78587 2012-02-14 01:16:10 -0800 REGRESSION(r99369?): Crash on http://www.sendspace.com/ 2012-03-08 17:11:22 -0800 1 1 1 Unclassified WebKit Forms 528+ (Nightly build) All All RESOLVED DUPLICATE 80648 InRadar, Regression P1 Major --- 13897 1 tkent webkit-unassigned jonlee skylined webkit-bug-importer oldest_to_newest 556086 0 tkent 2012-02-14 01:16:10 -0800 http://code.google.com/p/chromium/issues/detail?id=113630 Dragging files on an <input type=file> in www.sendspace.com causes a crash. Stack trace on Google Chrome 17: Thread 0 *CRASHED* ( EXC_BAD_ACCESS / KERN_PROTECTION_FAILURE @ 0x00000000 ) 0x6823cca1 [Google Chrome Framework - HTMLInputElement.cpp:1425] WebCore::HTMLInputElement::setCanReceiveDroppedFiles 0x68626abf [Google Chrome Framework - DragController.cpp:337] WebCore::DragController::tryDocumentDrag 0x68625136 [Google Chrome Framework - DragController.cpp:253] WebCore::DragController::dragEnteredOrUpdated 0x6862548e [Google Chrome Framework - DragController.cpp:192] WebCore::DragController::dragUpdated 0x6805c63a [Google Chrome Framework - WebViewImpl.cpp:2295] WebKit::WebViewImpl::dragTargetDragEnterOrOver 0x6805c6ef [Google Chrome Framework - WebViewImpl.cpp:2229] WebKit::WebViewImpl::dragTargetDragOver 0x68f86d1e [Google Chrome Framework - render_view_impl.cc:3796] RenderViewImpl::OnMessageReceived 556402 1 ap 2012-02-14 10:48:26 -0800 Crashing on this line: renderer()->updateFromElement(); 556403 2 ap 2012-02-14 10:48:41 -0800 <rdar://problem/10861627> 559115 3 skylined 2012-02-17 03:48:03 -0800 From a dup it looks like the underlying problem is that a dragging something over an HTMLInputElement while modifying that element causes this NULL ptr. 574404 4 tkent 2012-03-08 17:11:22 -0800 *** This bug has been marked as a duplicate of bug 80648 ***