Bug 20703

Summary: Crash on leaving dromaeo.com
Product: WebKit Reporter: Robert Xiao <spam_hole>
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Major CC: mrowe
Priority: P1 Keywords: NeedsReduction
Version: 528+ (Nightly build)   
Hardware: PC   
OS: Windows XP   
URL: http://dromaeo.com
Attachments:
Description Flags
Call stack as traced by Visual Studio 2005
none
Reduced testcase
none
Crash log for r36309
none
user.dmp file for Dr. Watson (WebKit r36309) none

Robert Xiao
Reported 2008-09-07 15:18:14 PDT
WebKit nightly r36254 consistently crashes when trying to leave this page or execute the test. Steps to reproduce: 1) Open WebKit nightly 2) Navigate to http://dromaeo.com 3) Hit refresh, visit another site, or close the browser Result: Crashes Attached: call stack
Attachments
Call stack as traced by Visual Studio 2005 (976 bytes, text/plain)
2008-09-07 15:19 PDT, Robert Xiao 		no flags
Details
Reduced testcase (3.15 KB, text/html)
2008-09-07 21:16 PDT, Robert Xiao 		no flags
Details
Crash log for r36309 (115.95 KB, text/plain)
2008-09-13 20:57 PDT, Robert Xiao 		no flags
Details
user.dmp file for Dr. Watson (WebKit r36309) (45.20 KB, application/octet-stream)
2008-09-13 20:58 PDT, Robert Xiao 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Robert Xiao
Comment 1 2008-09-07 15:19:36 PDT
Created attachment 23230 [details] Call stack as traced by Visual Studio 2005
Robert Xiao
Comment 2 2008-09-07 21:16:42 PDT
Created attachment 23237 [details] Reduced testcase Reduced testcase; consists of a highly stripped jQuery with an HTML document containing 249 <br>.
Robert Xiao
Comment 3 2008-09-07 21:19:56 PDT
(In reply to comment #2) > Created an attachment (id=23237) [edit] > Reduced testcase > > Reduced testcase; consists of a highly stripped jQuery with an HTML document > containing 249 <br>. > On leaving the document, you should receive the alerts "1.1", "1.2", then a crash (normal operation: "1.1", "1.2", "1.3", "5")
Robert Xiao
Comment 4 2008-09-07 21:22:31 PDT
Another note: a similar crash occurs when actually running the test. It occurs right before the "jQuery" test is launched for the first time, so I suspect that the two crashes are caused by the same bug, but you might want to check candidate patches to see if they allow the entire test to execute.
Gavin Sherlock
Comment 5 2008-09-07 21:56:00 PDT
FYI - doesn't crash with r36247 on OSX
Robert Xiao
Comment 6 2008-09-13 20:57:23 PDT
Created attachment 23400 [details] Crash log for r36309 Dr. Watson crash log for r36309 (latest nightly as of today)
Robert Xiao
Comment 7 2008-09-13 20:58:36 PDT
Created attachment 23401 [details] user.dmp file for Dr. Watson (WebKit r36309) user.dmp file generated with above crash log
Mark Rowe (bdash)
Comment 8 2008-09-16 10:08:01 PDT
Please try with the r36446 nightly build.
Robert Xiao
Comment 9 2008-09-16 15:23:49 PDT
r36446 appears to have fixed it. It no longer crashes on leaving Dromaeo or doing any of the tests, and also passes the testcase.
Robert Xiao
Comment 10 2008-09-16 15:24:35 PDT
*** Bug 20834 has been marked as a duplicate of this bug. ***
Note You need to log in before you can comment on or make changes to this bug.