34905 2010-02-12 14:02:55 -0800 Crash loading a webpage 2010-02-18 18:18:01 -0800 1 1 1 Unclassified WebKit WebKitGTK 528+ (Nightly build) PC Linux RESOLVED DUPLICATE 35063 http://www.saarlane.ee/galerii/galerii.asp?gid=105&offset=32&stmp=1255215486009# P2 Normal --- 0 plaes webkit-unassigned fishd tony oldest_to_newest 190142 0 plaes 2010-02-12 14:02:55 -0800 Distribution: Gentoo Base System release 2.0.1 Gnome Release: 2.28.2 2009-12-18 (Gentoo) BugBuddy Version: 2.28.0 System: Linux 2.6.32 #49 SMP Mon Dec 14 20:11:21 EET 2009 x86_64 X Vendor: The X.Org Foundation X Vendor Release: 10704901 Selinux: No Accessibility: Disabled GTK+ Theme: Clearlooks Icon Theme: gnome GTK+ Modules: canberra-gtk-module, gnomebreakpad Memory status: size: 580882432 vsize: 580882432 resident: 102424576 share: 25190400 rss: 102424576 rss_rlim: 18446744073709551615 CPU usage: start_time: 1266011868 rtime: 285 utime: 272 stime: 13 cutime:0 cstime: 0 timeout: 0 it_real_value: 0 frequency: 100 Backtrace was generated from '/usr/bin/epiphany' Traceback (most recent call last): File "/usr/share/gdb/auto-load/usr/lib64/libgobject-2.0.so.0.2200.4-gdb.py", line 9, in <module> from gobject import register File "/usr/share/glib-2.0/gdb/gobject.py", line 3, in <module> import gdb.backtrace ImportError: No module named backtrace [Thread debugging using libthread_db enabled] [New Thread 0x7f861142f710 (LWP 1019)] [New Thread 0x7f8611d30710 (LWP 1018)] 0x00007f862379ebbd in __libc_waitpid (pid=1062, stat_loc=<value optimized out>, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:41 in ../sysdeps/unix/sysv/linux/waitpid.c #0 0x00007f862379ebbd in __libc_waitpid (pid=1062, stat_loc=<value optimized out>, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:41 #1 0x00007f8623f40c89 in IA__g_spawn_sync ( working_directory=<value optimized out>, argv=<value optimized out>, envp=<value optimized out>, flags=<value optimized out>, child_setup=<value optimized out>, user_data=<value optimized out>, standard_output=0x0, standard_error=0x0, exit_status=0x0, error= 0x7fff71f2cdf8) at gspawn.c:386 #2 0x00007f8623f40f7e in IA__g_spawn_command_line_sync ( command_line=<value optimized out>, standard_output=0x0, standard_error= 0x0, exit_status=0x0, error=0x7fff71f2cdf8) at gspawn.c:700 #3 0x00007f86145a0e46 in run_bug_buddy (signum=<value optimized out>) at gnome-breakpad.cc:369 #4 check_if_gdb (signum=<value optimized out>) at gnome-breakpad.cc:440 #5 bugbuddy_segv_handle (signum=<value optimized out>) at gnome-breakpad.cc:223 #6 <signal handler called> #7 0x00007f8627747e65 in WebCore::HistoryItem::setDocumentSequenceNumber ( this=0x7f86114bf970) at ./WebCore/history/HistoryItem.h:139 #8 WebCore::HistoryController::updateBackForwardListForFragmentScroll (this= 0x7f86114bf970) at WebCore/loader/HistoryController.cpp:112 #9 0x00007f862773a7e5 in WebCore::FrameLoader::loadInSameDocument (this= 0x7f86114bf850, url=..., stateObject=0x0, isNewNavigation=true) at WebCore/loader/FrameLoader.cpp:1744 #10 0x00007f8627755466 in WebCore::PolicyChecker::checkNavigationPolicy (this= 0x7f86114bf860, request=..., loader=0x7f86114c7700, formState=) at WebCore/loader/PolicyChecker.cpp:68 #11 0x00007f86277401e5 in WebCore::FrameLoader::loadWithDocumentLoader (this= 0x7f86114bf850, loader=0x7f861147f000, type=<value optimized out>, prpFormState=<value optimized out>) at WebCore/loader/FrameLoader.cpp:2066 #12 0x00007f862774081f in WebCore::FrameLoader::load (this=0x7f86114bf850, newDocumentLoader=0x7f861147f000) at WebCore/loader/FrameLoader.cpp:2038 #13 0x00007f8627740960 in WebCore::FrameLoader::load (this=0x7f86114bf850, request=<value optimized out>, substituteData=<value optimized out>, lockHistory=false) at WebCore/loader/FrameLoader.cpp:1979 #14 0x00007f8627740a70 in WebCore::FrameLoader::load (this=0x7f86114bf850, request=..., lockHistory=40) at WebCore/loader/FrameLoader.cpp:1966 #15 0x00007f8627a7b8c7 in webkit_web_frame_load_uri ( frame=<value optimized out>, uri= 0x3ba1840 "http://www.saarlane.ee/galerii/galerii.asp?gid=105&offset=32&stmp=1255215486009#") at WebKit/gtk/webkit/webkitwebframe.cpp:537 #16 0x0000000000474569 in ephy_web_view_load_url (view=0x1f3a970, url=<value optimized out>) at ephy-web-view.c:2084 #17 0x000000000043b0be in ephy_window_open_link (link=<value optimized out>, address= 0x3bab300 "http://www.saarlane.ee/galerii/galerii.asp?gid=105&offset=32&stmp=1255215486009#", embed=0x3b920c0, flags=EPHY_LINK_ALLOW_FIXUP) at ephy-window.c:3514 #18 0x000000000048df54 in ephy_marshal_OBJECT__STRING_OBJECT_FLAGS (closure= 0x1be6160, return_value=0x7fff71f2dac0, n_param_values=<value optimized out>, param_values=0x3dd9360, invocation_hint=<value optimized out>, marshal_data=0x43afc2) at ephy-marshal.c:515 #19 0x00007f86241befb1 in IA__g_closure_invoke (closure=0x1be6160, return_value=0x7fff71f2dac0, n_param_values=4, param_values=0x3dd9360, invocation_hint=0x7fff71f2da80) at gclosure.c:767 #20 0x00007f86241d21c0 in signal_emit_unlocked_R (node=0x1bac4a0, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3285 #21 0x00007f86241d31af in IA__g_signal_emit_valist (instance=0x1afd970, signal_id=<value optimized out>, detail=0, var_args=0x7fff71f2dc70) at gsignal.c:2990 #22 0x00007f86241d382e in IA__g_signal_emit (instance=0x7fff71f2d1f0, signal_id=290223872, detail=0) at gsignal.c:3037 #23 0x000000000044fc59 in ephy_link_open (link=0x7fff71f2d1f0, address=<value optimized out>, embed=0x0, flags=290191440) at ephy-link.c:95 #24 0x000000000048df54 in ephy_marshal_OBJECT__STRING_OBJECT_FLAGS (closure= 0x1cc04a0, return_value=0x7fff71f2df20, n_param_values=<value optimized out>, param_values=0x3dd90c0, invocation_hint=<value optimized out>, marshal_data=0x44fc2b) at ephy-marshal.c:515 #25 0x00007f86241befb1 in IA__g_closure_invoke (closure=0x1cc04a0, return_value=0x7fff71f2df20, n_param_values=4, param_values=0x3dd90c0, invocation_hint=0x7fff71f2dee0) at gclosure.c:767 #26 0x00007f86241d1e62 in signal_emit_unlocked_R (node=0x1bac4a0, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3247 #27 0x00007f86241d31af in IA__g_signal_emit_valist (instance=0x1cec000, signal_id=<value optimized out>, detail=0, var_args=0x7fff71f2e0d0) at gsignal.c:2990 #28 0x00007f86241d382e in IA__g_signal_emit (instance=0x7fff71f2d1f0, signal_id=290223872, detail=0) at gsignal.c:3037 #29 0x000000000044fc59 in ephy_link_open (link=0x7fff71f2d1f0, address=<value optimized out>, embed=0x0, flags=290191440) at ephy-link.c:95 #30 0x000000000048df54 in ephy_marshal_OBJECT__STRING_OBJECT_FLAGS (closure= 0x1d0c1d0, return_value=0x7fff71f2e380, n_param_values=<value optimized out>, param_values=0x1efd860, invocation_hint=<value optimized out>, marshal_data=0x44fc2b) at ephy-marshal.c:515 #31 0x00007f86241befb1 in IA__g_closure_invoke (closure=0x1d0c1d0, return_value=0x7fff71f2e380, n_param_values=4, param_values=0x1efd860, invocation_hint=0x7fff71f2e340) at gclosure.c:767 #32 0x00007f86241d1e62 in signal_emit_unlocked_R (node=0x1bac4a0, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3247 #33 0x00007f86241d31af in IA__g_signal_emit_valist (instance=0x1c84130, signal_id=<value optimized out>, detail=0, var_args=0x7fff71f2e530) at gsignal.c:2990 #34 0x00007f86241d382e in IA__g_signal_emit (instance=0x7fff71f2d1f0, signal_id=290223872, detail=0) at gsignal.c:3037 #35 0x000000000044fc59 in ephy_link_open (link=0x7fff71f2d1f0, address=<value optimized out>, embed=0x0, flags=290191440) at ephy-link.c:95 #36 0x0000000000450b31 in entry_activate_cb (entry=<value optimized out>, proxy=<value optimized out>) at ephy-location-action.c:210 #37 0x00007f86241befb1 in IA__g_closure_invoke (closure=0x1ddf600, return_value=0x7fff71f2e930, n_param_values=1, param_values=0x1f40bf0, invocation_hint=0x7fff71f2e7b0) at gclosure.c:767 #38 0x00007f86241d1e62 in signal_emit_unlocked_R (node=0x1c700b0, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3247 #39 0x00007f86269e6c94 in gtk_binding_entry_activate (entry=0x1c731b0, object= 0x1c96160) at gtkbindings.c:537 #40 0x00007f86269e716c in binding_match_activate ( pspec_list=<value optimized out>, object=0x1c96160, path_length=8, path= 0x3bceab0 "GtkEntry", path_reversed=0x1f40bd0 "yrtnEktG", unbound=<value optimized out>) at gtkbindings.c:1123 #41 0x00007f86269e73b5 in gtk_bindings_activate_list (object=0x1c96160, entries=<value optimized out>, is_release=<value optimized out>) at gtkbindings.c:1268 #42 0x00007f86269e74cb in IA__gtk_bindings_activate_event (object=0x1c96160, event=0x3de7200) at gtkbindings.c:1361 #43 0x00007f8626a2523c in gtk_entry_key_press (widget=0x1c96160, event= 0x3de7200) at gtkentry.c:4077 #44 0x00007f8626a89602 in _gtk_marshal_BOOLEAN__BOXED (closure=0x1b087c0, return_value=0x7fff71f2ec60, n_param_values=<value optimized out>, param_values=0x3bce000, invocation_hint=<value optimized out>, marshal_data=0x7f8626a251b7) at gtkmarshalers.c:84 #45 0x00007f86241bef04 in IA__g_closure_invoke (closure=0x1b087c0, return_value=0x7fff71f2ec60, n_param_values=2, param_values=0x3bce000, invocation_hint=0x7fff71f2ec20) at gclosure.c:767 #46 0x00007f86241d21c0 in signal_emit_unlocked_R (node=0x1b08500, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3285 #47 0x00007f86241d31af in IA__g_signal_emit_valist (instance=0x1c96160, signal_id=<value optimized out>, detail=0, var_args=0x7fff71f2ee10) at gsignal.c:2990 #48 0x00007f86241d382e in IA__g_signal_emit (instance=0x7fff71f2d1f0, signal_id=290223872, detail=0) at gsignal.c:3037 #49 0x00007f8626b727b1 in gtk_widget_event_internal (widget=0x1c96160, event= 0x3de7200) at gtkwidget.c:4767 #50 0x00007f8626b82d24 in IA__gtk_window_propagate_key_event (window= 0x1afd970, event=0x3de7200) at gtkwindow.c:5144 #51 0x00007f8626b85529 in gtk_window_key_press_event (widget=0x1afd970, event= 0x3de7200) at gtkwindow.c:5174 #52 0x00007f8626a89602 in _gtk_marshal_BOOLEAN__BOXED (closure=0x1b087c0, return_value=0x7fff71f2f120, n_param_values=<value optimized out>, param_values=0x3bb2780, invocation_hint=<value optimized out>, marshal_data=0x43bdbc) at gtkmarshalers.c:84 #53 0x00007f86241befb1 in IA__g_closure_invoke (closure=0x1b087c0, return_value=0x7fff71f2f120, n_param_values=2, param_values=0x3bb2780, invocation_hint=0x7fff71f2f0e0) at gclosure.c:767 #54 0x00007f86241d21c0 in signal_emit_unlocked_R (node=0x1b08500, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3285 #55 0x00007f86241d31af in IA__g_signal_emit_valist (instance=0x1afd970, signal_id=<value optimized out>, detail=0, var_args=0x7fff71f2f2d0) at gsignal.c:2990 #56 0x00007f86241d382e in IA__g_signal_emit (instance=0x7fff71f2d1f0, signal_id=290223872, detail=0) at gsignal.c:3037 #57 0x00007f8626b727b1 in gtk_widget_event_internal (widget=0x1afd970, event= 0x3de7200) at gtkwidget.c:4767 #58 0x00007f8626a83dee in IA__gtk_propagate_event (widget=0x1afd970, event= 0x3de7200) at gtkmain.c:2391 #59 0x00007f8626a84a52 in IA__gtk_main_do_event (event=0x3de7200) at gtkmain.c:1622 #60 0x00007f862671e34a in gdk_event_dispatch (source=<value optimized out>, callback=<value optimized out>, user_data=<value optimized out>) at gdkevents-x11.c:2372 #61 0x00007f8623f0fbed in g_main_dispatch (context=0x1ae69f0) at gmain.c:1960 #62 IA__g_main_context_dispatch (context=0x1ae69f0) at gmain.c:2513 #63 0x00007f8623f12eb9 in g_main_context_iterate (context=0x1ae69f0, block=<value optimized out>, dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2591 #64 0x00007f8623f132d6 in IA__g_main_loop_run (loop=0x1b91270) at gmain.c:2799 #65 0x00007f8626a84e70 in IA__gtk_main () at gtkmain.c:1218 #66 0x0000000000434437 in main (argc=1, argv=0x7fff71f30828) at ephy-main.c:739 Thread 3 (Thread 0x7f8611d30710 (LWP 1018)): #0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162 No locals. #1 0x00007f8627be4e06 in WTF::TCMalloc_PageHeap::scavengerThread (this= 0x7f862844a4c0) at JavaScriptCore/wtf/FastMalloc.cpp:2370 No locals. #2 0x00007f8627be4e23 in WTF::TCMalloc_PageHeap::runScavengerThread (context= 0x7f8628458594) at JavaScriptCore/wtf/FastMalloc.cpp:1475 No locals. #3 0x00007f8623796884 in start_thread (arg=<value optimized out>) at pthread_create.c:297 __res = <value optimized out> pd = 0x7f8611d30710 unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140213801387792, 6526386064474578837, 140214097547168, 0, 140214188797952, 3, -6512695263563276395, -6512724584976539755}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = <value optimized out> robust = <value optimized out> freesize = <value optimized out> __PRETTY_FUNCTION__ = "start_thread" #4 0x00007f8623507f9d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 No locals. #5 0x0000000000000000 in ?? () No symbol table info available. Thread 2 (Thread 0x7f861142f710 (LWP 1019)): #0 pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162 No locals. #1 0x00007f8627924d3e in WebCore::IconDatabase::syncThreadMainLoop (this= 0x7f8611447a00) at WebCore/loader/icon/IconDatabase.cpp:1412 didAnyWork = <value optimized out> #2 0x00007f8627924deb in WebCore::IconDatabase::iconDatabaseSyncThread (this= 0x7f8611447a00) at WebCore/loader/icon/IconDatabase.cpp:1030 journalFilename = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7f861144ef20}} #3 0x00007f8623796884 in start_thread (arg=<value optimized out>) at pthread_create.c:297 __res = <value optimized out> pd = 0x7f861142f710 unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140213791946512, 6526386064474578837, 140214097547168, 0, 140214188797952, 3, -6512694300953731179, -6512724584976539755}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = <value optimized out> robust = <value optimized out> freesize = <value optimized out> __PRETTY_FUNCTION__ = "start_thread" #4 0x00007f8623507f9d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 No locals. #5 0x0000000000000000 in ?? () No symbol table info available. Current language: auto The current source language is "auto; currently asm". Thread 1 (Thread 0x7f8628cda780 (LWP 1016)): #0 0x00007f862379ebbd in __libc_waitpid (pid=1062, stat_loc=<value optimized out>, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:41 _a3 = 0 _a1 = 1062 resultvar = <value optimized out> _a4 = 0 _a2 = 140735105125456 oldtype = 0 result = <value optimized out> #1 0x00007f8623f40c89 in IA__g_spawn_sync ( working_directory=<value optimized out>, argv=<value optimized out>, envp=<value optimized out>, flags=<value optimized out>, child_setup=<value optimized out>, user_data=<value optimized out>, standard_output=0x0, standard_error=0x0, exit_status=0x0, error= 0x7fff71f2cdf8) at gspawn.c:386 outpipe = -1 errpipe = -1 pid = 1062 fds = {__fds_bits = {0, 16, 16, 0, 62567288, 140735105125880, 140213666428784, 62567264, 3, 0, 62567288, 140214105442002, 206158430232, 140735105125456, 140735105125592, 0}} ret = -512 outstr = 0x0 errstr = 0x0 failed = 0 status = <value optimized out> __PRETTY_FUNCTION__ = "IA__g_spawn_sync" #2 0x00007f8623f40f7e in IA__g_spawn_command_line_sync ( command_line=<value optimized out>, standard_output=0x0, standard_error= 0x0, exit_status=0x0, error=0x7fff71f2cdf8) at gspawn.c:700 retval = <value optimized out> argv = 0x3bab360 __PRETTY_FUNCTION__ = "IA__g_spawn_command_line_sync" #3 0x00007f86145a0e46 in run_bug_buddy (signum=<value optimized out>) at gnome-breakpad.cc:369 res = <value optimized out> warning_file = 0x0 exec_str = 0x1f40c10 "bug-buddy --appname=\"epiphany\" --pid=1016" args_str = <value optimized out> error = 0x0 #4 check_if_gdb (signum=<value optimized out>) at gnome-breakpad.cc:440 gdb = 0x3bcead0 "/usr/bin/gdb" pid = 1016 mypath = 0x3bad000 "\360-\300\003" has_debug_symbols = <value optimized out> appname = 0x1ab10e0 "epiphany" #5 bugbuddy_segv_handle (signum=<value optimized out>) at gnome-breakpad.cc:223 in_segv = 1 #6 <signal handler called> No symbol table info available. #7 0x00007f8627747e65 in WebCore::HistoryItem::setDocumentSequenceNumber ( this=0x7f86114bf970) at ./WebCore/history/HistoryItem.h:139 No locals. #8 WebCore::HistoryController::updateBackForwardListForFragmentScroll (this= 0x7f86114bf970) at WebCore/loader/HistoryController.cpp:112 No locals. #9 0x00007f862773a7e5 in WebCore::FrameLoader::loadInSameDocument (this= 0x7f86114bf850, url=..., stateObject=0x0, isNewNavigation=true) at WebCore/loader/FrameLoader.cpp:1744 hashChange = <value optimized out> #10 0x00007f8627755466 in WebCore::PolicyChecker::checkNavigationPolicy (this= 0x7f86114bf860, request=..., loader=0x7f86114c7700, formState=) at WebCore/loader/PolicyChecker.cpp:68 action = {m_URL = {m_string = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7f86104f88e0}}, m_isValid = true, m_protocolInHTTPFamily = true, m_schemeEnd = 4, m_userStart = 7, m_userEnd = 7, m_passwordEnd = 7, m_hostEnd = 22, m_portEnd = 22, m_pathAfterLastSlash = 31, m_pathEnd = 42, m_queryEnd = 79, m_fragmentEnd = 80}, m_type = WebCore::NavigationTypeOther, m_event = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x0}} #11 0x00007f86277401e5 in WebCore::FrameLoader::loadWithDocumentLoader (this= 0x7f86114bf850, loader=0x7f861147f000, type=<value optimized out>, prpFormState=<value optimized out>) at WebCore/loader/FrameLoader.cpp:2066 action = {m_URL = {m_string = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7f86104f88e0}}, m_isValid = true, m_protocolInHTTPFamily = true, m_schemeEnd = 4, m_userStart = 7, m_userEnd = 7, m_passwordEnd = 7, m_hostEnd = 22, m_portEnd = 22, m_pathAfterLastSlash = 31, m_pathEnd = 42, m_queryEnd = 79, m_fragmentEnd = 80}, m_type = WebCore::NavigationTypeOther, m_event = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x0}} newURL = @0x7f861147f2a0 #12 0x00007f862774081f in WebCore::FrameLoader::load (this=0x7f86114bf850, newDocumentLoader=0x7f861147f000) at WebCore/loader/FrameLoader.cpp:2038 r = <value optimized out> type = WebCore::FrameLoadTypeStandard #13 0x00007f8627740960 in WebCore::FrameLoader::load (this=0x7f86114bf850, request=<value optimized out>, substituteData=<value optimized out>, lockHistory=false) at WebCore/loader/FrameLoader.cpp:1979 No locals. #14 0x00007f8627740a70 in WebCore::FrameLoader::load (this=0x7f86114bf850, request=..., lockHistory=40) at WebCore/loader/FrameLoader.cpp:1966 No locals. #15 0x00007f8627a7b8c7 in webkit_web_frame_load_uri ( frame=<value optimized out>, uri= 0x3ba1840 "http://www.saarlane.ee/galerii/galerii.asp?gid=105&offset=32&stmp=1255215486009#") at WebKit/gtk/webkit/webkitwebframe.cpp:537 __PRETTY_FUNCTION__ = "void webkit_web_frame_load_uri(WebKitWebFrame*, const gchar*)" coreFrame = 0x7f86114bf800 #16 0x0000000000474569 in ephy_web_view_load_url (view=0x1f3a970, url=<value optimized out>) at ephy-web-view.c:2084 effective_url = 0x3ba1840 "http://www.saarlane.ee/galerii/galerii.asp?gid=105&offset=32&stmp=1255215486009#" __PRETTY_FUNCTION__ = "ephy_web_view_load_url" #17 0x000000000043b0be in ephy_window_open_link (link=<value optimized out>, address= 0x3bab300 "http://www.saarlane.ee/galerii/galerii.asp?gid=105&offset=32&stmp=1255215486009#", embed=0x3b920c0, flags=EPHY_LINK_ALLOW_FIXUP) at ephy-window.c:3514 priv = 0x1afda90 new_embed = <value optimized out> __PRETTY_FUNCTION__ = "ephy_window_open_link" #18 0x000000000048df54 in ephy_marshal_OBJECT__STRING_OBJECT_FLAGS (closure= 0x1be6160, return_value=0x7fff71f2dac0, n_param_values=<value optimized out>, param_values=0x3dd9360, invocation_hint=<value optimized out>, marshal_data=0x43afc2) at ephy-marshal.c:515 data1 = 0x1afd970 data2 = 0x0 v_return = <value optimized out> __PRETTY_FUNCTION__ = "ephy_marshal_OBJECT__STRING_OBJECT_FLAGS" #19 0x00007f86241befb1 in IA__g_closure_invoke (closure=0x1be6160, return_value=0x7fff71f2dac0, n_param_values=4, param_values=0x3dd9360, invocation_hint=0x7fff71f2da80) at gclosure.c:767 marshal = 0 marshal_data = 0x7f86114bf850 __PRETTY_FUNCTION__ = "IA__g_closure_invoke" #20 0x00007f86241d21c0 in signal_emit_unlocked_R (node=0x1bac4a0, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3285 accumulator = 0x1b5e760 emission = {next = 0x7fff71f2ded0, instance = 0x1afd970, ihint = { signal_id = 221, detail = 0, run_type = G_SIGNAL_RUN_LAST}, state = EMISSION_RUN, chain_type = 28613744} class_closure = 0x1be6160 handler_list = 0x1b864c0 return_accu = 0x7fff71f2dac0 accu = {g_type = 28245088, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} signal_id = 221 max_sequential_handler_number = 28698464 return_value_altered = 1 #21 0x00007f86241d31af in IA__g_signal_emit_valist (instance=0x1afd970, signal_id=<value optimized out>, detail=0, var_args=0x7fff71f2dc70) at gsignal.c:2990 return_value = {g_type = 28245088, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} error = <value optimized out> signal_return_type = 28245088 param_values = <value optimized out> node = 0x1bac4a0 i = <value optimized out> n_params = <value optimized out> __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist" #22 0x00007f86241d382e in IA__g_signal_emit (instance=0x7fff71f2d1f0, signal_id=290223872, detail=0) at gsignal.c:3037 var_args = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7fff71f2dd50, reg_save_area = 0x7fff71f2dc90}} #23 0x000000000044fc59 in ephy_link_open (link=0x7fff71f2d1f0, address=<value optimized out>, embed=0x0, flags=290191440) at ephy-link.c:95 new_embed = 0x0 #24 0x000000000048df54 in ephy_marshal_OBJECT__STRING_OBJECT_FLAGS (closure= 0x1cc04a0, return_value=0x7fff71f2df20, n_param_values=<value optimized out>, param_values=0x3dd90c0, invocation_hint=<value optimized out>, marshal_data=0x44fc2b) at ephy-marshal.c:515 data1 = 0x1afd970 data2 = 0x0 v_return = <value optimized out> __PRETTY_FUNCTION__ = "ephy_marshal_OBJECT__STRING_OBJECT_FLAGS" #25 0x00007f86241befb1 in IA__g_closure_invoke (closure=0x1cc04a0, return_value=0x7fff71f2df20, n_param_values=4, param_values=0x3dd90c0, invocation_hint=0x7fff71f2dee0) at gclosure.c:767 marshal = 0 marshal_data = 0x7f86114bf850 __PRETTY_FUNCTION__ = "IA__g_closure_invoke" #26 0x00007f86241d1e62 in signal_emit_unlocked_R (node=0x1bac4a0, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3247 tmp = 0x7f862379a5d0 handler = 0x1ceb320 accumulator = 0x1b5e760 emission = {next = 0x7fff71f2e330, instance = 0x1cec000, ihint = { signal_id = 221, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 4} class_closure = 0x1be6160 handler_list = 0x1ceb320 return_accu = 0x7fff71f2df20 accu = {g_type = 28245088, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} signal_id = 221 max_sequential_handler_number = <value optimized out> return_value_altered = 0 #27 0x00007f86241d31af in IA__g_signal_emit_valist (instance=0x1cec000, signal_id=<value optimized out>, detail=0, var_args=0x7fff71f2e0d0) at gsignal.c:2990 return_value = {g_type = 28245088, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} error = <value optimized out> signal_return_type = 28245088 param_values = <value optimized out> node = 0x1bac4a0 i = <value optimized out> n_params = <value optimized out> __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist" #28 0x00007f86241d382e in IA__g_signal_emit (instance=0x7fff71f2d1f0, signal_id=290223872, detail=0) at gsignal.c:3037 var_args = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7fff71f2e1b0, reg_save_area = 0x7fff71f2e0f0}} #29 0x000000000044fc59 in ephy_link_open (link=0x7fff71f2d1f0, address=<value optimized out>, embed=0x0, flags=290191440) at ephy-link.c:95 new_embed = 0x0 #30 0x000000000048df54 in ephy_marshal_OBJECT__STRING_OBJECT_FLAGS (closure= 0x1d0c1d0, return_value=0x7fff71f2e380, n_param_values=<value optimized out>, param_values=0x1efd860, invocation_hint=<value optimized out>, marshal_data=0x44fc2b) at ephy-marshal.c:515 data1 = 0x1cec000 data2 = 0x0 v_return = <value optimized out> __PRETTY_FUNCTION__ = "ephy_marshal_OBJECT__STRING_OBJECT_FLAGS" #31 0x00007f86241befb1 in IA__g_closure_invoke (closure=0x1d0c1d0, return_value=0x7fff71f2e380, n_param_values=4, param_values=0x1efd860, invocation_hint=0x7fff71f2e340) at gclosure.c:767 marshal = 0 marshal_data = 0x7f86114bf850 __PRETTY_FUNCTION__ = "IA__g_closure_invoke" #32 0x00007f86241d1e62 in signal_emit_unlocked_R (node=0x1bac4a0, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3247 tmp = 0x7f862379a5d0 handler = 0x1d0c2a0 accumulator = 0x1b5e760 emission = {next = 0x7fff71f2e7a0, instance = 0x1c84130, ihint = { signal_id = 221, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 4} class_closure = 0x1be6160 handler_list = 0x1d0c2a0 return_accu = 0x7fff71f2e380 accu = {g_type = 28245088, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} signal_id = 221 max_sequential_handler_number = <value optimized out> return_value_altered = 0 #33 0x00007f86241d31af in IA__g_signal_emit_valist (instance=0x1c84130, signal_id=<value optimized out>, detail=0, var_args=0x7fff71f2e530) at gsignal.c:2990 return_value = {g_type = 28245088, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} error = <value optimized out> signal_return_type = 28245088 param_values = <value optimized out> node = 0x1bac4a0 i = <value optimized out> n_params = <value optimized out> __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist" #34 0x00007f86241d382e in IA__g_signal_emit (instance=0x7fff71f2d1f0, signal_id=290223872, detail=0) at gsignal.c:3037 var_args = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7fff71f2e610, reg_save_area = 0x7fff71f2e550}} #35 0x000000000044fc59 in ephy_link_open (link=0x7fff71f2d1f0, address=<value optimized out>, embed=0x0, flags=290191440) at ephy-link.c:95 new_embed = 0x0 #36 0x0000000000450b31 in entry_activate_cb (entry=<value optimized out>, proxy=<value optimized out>) at ephy-location-action.c:210 bookmarks = <value optimized out> content = <value optimized out> address = 0x3de9290 "http://www.saarlane.ee/galerii/galerii.asp?gid=105&offset=32&stmp=1255215486009#" action = 0x1c84130 priv = <value optimized out> __PRETTY_FUNCTION__ = "entry_activate_cb" #37 0x00007f86241befb1 in IA__g_closure_invoke (closure=0x1ddf600, return_value=0x7fff71f2e930, n_param_values=1, param_values=0x1f40bf0, invocation_hint=0x7fff71f2e7b0) at gclosure.c:767 marshal = 0 marshal_data = 0x7f86114bf850 __PRETTY_FUNCTION__ = "IA__g_closure_invoke" #38 0x00007f86241d1e62 in signal_emit_unlocked_R (node=0x1c700b0, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3247 tmp = 0x7f862379a5d0 handler = 0x1dd8670 accumulator = 0x0 emission = {next = 0x7fff71f2ec10, instance = 0x1c96160, ihint = { signal_id = 250, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 4} class_closure = 0x1c6e660 handler_list = 0x1dd8670 return_accu = 0x7fff71f2e930 accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} signal_id = 250 max_sequential_handler_number = <value optimized out> return_value_altered = 0 #39 0x00007f86269e6c94 in gtk_binding_entry_activate (entry=0x1c731b0, object= 0x1c96160) at gtkbindings.c:537 params = 0x1f40bf0 return_val = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} accelerator = 0x1c71820 "\002" query = {signal_id = 250, signal_name = 0x7f8626c724bd "activate", itype = 29812800, signal_flags = 34, return_type = 4, n_params = 0, param_types = 0x0} signal_id = 250 sig = 0x1c16800 handled = 0 i = <value optimized out> #40 0x00007f86269e716c in binding_match_activate ( pspec_list=<value optimized out>, object=0x1c96160, path_length=8, path= 0x3bceab0 "GtkEntry", path_reversed=0x1f40bd0 "yrtnEktG", unbound=<value optimized out>) at gtkbindings.c:1123 pspec = 0x1c71820 binding_set = 0x0 slist = 0x7f8609c7b7a0 = {0x1c71820, 0x1b79fe0, 0x1b2a3c0, 0x1b257e0, 0x1b13700} #41 0x00007f86269e73b5 in gtk_bindings_activate_list (object=0x1c96160, entries=<value optimized out>, is_release=<value optimized out>) at gtkbindings.c:1268 path = <value optimized out> patterns = 0x7f8609c7b780 = {0x1caf8f0, 0x1c71820, 0x1b79fe0, 0x1b2a3c0, 0x1b257e0, 0x1b13700} class_type = 29812800 unbound = 0 handled = 0 #42 0x00007f86269e74cb in IA__gtk_bindings_activate_event (object=0x1c96160, event=0x3de7200) at gtkbindings.c:1361 entries = 0x3bd7630 = {0x1b7bf80, 0x1b2f8e0, 0x1b2b380, 0x1b0db60, 0x1c731b0, 0x1caf980} display = <value optimized out> key_hash = <value optimized out> handled = <value optimized out> __PRETTY_FUNCTION__ = "IA__gtk_bindings_activate_event" #43 0x00007f8626a2523c in gtk_entry_key_press (widget=0x1c96160, event= 0x3de7200) at gtkentry.c:4077 No locals. #44 0x00007f8626a89602 in _gtk_marshal_BOOLEAN__BOXED (closure=0x1b087c0, return_value=0x7fff71f2ec60, n_param_values=<value optimized out>, param_values=0x3bce000, invocation_hint=<value optimized out>, marshal_data=0x7f8626a251b7) at gtkmarshalers.c:84 data1 = 0x1c96160 data2 = 0x0 v_return = <value optimized out> __PRETTY_FUNCTION__ = "_gtk_marshal_BOOLEAN__BOXED" #45 0x00007f86241bef04 in IA__g_closure_invoke (closure=0x1b087c0, return_value=0x7fff71f2ec60, n_param_values=2, param_values=0x3bce000, invocation_hint=0x7fff71f2ec20) at gclosure.c:767 marshal = 0 marshal_data = 0x7f86114bf850 __PRETTY_FUNCTION__ = "IA__g_closure_invoke" #46 0x00007f86241d21c0 in signal_emit_unlocked_R (node=0x1b08500, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3285 accumulator = 0x1b08580 emission = {next = 0x7fff71f2f0d0, instance = 0x1c96160, ihint = { signal_id = 42, detail = 0, run_type = G_SIGNAL_RUN_LAST}, state = EMISSION_RUN, chain_type = 29812800} class_closure = 0x1b087c0 handler_list = 0x1dcbb00 return_accu = 0x7fff71f2ec60 accu = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} signal_id = 42 max_sequential_handler_number = 28345728 return_value_altered = 1 #47 0x00007f86241d31af in IA__g_signal_emit_valist (instance=0x1c96160, signal_id=<value optimized out>, detail=0, var_args=0x7fff71f2ee10) at gsignal.c:2990 return_value = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} error = <value optimized out> signal_return_type = 20 param_values = <value optimized out> node = 0x1b08500 i = <value optimized out> n_params = <value optimized out> __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist" #48 0x00007f86241d382e in IA__g_signal_emit (instance=0x7fff71f2d1f0, signal_id=290223872, detail=0) at gsignal.c:3037 var_args = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fff71f2eef0, reg_save_area = 0x7fff71f2ee30}} #49 0x00007f8626b727b1 in gtk_widget_event_internal (widget=0x1c96160, event= 0x3de7200) at gtkwidget.c:4767 signal_num = <value optimized out> return_val = 0 #50 0x00007f8626b82d24 in IA__gtk_window_propagate_key_event (window= 0x1afd970, event=0x3de7200) at gtkwindow.c:5144 parent = 0x3bb2780 handled = 1911746848 focus = 0x1c96160 __PRETTY_FUNCTION__ = "IA__gtk_window_propagate_key_event" #51 0x00007f8626b85529 in gtk_window_key_press_event (widget=0x1afd970, event= 0x3de7200) at gtkwindow.c:5174 handled = 0 #52 0x00007f8626a89602 in _gtk_marshal_BOOLEAN__BOXED (closure=0x1b087c0, return_value=0x7fff71f2f120, n_param_values=<value optimized out>, param_values=0x3bb2780, invocation_hint=<value optimized out>, marshal_data=0x43bdbc) at gtkmarshalers.c:84 data1 = 0x1afd970 data2 = 0x0 v_return = <value optimized out> __PRETTY_FUNCTION__ = "_gtk_marshal_BOOLEAN__BOXED" #53 0x00007f86241befb1 in IA__g_closure_invoke (closure=0x1b087c0, return_value=0x7fff71f2f120, n_param_values=2, param_values=0x3bb2780, invocation_hint=0x7fff71f2f0e0) at gclosure.c:767 marshal = 0 marshal_data = 0x7f86114bf850 __PRETTY_FUNCTION__ = "IA__g_closure_invoke" #54 0x00007f86241d21c0 in signal_emit_unlocked_R (node=0x1b08500, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3285 accumulator = 0x1b08580 emission = {next = 0x0, instance = 0x1afd970, ihint = {signal_id = 42, detail = 0, run_type = G_SIGNAL_RUN_LAST}, state = EMISSION_RUN, chain_type = 28613744} class_closure = 0x1b087c0 handler_list = 0x1d55590 return_accu = 0x7fff71f2f120 accu = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} signal_id = 42 max_sequential_handler_number = 28345728 return_value_altered = 1 #55 0x00007f86241d31af in IA__g_signal_emit_valist (instance=0x1afd970, signal_id=<value optimized out>, detail=0, var_args=0x7fff71f2f2d0) at gsignal.c:2990 return_value = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} error = <value optimized out> signal_return_type = 20 param_values = <value optimized out> node = 0x1b08500 i = <value optimized out> n_params = <value optimized out> __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist" #56 0x00007f86241d382e in IA__g_signal_emit (instance=0x7fff71f2d1f0, signal_id=290223872, detail=0) at gsignal.c:3037 var_args = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fff71f2f3b0, reg_save_area = 0x7fff71f2f2f0}} #57 0x00007f8626b727b1 in gtk_widget_event_internal (widget=0x1afd970, event= 0x3de7200) at gtkwidget.c:4767 signal_num = <value optimized out> return_val = 0 #58 0x00007f8626a83dee in IA__gtk_propagate_event (widget=0x1afd970, event= 0x3de7200) at gtkmain.c:2391 window = 0x1afd970 handled_event = <value optimized out> __PRETTY_FUNCTION__ = "IA__gtk_propagate_event" #59 0x00007f8626a84a52 in IA__gtk_main_do_event (event=0x3de7200) at gtkmain.c:1622 event_widget = 0x0 grab_widget = 0x1afd970 window_group = 0x1c0aa60 rewritten_event = 0x0 tmp_list = <value optimized out> __PRETTY_FUNCTION__ = "IA__gtk_main_do_event" #60 0x00007f862671e34a in gdk_event_dispatch (source=<value optimized out>, callback=<value optimized out>, user_data=<value optimized out>) at gdkevents-x11.c:2372 display = <value optimized out> event = 0x3de7200 #61 0x00007f8623f0fbed in g_main_dispatch (context=0x1ae69f0) at gmain.c:1960 dispatch = 0x7f862671e2fe <gdk_event_dispatch> user_data = 0x0 callback = 0 cb_funcs = 0x0 cb_data = 0x0 current_source_link = {data = 0x1ae6970, next = 0x0} source = 0x1ae6970 current = 0x1b0f6a0 i = 0 #62 IA__g_main_context_dispatch (context=0x1ae69f0) at gmain.c:2513 No locals. #63 0x00007f8623f12eb9 in g_main_context_iterate (context=0x1ae69f0, block=<value optimized out>, dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2591 max_priority = 2147483647 timeout = 123 some_ready = 1 nfds = 12 allocated_nfds = 603054612 fds = <value optimized out> __PRETTY_FUNCTION__ = "g_main_context_iterate" #64 0x00007f8623f132d6 in IA__g_main_loop_run (loop=0x1b91270) at gmain.c:2799 self = 0x1aacde0 __PRETTY_FUNCTION__ = "IA__g_main_loop_run" #65 0x00007f8626a84e70 in IA__gtk_main () at gtkmain.c:1218 tmp_list = 0x1b2ea40 = {0x1b45b80, Current language: auto The current source language is "auto; currently c". A debugging session is active. 191442 1 tony 2010-02-18 00:03:03 -0800 This looks like the same crasher as http://code.google.com/p/chromium/issues/detail?id=35860 I wasn't able to repro using the URL associated with this bug, but the stack looks the same. 191488 2 48983 tony 2010-02-18 01:34:15 -0800 Created attachment 48983 test case Here's a test case that causes the crash. I have to run now and will post a proper fix + layout test tomorrow. 191802 3 tony 2010-02-18 18:18:01 -0800 *** This bug has been marked as a duplicate of bug 35063 *** 48983 2010-02-18 01:34:15 -0800 2010-02-18 01:34:15 -0800 test case crash-navigating-hash.html text/html 545 tony PHNjcmlwdD4KZG9jdW1lbnQud3JpdGUoJzxpZnJhbWUgaWQ9InN1YiIgc3JjPSJyZXNvdXJjZXMv ZW1wdHktc3ViZnJhbWUuaHRtbCIgc3R5bGU9ImRpc3BsYXk6bm9uZSI+PC9pZnJhbWU+Jyk7CnZh ciBmcmFtZVdpbiA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJzdWIiKS5jb250ZW50V2luZG93 OwpmcmFtZVdpbi5sb2NhdGlvbi5ocmVmID0gInJlc291cmNlcy9lbXB0eS1zdWJmcmFtZS5odG1s IyI7CmZyYW1lV2luLmxvY2F0aW9uLmhyZWYgPSAicmVzb3VyY2VzL2VtcHR5LXN1YmZyYW1lLmh0 bWwjZm9vIjsKY29uc29sZS5sb2coZnJhbWVXaW4ubG9jYXRpb24uaHJlZik7Cgo8L3NjcmlwdD4K PHNjcmlwdD4KZnVuY3Rpb24gdGVzdCgpCnsKICAgIHZhciBpZnJhbWUgPSBkb2N1bWVudC5nZXRF bGVtZW50QnlJZCgic3ViIik7CiAgICBpZnJhbWUuY29udGVudFdpbmRvdy5sb2NhdGlvbi5ocmVm ID0gInJlc291cmNlcy9lbXB0eS1zdWJmcmFtZS5odG1sI25ldyI7Cn0KPC9zY3JpcHQ+CjxhIGhy ZWY9ImphdmFzY3JpcHQ6dGVzdCgpIj50ZXN0PC9hPgo=