<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>21184</bug_id>
          
          <creation_ts>2008-09-27 15:41:14 -0700</creation_ts>
          <short_desc>REGRESSION: Reproducible crash below StringImpl::hash while running editing/deleting/5408255.html</short_desc>
          <delta_ts>2008-09-27 16:23:37 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Page Loading</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Mac</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>NeedsReduction, Regression</keywords>
          <priority>P1</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Mark Rowe (bdash)">mrowe</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>93088</commentid>
    <comment_count>0</comment_count>
    <who name="Mark Rowe (bdash)">mrowe</who>
    <bug_when>2008-09-27 15:41:14 -0700</bug_when>
    <thetext>The buildbot sees the crash all of the time, but because it happens after the test result has been written it rarely shows the test as having failed or crashed.  I bisected through the layout tests to narrow it down to editing/deleting/5408255.html.

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_PROTECTION_FAILURE at address: 0x00000010
0x036f3045 in WebCore::StringImpl::hash (this=0x0) at text/StringImpl.h:89
89	    unsigned hash() { if (m_hash == 0) m_hash = computeHash(m_data, m_length); return m_hash; }
(gdb) bt 10
#0  0x036f3045 in WebCore::StringImpl::hash (this=0x0) at text/StringImpl.h:89
#1  0x039ccae9 in WebCore::StringHash::hash (key=@0x12cae2c) at text/StringHash.h:69
#2  0x039d10a5 in WTF::IdentityHashTranslator&lt;WebCore::String, std::pair&lt;WebCore::String, WebCore::CachedResource*&gt;, WebCore::StringHash&gt;::hash (key=@0x12cae2c) at HashTable.h:267
#3  0x039da967 in WTF::HashTable&lt;WebCore::String, std::pair&lt;WebCore::String, WebCore::CachedResource*&gt;, WTF::PairFirstExtractor&lt;std::pair&lt;WebCore::String, WebCore::CachedResource*&gt; &gt;, WebCore::StringHash, WTF::PairHashTraits&lt;WTF::HashTraits&lt;WebCore::String&gt;, WTF::HashTraits&lt;WebCore::CachedResource*&gt; &gt;, WTF::HashTraits&lt;WebCore::String&gt; &gt;::lookup&lt;WebCore::String, WTF::IdentityHashTranslator&lt;WebCore::String, std::pair&lt;WebCore::String, WebCore::CachedResource*&gt;, WebCore::StringHash&gt; &gt; (this=0x7035be8, key=@0x12cae2c) at HashTable.h:462
#4  0x0371a80c in WTF::HashTable&lt;WebCore::String, std::pair&lt;WebCore::String, WebCore::CachedResource*&gt;, WTF::PairFirstExtractor&lt;std::pair&lt;WebCore::String, WebCore::CachedResource*&gt; &gt;, WebCore::StringHash, WTF::PairHashTraits&lt;WTF::HashTraits&lt;WebCore::String&gt;, WTF::HashTraits&lt;WebCore::CachedResource*&gt; &gt;, WTF::HashTraits&lt;WebCore::String&gt; &gt;::lookup (this=0x7035be8, key=@0x12cae2c) at HashTable.h:330
#5  0x039daa40 in WTF::HashMap&lt;WebCore::String, WebCore::CachedResource*, WebCore::StringHash, WTF::HashTraits&lt;WebCore::String&gt;, WTF::HashTraits&lt;WebCore::CachedResource*&gt; &gt;::get (this=0x7035be8, key=@0x12cae2c) at HashMap.h:207
#6  0x03716996 in WebCore::Cache::resourceForURL (this=0x7035a00, url=@0x12cae2c) at WebCore/loader/Cache.cpp:244
#7  0x03721a56 in WebCore::CachedResource::~CachedResource (this=0x12cae10) at WebCore/loader/CachedResource.cpp:85
[...]</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>93096</commentid>
    <comment_count>1</comment_count>
    <who name="Mark Rowe (bdash)">mrowe</who>
    <bug_when>2008-09-27 16:23:37 -0700</bug_when>
    <thetext>Landed in r37016.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>