46588 2010-09-26 15:49:20 -0700 MiniBrowser crashes when opening main menu item 2010-09-26 20:15:17 -0700 1 1 1 Unclassified WebKit New Bugs 528+ (Nightly build) Mac OS X 10.6 VERIFIED FIXED P2 Normal --- 0 opendarwin webkit-unassigned sam oldest_to_newest 285189 0 opendarwin 2010-09-26 15:49:20 -0700 Overview: MiniBrowser (WebKit/WebKitTools/MiniBrowser) crashes when I try to open a main menu item. This only seems to happen with some menu items. Crash: File, Edit, Help. No crash: Apple, MiniBrowser, View, Window, Debug. Steps to reproduce: 1) Launch MiniBrowser. 2) Open the "File" menu in the main menu bar. Build Date & Platform: Mac OS X 10.6.4, WebKit Debug build from svn r68344, Mac Pro 3.33 GHz 6-core Additional Information: Below is the gdb backtrace. ASSERTION FAILED: mainThreadPthread (/Users/Shared/source/WebKit/JavaScriptCore/wtf/mac/MainThreadMac.mm:136 bool WTF::isMainThread()) Program received signal: “EXC_BAD_ACCESS”. (gdb) bt #0 0x00000001005f1066 in WTF::isMainThread () at /Users/Shared/source/WebKit/JavaScriptCore/wtf/mac/MainThreadMac.mm:136 #1 0x0000000101787e20 in WTF::StringImpl::createCFString (this=0x1081477d0) at /Users/Shared/source/WebKit/WebCore/platform/text/cf/StringImplCF.cpp:136 #2 0x0000000101788151 in WTF::StringImpl::operator NSString* (this=0x1081477d0) at /Users/Shared/source/WebKit/WebCore/platform/text/mac/StringImplMac.mm:30 #3 0x000000010003806b in WTF::String::operator NSString* (this=0x7fff5fbfdb70) at WTFString.h:281 #4 0x0000000100037799 in WebKit::PageClientImpl::setEditCommandState (this=0x105a1e150, commandName=@0x7fff5fbfdb70, isEnabled=true, newState=0) at /Users/Shared/source/WebKit/WebKit2/UIProcess/API/mac/PageClientImpl.mm:206 #5 0x000000010007e144 in WebKit::WebPageProxy::didReceiveMessage (this=0x105c1b650, connection=0x105a2f3b0, messageID={m_messageID = 524319}, arguments=0x105a4b7b0) at /Users/Shared/source/WebKit/WebKit2/UIProcess/WebPageProxy.cpp:858 #6 0x000000010009b3f2 in WebKit::WebProcessProxy::didReceiveMessage (this=0x105a1edd0, connection=0x105a2f3b0, messageID={m_messageID = 524319}, arguments=0x105a4b7b0) at /Users/Shared/source/WebKit/WebKit2/UIProcess/WebProcessProxy.cpp:355 #7 0x0000000100017883 in CoreIPC::Connection::dispatchMessages (this=0x105a2f3b0) at /Users/Shared/source/WebKit/WebKit2/Platform/CoreIPC/Connection.cpp:278 #8 0x0000000100018aad in MemberFunctionWorkItem0<CoreIPC::Connection>::execute (this=0x105a43330) at WorkItem.h:74 #9 0x000000010004c3ab in RunLoop::performWork (this=0x108115bb0) at /Users/Shared/source/WebKit/WebKit2/Platform/RunLoop.cpp:62 #10 0x000000010004d3ed in RunLoop::performWork (context=0x108115bb0) at /Users/Shared/source/WebKit/WebKit2/Platform/mac/RunLoopMac.mm:32 #11 0x00007fff86ff9e91 in __CFRunLoopDoSources0 () #12 0x00007fff86ff8089 in __CFRunLoopRun () #13 0x00007fff86ff784f in CFRunLoopRunSpecific () #14 0x00007fff810ad91a in RunCurrentEventLoopInMode () #15 0x00007fff810ad67d in ReceiveNextEventCommon () #16 0x00007fff810f7db8 in IsUserStillTracking () #17 0x00007fff810e4a48 in TrackMenuCommon () #18 0x00007fff810e0c28 in MenuSelectCore () #19 0x00007fff810e0408 in _HandleMenuSelection2 () #20 0x00007fff87d72c39 in _NSHandleCarbonMenuEvent () #21 0x00007fff87d4674e in _DPSNextEvent () #22 0x00007fff87d45bed in -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] () #23 0x00007fff87d0b8d3 in -[NSApplication run] () #24 0x00007fff87d045f8 in NSApplicationMain () #25 0x0000000100001588 in start () 285248 1 68870 sam 2010-09-26 19:25:30 -0700 Created attachment 68870 Patch 285254 2 sam 2010-09-26 19:54:19 -0700 Fixed in r68364. 285260 3 opendarwin 2010-09-26 20:15:17 -0700 Verified as fixed 68870 2010-09-26 19:25:30 -0700 2010-09-26 19:51:45 -0700 Patch patch.diff text/plain 1929 sam SW5kZXg6IFdlYktpdDIvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYktpdDIvQ2hhbmdlTG9n CShyZXZpc2lvbiA2ODM2MikKKysrIFdlYktpdDIvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA IC0xLDMgKzEsMTUgQEAKKzIwMTAtMDktMjYgIFNhbSBXZWluaWcgIDxzYW1Ad2Via2l0Lm9yZz4K KworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBNaW5pQnJv d3NlciBjcmFzaGVzIHdoZW4gb3BlbmluZyBtYWluIG1lbnUgaXRlbQorICAgICAgICBodHRwczov L2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9NDY1ODgKKworICAgICAgICAqIFVJUHJv Y2Vzcy9BUEkvbWFjL1BhZ2VDbGllbnRJbXBsLm1tOgorICAgICAgICAoV2ViS2l0OjpQYWdlQ2xp ZW50SW1wbDo6c2V0RWRpdENvbW1hbmRTdGF0ZSk6IERvbid0IGFsbG93IGRlZmF1bHQKKyAgICAg ICAgU3RyaW5nIC0+IE5TU3RyaW5nIGNvbnZlcnNpb24gdG8gdGFrZSBwbGFjZSwgYW5kIHVzZSB0 aGUgaW5jcmVhc2luZ2x5CisgICAgICAgIG1pc25hbWVkIG5zU3RyaW5nRnJvbVdlYkNvcmVTdHJp bmcgaW5zdGVhZC4KKwogMjAxMC0wOS0yNiAgU2FtIFdlaW5pZyAgPHNhbUB3ZWJraXQub3JnPgog CiAgICAgICAgIEFub3RoZXIgd2luZG93cyBidWlsZCBmaXggd2luZG93cyBhdHRlbXB0LgpJbmRl eDogV2ViS2l0Mi9VSVByb2Nlc3MvQVBJL21hYy9QYWdlQ2xpZW50SW1wbC5tbQo9PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 Ci0tLSBXZWJLaXQyL1VJUHJvY2Vzcy9BUEkvbWFjL1BhZ2VDbGllbnRJbXBsLm1tCShyZXZpc2lv biA2ODM1NikKKysrIFdlYktpdDIvVUlQcm9jZXNzL0FQSS9tYWMvUGFnZUNsaWVudEltcGwubW0J KHdvcmtpbmcgY29weSkKQEAgLTIwMyw3ICsyMDMsNyBAQCB2b2lkIFBhZ2VDbGllbnRJbXBsOjpj bGVhckFsbEVkaXRDb21tYW5kCiAKIHZvaWQgUGFnZUNsaWVudEltcGw6OnNldEVkaXRDb21tYW5k U3RhdGUoY29uc3QgU3RyaW5nJiBjb21tYW5kTmFtZSwgYm9vbCBpc0VuYWJsZWQsIGludCBuZXdT dGF0ZSkKIHsKLSAgICBbbV93a1ZpZXcgX3NldFVzZXJJbnRlcmZhY2VJdGVtU3RhdGU6Y29tbWFu ZE5hbWUgZW5hYmxlZDppc0VuYWJsZWQgc3RhdGU6bmV3U3RhdGVdOworICAgIFttX3drVmlldyBf c2V0VXNlckludGVyZmFjZUl0ZW1TdGF0ZTpuc1N0cmluZ0Zyb21XZWJDb3JlU3RyaW5nKGNvbW1h bmROYW1lKSBlbmFibGVkOmlzRW5hYmxlZCBzdGF0ZTpuZXdTdGF0ZV07CiB9CiAKICNpZiBVU0Uo QUNDRUxFUkFURURfQ09NUE9TSVRJTkcpCkluZGV4OiBXZWJLaXQyL1dlYktpdDIueGNvZGVwcm9q L3Byb2plY3QucGJ4cHJvago9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBXZWJLaXQyL1dlYktpdDIueGNvZGVwcm9q L3Byb2plY3QucGJ4cHJvagkocmV2aXNpb24gNjgzNTcpCisrKyBXZWJLaXQyL1dlYktpdDIueGNv ZGVwcm9qL3Byb2plY3QucGJ4cHJvagkod29ya2luZyBjb3B5KQpAQCAtMTg5OSw3ICsxODk5LDYg QEAKIAkJCWlzYSA9IFBCWFByb2plY3Q7CiAJCQlidWlsZENvbmZpZ3VyYXRpb25MaXN0ID0gMURF QjkxQjEwODczM0RBNTAwMTBFOUNEIC8qIEJ1aWxkIGNvbmZpZ3VyYXRpb24gbGlzdCBmb3IgUEJY UHJvamVjdCAiV2ViS2l0MiIgKi87CiAJCQljb21wYXRpYmlsaXR5VmVyc2lvbiA9ICJYY29kZSAz LjEiOwotCQkJZGV2ZWxvcG1lbnRSZWdpb24gPSBFbmdsaXNoOwogCQkJaGFzU2Nhbm5lZEZvckVu Y29kaW5ncyA9IDE7CiAJCQlrbm93blJlZ2lvbnMgPSAoCiAJCQkJRW5nbGlzaCwK