98476 2012-10-04 21:22:42 -0700 [Chromium] Crash on SpellChecker::didCheck() 2012-10-10 18:18:29 -0700 1 1 1 Unclassified WebKit HTML Editing 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 morrita morrita mifenton rniwa shinyak tkent webkit.review.bot oldest_to_newest 735302 0 morrita 2012-10-04 21:22:42 -0700 This upstreams http://code.google.com/p/chromium/issues/detail?id=154231. 735814 1 ap 2012-10-05 11:31:21 -0700 Could you please all relevant detail here? 737303 2 morrita 2012-10-08 18:24:18 -0700 (In reply to comment #1) > Could you please all relevant detail here? Oops. I'm sorry for the lack of the detail. This path is hit only when asynchronous spellchecking is enabled. Here is reported stack trace: 0x627c8bcc [chrome.dll] - spellchecker.cpp:209] WebCore::SpellChecker::didCheck(int,WTF::Vector<WebCore::TextCheckingResult,0> const &) 0x62061345 [chrome.dll] - threadspecific.h:253] WTF::ThreadSpecific<WebCore::ThreadGlobalData>::operator WebCore::ThreadGlobalData *() 0x62068a10 [chrome.dll] - threadglobaldata.h:113] WebCore::threadGlobalData() 0x627c85d1 [chrome.dll] - spellchecker.cpp:88] WebCore::SpellCheckRequest::didCancel() 0x627c8991 [chrome.dll] - spellchecker.cpp:182] WebCore::SpellChecker::invokeRequest(WTF::PassRefPtr<WebCore::SpellCheckRequest>) 0x627c87ca [chrome.dll] - spellchecker.cpp:135] WebCore::SpellChecker::timerFiredToProcessQueuedRequest(WebCore::Timer<WebCore::SpellChecker> *) 0x6212fac4 [chrome.dll] - timer.h:100] WebCore::Timer<WebCore::RevalidateStyleAttributeTask>::fired() 0x6212f7bc [chrome.dll] - threadtimers.cpp:115] WebCore::ThreadTimers::sharedTimerFiredInternal() 0x62061345 [chrome.dll] - threadspecific.h:253] WTF::ThreadSpecific<WebCore::ThreadGlobalData>::operator WebCore::ThreadGlobalData *() 0x6212f66a [chrome.dll] - threadtimers.cpp:93] WebCore::ThreadTimers::sharedTimerFired() 0x61fa690d [chrome.dll] - timer.cc:181] base::Timer::RunScheduledTask() 0x61fa6876 [chrome.dll] - timer.cc:46] base::BaseTimerTaskInternal::Run() 0x61f877d3 [chrome.dll] - message_loop.cc:470] MessageLoop::RunTask(base::PendingTask const &) 0x61f870a0 [chrome.dll] - message_loop.cc:661] MessageLoop::DoWork() 0x61f87d86 [chrome.dll] - message_pump_default.cc:28] base::MessagePumpDefault::Run(base::MessagePump::Delegate *) 0x61f86d6b [chrome.dll] - message_loop.cc:427] MessageLoop::RunInternal() 0x61f86cc3 [chrome.dll] - run_loop.cc:45] base::RunLoop::Run() 0x61f8d67d [chrome.dll] - message_loop.cc:307] MessageLoop::Run() 738822 3 167975 morrita 2012-10-10 04:05:16 -0700 Created attachment 167975 Patch 738832 4 167975 tkent 2012-10-10 04:19:46 -0700 Comment on attachment 167975 Patch Looks ok 739462 5 167975 webkit.review.bot 2012-10-10 18:18:26 -0700 Comment on attachment 167975 Patch Clearing flags on attachment: 167975 Committed r130988: <http://trac.webkit.org/changeset/130988> 739463 6 webkit.review.bot 2012-10-10 18:18:29 -0700 All reviewed patches have been landed. Closing bug. 167975 2012-10-10 04:05:16 -0700 2012-10-10 18:18:26 -0700 Patch bug-98476-20121010200415.patch text/plain 1738 morrita U3VidmVyc2lvbiBSZXZpc2lvbjogMTMwODcxCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggNTIxNGMyMjEzZjNhMDk5 ODdhYmZjNDgzZDNjZDc0NjMzOTA2NWM2Zi4uMjIwNWQ0MWRmOGM2ZmZjMjIxZDE1YjUxZmY4ZTQ0 MTE1Zjg5YjZiZCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE5IEBACisyMDEyLTEwLTEwICBNT1JJ VEEgSGFqaW1lICA8bW9ycml0YUBnb29nbGUuY29tPgorCisgICAgICAgIFtDaHJvbWl1bV0gQ3Jh c2ggb24gU3BlbGxDaGVja2VyOjpkaWRDaGVjaygpCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJr aXQub3JnL3Nob3dfYnVnLmNnaT9pZD05ODQ3NgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9E WSAoT09QUyEpLgorCisgICAgICAgIFNwZWxsQ2hlY2tlcjo6ZGlkQ2hlY2soKSBhc3N1bWVkIG1f cHJvY2Vzc2luZ1JlcXVlc3QgaXMgbm9uLU5VTEwuIEhvd2V2ZXIsIFNwZWxsQ2hlY2tlcjo6aW52 b2tlUmVxdWVzdCgpCisgICAgICAgIGNhbGxzIFNwZWxsQ2hlY2tSZXF1ZXN0OjpkaWRDYW5jZWwo KSwgd2hpY2ggcmVzdWx0cyBkaWRDaGVjaygpIHdpdGggTlVMTCBtX3Byb2Nlc3NpbmdSZXF1ZXN0 LgorICAgICAgICBUaGlzIGNoYWduZSBlbGltaW5hdGVzIHRoZSBwcm9ibGVtYXRpYyBkaWRDaGVj aygpLgorCisgICAgICAgIE5vIG5ldyB0ZXN0cy4gVGhlIGNhc2UgZGVwZW5kcyBvbiBzcGVjaWZp YyB0aW1pbmcgYW5kIGlzIGhhcmQgdG8gaGl0IGJ5IGF1dG9tYXRlZCB0ZXN0aW5nLgorCisgICAg ICAgICogZWRpdGluZy9TcGVsbENoZWNrZXIuY3BwOgorICAgICAgICAoV2ViQ29yZTo6U3BlbGxD aGVja2VyOjpkaWRDaGVjayk6CisKIDIwMTItMTAtMTAgIEFuZHJlYXMgS2xpbmcgIDxrbGluZ0B3 ZWJraXQub3JnPgogCiAgICAgICAgIEVsZW1lbnRBdHRyaWJ1dGVEYXRhOiB0aWdodGVuIG1lbWJl ciBwYWNraW5nIG9uIDY0LWJpdC4KZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL2VkaXRpbmcv U3BlbGxDaGVja2VyLmNwcCBiL1NvdXJjZS9XZWJDb3JlL2VkaXRpbmcvU3BlbGxDaGVja2VyLmNw cAppbmRleCBjODQ0MjM3ZTdhMzRmZDI3YzQ2NTEwOTEyZDY2OWZjNjhmZjExYjgzLi4zNjBmYjlj NDUyZGZjMTQyZTI5NDhhZDc1MmMyMzM3YzEyZWJjN2Q4IDEwMDY0NAotLS0gYS9Tb3VyY2UvV2Vi Q29yZS9lZGl0aW5nL1NwZWxsQ2hlY2tlci5jcHAKKysrIGIvU291cmNlL1dlYkNvcmUvZWRpdGlu Zy9TcGVsbENoZWNrZXIuY3BwCkBAIC0xNzgsMTEgKzE3OCw4IEBAIHZvaWQgU3BlbGxDaGVja2Vy OjpyZXF1ZXN0Q2hlY2tpbmdGb3IoUGFzc1JlZlB0cjxTcGVsbENoZWNrUmVxdWVzdD4gcmVxdWVz dCkKIHZvaWQgU3BlbGxDaGVja2VyOjppbnZva2VSZXF1ZXN0KFBhc3NSZWZQdHI8U3BlbGxDaGVj a1JlcXVlc3Q+IHJlcXVlc3QpCiB7CiAgICAgQVNTRVJUKCFtX3Byb2Nlc3NpbmdSZXF1ZXN0KTsK LSAgICBpZiAoIWNsaWVudCgpKSB7Ci0gICAgICAgIHJlcXVlc3QtPmRpZENhbmNlbCgpOworICAg IGlmICghY2xpZW50KCkpCiAgICAgICAgIHJldHVybjsKLSAgICB9Ci0KICAgICBtX3Byb2Nlc3Np bmdSZXF1ZXN0ID0gcmVxdWVzdDsKICAgICBjbGllbnQoKS0+cmVxdWVzdENoZWNraW5nT2ZTdHJp bmcobV9wcm9jZXNzaW5nUmVxdWVzdCk7CiB9Cg==