<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>26671</bug_id>
          
          <creation_ts>2009-06-24 00:02:20 -0700</creation_ts>
          <short_desc>Safari 4.0 crashes in WebCore::DOMTimer::fired()</short_desc>
          <delta_ts>2009-06-28 19:01:56 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>DOM</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>VERIFIED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc>http://lite.maps.nsw.gov.au/</bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar, NeedsReduction</keywords>
          <priority>P1</priority>
          <bug_severity>Major</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="David Carter">david.carter</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>mitz</cc>
    
    <cc>mrowe</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>127834</commentid>
    <comment_count>0</comment_count>
    <who name="David Carter">david.carter</who>
    <bug_when>2009-06-24 00:02:20 -0700</bug_when>
    <thetext>Safari 4.0 (530.17) crashes in WebCore::DOMTimer::fired().  The crash did not occur in Safari 3.2.2 (from http://support.apple.com/downloads/Safari_3_2_2_for_Windows).

To repeat the crash, follow these steps: 

1. Load http://lite.maps.nsw.gov.au/

2. Click the zoom box tool on the circular navigator. 

3. Click and drag the map to zoom into an area. Safari will crash.

I checked out and debugged the latest WebKit code in Visual Studio, and found the crash was occurring in WebCore::DOMTimer::fired().  The error reported by Visual Stuio when the crash occurs is &quot;A buffer overrun has occurred in Safari.exe which has corrupted the program&apos;s internal state.&quot;.  Also, here is the Visual Studio call stack at the time of the crash:

WebKit.dll!__crt_debugger_hook() 	Unknown
WebKit.dll!__report_gsfailure()  Line 298 + 0x7 bytes	C
WebKit.dll!WebCore::Node::compareDocumentPosition(WebCore::Node * otherNode=0x00000000)  Line 2073 + 0x15 bytes	C++
WebKit.dll!WebCore::Document::addStyleSheetCandidateNode(WebCore::Node * node=0x7e9bb160, bool createdByParser=true)  Line 2287	C++
WebKit.dll!WebCore::ProcessingInstruction::insertedIntoDocument()  Line 254	C++
WebKit.dll!WebCore::dispatchChildInsertionEvents(WebCore::Node * child=0x7e9bb160, int &amp; ec=0)  Line 874	C++
WebKit.dll!WebCore::ContainerNode::appendChild(WTF::PassRefPtr&lt;WebCore::Node&gt; newChild={...}, int &amp; ec=2124132704, bool shouldLazyAttach=true)  Line 483 + 0x7 bytes	C++
WebKit.dll!WebCore::JSNode::appendChild(JSC::ExecState * exec=0x0c568944, const JSC::ArgList &amp; args={...})  Line 105	C++
WebKit.dll!WebCore::jsNodePrototypeFunctionAppendChild(JSC::ExecState * exec=0x00000000, JSC::JSObject * __formal=0x0f662e14, JSC::JSValue thisValue={...}, const JSC::ArgList &amp; args={...})  Line 1295 + 0xd bytes	C++
JavaScriptCore.dll!JSC::JITCode::execute(JSC::RegisterFile * registerFile=0x7fd81d88, JSC::ExecState * callFrame=0x0c568024, JSC::JSGlobalData * globalData=0x00000000, JSC::JSValue * exception=0x0012f980)  Line 83 + 0x1d bytes	C++
JavaScriptCore.dll!JSC::Interpreter::execute(JSC::ProgramNode * programNode=, JSC::ExecState * callFrame=, JSC::ScopeChainNode * scopeChain=, JSC::JSObject * thisObj=, JSC::JSValue * exception=)  Line 644 + 0x26 bytes	C++
JavaScriptCore.dll!JSC::evaluate(JSC::ExecState * exec=0x7fe62500, JSC::ScopeChain &amp; scopeChain={...}, const JSC::SourceCode &amp; source={...}, JSC::JSValue thisValue={...})  Line 69	C++
WebKit.dll!WebCore::ScriptController::evaluate(const WebCore::ScriptSourceCode &amp; sourceCode=)  Line 103	C++
WebKit.dll!WebCore::FrameLoader::executeScript(const WebCore::ScriptSourceCode &amp; sourceCode={...})  Line 781	C++
WebKit.dll!WebCore::FrameLoader::executeScript(const WebCore::String &amp; script={...}, bool forceUserGesture=false)  Line 768 + 0x6f bytes	C++
WebKit.dll!WebCore::ScheduledAction::execute(WebCore::Document * document=0x00000000)  Line 128 + 0x12 bytes	C++
WebKit.dll!WebCore::DOMTimer::fired()  Line 125 + 0x18 bytes	C++</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>127851</commentid>
    <comment_count>1</comment_count>
    <who name="Mark Rowe (bdash)">mrowe</who>
    <bug_when>2009-06-24 00:47:35 -0700</bug_when>
    <thetext>&lt;rdar://problem/7001880&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>127934</commentid>
    <comment_count>2</comment_count>
    <who name="Mark Rowe (bdash)">mrowe</who>
    <bug_when>2009-06-24 10:03:47 -0700</bug_when>
    <thetext>Does this reproduce in a nightly build of WebKit?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>128078</commentid>
    <comment_count>3</comment_count>
    <who name="David Carter">david.carter</who>
    <bug_when>2009-06-24 19:29:23 -0700</bug_when>
    <thetext>The problem still occurs in the latest WebKit nightly build (r44969 / 24th June 2009).</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>128079</commentid>
    <comment_count>4</comment_count>
    <who name="Mark Rowe (bdash)">mrowe</who>
    <bug_when>2009-06-24 19:36:41 -0700</bug_when>
    <thetext>Thanks.  This may be Windows-specific.  In my quick test I couldn&apos;t reproduce this on Mac OS X.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>128196</commentid>
    <comment_count>5</comment_count>
      <attachid>31860</attachid>
    <who name="">mitz</who>
    <bug_when>2009-06-25 08:55:48 -0700</bug_when>
    <thetext>Created attachment 31860
Possible fix (no change log, no layout test)

I think the problem is that stale nodes remain in the document’s style sheet candidate set. This patch fixes the crash.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>128202</commentid>
    <comment_count>6</comment_count>
      <attachid>31862</attachid>
    <who name="">mitz</who>
    <bug_when>2009-06-25 10:08:16 -0700</bug_when>
    <thetext>Created attachment 31862
Patch, including change log and regression test</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>128239</commentid>
    <comment_count>7</comment_count>
    <who name="">mitz</who>
    <bug_when>2009-06-25 12:45:53 -0700</bug_when>
    <thetext>Fixed in &lt;http://trac.webkit.org/projects/webkit/changeset/45180&gt;.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>128762</commentid>
    <comment_count>8</comment_count>
    <who name="David Carter">david.carter</who>
    <bug_when>2009-06-28 19:01:56 -0700</bug_when>
    <thetext>I&apos;ve confirmed the crash no longer occurs in the latest WebKit nightly build. Thank you :)</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>31860</attachid>
            <date>2009-06-25 08:55:48 -0700</date>
            <delta_ts>2009-06-25 10:08:16 -0700</delta_ts>
            <desc>Possible fix (no change log, no layout test)</desc>
            <filename>26671_r0.diff</filename>
            <type>text/plain</type>
            <size>1949</size>
            <attacher>mitz</attacher>
            
              <data encoding="base64">SW5kZXg6IFdlYkNvcmUvZG9tL1Byb2Nlc3NpbmdJbnN0cnVjdGlvbi5jcHAKPT09PT09PT09PT09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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>31862</attachid>
            <date>2009-06-25 10:08:16 -0700</date>
            <delta_ts>2009-06-25 12:41:30 -0700</delta_ts>
            <desc>Patch, including change log and regression test</desc>
            <filename>26671_r1.diff</filename>
            <type>text/plain</type>
            <size>5658</size>
            <attacher>mitz</attacher>
            
              <data encoding="base64">SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="16424"
          type_id="1"
          status="+"
          setter="darin"
    />
          </attachment>
      

    </bug>

</bugzilla>