Bug 18878

Summary: CNN Crash
Product: WebKit Reporter: John Moe <john>
Component: New BugsAssignee: Nobody <webkit-unassigned>
Status: RESOLVED WORKSFORME    
Severity: Normal    
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Mac   
OS: OS X 10.5   
URL: http://www.cnn.com/ELECTION/2008/primaries/results/candidates/#1918

John Moe
Reported 2008-05-03 16:25:44 PDT
Process: Safari [3993] Path: /Volumes/WebKit/WebKit.app/Contents/MacOS/WebKit Identifier: org.webkit.nightly.WebKit Version: r32828 (32828) Code Type: X86 (Native) Parent Process: launchd [101] Date/Time: 2008-05-03 19:23:02.640 -0400 OS Version: Mac OS X 10.5.2 (9C7010) Report Version: 6 Exception Type: EXC_BAD_ACCESS (SIGBUS) Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000000 Crashed Thread: 0 Thread 0 Crashed: 0 com.apple.JavaScriptCore 0x0033d240 KJS::DotAccessorNode::evaluate(KJS::ExecState*) + 128 1 com.apple.JavaScriptCore 0x00346729 KJS::AssignLocalVarNode::evaluate(KJS::ExecState*) + 25 2 com.apple.JavaScriptCore 0x0033c7f9 KJS::VarStatementNode::execute(KJS::ExecState*) + 25 3 com.apple.JavaScriptCore 0x0037d941 KJS::FunctionBodyNode::execute(KJS::ExecState*) + 465 4 com.apple.JavaScriptCore 0x0037a1d5 KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 405 5 com.apple.JavaScriptCore 0x0032f693 KJS::ArrayInstance::sort(KJS::ExecState*, KJS::JSObject*) + 323 6 com.apple.JavaScriptCore 0x003304ea KJS::arrayProtoFuncSort(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 2362 7 com.apple.JavaScriptCore 0x003555ce KJS::FunctionCallDotNode::evaluate(KJS::ExecState*) + 654 8 com.apple.JavaScriptCore 0x0034687f KJS::AssignDotNode::evaluate(KJS::ExecState*) + 63 9 com.apple.JavaScriptCore 0x0033c849 KJS::ExprStatementNode::execute(KJS::ExecState*) + 25 10 com.apple.JavaScriptCore 0x003037f0 KJS::BlockNode::execute(KJS::ExecState*) + 64 11 com.apple.JavaScriptCore 0x0033c79e KJS::IfNode::execute(KJS::ExecState*) + 46 12 com.apple.JavaScriptCore 0x0037d941 KJS::FunctionBodyNode::execute(KJS::ExecState*) + 465 13 com.apple.JavaScriptCore 0x0037a1d5 KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 405 14 com.apple.JavaScriptCore 0x003543bd KJS::LocalVarFunctionCallNode::evaluate(KJS::ExecState*) + 429 15 com.apple.JavaScriptCore 0x00341a5b KJS::ArgumentListNode::evaluateList(KJS::ExecState*, KJS::List&) + 43 16 com.apple.JavaScriptCore 0x003554bf KJS::FunctionCallDotNode::evaluate(KJS::ExecState*) + 383 17 com.apple.JavaScriptCore 0x0033c849 KJS::ExprStatementNode::execute(KJS::ExecState*) + 25 18 com.apple.JavaScriptCore 0x003037f0 KJS::BlockNode::execute(KJS::ExecState*) + 64 19 com.apple.JavaScriptCore 0x0033c79e KJS::IfNode::execute(KJS::ExecState*) + 46 20 com.apple.JavaScriptCore 0x003037f0 KJS::BlockNode::execute(KJS::ExecState*) + 64 21 com.apple.JavaScriptCore 0x0033c3aa KJS::ForNode::execute(KJS::ExecState*) + 90 22 com.apple.JavaScriptCore 0x003037f0 KJS::BlockNode::execute(KJS::ExecState*) + 64 23 com.apple.JavaScriptCore 0x0033c79e KJS::IfNode::execute(KJS::ExecState*) + 46 24 com.apple.JavaScriptCore 0x003037f0 KJS::BlockNode::execute(KJS::ExecState*) + 64 25 com.apple.JavaScriptCore 0x0033c79e KJS::IfNode::execute(KJS::ExecState*) + 46 26 com.apple.JavaScriptCore 0x0037d941 KJS::FunctionBodyNode::execute(KJS::ExecState*) + 465 27 com.apple.JavaScriptCore 0x0037a1d5 KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 405 28 com.apple.JavaScriptCore 0x003555ce KJS::FunctionCallDotNode::evaluate(KJS::ExecState*) + 654 29 com.apple.JavaScriptCore 0x0033c849 KJS::ExprStatementNode::execute(KJS::ExecState*) + 25 30 com.apple.JavaScriptCore 0x003037f0 KJS::BlockNode::execute(KJS::ExecState*) + 64 31 com.apple.JavaScriptCore 0x0033c79e KJS::IfNode::execute(KJS::ExecState*) + 46 32 com.apple.JavaScriptCore 0x003037f0 KJS::BlockNode::execute(KJS::ExecState*) + 64 33 com.apple.JavaScriptCore 0x0033c79e KJS::IfNode::execute(KJS::ExecState*) + 46 34 com.apple.JavaScriptCore 0x0033c746 KJS::IfElseNode::execute(KJS::ExecState*) + 38 35 com.apple.JavaScriptCore 0x0037d941 KJS::FunctionBodyNode::execute(KJS::ExecState*) + 465 36 com.apple.JavaScriptCore 0x0037a1d5 KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 405 37 com.apple.JavaScriptCore 0x003539e6 KJS::ScopedVarFunctionCallNode::evaluate(KJS::ExecState*) + 438 38 com.apple.JavaScriptCore 0x0033c849 KJS::ExprStatementNode::execute(KJS::ExecState*) + 25 39 com.apple.JavaScriptCore 0x0037d941 KJS::FunctionBodyNode::execute(KJS::ExecState*) + 465 40 com.apple.JavaScriptCore 0x0037a1d5 KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 405 41 com.apple.JavaScriptCore 0x0032e94d KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 109 42 com.apple.WebCore 0x010feb58 WebCore::JSAbstractEventListener::handleEvent(WebCore::Event*, bool) + 1512 43 com.apple.WebCore 0x00cac036 WebCore::Document::handleWindowEvent(WebCore::Event*, bool) + 166 44 com.apple.WebCore 0x00cf10c0 WebCore::EventTargetNode::dispatchWindowEvent(WebCore::AtomicString const&, bool, bool) + 192 45 com.apple.WebCore 0x00cb4058 WebCore::Document::implicitClose() + 296 46 com.apple.WebCore 0x00d2826a WebCore::FrameLoader::checkCompleted() + 170 47 com.apple.WebCore 0x011027d7 WebCore::Loader::Host::didFinishLoading(WebCore::SubresourceLoader*) + 183 48 com.apple.WebCore 0x010a8a21 WebCore::SubresourceLoader::didFinishLoading() + 49 49 com.apple.Foundation 0x933778b7 -[NSURLConnection(NSURLConnectionReallyInternal) sendDidFinishLoading] + 87 50 com.apple.Foundation 0x93377844 _NSURLConnectionDidFinishLoading + 68 51 com.apple.CFNetwork 0x93dc07f3 sendDidFinishLoadingCallback + 148 52 com.apple.CFNetwork 0x93ddc93d handleCacheResponseIsValid + 157 53 com.apple.CFNetwork 0x93dbd6da _CFURLConnectionSendCallbacks + 1412 54 com.apple.CFNetwork 0x93dbd0d9 muxerSourcePerform + 283 55 com.apple.CoreFoundation 0x93c0862e CFRunLoopRunSpecific + 3166 56 com.apple.CoreFoundation 0x93c08d18 CFRunLoopRunInMode + 88 57 com.apple.HIToolbox 0x901f66a0 RunCurrentEventLoopInMode + 283 58 com.apple.HIToolbox 0x901f64b9 ReceiveNextEventCommon + 374 59 com.apple.HIToolbox 0x901f632d BlockUntilNextEventMatchingListInMode + 106 60 com.apple.AppKit 0x91e327d9 _DPSNextEvent + 657 61 com.apple.AppKit 0x91e3208e -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 128 62 com.apple.Safari 0x00007f2e 0x1000 + 28462 63 com.apple.AppKit 0x91e2b0c5 -[NSApplication run] + 795 64 com.apple.AppKit 0x91df830a NSApplicationMain + 574 65 com.apple.Safari 0x000b9906 0x1000 + 755974
Attachments
Add attachment proposed patch, testcase, etc.
Matt Lilek
Comment 1 2008-05-03 22:47:56 PDT
I can't reproduce this. Is there anything special we need to know to cause this crash?
John Moe
Comment 2 2008-05-04 06:37:34 PDT
Me neither. It crashed 5 consecutive times for me yesterday (I just kept trying it), but today it works.
Note You need to log in before you can comment on or make changes to this bug.