Bug 18722

Summary:

Webkit Nightly Build crashes when visiting i has a hotdog.

Product:

WebKit

Reporter:

Mattias Stahre <mattias>

Component:

Layout and Rendering

Assignee:

mitz

Status:

RESOLVED FIXED

Severity:

Major

CC:

dave, mitz, mrowe

Priority:

Keywords:

InRadar, NeedsReduction, Regression

Version:

528+ (Nightly build)

Hardware:

Mac

OS:

OS X 10.5

URL:

http://ihasahotdog.com

Attachments:

Description	Flags
Patch with regression test	hyatt: review+

Mattias Stahre

Reported 2008-04-24 15:58:10 PDT

When visiting ihasahotdog.com there is an instant crash of the webbrowser when using nightly builds, however, the "stable" Safari 3.1 do not crash when visiting this site.

Attachments
Patch with regression test (5.11 KB, patch) 2008-04-24 20:55 PDT, mitz	hyatt: review+	Details Formatted Diff Diff
View All Add attachment proposed patch, testcase, etc.

Mark Rowe (bdash)

Comment 1 2008-04-24 16:03:05 PDT

Exception Type: EXC_BAD_ACCESS (SIGBUS) Exception Codes: KERN_PROTECTION_FAILURE at 0x00000000000001d4 Crashed Thread: 0 Thread 0 Crashed: 0 com.apple.WebCore 0x0107bf6b WebCore::RenderBlock::determineStartPosition(bool&, WebCore::BidiResolver<WebCore::BidiIterator, WebCore::BidiRun>&, WTF::Vector<WebCore::RenderBlock::FloatWithRect, 0ul>&, unsigned int&) + 283 1 com.apple.WebCore 0x0107f7af WebCore::RenderBlock::layoutInlineChildren(bool, int&, int&) + 1039 2 com.apple.WebCore 0x00eb3e8c WebCore::RenderBlock::layoutBlock(bool) + 716 3 com.apple.WebCore 0x00ea5f28 WebCore::RenderBlock::layout() + 40 4 com.apple.WebCore 0x00eb023f WebCore::RenderBlock::layoutBlockChildren(bool, int&) + 1935 5 com.apple.WebCore 0x00eb43b9 WebCore::RenderBlock::layoutBlock(bool) + 2041 6 com.apple.WebCore 0x00ea5f28 WebCore::RenderBlock::layout() + 40 7 com.apple.WebCore 0x00eb023f WebCore::RenderBlock::layoutBlockChildren(bool, int&) + 1935 8 com.apple.WebCore 0x00eb43b9 WebCore::RenderBlock::layoutBlock(bool) + 2041 9 com.apple.WebCore 0x00ea5f28 WebCore::RenderBlock::layout() + 40 10 com.apple.WebCore 0x00eb023f WebCore::RenderBlock::layoutBlockChildren(bool, int&) + 1935 11 com.apple.WebCore 0x00eb43b9 WebCore::RenderBlock::layoutBlock(bool) + 2041 12 com.apple.WebCore 0x00ea5f28 WebCore::RenderBlock::layout() + 40 13 com.apple.WebCore 0x00ea7ca4 WebCore::RenderBlock::insertFloatingObject(WebCore::RenderObject*) + 116 14 com.apple.WebCore 0x00eaf637 WebCore::RenderBlock::handleFloatingChild(WebCore::RenderObject*, WebCore::RenderBlock::MarginInfo const&, bool&) + 39 15 com.apple.WebCore 0x00eaf6ca WebCore::RenderBlock::handleSpecialChild(WebCore::RenderObject*, WebCore::RenderBlock::MarginInfo const&, WebCore::RenderBlock::CompactInfo&, bool&) + 106 16 com.apple.WebCore 0x00eafc11 WebCore::RenderBlock::layoutBlockChildren(bool, int&) + 353 17 com.apple.WebCore 0x00eb43b9 WebCore::RenderBlock::layoutBlock(bool) + 2041

Mark Rowe (bdash)

Comment 2 2008-04-24 16:03:45 PDT

<rdar://problem/5888360>

Mark Rowe (bdash)

Comment 3 2008-04-24 16:04:12 PDT

Crash log was from r32516.

mitz

Comment 4 2008-04-24 20:55:21 PDT

Created attachment 20806 [details] Patch with regression test

Dave Hyatt

Comment 5 2008-04-24 21:03:07 PDT

Comment on attachment 20806 [details] Patch with regression test r=me, but I'm taking off points for you not saying "I can haz review?" when you posted the patch.

mitz

Comment 6 2008-04-24 21:08:22 PDT

Fixed in <http://trac.webkit.org/projects/webkit/changeset/32532>.

mitz

Comment 7 2008-05-29 15:02:44 PDT

*** Bug 18639 has been marked as a duplicate of this bug. ***

Note You need to log in before you can comment on or make changes to this bug.