Bug 17882

Summary: Crash in WebCore::CSSStyleSelector::hasSelectorForAttribute
Product: WebKit Reporter: Dave Marquard <dave>
Component: WebCore Misc.Assignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Critical CC: ap, aroben, mkerr, slowking, webkit
Priority: P1    
Version: 528+ (Nightly build)   
Hardware: Mac   
OS: OS X 10.5   
Attachments:
Description Flags
r31081 crash log
none
r31084 crash log none

Description Dave Marquard 2008-03-16 14:28:18 PDT
On r31081, I've gotten a reproducible crash in WebCore::CSSStyleSelector::hasSelectorForAttribute. You can reproduce the crash when loading http://www.freebsd.org/java/newsflash.html
Comment 1 Dave Marquard 2008-03-16 14:29:20 PDT
Created attachment 19807 [details]
r31081 crash log

crash log from r31081
Comment 2 Matt Lilek 2008-03-16 14:39:47 PDT
Darin fixed this in r31080, a new nightly with the fix is available.

*** This bug has been marked as a duplicate of 17876 ***
Comment 3 Dave Marquard 2008-03-16 14:45:04 PDT
The crash happens with the latest nightly, r31084, so this looks like a different bug than 17876.

Note that the attached crash log actually comes from r31084... r31081 mentioned before was a typo.
Comment 4 Matt Lilek 2008-03-16 14:50:17 PDT
(In reply to comment #3)
> The crash happens with the latest nightly, r31084, so this looks like a
> different bug than 17876.
> 
> Note that the attached crash log actually comes from r31084... r31081 mentioned
> before was a typo.
> 

Oops! You're right, I should have looked closer.
Comment 5 Dave Marquard 2008-03-16 14:53:38 PDT
Created attachment 19809 [details]
r31084 crash log

The crash log from r31084 looks slightly different actually. My bad. Added a new attachment for it.
Comment 6 Nick Poulos 2008-03-17 02:31:43 PDT
*** Bug 17891 has been marked as a duplicate of this bug. ***
Comment 7 Robert Blaut 2008-03-17 07:02:47 PDT
*** Bug 17892 has been marked as a duplicate of this bug. ***
Comment 8 Alexey Proskuryakov 2008-03-18 02:04:50 PDT
I think this was fixed in r31095 (additional fix for bug 17876) - can someone still reproduce the crash?
Comment 9 Robert Blaut 2008-03-18 02:17:02 PDT
(In reply to comment #8)
> I think this was fixed in r31095 (additional fix for bug 17876) - can someone
> still reproduce the crash?
> 

I've got no crash in Webkit r31114 on Mac OS X 10.5. So it's probably fixed.
Comment 10 Marc K 2008-03-18 04:31:20 PDT
Webkit r31114 seems to resolve the issue for me.
Comment 11 Robert Blaut 2008-03-18 05:02:18 PDT
Per comment #9, #10 and #11 resolved as fixed.