Bug 13806

Summary:	REGRESSION: Crash in FrameLoader::frameHasLoaded() on beta AOL webmail
Product:	WebKit	Reporter:	Jon <jon>
Component:	Frames	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	david.barto, jrgbrbs, mjs
Priority:	P1
Version:	523.x (Safari 3)
Hardware:	Mac
OS:	OS X 10.5
URL:	http://beta.webmail.aol.com

Jon

Reported 2007-05-21 20:09:30 PDT

Attempting to load the final part of the login process causes a hang and then crash with ToT and Leopard (9A410) Safari. Loads fine in shipping Safari on Tiger. Quad G5, 10.5 (9A410) Process: Safari [7025] Path: /Applications/SafariDev.app/Contents/MacOS/Safari Identifier: com.apple.SafariDev Version: 5522.5 (5522.5) Build Info: WebBrowser-55220500~1 Code Type: PPC (Native) Parent Process: launchd [95] Date/Time: 2007-05-21 21:47:17.423 -0500 OS Version: Mac OS X 10.5 (9A410) Report Version: 6 Exception Type: EXC_BAD_ACCESS (SIGBUS) Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000324 Crashed Thread: 0 Thread 0 Crashed: 0 com.apple.WebCore 0x00ee1af0 WebCore::FrameLoader::frameHasLoaded() const + 16 (FrameLoader.cpp:2248) 1 com.apple.WebKit 0x00195504 -[WebFrame dataSource] + 36 (WebFrame.mm:778) 2 com.apple.SafariDev 0x0001ccb4 0x1000 + 113844 3 com.apple.SafariDev 0x000246e4 0x1000 + 145124 4 com.apple.SafariDev 0x0001cf5c 0x1000 + 114524 5 com.apple.SafariDev 0x0001cad8 0x1000 + 113368 6 com.apple.Foundation 0x93841530 __NSFireDelayedPerform + 376 7 com.apple.CoreFoundation 0x945ca334 CFRunLoopRunSpecific + 3068 8 com.apple.HIToolbox 0x92503b20 RunCurrentEventLoopInMode + 288 9 com.apple.HIToolbox 0x92509df8 ReceiveNextEventCommon + 412 10 com.apple.HIToolbox 0x92509ef4 BlockUntilNextEventMatchingListInMode + 84 11 com.apple.AppKit 0x9051e890 _DPSNextEvent + 596 12 com.apple.AppKit 0x9051e2dc -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 112 13 com.apple.SafariDev 0x0000702c 0x1000 + 24620 14 com.apple.AppKit 0x90518b7c -[NSApplication run] + 736 15 com.apple.AppKit 0x9050cee4 NSApplicationMain + 548 16 com.apple.SafariDev 0x00002d80 0x1000 + 7552 17 com.apple.SafariDev 0x0004f80c 0x1000 + 321548

Attachments
Add attachment proposed patch, testcase, etc.

mitz

Comment 1 2007-05-22 12:27:30 PDT

Fixed in <http://trac.webkit.org/projects/webkit/changeset/21641>.

David Kilzer (:ddkilzer)

Comment 2 2007-05-23 06:25:30 PDT

*** Bug 13838 has been marked as a duplicate of this bug. ***

David Kilzer (:ddkilzer)

Comment 3 2007-05-23 07:17:20 PDT

*** Bug 13841 has been marked as a duplicate of this bug. ***

Note You need to log in before you can comment on or make changes to this bug.