Bug 20285

Summary: ASSERT(r35289-35359) in JSDOMWindowBase::globalExec() leaving page containing java applet with inspector open
Product: WebKit Reporter: Peter Enevoldsen <pen>
Component: WebCore JavaScriptAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: dev+webkit
Priority: P1 Keywords: HasReduction, InRadar, Regression
Version: 528+ (Nightly build)   
Hardware: Mac   
OS: OS X 10.5   
Attachments:
Description Flags
Stacktrace
none
Test none

Peter Enevoldsen
Reported 2008-08-05 01:59:46 PDT
When you open a page containing an applet WebKit will crash if you opened the WebInspector before navigating away from the applet page
Attachments
Stacktrace (53.35 KB, text/plain)
2008-08-05 02:01 PDT, Peter Enevoldsen 		no flags
Details
Test (7.49 KB, application/octet-stream)
2008-08-05 02:03 PDT, Peter Enevoldsen 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Peter Enevoldsen
Comment 1 2008-08-05 02:01:24 PDT
Created attachment 22647 [details] Stacktrace
Peter Enevoldsen
Comment 2 2008-08-05 02:03:57 PDT
Created attachment 22648 [details] Test
Peter Enevoldsen
Comment 3 2008-08-05 02:05:10 PDT
Step to reproduce: 1. Open the start.html. 2. Open the inspector. 3. Navigate to another page. http://webkit.org
Peter Enevoldsen
Comment 4 2008-08-05 02:52:02 PDT
Did a bisect search and found Works: r35289 Fails: r35359
Matt Lilek
Comment 5 2008-08-05 07:16:48 PDT
This doesn't crash for me - try removing PithHelmet: 25 net.culater.PithHelmet 0x06434d6f -[PHWebDataSource _receivedData:] + 136
Peter Enevoldsen
Comment 6 2008-08-05 07:27:59 PDT
I tried this on 3 machines. MBP, MB and MacMini. They all had the problem. Some did not have PithHelmet installed.
Matt Lilek
Comment 7 2008-08-05 07:41:52 PDT
Still doesn't crash for me, even on another machine using the steps in comment #3. Is there something else I need to be doing? Download and unzip the test.zip file; open "start.html"; wait for everything to finish loading; open the Inspector; in the same tab/window, go to http://webkit.org/?
Matt Lilek
Comment 8 2008-08-05 07:59:10 PDT
You need to open the inspector by right clicking within one of the frames (I had been using the keyboard shortcut), so the real steps to reproduce are: 1. Download and unzip testcase 2. Load "start.html" 3. Right click below white applet area and choose "Inspect Element" 4. Navigate to <http://webkit.org/> ASSERTION FAILED: impl()->frame() (/Users/mlilek/Documents/WebKit/WebCore/bindings/js/JSDOMWindowBase.cpp:774 virtual KJS::ExecState* WebCore::JSDOMWindowBase::globalExec()) Invalid memory access of location bbadbeef eip=03820bd0
Mark Rowe (bdash)
Comment 9 2008-08-05 13:40:04 PDT
<rdar://problem/6126888>
Peter Enevoldsen
Comment 10 2008-10-16 04:23:10 PDT
This work for me now in WebKit r37605 which was built on 15 October 2008. Could somebody please verify this and close the bug if it works.
Matt Lilek
Comment 11 2008-10-20 07:26:00 PDT
(In reply to comment #10) > This work for me now in WebKit r37605 which was built on 15 October 2008. Could > somebody please verify this and close the bug if it works. > Yep, seems fine with r37716.
Note You need to log in before you can comment on or make changes to this bug.