<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>7859</bug_id>
          
          <creation_ts>2006-03-19 08:56:44 -0800</creation_ts>
          <short_desc>REGRESSION: skilifts.org Javascript causes crash in ToT</short_desc>
          <delta_ts>2006-03-20 08:26:48 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>420+</version>
          <rep_platform>Mac</rep_platform>
          <op_sys>OS X 10.4</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>7818</dup_id>
          
          <bug_file_loc>http://www.kevinbroderick.com/WebKit-crash1/test1.html</bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P1</priority>
          <bug_severity>Major</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Kevin Broderick">kbroderick</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>36932</commentid>
    <comment_count>0</comment_count>
    <who name="Kevin Broderick">kbroderick</who>
    <bug_when>2006-03-19 08:56:44 -0800</bug_when>
    <thetext>Loading a certain page at skilifts.org&apos;s incarnation of Invision Power Board (IPB) (more precisely: &lt;http://www.skilifts.org/nwsforum/index.php?s=62f055d2e58c76f944437c37a32d962a&amp;showforum=18&gt; ) causes a crash in ToT as of 20060319 but not in Safari  2.0.3 (417.9.2) (as released with 10.4.5 w/most recent updates via Software Update) or in nightly build from 20060315 (r13314); it does occur with nightly from 20060316 (r13334).  Pseudo-reduction is at URL given above; I&apos;ve narrowed the crash down to occuring only with all Javscript references in that file left intact, but I haven&apos;t attempted to narrow it down within the Javascript (if time permits, I may come back and do that).

Full crash report:
Date/Time:      2006-03-19 11:51:08.568 -0500
OS Version:     10.4.5 (Build 8H14)
Report Version: 4

Command: Safari
Path:    /Applications/Safari.app/Contents/MacOS/Safari
Parent:  bash [239]

Version:        2.0.3 (417.9.2)
Build Version:  2
Project Name:   WebBrowser
Source Version: 4170902

PID:    5404
Thread: 0

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000000

Thread 0 Crashed:
0   &lt;&lt;00000000&gt;&gt; 	0x00000000 0 + 0
1   com.apple.WebCore        	0x017dc23c KWQValueListImpl::copyOnWrite() + 108 (Shared.h:34)
2   com.apple.WebCore        	0x017dc4a0 KWQValueListImpl::clear() + 48 (KWQValueListImpl.cpp:129)
3   com.apple.WebCore        	0x0196555c WebCore::SegmentedString::clear() + 60 (SegmentedString.cpp:81)
4   com.apple.WebCore        	0x0184fa30 WebCore::HTMLTokenizer::notifyFinished(WebCore::CachedObject*) + 560 (htmltokenizer.cpp:1745)
5   com.apple.WebCore        	0x01962738 WebCore::CachedScript::checkNotify() + 104 (CachedScript.cpp:107)
6   com.apple.WebCore        	0x0196287c WebCore::CachedScript::data(WebCore::Array&lt;char&gt;&amp;, bool) + 252 (CachedScript.cpp:99)
7   com.apple.WebCore        	0x01964fbc WebCore::Loader::receivedAllData(WebCore::TransferJob*, NSData*) + 380 (loader.cpp:136)
8   com.apple.WebCore        	0x0186f8bc -[KWQResourceLoader finishJobAndHandle:] + 124 (KWQResourceLoader.mm:98)
9   com.apple.WebKit         	0x003272f4 -[WebSubresourceLoader didFinishLoading] + 84 (WebSubresourceLoader.m:228)
10  com.apple.WebKit         	0x0032f5c4 -[WebLoader connectionDidFinishLoading:] + 52 (WebLoader.m:667)
11  com.apple.Foundation     	0x90b4ba6c -[NSURLConnection(NSURLConnectionInternal) _sendDidFinishLoadingCallback] + 188
12  com.apple.Foundation     	0x90b49cd8 -[NSURLConnection(NSURLConnectionInternal) _sendCallbacks] + 556
13  com.apple.Foundation     	0x90b49a30 _sendCallbacks + 156
14  com.apple.CoreFoundation 	0x9f15fa68 __CFRunLoopDoSources0 + 384
15  com.apple.CoreFoundation 	0x9f15ef98 __CFRunLoopRun + 452
16  com.apple.CoreFoundation 	0x9f15ea18 CFRunLoopRunSpecific + 268
17  com.apple.HIToolbox      	0x931861e0 RunCurrentEventLoopInMode + 264
18  com.apple.HIToolbox      	0x93185874 ReceiveNextEventCommon + 380
19  com.apple.HIToolbox      	0x931856e0 BlockUntilNextEventMatchingListInMode + 96
20  com.apple.AppKit         	0x9f648104 _DPSNextEvent + 384
21  com.apple.AppKit         	0x9f647dc8 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 116
22  com.apple.Safari         	0x00006e74 0x1000 + 24180
23  com.apple.AppKit         	0x9f64430c -[NSApplication run] + 472
24  com.apple.AppKit         	0x9f734e68 NSApplicationMain + 452
25  com.apple.Safari         	0x0005cbf0 0x1000 + 375792
26  com.apple.Safari         	0x0005ca94 0x1000 + 375444

Thread 1:
0   libSystem.B.dylib        	0x9000b1e8 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000b13c mach_msg + 60
2   com.apple.CoreFoundation 	0x9f15f114 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x9f15ea18 CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x90b28384 -[NSRunLoop runMode:beforeDate:] + 172
5   com.apple.Foundation     	0x90b282bc -[NSRunLoop run] + 76
6   com.apple.WebKit         	0x0036fdc4 +[WebFileDatabase _syncLoop:] + 180 (WebFileDatabase.m:291)
7   com.apple.Foundation     	0x90b193b4 forkThreadForFunction + 108
8   libSystem.B.dylib        	0x9002b1e0 _pthread_body + 96

Thread 2:
0   libSystem.B.dylib        	0x9000b1e8 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000b13c mach_msg + 60
2   com.apple.CoreFoundation 	0x9f15f114 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x9f15ea18 CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x90b408bc +[NSURLConnection(NSURLConnectionInternal) _resourceLoadLoop:] + 264
5   com.apple.Foundation     	0x90b193b4 forkThreadForFunction + 108
6   libSystem.B.dylib        	0x9002b1e0 _pthread_body + 96

Thread 3:
0   libSystem.B.dylib        	0x9000b1e8 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000b13c mach_msg + 60
2   com.apple.CoreFoundation 	0x9f15f114 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x9f15ea18 CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x90b419fc +[NSURLCache _diskCacheSyncLoop:] + 152
5   com.apple.Foundation     	0x90b193b4 forkThreadForFunction + 108
6   libSystem.B.dylib        	0x9002b1e0 _pthread_body + 96

Thread 4:
0   libSystem.B.dylib        	0x9002b888 semaphore_wait_signal_trap + 8
1   libSystem.B.dylib        	0x9002fffc pthread_cond_wait + 488
2   com.apple.Foundation     	0x90b20520 -[NSConditionLock lockWhenCondition:] + 68
3   com.apple.Syndication    	0x9b6a950c -[AsyncDB _run:] + 192
4   com.apple.Foundation     	0x90b193b4 forkThreadForFunction + 108
5   libSystem.B.dylib        	0x9002b1e0 _pthread_body + 96

Thread 5:
0   libSystem.B.dylib        	0x9000b1e8 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000b13c mach_msg + 60
2   com.apple.CoreFoundation 	0x9f15f114 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x9f15ea18 CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x90b28384 -[NSRunLoop runMode:beforeDate:] + 172
5   com.apple.Foundation     	0x90b282bc -[NSRunLoop run] + 76
6   com.apple.Safari         	0x0003db18 0x1000 + 248600
7   com.apple.Foundation     	0x90b193b4 forkThreadForFunction + 108
8   libSystem.B.dylib        	0x9002b1e0 _pthread_body + 96

Thread 6:
0   libSystem.B.dylib        	0x9001f1ec select + 12
1   com.apple.CoreFoundation 	0x9f1719a8 __CFSocketManager + 472
2   libSystem.B.dylib        	0x9002b1e0 _pthread_body + 96

Thread 0 crashed with PPC Thread State 64:
  srr0: 0x0000000000000000 srr1: 0x000000004200f030                        vrsave: 0x0000000000000000
    cr: 0x42044228          xer: 0x0000000020000004   lr: 0x00000000017dbfb4  ctr: 0x0000000000000000
    r0: 0x0000000000000000   r1: 0x00000000bfffdbc0   r2: 0x0000000000000000   r3: 0x0000000000000008
    r4: 0x0000000000000008   r5: 0x00000000006af574   r6: 0x00000000006af578   r7: 0x000000000064f800
    r8: 0x000000000000003f   r9: 0x0000000000000000  r10: 0x000000000107929c  r11: 0x0000000000000000
   r12: 0x0000000000000000  r13: 0x0000000000000000  r14: 0x0000000000000001  r15: 0x0000000000000001
   r16: 0x0000000000000000  r17: 0x00000000bfffde28  r18: 0x0000000001b7f814  r19: 0x0000000001b7f814
   r20: 0x000000000069b8dc  r21: 0x00000000bfffdde0  r22: 0x00000000bfffde1c  r23: 0x00000000bfffdd4c
   r24: 0x00000000bfffdd7c  r25: 0x00000000006af578  r26: 0x00000000006af574  r27: 0x000000000073dae0
   r28: 0x0000000000000000  r29: 0x0000000000000000  r30: 0x0000000000000008  r31: 0x000000000184f814

Binary Images Description:
    0x1000 -    0xdafff com.apple.Safari 2.0.3 (417.9.2)	/Applications/Safari.app/Contents/MacOS/Safari
  0x305000 -   0x3b4fff com.apple.WebKit 420+	/Users/kbroderick/Documents/src/builds/Release/WebKit.framework/Versions/A/WebKit
 0x1008000 -  0x1095fff com.apple.JavaScriptCore 420+	/Users/kbroderick/Documents/src/builds/Release/JavaScriptCore.framework/Versions/A/JavaScriptCore
 0x17c2000 -  0x1b6ffff com.apple.WebCore 420+	/Users/kbroderick/Documents/src/builds/Release/WebCore.framework/Versions/A/WebCore
 0xda7f000 -  0xda7ffff jp.hetima.SafariStand.loader SafariStand-loader version  1.0 (5)	/Users/kbroderick/Library/InputManagers/SafariStand/SafariStand-loader.bundle/Contents/MacOS/SafariStand-loader
 0xda83000 -  0xda8afff com.unsanity.smartcrashreports Smart Crash Reports version 1.0 (1.0.1)	/Library/InputManagers/Smart Crash Reports/Smart Crash Reports.bundle/Contents/MacOS/Smart Crash Reports
 0xdd9d000 -  0xddd1fff jp.hetima.SafariStand 2.0b3 (107)	/Users/kbroderick/Library/InputManagers/SafariStand/SafariStand.bundle/Contents/MacOS/SafariStand
0x32000000 - 0x32023fff isao.sonobe.OgreKit OgreKit version 1.2.2 (1.2.3)	/Users/kbroderick/Library/InputManagers/SafariStand/SafariStand.bundle/Contents/Resources/OgreKit.framework/OgreKit
0x8fe00000 - 0x8fe54fff dyld 44.2	/usr/lib/dyld
0x90000000 - 0x901b3fff libSystem.B.dylib 	/usr/lib/libSystem.B.dylib
0x9020b000 - 0x9020ffff libmathCommon.A.dylib 	/usr/lib/system/libmathCommon.A.dylib
0x90211000 - 0x90264fff com.apple.CoreText 1.0.1 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x90291000 - 0x90342fff ATS 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x903b0000 - 0x90688fff com.apple.CoreServices.CarbonCore 681.3 (671.2)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x9085c000 - 0x9085cfff com.apple.CoreServices 10.4 (???)	/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x9085e000 - 0x90960fff libicucore.A.dylib 	/usr/lib/libicucore.A.dylib
0x909ba000 - 0x90a3efff libobjc.A.dylib 	/usr/lib/libobjc.A.dylib
0x90a68000 - 0x90ad6fff com.apple.framework.IOKit 1.4 (???)	/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x90af3000 - 0x90d1efff com.apple.Foundation 6.4.4 (567.25)	/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x90e43000 - 0x90ec3fff com.apple.CoreServices.OSServices 4.1	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x90f73000 - 0x90f9afff com.apple.SystemConfiguration 1.8.2	/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x90fb1000 - 0x90fbdfff com.apple.opengl 1.4.7	/System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x91362000 - 0x9136bfff com.apple.DiskArbitration 2.1	/System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x913ac000 - 0x913b4fff libgcc_s.1.dylib 	/usr/lib/libgcc_s.1.dylib
0x913df000 - 0x913e7fff libbsm.dylib 	/usr/lib/libbsm.dylib
0x91453000 - 0x91480fff com.apple.openscripting 1.2.4 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x914a7000 - 0x914a7fff com.apple.ApplicationServices 10.4 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x914a9000 - 0x914e1fff com.apple.AE 1.5 (297)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x9161e000 - 0x916b1fff com.apple.print.framework.PrintCore 4.3 (172.3)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x916f8000 - 0x917b5fff com.apple.QD 3.8.18 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x917f3000 - 0x91851fff com.apple.HIServices 1.5.1 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x9187f000 - 0x918a3fff com.apple.LangAnalysis 1.6.1	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x918b7000 - 0x918dcfff com.apple.FindByContent 1.5	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/FindByContent.framework/Versions/A/FindByContent
0x9194d000 - 0x91961fff com.apple.speech.synthesis.framework 3.3	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x91a97000 - 0x91c5afff com.apple.security 4.3 (25966)	/System/Library/Frameworks/Security.framework/Versions/A/Security
0x91df3000 - 0x91e35fff com.apple.LaunchServices 168.10	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x91ed3000 - 0x92463fff libBLAS.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x924ab000 - 0x927bbfff libLAPACK.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x927eb000 - 0x92877fff com.apple.DesktopServices 1.3.1	/System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x92bfe000 - 0x92cdcfff libxml2.2.dylib 	/usr/lib/libxml2.2.dylib
0x92cfc000 - 0x92deafff libiconv.2.dylib 	/usr/lib/libiconv.2.dylib
0x92e28000 - 0x92e82fff libGLU.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x92ea0000 - 0x92ea0fff com.apple.Carbon 10.4 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x92ea2000 - 0x92eb6fff com.apple.ImageCapture 3.0	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x92ece000 - 0x92edefff com.apple.speech.recognition.framework 3.4	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x92eea000 - 0x92efffff com.apple.securityhi 2.0 (203)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x92fac000 - 0x92fb7fff com.apple.help 1.0.3 (32)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x93008000 - 0x93018fff com.apple.print.framework.Print 5.0 (190.1)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x93024000 - 0x9308afff com.apple.htmlrendering 1.1.2	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x930bb000 - 0x9310dfff com.apple.NavigationServices 3.4.2	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x93168000 - 0x93175fff com.apple.CommonPanels 1.2.2 (73)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x9317e000 - 0x93490fff com.apple.HIToolbox 1.4.5 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x935ed000 - 0x9360efff com.apple.DirectoryService.Framework 3.0	/System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x9367a000 - 0x9367afff com.apple.Cocoa 6.4 (???)	/System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x9396c000 - 0x93989fff libresolv.9.dylib 	/usr/lib/libresolv.9.dylib
0x93992000 - 0x93a13fff com.apple.SearchKit 1.0.5	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x940e0000 - 0x941aafff com.apple.audio.toolbox.AudioToolbox 1.4.1	/System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x941fe000 - 0x941fefff com.apple.audio.units.AudioUnit 1.4	/System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x943c2000 - 0x943fffff libsqlite3.0.dylib 	/usr/lib/libsqlite3.0.dylib
0x944e9000 - 0x94521fff com.apple.vmutils 4.0.0 (85)	/System/Library/PrivateFrameworks/vmutils.framework/Versions/A/vmutils
0x94561000 - 0x9457dfff com.apple.securityfoundation 2.1 (24988)	/System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x94591000 - 0x945d5fff com.apple.securityinterface 2.1 (24981)	/System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
0x945fc000 - 0x9460bfff libCGATS.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib
0x94613000 - 0x9461ffff libCSync.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x94ac1000 - 0x94beffff com.apple.AddressBook.framework 4.0.3 (483)	/System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x94c81000 - 0x94c90fff com.apple.DSObjCWrappers.Framework 1.1	/System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
0x94c98000 - 0x94cc5fff com.apple.LDAPFramework 1.4.1 (69.0.1)	/System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x94ccc000 - 0x94cdcfff libsasl2.2.dylib 	/usr/lib/libsasl2.2.dylib
0x95493000 - 0x95516fff libstdc++.6.dylib 	/usr/lib/libstdc++.6.dylib
0x9565d000 - 0x95725fff libcrypto.0.9.7.dylib 	/usr/lib/libcrypto.0.9.7.dylib
0x95774000 - 0x957a3fff libssl.0.9.7.dylib 	/usr/lib/libssl.0.9.7.dylib
0x95afb000 - 0x95b6bfff com.apple.CoreData 80	/System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x95c6b000 - 0x95c95fff com.apple.Metadata 10.4.4 (121.34)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x9607e000 - 0x960a7fff libxslt.1.dylib 	/usr/lib/libxslt.1.dylib
0x96120000 - 0x961edfff com.apple.ColorSync 4.4.4	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x96319000 - 0x9635afff com.apple.CFNetwork 10.4.4 (129.9)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x97421000 - 0x9745bfff com.apple.ImageIO.framework 1.4.4	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x97501000 - 0x9751efff libJPEG.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x976d5000 - 0x97706fff libRaw.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRaw.dylib
0x9770e000 - 0x97751fff libTIFF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x9782f000 - 0x9787ffff libGLImage.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x97af2000 - 0x97c6afff com.apple.QuartzCore 1.4.5	/System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x9b6a6000 - 0x9b6dcfff com.apple.Syndication 1.0.4 (51)	/System/Library/PrivateFrameworks/Syndication.framework/Versions/A/Syndication
0x9b6fc000 - 0x9b70efff com.apple.SyndicationUI 1.0.4 (51)	/System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI
0x9ea04000 - 0x9ea12fff libz.1.dylib 	/usr/lib/libz.1.dylib
0x9ebba000 - 0x9ebd2fff libRIP.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x9ebd9000 - 0x9ec60fff com.apple.ink.framework 101.2 (69)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x9ec74000 - 0x9ec92fff libGL.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x9ec9d000 - 0x9ed1dfff com.apple.audio.CoreAudio 3.0.2	/System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x9ed5c000 - 0x9ed79fff com.apple.audio.SoundManager 3.9	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x9ed8b000 - 0x9ee1dfff libvDSP.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x9ee37000 - 0x9ee9cfff libvMisc.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x9eea6000 - 0x9eec5fff com.apple.Accelerate.vecLib 3.1.1 (vecLib 3.1.1)	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x9ef31000 - 0x9f01bfff com.apple.vImage 2.0	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x9f023000 - 0x9f023fff com.apple.Accelerate 1.1.1 (Accelerate 1.1.1)	/System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x9f025000 - 0x9f028fff libRadiance.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x9f02a000 - 0x9f043fff libPng.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x9f048000 - 0x9f04cfff libGIF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x9f04e000 - 0x9f0bdfff libJP2.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib
0x9f0d4000 - 0x9f0e9fff libcups.2.dylib 	/usr/lib/libcups.2.dylib
0x9f0ee000 - 0x9f10efff libmx.A.dylib 	/usr/lib/libmx.A.dylib
0x9f114000 - 0x9f12cfff com.apple.WebServices 1.1.2 (1.1.0)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/WebServicesCore.framework/Versions/A/WebServicesCore
0x9f13c000 - 0x9f215fff com.apple.CoreFoundation 6.4.4 (368.25)	/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x9f25e000 - 0x9f59bfff com.apple.CoreGraphics 1.256.33 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x9f627000 - 0x9f639fff libauto.dylib 	/usr/lib/libauto.dylib
0x9f640000 - 0x9fc73fff com.apple.AppKit 6.4.4 (824.33)	/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit

Model: PowerBook3,4, BootROM 4.3.7f3, 1 processors, PowerPC G4  (2.1), 800 MHz, 1 GB
Graphics: ATI Mobility Radeon 7500, ATY,RageM7, AGP, 32 MB
Memory Module: SODIMM0/J16TOP, 512 MB, SDRAM, PC133U-333
Memory Module: SODIMM1/J16BOTTOM, 512 MB, SDRAM, PC133U-333
AirPort: AirPort, 9.52
Modem: MicroDash, UCJ, V.92, 1.0F, APPLE VERSION 2.6.6
Network Service: Built-in Ethernet, Ethernet, en0
PCI Card: TXN,PCI1410-02, cardbus, PC Card
Parallel ATA Device: TOSHIBA MK8025GAS, 74.53 GB
Parallel ATA Device: MATSHITACD-RW  CW-8121, 
USB Device: USB Receiver, Logitech, Up to 1.5 Mb/sec, 500 mA</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>37019</commentid>
    <comment_count>1</comment_count>
    <who name="Alice Liu">alice.barraclough</who>
    <bug_when>2006-03-20 08:26:48 -0800</bug_when>
    <thetext>here&apos;s a snippet of the crash on TOT today.  it&apos;s the same as 7818. marking as dup. 

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_INVALID_ADDRESS (0x0001) at 0xbbadbeef

Thread 0 Crashed:
0   com.apple.WebCore        	0x01de0e00 WebCore::HTMLTokenizer::reset() + 92 (HTMLTokenizer.cpp:166)
1   com.apple.WebCore        	0x01de105c WebCore::HTMLTokenizer::~HTMLTokenizer [in-charge deleting]() + 144 (HTMLTokenizer.cpp:1669)
2   com.apple.WebCore        	0x01f06c0c WebCore::Document::cancelParsing() + 100 (Document.cpp:1090)
3   com.apple.WebCore        	0x01f06c54 WebCore::Document::implicitOpen() + 32 (Document.cpp:1099)
4   com.apple.WebCore        	0x01f06d20 WebCore::Document::open() + 120 (Document.cpp:1072)
5   com.apple.WebCore        	0x01d8cc30 KJS::HTMLDocFunction::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&amp;) + 580 (kjs_html.cpp:110)
6   com.apple.JavaScriptCore 	0x01623540 KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&amp;) + 288 (object.cpp:94)
7   com.apple.JavaScriptCore 	0x01618608 KJS::FunctionCallDotNode::evaluate(KJS::ExecState*) + 908 (nodes.cpp:761)
8   com.apple.JavaScriptCore 	0x01614fc8 KJS::ExprStatementNode::execute(KJS::ExecState*) + 220 (nodes.cpp:1716)
9   com.apple.JavaScriptCore 	0x016115a4 KJS::SourceElementsNode::execute(KJS::ExecState*) + 280 (nodes.cpp:2459)




*** This bug has been marked as a duplicate of 7818 ***</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>