77216 2012-01-27 07:08:09 -0800 NULL ptr in WebCore::Editor::isContinuousSpellCheckingEnabled 2012-02-03 03:40:18 -0800 1 1 1 Unclassified WebKit HTML Editing 528+ (Nightly build) PC Windows Vista RESOLVED FIXED P1 Normal --- 1 skylined morrita morrita rniwa webkit.review.bot oldest_to_newest 544044 0 skylined 2012-01-27 07:08:09 -0800 Detailed report: https://cluster-fuzz.appspot.com/testcase?key=15995435 Uploader: skylined@chromium.org Crash Type: UNKNOWN Crash Address: 0x000000000640 Crash State: - crash stack - WebCore::Editor::isContinuousSpellCheckingEnabled WebCore::TypingCommand::markMisspellingsAfterTyping WebCore::TypingCommand::deleteKeyPressed Regressed: https://cluster-fuzz.appspot.com/revisions?range=108839:108881 Minimized Testcase (2.51 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97_6CG2EXf7_BvtuY37u9sW7LsAnpGs24_teSavkXZd63UaqnEhn4dOtvwivAnbWfjelfuaA7MHdkhw_xPurz9EsNGHYTkX3ueLfLNzC-KrWozIUYOUHDOw5LnJQTjMryYUyOFSYPxgOfS8WglSoOeZ63Tdzg 548486 1 125269 morrita 2012-02-02 23:14:40 -0800 Created attachment 125269 Patch 548487 2 morrita 2012-02-02 23:15:20 -0800 I couldn't reproduce this locally. But code indicates this is possible. 548617 3 125269 webkit.review.bot 2012-02-03 03:40:11 -0800 Comment on attachment 125269 Patch Clearing flags on attachment: 125269 Committed r106646: <http://trac.webkit.org/changeset/106646> 548618 4 webkit.review.bot 2012-02-03 03:40:18 -0800 All reviewed patches have been landed. Closing bug. 125269 2012-02-02 23:14:40 -0800 2012-02-03 03:40:08 -0800 Patch bug-77216-20120203161438.patch text/plain 7192 morrita U3VidmVyc2lvbiBSZXZpc2lvbjogMTA2NjI4CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggMWExNTYzN2Y0MTk1ZGFm NTUxNzhiN2EzZDczNDM0NWY4MTJkNzcwNS4uYWU5YmE5Y2RjNGUwZTQ5OTllNDRmNzkxODM4NGE0 Nzg2ZDMxMGRlYSAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDIwIEBACisyMDEyLTAyLTAyICBNT1JJ VEEgSGFqaW1lICA8bW9ycml0YUBnb29nbGUuY29tPgorCisgICAgICAgIFR5cGluZ0NvbW1hbmQg c2hvdWxkIGJlIHByZXBhcmVkIGFnYWluc3QgZGV0YWNoZWQgZG9jdW1lbnQuCisgICAgICAgIGh0 dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD03NzIxNgorCisgICAgICAgIFJl dmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIEFkZGVkIG51bGwgY2hlY2tzIGZv ciBkb2N1bWVudCgpLT5mcmFtZSgpLgorCisgICAgICAgIE5vIG5ldyB0ZXN0cy4gSnVzdCB0aWdo dGVuIGd1YXJkcyBmb3IgcG9zc2libGUgY29kZXBhdGhzLgorCisgICAgICAgICogZWRpdGluZy9U eXBpbmdDb21tYW5kLmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OlR5cGluZ0NvbW1hbmQ6Om1hcmtN aXNzcGVsbGluZ3NBZnRlclR5cGluZyk6CisgICAgICAgIChXZWJDb3JlOjpUeXBpbmdDb21tYW5k Ojp0eXBpbmdBZGRlZFRvT3BlbkNvbW1hbmQpOgorICAgICAgICAoV2ViQ29yZTo6VHlwaW5nQ29t bWFuZDo6ZGVsZXRlS2V5UHJlc3NlZCk6CisgICAgICAgIChXZWJDb3JlOjpUeXBpbmdDb21tYW5k Ojpmb3J3YXJkRGVsZXRlS2V5UHJlc3NlZCk6CisKIDIwMTItMDItMDIgIEtlaXNoaSBIYXR0b3Jp ICA8a2Vpc2hpQHdlYmtpdC5vcmc+CiAKICAgICAgICAgQ29sb3JJbnB1dFR5cGUgbmVlZHMgdG8g dXNlIGVuc3VyZUlubGluZVN0eWxlRGVjbApkaWZmIC0tZ2l0IGEvU291cmNlL1dlYkNvcmUvZWRp dGluZy9UeXBpbmdDb21tYW5kLmNwcCBiL1NvdXJjZS9XZWJDb3JlL2VkaXRpbmcvVHlwaW5nQ29t bWFuZC5jcHAKaW5kZXggNDEwMWVjZmQ3MGY3OGQ2MjU0NzQwNjIyMjJkOTVmZGM4MjUwOTM2MS4u OWFlMzk1NTQxYTgzYzVlMjRiMDlmZTRiNDVjMGE5YWZiMTJmYTc4ZiAxMDA2NDQKLS0tIGEvU291 cmNlL1dlYkNvcmUvZWRpdGluZy9UeXBpbmdDb21tYW5kLmNwcAorKysgYi9Tb3VyY2UvV2ViQ29y ZS9lZGl0aW5nL1R5cGluZ0NvbW1hbmQuY3BwCkBAIC0yOTYsMTUgKzI5NiwxOSBAQCBFZGl0QWN0 aW9uIFR5cGluZ0NvbW1hbmQ6OmVkaXRpbmdBY3Rpb24oKSBjb25zdAogCiB2b2lkIFR5cGluZ0Nv bW1hbmQ6Om1hcmtNaXNzcGVsbGluZ3NBZnRlclR5cGluZyhFVHlwaW5nQ29tbWFuZCBjb21tYW5k VHlwZSkKIHsKKyAgICBGcmFtZSogZnJhbWUgPSBkb2N1bWVudCgpLT5mcmFtZSgpOworICAgIGlm ICghZnJhbWUpCisgICAgICAgIHJldHVybjsKKwogI2lmIFBMQVRGT1JNKE1BQykgJiYgIWRlZmlu ZWQoQlVJTERJTkdfT05fTEVPUEFSRCkKLSAgICBpZiAoIWRvY3VtZW50KCktPmZyYW1lKCktPmVk aXRvcigpLT5pc0NvbnRpbnVvdXNTcGVsbENoZWNraW5nRW5hYmxlZCgpCi0gICAgICYmICFkb2N1 bWVudCgpLT5mcmFtZSgpLT5lZGl0b3IoKS0+aXNBdXRvbWF0aWNRdW90ZVN1YnN0aXR1dGlvbkVu YWJsZWQoKQotICAgICAmJiAhZG9jdW1lbnQoKS0+ZnJhbWUoKS0+ZWRpdG9yKCktPmlzQXV0b21h dGljTGlua0RldGVjdGlvbkVuYWJsZWQoKQotICAgICAmJiAhZG9jdW1lbnQoKS0+ZnJhbWUoKS0+ ZWRpdG9yKCktPmlzQXV0b21hdGljRGFzaFN1YnN0aXR1dGlvbkVuYWJsZWQoKQotICAgICAmJiAh ZG9jdW1lbnQoKS0+ZnJhbWUoKS0+ZWRpdG9yKCktPmlzQXV0b21hdGljVGV4dFJlcGxhY2VtZW50 RW5hYmxlZCgpKQorICAgIGlmICghZnJhbWUtPmVkaXRvcigpLT5pc0NvbnRpbnVvdXNTcGVsbENo ZWNraW5nRW5hYmxlZCgpCisgICAgICYmICFmcmFtZS0+ZWRpdG9yKCktPmlzQXV0b21hdGljUXVv dGVTdWJzdGl0dXRpb25FbmFibGVkKCkKKyAgICAgJiYgIWZyYW1lLT5lZGl0b3IoKS0+aXNBdXRv bWF0aWNMaW5rRGV0ZWN0aW9uRW5hYmxlZCgpCisgICAgICYmICFmcmFtZS0+ZWRpdG9yKCktPmlz QXV0b21hdGljRGFzaFN1YnN0aXR1dGlvbkVuYWJsZWQoKQorICAgICAmJiAhZnJhbWUtPmVkaXRv cigpLT5pc0F1dG9tYXRpY1RleHRSZXBsYWNlbWVudEVuYWJsZWQoKSkKICAgICAgICAgcmV0dXJu OwogI2Vsc2UKLSAgICBpZiAoIWRvY3VtZW50KCktPmZyYW1lKCktPmVkaXRvcigpLT5pc0NvbnRp bnVvdXNTcGVsbENoZWNraW5nRW5hYmxlZCgpKQorICAgIGlmICghZnJhbWUtPmVkaXRvcigpLT5p c0NvbnRpbnVvdXNTcGVsbENoZWNraW5nRW5hYmxlZCgpKQogICAgICAgICByZXR1cm47CiAjZW5k aWYKICAgICAvLyBUYWtlIGEgbG9vayBhdCB0aGUgc2VsZWN0aW9uIHRoYXQgcmVzdWx0cyBhZnRl ciB0eXBpbmcgYW5kIGRldGVybWluZSB3aGV0aGVyIHdlIG5lZWQgdG8gc3BlbGxjaGVjay4gCkBA IC0zMjEsMjUgKzMyNSwyOSBAQCB2b2lkIFR5cGluZ0NvbW1hbmQ6Om1hcmtNaXNzcGVsbGluZ3NB ZnRlclR5cGluZyhFVHlwaW5nQ29tbWFuZCBjb21tYW5kVHlwZSkKICAgICAgICAgICAgIFN0cmlu ZyBzdHJpcHBlZFByZXZpb3VzV29yZDsKICAgICAgICAgICAgIGlmIChyYW5nZSAmJiAoY29tbWFu ZFR5cGUgPT0gVHlwaW5nQ29tbWFuZDo6SW5zZXJ0VGV4dCB8fCBjb21tYW5kVHlwZSA9PSBUeXBp bmdDb21tYW5kOjpJbnNlcnRMaW5lQnJlYWsgfHwgY29tbWFuZFR5cGUgPT0gVHlwaW5nQ29tbWFu ZDo6SW5zZXJ0UGFyYWdyYXBoU2VwYXJhdG9yIHx8IGNvbW1hbmRUeXBlID09IFR5cGluZ0NvbW1h bmQ6Okluc2VydFBhcmFncmFwaFNlcGFyYXRvckluUXVvdGVkQ29udGVudCkpCiAgICAgICAgICAg ICAgICAgc3RyaXBwZWRQcmV2aW91c1dvcmQgPSBwbGFpblRleHQocmFuZ2UuZ2V0KCkpLnN0cmlw V2hpdGVTcGFjZSgpOwotICAgICAgICAgICAgZG9jdW1lbnQoKS0+ZnJhbWUoKS0+ZWRpdG9yKCkt Pm1hcmtNaXNzcGVsbGluZ3NBZnRlclR5cGluZ1RvV29yZChwMSwgZW5kaW5nU2VsZWN0aW9uKCks ICFzdHJpcHBlZFByZXZpb3VzV29yZC5pc0VtcHR5KCkpOworICAgICAgICAgICAgZnJhbWUtPmVk aXRvcigpLT5tYXJrTWlzc3BlbGxpbmdzQWZ0ZXJUeXBpbmdUb1dvcmQocDEsIGVuZGluZ1NlbGVj dGlvbigpLCAhc3RyaXBwZWRQcmV2aW91c1dvcmQuaXNFbXB0eSgpKTsKICAgICAgICAgfSBlbHNl IGlmIChjb21tYW5kVHlwZSA9PSBUeXBpbmdDb21tYW5kOjpJbnNlcnRUZXh0KQotICAgICAgICAg ICAgZG9jdW1lbnQoKS0+ZnJhbWUoKS0+ZWRpdG9yKCktPnN0YXJ0Q29ycmVjdGlvblBhbmVsVGlt ZXIoKTsKKyAgICAgICAgICAgIGZyYW1lLT5lZGl0b3IoKS0+c3RhcnRDb3JyZWN0aW9uUGFuZWxU aW1lcigpOwogICAgIH0KIH0KIAogdm9pZCBUeXBpbmdDb21tYW5kOjp0eXBpbmdBZGRlZFRvT3Bl bkNvbW1hbmQoRVR5cGluZ0NvbW1hbmQgY29tbWFuZFR5cGVGb3JBZGRlZFR5cGluZykKIHsKKyAg ICBGcmFtZSogZnJhbWUgPSBkb2N1bWVudCgpLT5mcmFtZSgpOworICAgIGlmICghZnJhbWUpCisg ICAgICAgIHJldHVybjsKKwogICAgIHVwZGF0ZVByZXNlcnZlc1R5cGluZ1N0eWxlKGNvbW1hbmRU eXBlRm9yQWRkZWRUeXBpbmcpOwogCiAjaWYgUExBVEZPUk0oTUFDKSAmJiAhZGVmaW5lZChCVUlM RElOR19PTl9MRU9QQVJEKQotICAgIGRvY3VtZW50KCktPmZyYW1lKCktPmVkaXRvcigpLT5hcHBs aWVkRWRpdGluZyh0aGlzKTsKKyAgICBmcmFtZS0+ZWRpdG9yKCktPmFwcGxpZWRFZGl0aW5nKHRo aXMpOwogICAgIC8vIFNpbmNlIHRoZSBzcGVsbGNoZWNraW5nIGNvZGUgbWF5IGFsc28gcGVyZm9y bSBjb3JyZWN0aW9ucyBhbmQgb3RoZXIgcmVwbGFjZW1lbnRzLCBpdCBzaG91bGQgaGFwcGVuIGFm dGVyIHRoZSB0eXBpbmcgY2hhbmdlcy4KICAgICBpZiAoIW1fc2hvdWxkUHJldmVudFNwZWxsQ2hl Y2tpbmcpCiAgICAgICAgIG1hcmtNaXNzcGVsbGluZ3NBZnRlclR5cGluZyhjb21tYW5kVHlwZUZv ckFkZGVkVHlwaW5nKTsKICNlbHNlCiAgICAgLy8gVGhlIG9sZCBzcGVsbGNoZWNraW5nIGNvZGUg cmVxdWlyZXMgdGhhdCBjaGVja2luZyBiZSBkb25lIGZpcnN0LCB0byBwcmV2ZW50IGlzc3VlcyBs aWtlIHRoYXQgaW4gNjg2NDA3Miwgd2hlcmUgPGRvZXNuJ3Q+IGlzIG1hcmtlZCBhcyBtaXNzcGVs bGVkLgogICAgIG1hcmtNaXNzcGVsbGluZ3NBZnRlclR5cGluZyhjb21tYW5kVHlwZUZvckFkZGVk VHlwaW5nKTsKLSAgICBkb2N1bWVudCgpLT5mcmFtZSgpLT5lZGl0b3IoKS0+YXBwbGllZEVkaXRp bmcodGhpcyk7CisgICAgZnJhbWUtPmVkaXRvcigpLT5hcHBsaWVkRWRpdGluZyh0aGlzKTsKICNl bmRpZgogfQogCkBAIC00MzEsNyArNDM5LDExIEBAIGJvb2wgVHlwaW5nQ29tbWFuZDo6bWFrZUVk aXRhYmxlUm9vdEVtcHR5KCkKIAogdm9pZCBUeXBpbmdDb21tYW5kOjpkZWxldGVLZXlQcmVzc2Vk KFRleHRHcmFudWxhcml0eSBncmFudWxhcml0eSwgYm9vbCBraWxsUmluZykKIHsKLSAgICBkb2N1 bWVudCgpLT5mcmFtZSgpLT5lZGl0b3IoKS0+dXBkYXRlTWFya2Vyc0ZvcldvcmRzQWZmZWN0ZWRC eUVkaXRpbmcoZmFsc2UpOworICAgIEZyYW1lKiBmcmFtZSA9IGRvY3VtZW50KCktPmZyYW1lKCk7 CisgICAgaWYgKCFmcmFtZSkKKyAgICAgICAgcmV0dXJuOworCisgICAgZnJhbWUtPmVkaXRvcigp LT51cGRhdGVNYXJrZXJzRm9yV29yZHNBZmZlY3RlZEJ5RWRpdGluZyhmYWxzZSk7CiAKICAgICBW aXNpYmxlU2VsZWN0aW9uIHNlbGVjdGlvblRvRGVsZXRlOwogICAgIFZpc2libGVTZWxlY3Rpb24g c2VsZWN0aW9uQWZ0ZXJVbmRvOwpAQCAtNTEzLDExICs1MjUsMTEgQEAgdm9pZCBUeXBpbmdDb21t YW5kOjpkZWxldGVLZXlQcmVzc2VkKFRleHRHcmFudWxhcml0eSBncmFudWxhcml0eSwgYm9vbCBr aWxsUmluZykKICAgICBpZiAoc2VsZWN0aW9uVG9EZWxldGUuaXNOb25lKCkpCiAgICAgICAgIHJl dHVybjsKICAgICAKLSAgICBpZiAoc2VsZWN0aW9uVG9EZWxldGUuaXNDYXJldCgpIHx8ICFkb2N1 bWVudCgpLT5mcmFtZSgpLT5zZWxlY3Rpb24oKS0+c2hvdWxkRGVsZXRlU2VsZWN0aW9uKHNlbGVj dGlvblRvRGVsZXRlKSkKKyAgICBpZiAoc2VsZWN0aW9uVG9EZWxldGUuaXNDYXJldCgpIHx8ICFm cmFtZS0+c2VsZWN0aW9uKCktPnNob3VsZERlbGV0ZVNlbGVjdGlvbihzZWxlY3Rpb25Ub0RlbGV0 ZSkpCiAgICAgICAgIHJldHVybjsKICAgICAKICAgICBpZiAoa2lsbFJpbmcpCi0gICAgICAgIGRv Y3VtZW50KCktPmZyYW1lKCktPmVkaXRvcigpLT5hZGRUb0tpbGxSaW5nKHNlbGVjdGlvblRvRGVs ZXRlLnRvTm9ybWFsaXplZFJhbmdlKCkuZ2V0KCksIGZhbHNlKTsKKyAgICAgICAgZnJhbWUtPmVk aXRvcigpLT5hZGRUb0tpbGxSaW5nKHNlbGVjdGlvblRvRGVsZXRlLnRvTm9ybWFsaXplZFJhbmdl KCkuZ2V0KCksIGZhbHNlKTsKICAgICAvLyBNYWtlIHVuZG8gc2VsZWN0IGV2ZXJ5dGhpbmcgdGhh dCBoYXMgYmVlbiBkZWxldGVkLCB1bmxlc3MgYW4gdW5kbyB3aWxsIHVuZG8gbW9yZSB0aGFuIGp1 c3QgdGhpcyBkZWxldGlvbi4KICAgICAvLyBGSVhNRTogVGhpcyBiZWhhdmVzIGxpa2UgVGV4dEVk aXQgZXhjZXB0IGZvciB0aGUgY2FzZSB3aGVyZSB5b3Ugb3BlbiB3aXRoIHRleHQgaW5zZXJ0aW9u IGFuZCB0aGVuIGRlbGV0ZQogICAgIC8vIG1vcmUgdGV4dCB0aGFuIHlvdSBpbnNlcnQuICBJbiB0 aGF0IGNhc2UgYWxsIG9mIHRoZSB0ZXh0IHRoYXQgd2FzIGFyb3VuZCBvcmlnaW5hbGx5IHNob3Vs ZCBiZSBzZWxlY3RlZC4KQEAgLTUzMCw3ICs1NDIsMTEgQEAgdm9pZCBUeXBpbmdDb21tYW5kOjpk ZWxldGVLZXlQcmVzc2VkKFRleHRHcmFudWxhcml0eSBncmFudWxhcml0eSwgYm9vbCBraWxsUmlu ZykKIAogdm9pZCBUeXBpbmdDb21tYW5kOjpmb3J3YXJkRGVsZXRlS2V5UHJlc3NlZChUZXh0R3Jh bnVsYXJpdHkgZ3JhbnVsYXJpdHksIGJvb2wga2lsbFJpbmcpCiB7Ci0gICAgZG9jdW1lbnQoKS0+ ZnJhbWUoKS0+ZWRpdG9yKCktPnVwZGF0ZU1hcmtlcnNGb3JXb3Jkc0FmZmVjdGVkQnlFZGl0aW5n KGZhbHNlKTsKKyAgICBGcmFtZSogZnJhbWUgPSBkb2N1bWVudCgpLT5mcmFtZSgpOworICAgIGlm ICghZnJhbWUpCisgICAgICAgIHJldHVybjsKKworICAgIGZyYW1lLT5lZGl0b3IoKS0+dXBkYXRl TWFya2Vyc0ZvcldvcmRzQWZmZWN0ZWRCeUVkaXRpbmcoZmFsc2UpOwogCiAgICAgVmlzaWJsZVNl bGVjdGlvbiBzZWxlY3Rpb25Ub0RlbGV0ZTsKICAgICBWaXNpYmxlU2VsZWN0aW9uIHNlbGVjdGlv bkFmdGVyVW5kbzsKQEAgLTU5OSwxMSArNjE1LDExIEBAIHZvaWQgVHlwaW5nQ29tbWFuZDo6Zm9y d2FyZERlbGV0ZUtleVByZXNzZWQoVGV4dEdyYW51bGFyaXR5IGdyYW51bGFyaXR5LCBib29sIGtp CiAgICAgaWYgKHNlbGVjdGlvblRvRGVsZXRlLmlzTm9uZSgpKQogICAgICAgICByZXR1cm47CiAg ICAgCi0gICAgaWYgKHNlbGVjdGlvblRvRGVsZXRlLmlzQ2FyZXQoKSB8fCAhZG9jdW1lbnQoKS0+ ZnJhbWUoKS0+c2VsZWN0aW9uKCktPnNob3VsZERlbGV0ZVNlbGVjdGlvbihzZWxlY3Rpb25Ub0Rl bGV0ZSkpCisgICAgaWYgKHNlbGVjdGlvblRvRGVsZXRlLmlzQ2FyZXQoKSB8fCAhZnJhbWUtPnNl bGVjdGlvbigpLT5zaG91bGREZWxldGVTZWxlY3Rpb24oc2VsZWN0aW9uVG9EZWxldGUpKQogICAg ICAgICByZXR1cm47CiAgICAgICAgIAogICAgIGlmIChraWxsUmluZykKLSAgICAgICAgZG9jdW1l bnQoKS0+ZnJhbWUoKS0+ZWRpdG9yKCktPmFkZFRvS2lsbFJpbmcoc2VsZWN0aW9uVG9EZWxldGUu dG9Ob3JtYWxpemVkUmFuZ2UoKS5nZXQoKSwgZmFsc2UpOworICAgICAgICBmcmFtZS0+ZWRpdG9y KCktPmFkZFRvS2lsbFJpbmcoc2VsZWN0aW9uVG9EZWxldGUudG9Ob3JtYWxpemVkUmFuZ2UoKS5n ZXQoKSwgZmFsc2UpOwogICAgIC8vIG1ha2UgdW5kbyBzZWxlY3Qgd2hhdCB3YXMgZGVsZXRlZAog ICAgIHNldFN0YXJ0aW5nU2VsZWN0aW9uKHNlbGVjdGlvbkFmdGVyVW5kbyk7CiAgICAgQ29tcG9z aXRlRWRpdENvbW1hbmQ6OmRlbGV0ZVNlbGVjdGlvbihzZWxlY3Rpb25Ub0RlbGV0ZSwgbV9zbWFy dERlbGV0ZSk7Cg==