<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>36707</bug_id>
          
          <creation_ts>2010-03-27 12:04:17 -0700</creation_ts>
          <short_desc>Crash in JavascriptCore regular expression matcher</short_desc>
          <delta_ts>2010-10-13 02:33:04 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>PC</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>WORKSFORME</resolution>
          
          
          <bug_file_loc>http://webcloud.se/article/Form_validation_with_jQuery_from_scratch/</bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Critical</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>0</everconfirmed>
          <reporter name="Priit Laes (IRC: plaes)">plaes</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>205017</commentid>
    <comment_count>0</comment_count>
    <who name="Priit Laes (IRC: plaes)">plaes</who>
    <bug_when>2010-03-27 12:04:17 -0700</bug_when>
    <thetext>Platform: amd64, webkit-gtk-1.1.90

Traceback (most recent call last):
  File &quot;/usr/share/gdb/auto-load/usr/lib64/libgobject-2.0.so.0.2306.0-gdb.py&quot;, line 9, in &lt;module&gt;
    from gobject import register
  File &quot;/usr/share/glib-2.0/gdb/gobject.py&quot;, line 3, in &lt;module&gt;
    import gdb.backtrace
ImportError: No module named backtrace
[Thread debugging using libthread_db enabled]
[New Thread 0x7fb7f5772710 (LWP 17631)]
[New Thread 0x7fb7f6073710 (LWP 17630)]
0x00007fb80a3c0bcd in __libc_waitpid (pid=17686, stat_loc=&lt;value optimized out&gt;, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:41
	in ../sysdeps/unix/sysv/linux/waitpid.c
#0  0x00007fb80a3c0bcd in __libc_waitpid (pid=17686, stat_loc=&lt;value optimized out&gt;, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:41
#1  0x00007fb80ab8c301 in IA__g_spawn_sync (working_directory=&lt;value optimized out&gt;, argv=&lt;value optimized out&gt;, envp=&lt;value optimized out&gt;, 
    flags=&lt;value optimized out&gt;, child_setup=&lt;value optimized out&gt;, user_data=&lt;value optimized out&gt;, standard_output=0x0, standard_error=0x0, 
    exit_status=0x0, error=0x7fff01d7a1b8) at gspawn.c:386
#2  0x00007fb80ab8c619 in IA__g_spawn_command_line_sync (command_line=&lt;value optimized out&gt;, standard_output=0x0, standard_error=0x0, exit_status=0x0, 
    error=0x7fff01d7a1b8) at gspawn.c:700
#3  0x00007fb7f9084d61 in run_bug_buddy (signum=&lt;value optimized out&gt;) at gnome-breakpad.cc:369
#4  check_if_gdb (signum=&lt;value optimized out&gt;) at gnome-breakpad.cc:440
#5  bugbuddy_segv_handle (signum=&lt;value optimized out&gt;) at gnome-breakpad.cc:223
#6  &lt;signal handler called&gt;
#7  match (subjectPtr=&lt;value optimized out&gt;, instructionPtr=&lt;value optimized out&gt;, offsetTop=&lt;value optimized out&gt;, md=...)
    at JavaScriptCore/pcre/pcre_exec.cpp:1544
#8  0x00007fb80ed438f4 in jsRegExpExecute (re=&lt;value optimized out&gt;, subject=&lt;value optimized out&gt;, length=&lt;value optimized out&gt;, 
    start_offset=&lt;value optimized out&gt;, offsets=&lt;value optimized out&gt;, offsetCount=&lt;value optimized out&gt;) at JavaScriptCore/pcre/pcre_exec.cpp:2072
#9  0x00007fb80ee018c9 in executeRegex (this=0x7fb7eed8ab40, s=..., startOffset=0, ovector=0x7fb7f4348c78) at ./JavaScriptCore/yarr/RegexJIT.h:87
#10 JSC::RegExp::match (this=0x7fb7eed8ab40, s=..., startOffset=0, ovector=0x7fb7f4348c78) at JavaScriptCore/runtime/RegExp.cpp:137
#11 0x00007fb80ee06dec in JSC::RegExpConstructor::performMatch (this=0x7fb7f47aae40, exec=&lt;value optimized out&gt;, args=&lt;value optimized out&gt;)
    at JavaScriptCore/runtime/RegExpConstructor.h:114
#12 JSC::RegExpObject::match (this=0x7fb7f47aae40, exec=&lt;value optimized out&gt;, args=&lt;value optimized out&gt;)
    at JavaScriptCore/runtime/RegExpObject.cpp:152
#13 0x00007fb80ee072e9 in JSC::RegExpObject::exec (this=0x7fb80f1a2e50, exec=0x1, args=...) at JavaScriptCore/runtime/RegExpObject.cpp:122
#14 0x00007fb80ee07c44 in regExpProtoFuncExec (exec=0x7fb7ef93c4f0, thisValue=..., args=...) at JavaScriptCore/runtime/RegExpPrototype.cpp:72
#15 0x00007fb7f60df1b4 in ?? ()
#16 0x00007fb7ef93c4a8 in ?? ()
#17 0x0000000000000001 in ?? ()
#18 0x0000000000000001 in ?? ()
#19 0x00007fb7f47aae40 in ?? ()
#20 0x00007fb7eed8eaf8 in ?? ()
#21 0xffff000000000003 in ?? ()
#22 0x00007fb7eec3ac91 in ?? ()
#23 0x00007fb800000002 in ?? ()
#24 0x00007fb7eed082c0 in ?? ()
#25 0x00007fb80ff2f478 in ?? ()
#26 0x00007fb7eee28000 in ?? ()
#27 0x00007fb7f409f518 in ?? ()
#28 0x00007fb7f5838ac0 in ?? ()
#29 0x00007fb7ef93c490 in ?? ()
#30 0x00007fff01d7b430 in ?? ()
#31 0x00007fb80f69af30 in JSC::Profiler::s_sharedProfiler () from /usr/lib64/libwebkit-1.0.so.2
#32 0x00007fb7f5804a00 in ?? ()
#33 0x00007fb7f5838aa8 in ?? ()
#34 0x00007fb7f4346600 in ?? ()
#35 0x00007fb7f48f6748 in ?? ()
#36 0x00007fb7ef93c000 in ?? ()
#37 0x00007fb7ef93c048 in ?? ()
#38 0x00007fb7eed0acb8 in ?? ()
#39 0x00007fb80ed2902e in JSC::JITCode::execute (this=0x7fb7eee5e190, program=0x7fff01d7b370, callFrame=0xffff000000000000, scopeChain=
    0xffff000000000002, thisObj=&lt;value optimized out&gt;, exception=&lt;value optimized out&gt;) at ./JavaScriptCore/jit/JITCode.h:77
#40 JSC::Interpreter::execute (this=0x7fb7eee5e190, program=0x7fff01d7b370, callFrame=0xffff000000000000, scopeChain=0xffff000000000002, 
    thisObj=&lt;value optimized out&gt;, exception=&lt;value optimized out&gt;) at JavaScriptCore/interpreter/Interpreter.cpp:621
#41 0x00007fb80edd37aa in JSC::evaluate (exec=0x7fb7f48f6748, scopeChain=..., source=&lt;value optimized out&gt;, thisValue=...)
    at JavaScriptCore/runtime/Completion.cpp:62
#42 0x00007fb80e6a7590 in WebCore::ScriptController::evaluateInWorld (this=0x7fb7f5822bb0, sourceCode=..., world=&lt;value optimized out&gt;)
    at WebCore/bindings/js/ScriptController.cpp:127
#43 0x00007fb80e6a77b2 in WebCore::ScriptController::evaluate (this=0x7fb7f5822bb0, sourceCode=...) at WebCore/bindings/js/ScriptController.cpp:153
#44 0x00007fb80e6bd50f in WebCore::ScriptController::executeScript (this=0x7fb7f5822bb0, sourceCode=...)
    at WebCore/bindings/ScriptControllerBase.cpp:60
#45 0x00007fb80e88f17c in WebCore::HTMLTokenizer::scriptExecution (this=0x7fb7eef54000, sourceCode=..., state=&lt;value optimized out&gt;)
    at WebCore/html/HTMLTokenizer.cpp:580
#46 0x00007fb80e894f40 in WebCore::HTMLTokenizer::scriptHandler (this=0x7fb7eef54000, state=&lt;value optimized out&gt;)
    at WebCore/html/HTMLTokenizer.cpp:522
#47 0x00007fb80e8958c0 in WebCore::HTMLTokenizer::parseNonHTMLText (this=0x7fb7eef54000, src=..., state=&lt;value optimized out&gt;)
    at WebCore/html/HTMLTokenizer.cpp:361
#48 0x00007fb80e897de5 in WebCore::HTMLTokenizer::parseTag (this=0x7fb7eef54000, src=..., state=&lt;value optimized out&gt;)
    at WebCore/html/HTMLTokenizer.cpp:1539
#49 0x00007fb80e8985ff in WebCore::HTMLTokenizer::write (this=0x7fb7eef54000, str=&lt;value optimized out&gt;, appendData=&lt;value optimized out&gt;)
    at WebCore/html/HTMLTokenizer.cpp:1772
#50 0x00007fb80e890721 in WebCore::HTMLTokenizer::executeExternalScriptsIfReady (this=0x7fb7eef54000) at WebCore/html/HTMLTokenizer.cpp:2103
#51 0x00007fb80e8d8a2c in WebCore::CachedScript::checkNotify (this=0x7fb7eef5f200) at WebCore/loader/CachedScript.cpp:106
#52 0x00007fb80e930414 in WebCore::Loader::Host::didFinishLoading (this=0x7fb7f47663c0, loader=&lt;value optimized out&gt;) at WebCore/loader/loader.cpp:398
#53 0x00007fb80e9208f5 in WebCore::SubresourceLoader::didFinishLoading (this=0x7fb7f4702900) at WebCore/loader/SubresourceLoader.cpp:184
#54 0x00007fb80ec714d6 in finishedCallback (session=&lt;value optimized out&gt;, msg=0x2305430, data=&lt;value optimized out&gt;)
    at WebCore/platform/network/soup/ResourceHandleSoup.cpp:326
#55 0x00007fb80c5a2ead in final_finished (req=0x2305430, user_data=&lt;value optimized out&gt;) at soup-session-async.c:384
#56 0x00007fb80b2184aa in IA__g_closure_invoke (closure=0x22ef440, return_value=0x0, n_param_values=&lt;value optimized out&gt;, param_values=0x22edda0, 
    invocation_hint=0x7fff01d7c410) at gclosure.c:767
#57 0x00007fb80b22d7c4 in signal_emit_unlocked_R (node=0x2248770, detail=&lt;value optimized out&gt;, instance=&lt;value optimized out&gt;, 
    emission_return=&lt;value optimized out&gt;, instance_and_params=&lt;value optimized out&gt;) at gsignal.c:3318
#58 0x00007fb80b22eac5 in IA__g_signal_emit_valist (instance=0x2305430, signal_id=&lt;value optimized out&gt;, detail=0, var_args=0x7fff01d7c600)
    at gsignal.c:2981
#59 0x00007fb80b22f303 in IA__g_signal_emit (instance=0x7fb80f1a2e50, signal_id=1, detail=248785367) at gsignal.c:3038
#60 0x00007fb80c598d6f in soup_message_io_finished (msg=0x2305430) at soup-message-io.c:177
#61 0x00007fb80b2184aa in IA__g_closure_invoke (closure=0x2300d70, return_value=0x0, n_param_values=&lt;value optimized out&gt;, param_values=0x2300920, 
    invocation_hint=0x7fff01d7c830) at gclosure.c:767
#62 0x00007fb80b22d3d1 in signal_emit_unlocked_R (node=0x164b730, detail=&lt;value optimized out&gt;, instance=&lt;value optimized out&gt;, 
    emission_return=&lt;value optimized out&gt;, instance_and_params=&lt;value optimized out&gt;) at gsignal.c:3248
#63 0x00007fb80b22eac5 in IA__g_signal_emit_valist (instance=0x2309a30, signal_id=&lt;value optimized out&gt;, detail=0, var_args=0x7fff01d7ca20)
    at gsignal.c:2981
#64 0x00007fb80b22f303 in IA__g_signal_emit (instance=0x7fb80f1a2e50, signal_id=1, detail=248785367) at gsignal.c:3038
#65 0x00007fb80c5a4fb1 in socket_read_watch (chan=&lt;value optimized out&gt;, cond=0, user_data=&lt;value optimized out&gt;) at soup-socket.c:1245
#66 0x00007fb80ab4803f in g_main_dispatch (context=0xde4110) at gmain.c:1960
#67 IA__g_main_context_dispatch (context=0xde4110) at gmain.c:2513
#68 0x00007fb80ab4be78 in g_main_context_iterate (context=0xde4110, block=&lt;value optimized out&gt;, dispatch=&lt;value optimized out&gt;, 
    self=&lt;value optimized out&gt;) at gmain.c:2591
#69 0x00007fb80ab4c38d in IA__g_main_loop_run (loop=0xe14080) at gmain.c:2799
#70 0x00007fb80dbb0d67 in IA__gtk_main () at gtkmain.c:1219
#71 0x0000000000435653 in main (argc=1, argv=0x7fff01d7dee8) at ephy-main.c:739

Thread 3 (Thread 0x7fb7f6073710 (LWP 17630)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
No locals.
#1  0x00007fb80ee176d4 in WTF::TCMalloc_PageHeap::scavengerThread (this=0x7fb80f69b080) at JavaScriptCore/wtf/FastMalloc.cpp:2378
No locals.
#2  0x00007fb80ee176f9 in WTF::TCMalloc_PageHeap::runScavengerThread (context=0x7fb80f6a9154) at JavaScriptCore/wtf/FastMalloc.cpp:1497
No locals.
#3  0x00007fb80a3b8894 in start_thread (arg=&lt;value optimized out&gt;) at pthread_create.c:297
        __res = &lt;value optimized out&gt;
        pd = 0x7fb7f6073710
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140428083410704, -8582251039352062575, 140428422426560, 0, 140428520259584, 3, 
    8613789771813191057, 8616982928393862545}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, 
              canceltype = 0}}}
        not_first_call = &lt;value optimized out&gt;
        robust = &lt;value optimized out&gt;
        freesize = &lt;value optimized out&gt;
        __PRETTY_FUNCTION__ = &quot;start_thread&quot;
#4  0x00007fb80a129f9d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
No locals.
#5  0x0000000000000000 in ?? ()
No symbol table info available.

Thread 2 (Thread 0x7fb7f5772710 (LWP 17631)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
No locals.
#1  0x00007fb80eb11c58 in WebCore::IconDatabase::syncThreadMainLoop (this=0x7fb7f578aa00) at WebCore/loader/icon/IconDatabase.cpp:1412
        didAnyWork = &lt;value optimized out&gt;
#2  0x00007fb80eb11d21 in WebCore::IconDatabase::iconDatabaseSyncThread (this=0x7fb7f578aa00) at WebCore/loader/icon/IconDatabase.cpp:1030
        journalFilename = {m_impl = {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_ptr = 0x7fb7f5791f20}}
#3  0x00007fb80a3b8894 in start_thread (arg=&lt;value optimized out&gt;) at pthread_create.c:297
        __res = &lt;value optimized out&gt;
        pd = 0x7fb7f5772710
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140428073969424, -8582251039352062575, 140428422426560, 0, 140428520259584, 3, 
    8613788259447831953, 8616982928393862545}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, 
              canceltype = 0}}}
        not_first_call = &lt;value optimized out&gt;
        robust = &lt;value optimized out&gt;
        freesize = &lt;value optimized out&gt;
        __PRETTY_FUNCTION__ = &quot;start_thread&quot;
#4  0x00007fb80a129f9d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
No locals.
#5  0x0000000000000000 in ?? ()
No symbol table info available.

Thread 1 (Thread 0x7fb8100b8780 (LWP 17628)):
#0  0x00007fb80a3c0bcd in __libc_waitpid (pid=17686, stat_loc=&lt;value optimized out&gt;, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:41
        _a3 = 0
        _a1 = 17686
        resultvar = &lt;value optimized out&gt;
        _a4 = 0
        _a2 = 140733224296480
        oldtype = 0
        result = &lt;value optimized out&gt;
#1  0x00007fb80ab8c301 in IA__g_spawn_sync (working_directory=&lt;value optimized out&gt;, argv=&lt;value optimized out&gt;, envp=&lt;value optimized out&gt;, 
    flags=&lt;value optimized out&gt;, child_setup=&lt;value optimized out&gt;, user_data=&lt;value optimized out&gt;, standard_output=0x0, standard_error=0x0, 
    exit_status=0x0, error=0x7fff01d7a1b8) at gspawn.c:386
        outpipe = -1
        errpipe = -1
        pid = 17686
        fds = {__fds_bits = {0, 16, 16, 0, 39092712, 140733224296888, 39039136, 39092688, 3, 0, 39092712, 140428430427869, 140733224296488, 
    140733224296480, 140733224296600, 0}}
        ret = &lt;value optimized out&gt;
        outstr = 0x0
        errstr = 0x0
        failed = 0
        status = &lt;value optimized out&gt;
        __PRETTY_FUNCTION__ = &quot;IA__g_spawn_sync&quot;
#2  0x00007fb80ab8c619 in IA__g_spawn_command_line_sync (command_line=&lt;value optimized out&gt;, standard_output=0x0, standard_error=0x0, exit_status=0x0, 
    error=0x7fff01d7a1b8) at gspawn.c:700
        retval = 0
        argv = 0x25481d0
        __PRETTY_FUNCTION__ = &quot;IA__g_spawn_command_line_sync&quot;
#3  0x00007fb7f9084d61 in run_bug_buddy (signum=&lt;value optimized out&gt;) at gnome-breakpad.cc:369
        res = &lt;value optimized out&gt;
        warning_file = 0x0
        exec_str = 0x2329a10 &quot;bug-buddy --appname=\&quot;epiphany\&quot; --pid=17628&quot;
        args_str = &lt;value optimized out&gt;
        error = 0x0
#4  check_if_gdb (signum=&lt;value optimized out&gt;) at gnome-breakpad.cc:440
        gdb = 0x231f420 &quot;/usr/bin/gdb&quot;
        pid = 17628
        mypath = 0x2548800 &quot;\030\340:\n\270\177&quot;
        has_debug_symbols = &lt;value optimized out&gt;
        appname = 0xdaf110 &quot;epiphany&quot;
#5  bugbuddy_segv_handle (signum=&lt;value optimized out&gt;) at gnome-breakpad.cc:223
        in_segv = 1
#6  &lt;signal handler called&gt;
No symbol table info available.
#7  match (subjectPtr=&lt;value optimized out&gt;, instructionPtr=&lt;value optimized out&gt;, offsetTop=&lt;value optimized out&gt;, md=...)
    at JavaScriptCore/pcre/pcre_exec.cpp:1544
        i = 1
        isMatch = false
        minimize = false
        min = 1
        remainingMatchCount = 999968
        othercase = &lt;value optimized out&gt;
        stack = {frames = {{&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, returnLocation = 0x7fb80ed40ce8, previousFrame = 0x7fb80ecf9af8, args = {
                subjectPtr = 0x1, instructionPtr = 0x7fb7eed2b332 &quot;:&quot;, offsetTop = 2, bracketChain = 0x7fff01d7a700}, locals = {data = 
    0x7fb7eeefd8ce &quot;&quot;, startOfRepeatingBracket = 0x7fb80ecf9fae &quot;Hc\203\f\001&quot;, subjectPtrAtStartOfInstruction = 0x7fff01d7aee0, 
                instructionPtrAtStartOfOnce = 0x7fb7eed4d1c0 &quot;X&quot;, repeatOthercase = 2, ctype = 0, fc = 249006192, fi = 32696, length = 0, max = 1, 
                number = 1, offset = 2, saveOffset1 = -1, saveOffset2 = -1, saveOffset3 = -1, bracketChainNode = {previousBracket = 0x0, 
                  bracketStart = 0x1}}}, {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, returnLocation = 0x7fb80ed40b08, previousFrame = 0x7fff01d7a680, 
              args = {subjectPtr = 0xffffffffffffffff, instructionPtr = 0x7fb7eed2b338 &quot;&apos;\b%\006\020=\020&gt;:&quot;, offsetTop = 2, bracketChain = 
    0x7fff01d7a790}, locals = {data = 0x7fb7eed2b18c &quot;&quot;, startOfRepeatingBracket = 0x7fb7eed2b322 &quot;;&quot;, subjectPtrAtStartOfInstruction = 0x1, 
                instructionPtrAtStartOfOnce = 0x7fb7eed2b00c &quot;D&quot;, repeatOthercase = -287111176, ctype = 8, fc = 45, fi = 32767, length = 1, max = 1, 
                number = 9, offset = 18, saveOffset1 = -1, saveOffset2 = -1, saveOffset3 = -1, bracketChainNode = {previousBracket = 0x7fff01d7a700, 
                  bracketStart = 0x1}}}, {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, returnLocation = 0x7fb80ed40f30, previousFrame = 0x7fff01d7a710, 
              args = {subjectPtr = 0xffffffffffffffff, instructionPtr = 0x7fb7eed2b33a &quot;%\006\020=\020&gt;:&quot;, offsetTop = 2, bracketChain = 
    0x7fff01d7a790}, locals = {data = 0x7fb7eed2b114 &quot;&quot;, startOfRepeatingBracket = 0x7fb80ecf9af8 &quot;A\203\374\a\177\nA\203\375\a\017\216\220&quot;, 
                subjectPtrAtStartOfInstruction = 0x7fb7eeed3278, instructionPtrAtStartOfOnce = 0x7fb7eed2b2ab &quot;L&quot;, repeatOthercase = 1, ctype = 8, 
                fc = 30912224, fi = 32767, length = 796, max = 2147483647, number = 12, offset = 24, saveOffset1 = -1, saveOffset2 = -1, saveOffset3 = 
    -1, bracketChainNode = {previousBracket = 0x7fff01d7a790, bracketStart = 0x1}}}, {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, returnLocation = 
    0x7fb80ed40b08, previousFrame = 0x7fff01d7a7a0, args = {subjectPtr = 0x1, instructionPtr = 0x7fb7eed2b31e &quot;\020q\020r;&quot;, offsetTop = 2, 
                bracketChain = 0x7fff01d7a8b0}, locals = {data = 0x10 &lt;Address 0x10 out of bounds&gt;, startOfRepeatingBracket = 
    0x2c2000002b4 &lt;Address 0x2c2000002b4 out of bounds&gt;, subjectPtrAtStartOfInstruction = 0x7fb7eeed3278, instructionPtrAtStartOfOnce = 
    0x7fb7eed2b314 &quot;O&quot;, repeatOthercase = 864, ctype = 6, fc = 900, fi = 923, length = 0, max = 2147483647, number = 12, offset = 24, saveOffset1 = 0, 
                saveOffset2 = 0, saveOffset3 = 249682169, bracketChainNode = {previousBracket = 0x7fff01d7a820, bracketStart = 0x1}}}, 
    {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, returnLocation = 0x7fb80ed41110, previousFrame = 0x7fff01d7a830, args = {subjectPtr = 0x7fb7eeed3278, 
                instructionPtr = 0x7fb7eed2b33c &quot;\020=\020&gt;:&quot;, offsetTop = 2, bracketChain = 0x7fff01d7a790}, locals = {data = 
    0x7fff00000253 &lt;Address 0x7fff00000253 out of bounds&gt;, startOfRepeatingBracket = 0x7fb7f47a4e00 &quot;\360\063d\017\270\177&quot;, 
                subjectPtrAtStartOfInstruction = 0x7fb7ef93c2d8, instructionPtrAtStartOfOnce = 
    0x7fff01d7aee0 &quot;UH\211\345SVH\203\354\020\203\306\002\071\326\017@!\277\356\267\177&quot;, repeatOthercase = 131, ctype = 0, fc = 248486648, fi = 
    32696, length = 16, max = 0, number = 30912224, offset = 32767, saveOffset1 = 255, saveOffset2 = 0, saveOffset3 = 248488320, bracketChainNode = {
                  previousBracket = 0x7fff01d7aee0, bracketStart = 0x7fff01d7aac0}}}, {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, returnLocation = 
    0x7fff01d7aad8, previousFrame = 0x0, args = {subjectPtr = 0x7fff01d7aa50, instructionPtr = 
    0x7fb80ed7eab4 &quot;H\213|$@1\300\061\322H\205\377t9f\017\037D&quot;, offsetTop = 768, bracketChain = 0x7fb800000306}, locals = {data = 
    0x10 &lt;Address 0x10 out of bounds&gt;, startOfRepeatingBracket = 0x2 &lt;Address 0x2 out of bounds&gt;, subjectPtrAtStartOfInstruction = 0x7fff01d7a9b0, 
                instructionPtrAtStartOfOnce = 0x7fff01d7aaf0 &quot;4\003&quot;, repeatOthercase = 30910920, ctype = 32767, fc = 30912504, fi = 32767, length = 
    0, max = 0, number = 30910920, offset = 32767, saveOffset1 = 1296, saveOffset2 = 0, saveOffset3 = 249679211, bracketChainNode = {previousBracket = 
    0x510, bracketStart = 0x7fb80ee1d8f9}}}, {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, returnLocation = 0x300, previousFrame = 0x7fb7eed67, args = {
                subjectPtr = 0xd67, instructionPtr = 0x7fb7eee9a100 &quot;&quot;, offsetTop = 30911120, bracketChain = 0x0}, locals = {data = 
    0x580 &lt;Address 0x580 out of bounds&gt;, startOfRepeatingBracket = 0x7fb7eee2e548 &quot;hP\317\355\267\177&quot;, subjectPtrAtStartOfInstruction = 0x40, 
                instructionPtrAtStartOfOnce = 0x7fb80ee1c3a3 &quot;H\205\300\017\204\v\377\377\377H\201&quot;, &lt;incomplete sequence \373&gt;, repeatOthercase = 0, 
                ctype = 1, fc = 0, fi = 32696, length = 4, max = 0, number = -287933440, offset = 32695, saveOffset1 = 30912224, saveOffset2 = 32767, 
                saveOffset3 = 30911728, bracketChainNode = {previousBracket = 0x0, bracketStart = 0x7fff01d7aaf0}}}, {&lt;WTF::FastAllocBase&gt; = 
    {&lt;No data fields&gt;}, returnLocation = 0x357, previousFrame = 0x7fb80ed7822f, args = {subjectPtr = 0x7fff01d7aee0, instructionPtr = 
    0x7fb7eed9a300 &quot;&quot;, offsetTop = 30911728, bracketChain = 0x7fb80ed7f4ba}, locals = {data = 0xfffffffe &lt;Address 0xfffffffe out of bounds&gt;, 
                startOfRepeatingBracket = 0x7fb80ee1002a &quot;\377H\213\a\377PxH\205\300\017\037@&quot;, subjectPtrAtStartOfInstruction = 0x100000000, 
                instructionPtrAtStartOfOnce = 0xffffffff00000334 &lt;Address 0xffffffff00000334 out of bounds&gt;, repeatOthercase = -290666696, ctype = 
    32695, fc = 2, fi = 3, length = 2, max = 32767, number = 0, offset = 0, saveOffset1 = 30911216, saveOffset2 = 32767, saveOffset3 = 16, 
                bracketChainNode = {previousBracket = 0x1ad00000334, bracketStart = 0x28b00000258}}}, {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, 
              returnLocation = 0x7fff000002e8, previousFrame = 0x7fff01d7ad10, args = {subjectPtr = 0x7fff01d7ad20, instructionPtr = 
    0x7fb80ed6de3b &quot;\270\001&quot;, offsetTop = 2, bracketChain = 0x7fff01d7ae00}, locals = {data = 0x7f0000000334 &lt;Address 0x7f0000000334 out of bounds&gt;, 
                startOfRepeatingBracket = 0x0, subjectPtrAtStartOfInstruction = 0x30, instructionPtrAtStartOfOnce = 
    0x7fff01d7acf0 &quot;\030Ï¬\356\267\177&quot;, repeatOthercase = 30912224, ctype = 32767, fc = 30911776, fi = 32767, length = -287726848, max = 32695, 
                number = -290679584, offset = 32695, saveOffset1 = 30911880, saveOffset2 = 32767, saveOffset3 = 249019894, bracketChainNode = {
                  previousBracket = 0x100000000, bracketStart = 0x7fff01d7ad10}}}, {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, returnLocation = 
    0x7fff01d7ad20, previousFrame = 0x7fff01d7ad80, args = {subjectPtr = 0x7fb7eee2c8c0, instructionPtr = 0x7fff01d7ad8c &quot;\267\177&quot;, offsetTop = 
    30911888, bracketChain = 0x7fb80ee1b88b}, locals = {data = 0x7fff01d7ad20 &quot;W\003&quot;, startOfRepeatingBracket = 0x7fb80ed71a85 &quot;\270\001&quot;, 
                subjectPtrAtStartOfInstruction = 0x30, instructionPtrAtStartOfOnce = 0x7fb80000007a &quot;&quot;, repeatOthercase = 30912122, ctype = 32767, 
                fc = 2625, fi = 32696, length = 30911792, max = 32767, number = 30911728, offset = 32767, saveOffset1 = -176010688, saveOffset2 = 
    32695, saveOffset3 = -275528104, bracketChainNode = {previousBracket = 0x7fb7eebf2140, bracketStart = 0x5b}}}, {&lt;WTF::FastAllocBase&gt; = 
    {&lt;No data fields&gt;}, returnLocation = 0x7fb7ef93c658, previousFrame = 0xffff000000000000, args = {subjectPtr = 0x7fb7eed5d8e2, instructionPtr = 
    0x7fb80ede9c80 &quot;H\213D$0H\205\300\017\205\341\376\377\377\213} \205\377\017\204&quot;, &lt;incomplete sequence \311&gt;, offsetTop = 30911884, bracketChain = 
    0x7fff01d7aee0}, locals = {data = 0x83 &lt;Address 0x83 out of bounds&gt;, startOfRepeatingBracket = 
    0x7fff01d7aee0 &quot;UH\211\345SVH\203\354\020\203\306\002\071\326\017@!\277\356\267\177&quot;, subjectPtrAtStartOfInstruction = 0x5b00000083, 
                instructionPtrAtStartOfOnce = 0x7fb7eed5d8e0 &quot;/&quot;, repeatOthercase = 0, ctype = 0, fc = 30911624, fi = 32767, length = 32, max = 0, 
                number = -277018136, offset = 32695, saveOffset1 = -290611488, saveOffset2 = 32695, saveOffset3 = 30912224, bracketChainNode = {
                  previousBracket = 0x18, bracketStart = 0x7fff01d7ad20}}}, {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, returnLocation = 
    0x7fff01d7acf0, previousFrame = 0x7fb80ed7de6e, args = {subjectPtr = 0x7fb7f4348c78, instructionPtr = 
    0x7fb7f4348c90 &quot;\377\377\377\377\377\377\377\377\377\377\377\377Z&quot;, offsetTop = 0, bracketChain = 0x7fb7f4348c78}, locals = {data = 
    0x7fb7f4348c90 &quot;\377\377\377\377\377\377\377\377\377\377\377\377Z&quot;, startOfRepeatingBracket = 
    0x7fb80ee01a03 &quot;\351\323\376\377\377\220\220\220\220\220\220\220\220H\211\\$\330H\211l$\340L\211d$\350L\211l$\360L\211t$\370H\211\373H\203\354(H\211\365L\213\067I9\366s.H\213G\020H9\306v%H\211\302H\301\352\002L\215l\020\001\272\020&quot;, subjectPtrAtStartOfInstruction = 0x7fb7eeaccf18, 
                instructionPtrAtStartOfOnce = 0x100000003 &lt;Address 0x100000003 out of bounds&gt;, repeatOthercase = 0, ctype = 0, fc = 30911768, fi = 
    32767, length = 32, max = 0, number = 16, offset = 0, saveOffset1 = 855, saveOffset2 = 32696, saveOffset3 = 248953513, bracketChainNode = {
                  previousBracket = 0x0, bracketStart = 0x7fb7eed820f0}}}, {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, returnLocation = 
    0x7fff01d7ae00, previousFrame = 0x7fff01d7b020, args = {subjectPtr = 0x201d7b030, instructionPtr = 0x7fff01d7ada8 &quot;\250\003\331\356\267\177&quot;, 
                offsetTop = 831, bracketChain = 0x1eed820f0}, locals = {data = 0x0, startOfRepeatingBracket = 0x7fff01d7ad88 &quot;\025&quot;, 
                subjectPtrAtStartOfInstruction = 0x10, instructionPtrAtStartOfOnce = 0x7fb700000015 &lt;Address 0x7fb700000015 out of bounds&gt;, 
                repeatOthercase = 0, ctype = 0, fc = 0, fi = 0, length = 0, max = 0, number = -287767640, offset = 32695, saveOffset1 = -287767640, 
                saveOffset2 = 32695, saveOffset3 = 30912576, bracketChainNode = {previousBracket = 0x7fb7ef93c648, bracketStart = 
    0xffff000000000000}}}, {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, returnLocation = 0x7fb7f4348c90, previousFrame = 0x7fb80ee10f2c, args = {
                subjectPtr = 0x6, instructionPtr = 0x7fb80ff2f478 &quot;`\243\025&quot;, offsetTop = 16, bracketChain = 0x7fb7ef93c648}, locals = {data = 
    0xffffffff &lt;Address 0xffffffff out of bounds&gt;, startOfRepeatingBracket = 0x7fb7f47a6c40 &quot;p\020`\017\270\177&quot;, subjectPtrAtStartOfInstruction = 
    0x7fb7eebf2140, instructionPtrAtStartOfOnce = 0x7fff01d7b070 &quot;\220\214\064\364\001&quot;, repeatOthercase = 30912224, ctype = 0, fc = 30912992, fi = 
    32767, length = -287716080, max = 32695, number = -287716072, offset = 32695, saveOffset1 = -275528176, saveOffset2 = 32695, saveOffset3 = 
    30913024, bracketChainNode = {previousBracket = 0x7fb7eed8f518, bracketStart = 0xb5671063eeacc738}}}, {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, 
              returnLocation = 0x1007fff9311d01f, previousFrame = 0x7fff01d7b140, args = {subjectPtr = 0x7fff01d7b150, instructionPtr = 
    0x7fff01d7b1f0 &quot;\300Ç¾\356\267\177&quot;, offsetTop = 30912976, bracketChain = 0x7fff01d7b250}, locals = {data = 0x7fff01d7afa0 &quot;&quot;, 
                startOfRepeatingBracket = 0x7fff01d7af18 &quot;\200\261\327\001\377\177&quot;, subjectPtrAtStartOfInstruction = 0x7fff01d7afb8, 
                instructionPtrAtStartOfOnce = 0x7fff01d7af00 &quot;&quot;, repeatOthercase = 1, ctype = 0, fc = 249008344, fi = 32696, length = 0, max = 0, 
                number = -176141824, offset = 32695, saveOffset1 = 4, saveOffset2 = 16777216, saveOffset3 = 30912224, bracketChainNode = {
                  previousBracket = 0x83485653e5894855, bracketStart = 0xfd63902c68310ec}}}, {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, 
              returnLocation = 0x7fb7eebf2140, previousFrame = 0xc683084189fec083, args = {subjectPtr = 0x0, instructionPtr = 
    0x7fff01d7af18 &quot;\200\261\327\001\377\177&quot;, offsetTop = 16, bracketChain = 0x7fff01d7b180}, locals = {data = 0x7fb7eebf2040 &quot;P\376_\017\270\177&quot;, 
                startOfRepeatingBracket = 0x7fb80ede8b9f &quot;L\213t$@H\307D$@&quot;, subjectPtrAtStartOfInstruction = 0x85840f00001680f8, 
                instructionPtrAtStartOfOnce = 0x1180ef800000000 &lt;Address 0x1180ef800000000 out of bounds&gt;, repeatOthercase = 3, ctype = 0, fc = 
    30912376, fi = 32767, length = -2130706432, max = 2107896, number = 1636044544, offset = -2130706432, saveOffset1 = 2109432, saveOffset2 = 
    1434717952, saveOffset3 = -2130706432, bracketChainNode = {previousBracket = 0x0, bracketStart = 0x1}}}}, framesEnd = 0x7fff01d7af80, 
          currentFrame = 0x7fff01d7a7a0, size = 3}
#8  0x00007fb80ed438f4 in jsRegExpExecute (re=&lt;value optimized out&gt;, subject=&lt;value optimized out&gt;, length=&lt;value optimized out&gt;, 
    start_offset=&lt;value optimized out&gt;, offsets=&lt;value optimized out&gt;, offsetCount=&lt;value optimized out&gt;) at JavaScriptCore/pcre/pcre_exec.cpp:2072
        returnCode = &lt;value optimized out&gt;
        usingTemporaryOffsets = false
        reqByteIsCaseless = false
        reqBytePtr = 0xffffffffffffffff
        matchBlock = {offsetVector = 0x7fb7eee2d210, offsetEnd = 42, offsetMax = 28, offsetOverflow = false, startSubject = 0x1, endSubject = 0x1, 
          endMatchPtr = 0x7fb7f4348c90, endOffsetTop = -197882736, multiline = true, ignoreCase = false}
        firstByteIsCaseless = false
        reqByte2 = &lt;value optimized out&gt;
        ocount = &lt;value optimized out&gt;
        resetCount = &lt;value optimized out&gt;
        firstByte = &lt;value optimized out&gt;
        reqByte = -1
        startMatch = 0x1
#9  0x00007fb80ee018c9 in executeRegex (this=0x7fb7eed8ab40, s=..., startOffset=0, ovector=0x7fb7f4348c78) at ./JavaScriptCore/yarr/RegexJIT.h:87
        fallback = 0xffffffffffffffff
#10 JSC::RegExp::match (this=0x7fb7eed8ab40, s=..., startOffset=0, ovector=0x7fb7f4348c78) at JavaScriptCore/runtime/RegExp.cpp:137
        offsetVectorSize = &lt;value optimized out&gt;
        offsetVector = 0x7fb7eee2d210
        nonReturnedOvector = {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_size = 0, m_buffer = {&lt;WTF::VectorBufferBase&lt;int&gt;&gt; = 
    {&lt;WTFNoncopyable::Noncopyable&gt; = {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, &lt;No data fields&gt;}, m_buffer = 0x7fff01d7b0e8, m_capacity = 32}, 
            static m_inlineBufferSize = &lt;optimized out&gt;, m_inlineBuffer = {buffer = 
    &quot;cG\335\016\270\177\000\000\060b\200\365\267\177\000\000@ \277\356\267\177\000\000\003\000\000\000\000\000\000\000Ó\341\016\270\177\000\000\000\237\255\356\267\177\000\000x\364\362\017\270\177\000\000\000J\200\365\267\177\000\000XÄ\357\267\177\000\000\000 \277\356\267\177\000\000j:\340\016\000\000\000\000\003\000\000\000\000\000\000\000Ó\341\016\270\177\000\000\000\000\000\000\000\000\000\000x\364\362\017\270\177\000\000\006\000\000\000\000\000\000&quot;}}}
        result = &lt;value optimized out&gt;
#11 0x00007fb80ee06dec in JSC::RegExpConstructor::performMatch (this=0x7fb7f47aae40, exec=&lt;value optimized out&gt;, args=&lt;value optimized out&gt;)
    at JavaScriptCore/runtime/RegExpConstructor.h:114
No locals.
#12 JSC::RegExpObject::match (this=0x7fb7f47aae40, exec=&lt;value optimized out&gt;, args=&lt;value optimized out&gt;)
    at JavaScriptCore/runtime/RegExpObject.cpp:152
        position = &lt;value optimized out&gt;
        regExpConstructor = 0x7fb7f47a6c40
        input = {static NotFound = &lt;optimized out&gt;, m_rep = {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_ptr = 0x7fb7f57743e0}, static s_nullRep = 
    0x7fb7f57743c0, static s_nullUString = 0x7fb7f57750f8}
        position = &lt;value optimized out&gt;
#13 0x00007fb80ee072e9 in JSC::RegExpObject::exec (this=0x7fb80f1a2e50, exec=0x1, args=...) at JavaScriptCore/runtime/RegExpObject.cpp:122
No locals.
#14 0x00007fb80ee07c44 in regExpProtoFuncExec (exec=0x7fb7ef93c4f0, thisValue=..., args=...) at JavaScriptCore/runtime/RegExpPrototype.cpp:72
No locals.
#15 0x00007fb7f60df1b4 in ?? ()
No symbol table info available.
#16 0x00007fb7ef93c4a8 in ?? ()
No symbol table info available.
#17 0x0000000000000001 in ?? ()
No symbol table info available.
#18 0x0000000000000001 in ?? ()
No symbol table info available.
#19 0x00007fb7f47aae40 in ?? ()
No symbol table info available.
#20 0x00007fb7eed8eaf8 in ?? ()
No symbol table info available.
#21 0xffff000000000003 in ?? ()
No symbol table info available.
#22 0x00007fb7eec3ac91 in ?? ()
No symbol table info available.
#23 0x00007fb800000002 in ?? ()
No symbol table info available.
#24 0x00007fb7eed082c0 in ?? ()
No symbol table info available.
#25 0x00007fb80ff2f478 in ?? ()
No symbol table info available.
#26 0x00007fb7eee28000 in ?? ()
No symbol table info available.
#27 0x00007fb7f409f518 in ?? ()
No symbol table info available.
#28 0x00007fb7f5838ac0 in ?? ()
No symbol table info available.
#29 0x00007fb7ef93c490 in ?? ()
No symbol table info available.
#30 0x00007fff01d7b430 in ?? ()
No symbol table info available.
#31 0x00007fb80f69af30 in JSC::Profiler::s_sharedProfiler () from /usr/lib64/libwebkit-1.0.so.2
No symbol table info available.
#32 0x00007fb7f5804a00 in ?? ()
No symbol table info available.
#33 0x00007fb7f5838aa8 in ?? ()
No symbol table info available.
#34 0x00007fb7f4346600 in ?? ()
No symbol table info available.
#35 0x00007fb7f48f6748 in ?? ()
No symbol table info available.
#36 0x00007fb7ef93c000 in ?? ()
No symbol table info available.
#37 0x00007fb7ef93c048 in ?? ()
No symbol table info available.
#38 0x00007fb7eed0acb8 in ?? ()
No symbol table info available.
#39 0x00007fb80ed2902e in JSC::JITCode::execute (this=0x7fb7eee5e190, program=0x7fff01d7b370, callFrame=0xffff000000000000, scopeChain=
    0xffff000000000002, thisObj=&lt;value optimized out&gt;, exception=&lt;value optimized out&gt;) at ./JavaScriptCore/jit/JITCode.h:77
No locals.
#40 JSC::Interpreter::execute (this=0x7fb7eee5e190, program=0x7fff01d7b370, callFrame=0xffff000000000000, scopeChain=0xffff000000000002, 
    thisObj=&lt;value optimized out&gt;, exception=&lt;value optimized out&gt;) at JavaScriptCore/interpreter/Interpreter.cpp:621
        oldEnd = 0x7fb7ef93c4f0
        lastGlobalObject = 0x7fb7f47a4e00
        globalObject = 0x7fb7f47a4e00
        newEnd = &lt;value optimized out&gt;
        newCallFrame = 0x504ef
#41 0x00007fb80edd37aa in JSC::evaluate (exec=0x7fb7f48f6748, scopeChain=..., source=&lt;value optimized out&gt;, thisValue=...)
    at JavaScriptCore/runtime/Completion.cpp:62
        thisObj = 0x1
        exception = {m_ptr = 0x0}
        lock = {&lt;WTFNoncopyable::Noncopyable&gt; = {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, &lt;No data fields&gt;}, m_lockBehavior = 
    JSC::SilenceAssertionsOnly}
        error = &lt;value optimized out&gt;
        result = &lt;value optimized out&gt;
#42 0x00007fb80e6a7590 in WebCore::ScriptController::evaluateInWorld (this=0x7fb7f5822bb0, sourceCode=..., world=&lt;value optimized out&gt;)
    at WebCore/bindings/js/ScriptController.cpp:127
        sourceURL = {m_impl = {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_ptr = 0x7fb7f48f10c0}}
        shell = 0x7fb7ef8fac40
        exec = 0x7fb7f48f6748
        savedSourceURL = 0x0
        comp = {m_type = 115, m_value = {m_ptr = 0x7fb80498cb05}}
#43 0x00007fb80e6a77b2 in WebCore::ScriptController::evaluate (this=0x7fb7f5822bb0, sourceCode=...) at WebCore/bindings/js/ScriptController.cpp:153
No locals.
#44 0x00007fb80e6bd50f in WebCore::ScriptController::executeScript (this=0x7fb7f5822bb0, sourceCode=...)
    at WebCore/bindings/ScriptControllerBase.cpp:60
        wasInExecuteScript = false
        result = {_vptr.ScriptValue = 0x0, m_value = {m_value = {m_ptr = 0x0}}}
#45 0x00007fb80e88f17c in WebCore::HTMLTokenizer::scriptExecution (this=0x7fb7eef54000, sourceCode=..., state=&lt;value optimized out&gt;)
    at WebCore/html/HTMLTokenizer.cpp:580
        savedPrependingSrc = 0x7fff01d7b940
        prependingSrc = {m_pushedChar1 = 0, m_pushedChar2 = 0, m_currentString = {m_length = 0, m_current = 0x0, m_string = {m_impl = 
    {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_ptr = 0x0}}, m_doNotExcludeLineNumbers = true}, m_currentChar = 0x0, m_substrings = 
    {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_start = 0, m_end = 0, m_buffer = {&lt;WTF::VectorBufferBase&lt;WebCore::SegmentedSubstring&gt;&gt; = 
    {&lt;WTFNoncopyable::Noncopyable&gt; = {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, &lt;No data fields&gt;}, m_buffer = 0x0, m_capacity = 
    0}, &lt;No data fields&gt;}}, m_composite = false}
#46 0x00007fb80e894f40 in WebCore::HTMLTokenizer::scriptHandler (this=0x7fb7eef54000, state=&lt;value optimized out&gt;)
    at WebCore/html/HTMLTokenizer.cpp:522
        cs = &lt;value optimized out&gt;
        scriptString = {m_impl = {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_ptr = 0x7fb7eecfce70}}
        doScriptExec = &lt;value optimized out&gt;
        startLine = &lt;value optimized out&gt;
        followingFrameset = false
        savedPrependingSrc = 0x0
        prependingSrc = {m_pushedChar1 = 0, m_pushedChar2 = 0, m_currentString = {m_length = 0, m_current = 0x0, m_string = {m_impl = 
    {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_ptr = 0x0}}, m_doNotExcludeLineNumbers = true}, m_currentChar = 0x0, m_substrings = 
    {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_start = 0, m_end = 0, m_buffer = {&lt;WTF::VectorBufferBase&lt;WebCore::SegmentedSubstring&gt;&gt; = 
    {&lt;WTFNoncopyable::Noncopyable&gt; = {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, &lt;No data fields&gt;}, m_buffer = 0x0, m_capacity = 
    0}, &lt;No data fields&gt;}}, m_composite = false}
#47 0x00007fb80e8958c0 in WebCore::HTMLTokenizer::parseNonHTMLText (this=0x7fb7eef54000, src=..., state=&lt;value optimized out&gt;)
    at WebCore/html/HTMLTokenizer.cpp:361
        ch = &lt;value optimized out&gt;
        lastDecodedEntityPosition = -1
#48 0x00007fb80e897de5 in WebCore::HTMLTokenizer::parseTag (this=0x7fb7eef54000, src=..., state=&lt;value optimized out&gt;)
    at WebCore/html/HTMLTokenizer.cpp:1539
        savedSrc = {m_pushedChar1 = 0, m_pushedChar2 = 0, m_currentString = {m_length = 33, m_current = 0x7fb7eef6a9a4, m_string = {m_impl = 
    {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_ptr = 0x7fb7eef3da40}}, m_doNotExcludeLineNumbers = true}, m_currentChar = 0x7fb7eef6a9a4, 
          m_substrings = {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_start = 1, m_end = 1, m_buffer = 
    {&lt;WTF::VectorBufferBase&lt;WebCore::SegmentedSubstring&gt;&gt; = {&lt;WTFNoncopyable::Noncopyable&gt; = {&lt;WTF::FastAllocBase&gt; = 
    {&lt;No data fields&gt;}, &lt;No data fields&gt;}, m_buffer = 0x7fb7eee29a00, m_capacity = 16}, &lt;No data fields&gt;}}, m_composite = false}
        isSelfClosingScript = false
        beginTag = true
        cBufferPos = 0
        lastIsSlash = &lt;value optimized out&gt;
#49 0x00007fb80e8985ff in WebCore::HTMLTokenizer::write (this=0x7fb7eef54000, str=&lt;value optimized out&gt;, appendData=&lt;value optimized out&gt;)
    at WebCore/html/HTMLTokenizer.cpp:1772
        cc = 65535
        startTime = 1269716307.177433
        frame = 0x7fb7f5822800
        state = &lt;value optimized out&gt;
        source = {m_pushedChar1 = 0, m_pushedChar2 = 0, m_currentString = {m_length = 2066, m_current = 0x7fb7eddb4c6a, m_string = {m_impl = 
    {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_ptr = 0x7fb7f5774840}}, m_doNotExcludeLineNumbers = true}, m_currentChar = 0x7fb7eddb4c6a, 
          m_substrings = {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_start = 0, m_end = 9, m_buffer = 
    {&lt;WTF::VectorBufferBase&lt;WebCore::SegmentedSubstring&gt;&gt; = {&lt;WTFNoncopyable::Noncopyable&gt; = {&lt;WTF::FastAllocBase&gt; = 
    {&lt;No data fields&gt;}, &lt;No data fields&gt;}, m_buffer = 0x7fb7eecd5c00, m_capacity = 16}, &lt;No data fields&gt;}}, m_composite = true}
        wasInWrite = false
        processedCount = 946
#50 0x00007fb80e890721 in WebCore::HTMLTokenizer::executeExternalScriptsIfReady (this=0x7fb7eef54000) at WebCore/html/HTMLTokenizer.cpp:2103
        rest = {m_pushedChar1 = 0, m_pushedChar2 = 0, m_currentString = {m_length = 2066, m_current = 0x7fb7eddb4c6a, m_string = {m_impl = 
    {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_ptr = 0x7fb7f5774840}}, m_doNotExcludeLineNumbers = true}, m_currentChar = 0x7fb7eddb4c6a, 
          m_substrings = {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_start = 0, m_end = 9, m_buffer = 
    {&lt;WTF::VectorBufferBase&lt;WebCore::SegmentedSubstring&gt;&gt; = {&lt;WTFNoncopyable::Noncopyable&gt; = {&lt;WTF::FastAllocBase&gt; = 
    {&lt;No data fields&gt;}, &lt;No data fields&gt;}, m_buffer = 0x7fb7f585b800, m_capacity = 16}, &lt;No data fields&gt;}}, m_composite = true}
        cs = &lt;value optimized out&gt;
        sourceCode = {m_provider = {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_ptr = 0x7fb7f4346d80}, m_code = {m_provider = {&lt;WTF::FastAllocBase&gt; = 
    {&lt;No data fields&gt;}, m_ptr = 0x7fb7f4346d80}, m_startChar = 0, m_endChar = 108846, m_firstLine = 1}, m_url = {m_string = {m_impl = 
    {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_ptr = 0x0}}, m_isValid = false, m_protocolInHTTPFamily = false, m_schemeEnd = 0, m_userStart = 0, 
            m_userEnd = 0, m_passwordEnd = 0, m_hostEnd = 0, m_portEnd = 0, m_pathAfterLastSlash = 0, m_pathEnd = 0, m_queryEnd = 0, m_fragmentEnd = 
    0}}
        errorOccurred = &lt;value optimized out&gt;
        finished = true
        startTime = 1269716307.093822
#51 0x00007fb80e8d8a2c in WebCore::CachedScript::checkNotify (this=0x7fb7eef5f200) at WebCore/loader/CachedScript.cpp:106
        c = 0xffffffffffffffff
        w = {m_clientSet = @0x7fb7eef5f208, m_clientVector = {&lt;WTF::FastAllocBase&gt; = {&lt;No data fields&gt;}, m_size = 1, m_buffer = 
    {&lt;WTF::VectorBufferBase&lt;WebCore::CachedResourceClient*&gt;&gt; = {&lt;WTFNoncopyable::Noncopyable&gt; = {&lt;WTF::FastAllocBase&gt; = 
    {&lt;No data fields&gt;}, &lt;No data fields&gt;}, m_buffer = 0x7fb7edcef068, m_capacity = 1}, &lt;No data fields&gt;}}, m_index = 1}
#52 0x00007fb80e930414 in WebCore::Loader::Host::didFinishLoading (this=0x7fb7f47663c0, loader=&lt;value optimized out&gt;) at WebCore/loader/loader.cpp:398
        request = 0x7fb7f4759d80
        docLoader = 0x7fb7f417e280
        resource = 0x7fb7eef5f200
#53 0x00007fb80e9208f5 in WebCore::SubresourceLoader::didFinishLoading (this=0x7fb7f4702900) at WebCore/loader/SubresourceLoader.cpp:184
No locals.
#54 0x00007fb80ec714d6 in finishedCallback (session=&lt;value optimized out&gt;, msg=0x2305430, data=&lt;value optimized out&gt;)
    at WebCore/platform/network/soup/ResourceHandleSoup.cpp:326
        d = 0x7fb7eef65800
        client = 0x7fb7f4702900
#55 0x00007fb80c5a2ead in final_finished (req=0x2305430, user_data=&lt;value optimized out&gt;) at soup-session-async.c:384
        item = 0x22df120
        session = 0x16a59b0
#56 0x00007fb80b2184aa in IA__g_closure_invoke (closure=0x22ef440, return_value=0x0, n_param_values=&lt;value optimized out&gt;, param_values=0x22edda0, 
    invocation_hint=0x7fff01d7c410) at gclosure.c:767
        marshal = 0x7fb80b225350 &lt;IA__g_cclosure_marshal_VOID__VOID&gt;
        marshal_data = 0x2a
        __PRETTY_FUNCTION__ = &quot;IA__g_closure_invoke&quot;
#57 0x00007fb80b22d7c4 in signal_emit_unlocked_R (node=0x2248770, detail=&lt;value optimized out&gt;, instance=&lt;value optimized out&gt;, 
    emission_return=&lt;value optimized out&gt;, instance_and_params=&lt;value optimized out&gt;) at gsignal.c:3318
        tmp = &lt;value optimized out&gt;
        handler = 0x2324a90
        accumulator = 0x0
        emission = {next = 0x7fff01d7c820, instance = 0x2305430, ihint = {signal_id = 414, detail = 0, run_type = G_SIGNAL_RUN_LAST}, state = 
    EMISSION_RUN, chain_type = 4}
        class_closure = 0x2248700
        handler_list = 0x2300090
        return_accu = &lt;value optimized out&gt;
        accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 
    0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        signal_id = 414
        max_sequential_handler_number = 3886
        return_value_altered = 1
#58 0x00007fb80b22eac5 in IA__g_signal_emit_valist (instance=0x2305430, signal_id=&lt;value optimized out&gt;, detail=0, var_args=0x7fff01d7c600)
    at gsignal.c:2981
        signal_return_type = 4
        param_values = &lt;value optimized out&gt;
        node = 0x2248770
        i = &lt;value optimized out&gt;
        n_params = &lt;value optimized out&gt;
        __PRETTY_FUNCTION__ = &quot;IA__g_signal_emit_valist&quot;
#59 0x00007fb80b22f303 in IA__g_signal_emit (instance=0x7fb80f1a2e50, signal_id=1, detail=248785367) at gsignal.c:3038
        var_args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fff01d7c6e0, reg_save_area = 0x7fff01d7c620}}
#60 0x00007fb80c598d6f in soup_message_io_finished (msg=0x2305430) at soup-message-io.c:177
No locals.
#61 0x00007fb80b2184aa in IA__g_closure_invoke (closure=0x2300d70, return_value=0x0, n_param_values=&lt;value optimized out&gt;, param_values=0x2300920, 
    invocation_hint=0x7fff01d7c830) at gclosure.c:767
        marshal = 0x7fb80b225350 &lt;IA__g_cclosure_marshal_VOID__VOID&gt;
        marshal_data = 0x2a
        __PRETTY_FUNCTION__ = &quot;IA__g_closure_invoke&quot;
#62 0x00007fb80b22d3d1 in signal_emit_unlocked_R (node=0x164b730, detail=&lt;value optimized out&gt;, instance=&lt;value optimized out&gt;, 
    emission_return=&lt;value optimized out&gt;, instance_and_params=&lt;value optimized out&gt;) at gsignal.c:3248
        tmp = &lt;value optimized out&gt;
        handler = 0x22c8950
        accumulator = 0x0
        emission = {next = 0x0, instance = 0x2309a30, ihint = {signal_id = 417, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, 
          chain_type = 4}
        class_closure = 0x164b6a0
        handler_list = 0x22c8950
        return_accu = &lt;value optimized out&gt;
        accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 
    0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        signal_id = 417
        max_sequential_handler_number = 3886
        return_value_altered = 0
#63 0x00007fb80b22eac5 in IA__g_signal_emit_valist (instance=0x2309a30, signal_id=&lt;value optimized out&gt;, detail=0, var_args=0x7fff01d7ca20)
    at gsignal.c:2981
        signal_return_type = 4
        param_values = &lt;value optimized out&gt;
        node = 0x164b730
        i = &lt;value optimized out&gt;
        n_params = &lt;value optimized out&gt;
        __PRETTY_FUNCTION__ = &quot;IA__g_signal_emit_valist&quot;
#64 0x00007fb80b22f303 in IA__g_signal_emit (instance=0x7fb80f1a2e50, signal_id=1, detail=248785367) at gsignal.c:3038
        var_args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fff01d7cb00, reg_save_area = 0x7fff01d7ca40}}
#65 0x00007fb80c5a4fb1 in socket_read_watch (chan=&lt;value optimized out&gt;, cond=0, user_data=&lt;value optimized out&gt;) at soup-socket.c:1245
        sock = 0x2309a30
#66 0x00007fb80ab4803f in g_main_dispatch (context=0xde4110) at gmain.c:1960
        dispatch = 0x7fb80ab8a0b0 &lt;g_io_unix_dispatch&gt;
        user_data = 0x2309a30
        callback = 0x7fb80c5a4f50 &lt;socket_read_watch&gt;
        cb_funcs = 0x7fb80ae015f0
        cb_data = 0x17eebe0
        current_source_link = {data = 0x23273d0, next = 0x0}
        source = 0x23273d0
        current = 0xe108a0
        i = 0
#67 IA__g_main_context_dispatch (context=0xde4110) at gmain.c:2513
No locals.
#68 0x00007fb80ab4be78 in g_main_context_iterate (context=0xde4110, block=&lt;value optimized out&gt;, dispatch=&lt;value optimized out&gt;, 
    self=&lt;value optimized out&gt;) at gmain.c:2591
        max_priority = 2147483647
        timeout = 17
        some_ready = 1
        nfds = 16
        allocated_nfds = 179670192
        fds = &lt;value optimized out&gt;
        __PRETTY_FUNCTION__ = &quot;g_main_context_iterate&quot;
#69 0x00007fb80ab4c38d in IA__g_main_loop_run (loop=0xe14080) at gmain.c:2799
        self = 0xdaade0
        __PRETTY_FUNCTION__ = &quot;IA__g_main_loop_run&quot;
#70 0x00007fb80dbb0d67 in IA__gtk_main () at gtkmain.c:1219
        tmp_list = 0xe2a980 = {0xe3e800, A debugging session is active.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>205086</commentid>
    <comment_count>1</comment_count>
    <who name="Mark Rowe (bdash)">mrowe</who>
    <bug_when>2010-03-27 18:49:53 -0700</bug_when>
    <thetext>A suggestion for the future:  put massive backtraces in a text file and attach it to the bug.  Bugzilla wraps the lines to hell and makes them incredibly hard to read.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>205192</commentid>
    <comment_count>2</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2010-03-28 10:47:16 -0700</bug_when>
    <thetext>Doesn&apos;t happen for me on Mac OS X, r56669.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>293334</commentid>
    <comment_count>3</comment_count>
    <who name="Priit Laes (IRC: plaes)">plaes</who>
    <bug_when>2010-10-13 02:33:04 -0700</bug_when>
    <thetext>Closing old stuff...</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>