Bug 16678

Summary: Unreproducible crash in KJS::JSObject::inherits() after using Web Inspector
Product: WebKit Reporter: David Kilzer (:ddkilzer) <ddkilzer>
Component: Web Inspector (Deprecated)Assignee: Timothy Hatcher <timothy>
Status: RESOLVED FIXED    
Severity: Normal Keywords: NeedsReduction
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Macintosh   
OS: OS X 10.4   
Attachments:
Description Flags
Patch beidson: review+

Description David Kilzer (:ddkilzer) 2007-12-30 08:08:23 PST
* SUMMARY
I've seen two crashes in KJS::JSObject::inherits() now related to the WebInspector.  I'm not sure how to reproduce the crash yet.

* NOTES
No console output reported for the crash.  Crash log:

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000000

Thread 0 Crashed:
0   com.apple.JavaScriptCore 	0x0061dad8 KJS::JSObject::inherits(KJS::ClassInfo const*) const + 32 (object.h:526)
1   com.apple.JavaScriptCore 	0x005d3944 JSObjectSetPrivate + 68 (JSObjectRef.cpp:254)
2   com.apple.WebCore        	0x0126e394 WebCore::InspectorController::~InspectorController [in-charge]() + 220 (InspectorController.cpp:616)
3   com.apple.WebCore        	0x018f95c8 void WTF::deleteOwnedPtr<WebCore::InspectorController>(WebCore::InspectorController*) + 52 (OwnPtr.h:52)
4   com.apple.WebCore        	0x018f9614 WTF::OwnPtr<WebCore::InspectorController>::~OwnPtr [in-charge]() + 40 (OwnPtr.h:70)
5   com.apple.WebCore        	0x01357b58 WebCore::Page::~Page [in-charge]() + 476 (Page.cpp:120)
6   com.apple.WebKit         	0x003d91c8 -[WebView(WebPrivate) _close] + 596 (WebView.mm:715)
7   com.apple.Safari         	0x00050b60 0x1000 + 326496
8   com.apple.Safari         	0x000506c8 0x1000 + 325320
9   com.apple.WebKit         	0x003c2874 -[WebView close] + 60 (WebView.mm:2022)
10  com.apple.Safari         	0x00053c88 0x1000 + 339080
11  com.apple.Safari         	0x00054038 0x1000 + 340024
12  com.apple.AppKit         	0x93847d44 -[NSApplication sendAction:to:from:] + 108
13  com.apple.Safari         	0x00034ae0 0x1000 + 211680
14  com.apple.AppKit         	0x938a25b0 -[NSMenu performActionForItemAtIndex:] + 392
15  com.apple.AppKit         	0x938a2334 -[NSCarbonMenuImpl performActionWithHighlightingForItemAtIndex:] + 104
16  com.apple.AppKit         	0x938a1ddc -[NSMenu performKeyEquivalent:] + 272
17  com.apple.AppKit         	0x938a1a28 -[NSApplication _handleKeyEquivalent:] + 328
18  com.apple.AppKit         	0x937ab4e8 -[NSApplication sendEvent:] + 2944
19  com.apple.Safari         	0x000304b4 0x1000 + 193716
20  com.apple.AppKit         	0x937a2df0 -[NSApplication run] + 508
21  com.apple.AppKit         	0x93893974 NSApplicationMain + 452
22  com.apple.Safari         	0x0009bad4 0x1000 + 633556
23  com.apple.Safari         	0x000022fc 0x1000 + 4860
Comment 1 Timothy Hatcher 2008-01-08 20:38:53 PST
Created attachment 18342 [details]
Patch
Comment 2 Brady Eidson 2008-01-08 20:48:50 PST
Comment on attachment 18342 [details]
Patch

r=me
Comment 3 Timothy Hatcher 2008-01-08 20:49:49 PST
Landed a fix in r29335.