50:09 -0700</delta_ts>
            <desc>test case (crashes Safari)</desc>
            <filename>editor-crash.html</filename>
            <type>text/html</type>
            <size>1040</size>
            <attacher name="Eric Seidel (no email)">eric</attacher>
            
              <data encoding="base64">PGlmcmFtZSBpZD1mIG5hbWU9ZiBzcmM9ImFib3V0OmJsYW5rIiB3aWR0aD0xMDAlIGhlaWdodD01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</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="0"
              isprivate="0"
          >
            <attachid>21603</attachid>
            <date>2008-06-10 10:50:09 -0700</date>
            <delta_ts>2008-06-10 14:30:28 -0700</delta_ts>
            <desc>Slightly smaller reduction</desc>
            <filename>editor-crash.html</filename>
            <type>text/html</type>
            <size>568</size>
            <attacher name="Eric Seidel (no email)">eric</attacher>
            
              <data encoding="base64">PGJvZHk+PHNjcmlwdD4KZG9jdW1lbnQuZXhlY0NvbW1hbmQoJ3NlbGVjdGFsbCcpCmRvY3VtZW50
LmRlc2lnbk1vZGUgPSAnb24nCmRvY3VtZW50LmV4ZWNDb21tYW5kKCdpbnNlcnRob3Jpem9udGFs
cnVsZScpCmRvY3VtZW50LmV4ZWNDb21tYW5kKCdpbnNlcnRwYXJhZ3JhcGgnKQpkb2N1bWVudC5l
eGVjQ29tbWFuZCgnZGVsZXRlJykKZG9jdW1lbnQuZXhlY0NvbW1hbmQoJ2luc2VydGhvcml6b250
YWxydWxlJykKZG9jdW1lbnQuZXhlY0NvbW1hbmQoJ2p1c3RpZnljZW50ZXInKQpkb2N1bWVudC5l
eGVjQ29tbWFuZCgnZm9ybWF0YmxvY2snLCAwLCAnPHByZT4nKQpkb2N1bWVudC5leGVjQ29tbWFu
ZCgnaW5zZXJ0aG9yaXpvbnRhbHJ1bGUnKQpkb2N1bWVudC5leGVjQ29tbWFuZCgnaW5zZXJ0cGFy
YWdyYXBoJykKZG9jdW1lbnQuZXhlY0NvbW1hbmQoJ3NlbGVjdGFsbCcpCmRvY3VtZW50LmV4ZWND
b21tYW5kKCdjcmVhdGVMaW5rJywgMCwgJ2ZvbycpCmRvY3VtZW50LmV4ZWNDb21tYW5kKCdzZWxl
Y3RhbGwnKQpkb2N1bWVudC5leGVjQ29tbWFuZCgnanVzdGlmeWNlbnRlcicpCjwvc2NyaXB0Pg==
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>21604</attachid>
            <date>2008-06-10 11:06:17 -0700</date>
            <delta_ts>2008-06-10 11:06:17 -0700</delta_ts>
            <desc>Stacks for creation, destruction, and bad-access</desc>
            <filename>stacks.txt</filename>
            <type>text/plain</type>
            <size>14889</size>
            <attacher name="Eric Seidel (no email)">eric</attacher>
            
              <data encoding="base64">CgojMCAgV2ViQ29yZTo6UmVuZGVyT2JqZWN0OjpSZW5kZXJPYmplY3QgKHRoaXM9MHg4YmFkNWMs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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>21611</attachid>
            <date>2008-06-10 14:30:28 -0700</date>
            <delta_ts>2008-06-10 14:30:28 -0700</delta_ts>
            <desc>even smaller reduction</desc>
            <filename>reduction.html</filename>
            <type>text/html</type>
            <size>234</size>
            <attacher name="Justin Garcia">justin.garcia</attacher>
            
              <data encoding="base64">PGJvZHk+PGhyPjxwcmU+PGhyPgo8L3ByZT48c2NyaXB0Pgpkb2N1bWVudC5kZXNpZ25Nb2RlID0g
Im9uIjsKZG9jdW1lbnQuZXhlY0NvbW1hbmQoIlNlbGVjdEFsbCIpOwpkb2N1bWVudC5leGVjQ29t
bWFuZCgiQ3JlYXRlTGluayIsIDAsICdmb28nKTsKZG9jdW1lbnQuZXhlY0NvbW1hbmQoIlNlbGVj
dEFsbCIpOwpkb2N1bWVudC5leGVjQ29tbWFuZCgiSnVzdGlmeUNlbnRlciIpOwo8L3NjcmlwdD48
L2JvZHk+
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>21618</attachid>
            <date>2008-06-11 00:51:37 -0700</date>
            <delta_ts>2008-06-11 00:56:18 -0700</delta_ts>
            <desc>patch</desc>
            <filename>19455.txt</filename>
            <type>text/plain</type>
            <size>6204</size>
            <attacher name="Justin Garcia">justin.garcia</attacher>
            
              <data encoding="base64">SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="9478"
          type_id="1"
          status="+"
          setter="eric"
    />
          </attachment>
      

    </bug>

</bugzilla>