Bug 26515 – WebCore::RenderLayer::updateHoverActiveState crashes in Safari 4

• Component: WebCore Misc.
• Status: RESOLVED FIXED

[Rob Raguet-Schofield]

* launch Safari 4 on Mac OS X 10.5.7
* navigate to http://www.cyclingnews.com/races/73rd-tour-de-suisse-2009-upt/stages/stage-6/report
* hover the mouse over the "Stages +" link to get the menu to popup
* move the mouse over the new popup content
* crash

Here's a screencast:

http://www.screencast.com/users/ragfield/folders/Jing/media/35c77597-6581-4a53-b8c7-cb8fb4ab6310

Here's the crash report:

Process:         Safari [12434]
Path:            /Applications/Safari.app/Contents/MacOS/Safari
Identifier:      com.apple.Safari
Version:         4.0 (5530.17)
Build Info:      WebBrowser-55301700~2
Code Type:       X86 (Native)
Parent Process:  launchd [266]

Date/Time:       2009-06-18 13:22:38.686 -0500
OS Version:      Mac OS X 10.5.7 (9J61)
Report Version:  6
Anonymous UUID:  A4264409-B6B9-4C93-9BDA-4ACA6B19D437

Exception Type:  EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x00000000000000fc
Crashed Thread:  0

Thread 0 Crashed:
0   com.apple.WebCore             	0x96a05f95 WebCore::RenderLayer::updateHoverActiveState(WebCore::HitTestRequest const&, WebCore::HitTestResult&) + 581
1   com.apple.WebCore             	0x96a04c05 WebCore::RenderLayer::hitTest(WebCore::HitTestRequest const&, WebCore::HitTestResult&) + 245
2   com.apple.WebCore             	0x96a04a82 WebCore::Document::prepareMouseEvent(WebCore::HitTestRequest const&, WebCore::IntPoint const&, WebCore::PlatformMouseEvent const&) + 66
3   com.apple.WebCore             	0x96a046e8 WebCore::EventHandler::prepareMouseEvent(WebCore::HitTestRequest const&, WebCore::PlatformMouseEvent const&) + 72
4   com.apple.WebCore             	0x96a0421c WebCore::EventHandler::handleMouseMoveEvent(WebCore::PlatformMouseEvent const&, WebCore::HitTestResult*) + 396
5   com.apple.WebCore             	0x96a03fce WebCore::EventHandler::mouseMoved(WebCore::PlatformMouseEvent const&) + 62
6   com.apple.WebCore             	0x96a03a36 WebCore::EventHandler::mouseMoved(NSEvent*) + 246
7   com.apple.WebKit              	0x94a8fb98 -[WebHTMLView(WebPrivate) _updateMouseoverWithEvent:] + 872
8   com.apple.Foundation          	0x9099743a _nsnote_callback + 106
9   com.apple.CoreFoundation      	0x9135664a __CFXNotificationPost + 362
10  com.apple.CoreFoundation      	0x91356923 _CFXNotificationPostNotification + 179
11  com.apple.Foundation          	0x90994690 -[NSNotificationCenter postNotificationName:object:userInfo:] + 128
12  com.apple.AppKit              	0x92418c4c -[NSResponder _postEventNotification:] + 299
13  com.apple.AppKit              	0x924188ea forwardMethod + 208
14  com.apple.AppKit              	0x9241888b forwardMethod + 113
15  com.apple.AppKit              	0x9241888b forwardMethod + 113
16  com.apple.AppKit              	0x9241888b forwardMethod + 113
17  com.apple.AppKit              	0x9241888b forwardMethod + 113
18  com.apple.AppKit              	0x9241888b forwardMethod + 113
19  com.apple.AppKit              	0x9241888b forwardMethod + 113
20  com.apple.AppKit              	0x9241888b forwardMethod + 113
21  com.apple.AppKit              	0x9241888b forwardMethod + 113
22  com.apple.AppKit              	0x9238cd6d -[NSWindow sendEvent:] + 8511
23  com.apple.Safari              	0x00046f6c 0x1000 + 286572
24  com.apple.AppKit              	0x923593c5 -[NSApplication sendEvent:] + 4713
25  com.apple.Safari              	0x00031b15 0x1000 + 199445
26  com.apple.AppKit              	0x922b662f -[NSApplication run] + 847
27  com.apple.AppKit              	0x92283834 NSApplicationMain + 574
28  com.apple.Safari              	0x000032a2 0x1000 + 8866

Thread 1:
0   libSystem.B.dylib             	0x910d946e __semwait_signal + 10
1   libSystem.B.dylib             	0x91103dcd pthread_cond_wait$UNIX2003 + 73
2   com.apple.WebCore             	0x96885584 WebCore::IconDatabase::syncThreadMainLoop() + 260
3   com.apple.WebCore             	0x96881409 WebCore::IconDatabase::iconDatabaseSyncThread() + 185
4   libSystem.B.dylib             	0x91103155 _pthread_start + 321
5   libSystem.B.dylib             	0x91103012 thread_start + 34

Thread 2:
0   libSystem.B.dylib             	0x910d2286 mach_msg_trap + 10
1   libSystem.B.dylib             	0x910d9a7c mach_msg + 72
2   com.apple.CoreFoundation      	0x9137504e CFRunLoopRunSpecific + 1790
3   com.apple.CoreFoundation      	0x91375c78 CFRunLoopRunInMode + 88
4   com.apple.CFNetwork           	0x90d21298 CFURLCacheWorkerThread(void*) + 388
5   libSystem.B.dylib             	0x91103155 _pthread_start + 321
6   libSystem.B.dylib             	0x91103012 thread_start + 34

Thread 3:
0   libSystem.B.dylib             	0x911216fa select$DARWIN_EXTSN + 10
1   libSystem.B.dylib             	0x91103155 _pthread_start + 321
2   libSystem.B.dylib             	0x91103012 thread_start + 34

Thread 4:
0   libSystem.B.dylib             	0x910d946e __semwait_signal + 10
1   libSystem.B.dylib             	0x91103dcd pthread_cond_wait$UNIX2003 + 73
2   com.apple.JavaScriptCore      	0x93b35741 WTF::ThreadCondition::timedWait(WTF::Mutex&, double) + 81
3   com.apple.WebCore             	0x968edbd5 WebCore::LocalStorageThread::localStorageThread() + 325
4   libSystem.B.dylib             	0x91103155 _pthread_start + 321
5   libSystem.B.dylib             	0x91103012 thread_start + 34

Thread 5:
0   libSystem.B.dylib             	0x910d2286 mach_msg_trap + 10
1   libSystem.B.dylib             	0x910d9a7c mach_msg + 72
2   com.apple.CoreFoundation      	0x9137504e CFRunLoopRunSpecific + 1790
3   com.apple.CoreFoundation      	0x91375c78 CFRunLoopRunInMode + 88
4   com.apple.Safari              	0x00026b55 0x1000 + 154453
5   com.apple.Safari              	0x00026870 0x1000 + 153712
6   com.apple.Safari              	0x000267fb 0x1000 + 153595
7   libSystem.B.dylib             	0x91103155 _pthread_start + 321
8   libSystem.B.dylib             	0x91103012 thread_start + 34

Thread 6:
0   libSystem.B.dylib             	0x910d946e __semwait_signal + 10
1   libSystem.B.dylib             	0x91103dcd pthread_cond_wait$UNIX2003 + 73
2   com.apple.JavaScriptCore      	0x93b35741 WTF::ThreadCondition::timedWait(WTF::Mutex&, double) + 81
3   com.apple.Safari              	0x0011de33 0x1000 + 1166899
4   com.apple.Safari              	0x0011df21 0x1000 + 1167137
5   com.apple.Safari              	0x00042753 0x1000 + 268115
6   com.apple.Safari              	0x000426cb 0x1000 + 267979
7   libSystem.B.dylib             	0x91103155 _pthread_start + 321
8   libSystem.B.dylib             	0x91103012 thread_start + 34

Thread 7:
0   libSystem.B.dylib             	0x910d946e __semwait_signal + 10
1   libSystem.B.dylib             	0x91103dcd pthread_cond_wait$UNIX2003 + 73
2   com.apple.ColorSync           	0x9102a45c pthreadSemaphoreWait(t_pthreadSemaphore*) + 42
3   com.apple.ColorSync           	0x9103cd8e CMMConvTask(void*) + 54
4   libSystem.B.dylib             	0x91103155 _pthread_start + 321
5   libSystem.B.dylib             	0x91103012 thread_start + 34

Thread 8:
0   libSystem.B.dylib             	0x910d946e __semwait_signal + 10
1   libSystem.B.dylib             	0x91103dcd pthread_cond_wait$UNIX2003 + 73
2   libGLProgrammability.dylib    	0x9593ab32 glvmDoWork + 162
3   libSystem.B.dylib             	0x91103155 _pthread_start + 321
4   libSystem.B.dylib             	0x91103012 thread_start + 34

Thread 9:
0   libSystem.B.dylib             	0x910d2286 mach_msg_trap + 10
1   libSystem.B.dylib             	0x910d9a7c mach_msg + 72
2   com.apple.CoreFoundation      	0x9137504e CFRunLoopRunSpecific + 1790
3   com.apple.CoreFoundation      	0x91375c78 CFRunLoopRunInMode + 88
4   com.apple.Foundation          	0x909fb530 +[NSURLConnection(NSURLConnectionReallyInternal) _resourceLoadLoop:] + 320
5   com.apple.Foundation          	0x90997e0d -[NSThread main] + 45
6   com.apple.Foundation          	0x909979b4 __NSThread__main__ + 308
7   libSystem.B.dylib             	0x91103155 _pthread_start + 321
8   libSystem.B.dylib             	0x91103012 thread_start + 34

Thread 10:
0   libSystem.B.dylib             	0x910d22e6 semaphore_timedwait_signal_trap + 10
1   libSystem.B.dylib             	0x911042af _pthread_cond_wait + 1244
2   libSystem.B.dylib             	0x91105b33 pthread_cond_timedwait_relative_np + 47
3   com.apple.Foundation          	0x909dddcc -[NSCondition waitUntilDate:] + 236
4   com.apple.Foundation          	0x909ddbe0 -[NSConditionLock lockWhenCondition:beforeDate:] + 144
5   com.apple.Foundation          	0x909ddb45 -[NSConditionLock lockWhenCondition:] + 69
6   com.apple.AppKit              	0x92323d20 -[NSUIHeartBeat _heartBeatThread:] + 753
7   com.apple.Foundation          	0x90997e0d -[NSThread main] + 45
8   com.apple.Foundation          	0x909979b4 __NSThread__main__ + 308
9   libSystem.B.dylib             	0x91103155 _pthread_start + 321
10  libSystem.B.dylib             	0x91103012 thread_start + 34

Thread 0 crashed with X86 Thread State (32-bit):
  eax: 0x00000000  ebx: 0x96a04b21  ecx: 0x00000001  edx: 0x004ec2d0
  edi: 0xbfffeffc  esi: 0x13b069bc  ebp: 0xbfffed98  esp: 0xbfffed60
   ss: 0x0000001f  efl: 0x00010282  eip: 0x96a05f95   cs: 0x00000017
   ds: 0x0000001f   es: 0x0000001f   fs: 0x00000000   gs: 0x00000037
  cr2: 0x000000fc

Binary Images:
    0x1000 -   0x271ff2  com.apple.Safari 4.0 (5530.17) <f2a6090eab89fe9620270fc7f32156b9> /Applications/Safari.app/Contents/MacOS/Safari
  0x2d0000 -   0x2dfffc  SyndicationUI ??? (???) <4bfd6fbc102be03e5fb08374be0ca362> /System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI
  0x2ef000 -   0x3f5ff7  com.apple.PubSub 1.0.4 (65.11) <296d6ac9aec1acb5386e761bcd8e4d47> /System/Library/Frameworks/PubSub.framework/Versions/A/PubSub
  0x700000 -   0x70afff +com.unsanity.smartcrashreports Smart Crash Reports version 1.5b3 (1.5b3) <7e3e7d42bb626d09e2620140ba963851> /Library/InputManagers/Smart Crash Reports/Smart Crash Reports.bundle/Contents/MacOS/Smart Crash Reports
  0x78c000 -   0x790ffc +com.github.rentzsch.clicktoflash 1.3 (700) <627e55610d003f2f12a46fb339f47cdc> /Users/schofield/Library/Internet Plug-Ins/ClickToFlash.plugin/Contents/MacOS/ClickToFlash
  0x7ef000 -   0x7efffe  com.apple.JavaPluginCocoa 12.3.0 (12.3.0) <ab888344b5c6d9f3fcf53dbd59276b06> /System/Library/Frameworks/JavaVM.framework/Versions/A/Resources/JavaPluginCocoa.bundle/Contents/MacOS/JavaPluginCocoa
 0x19c5000 -  0x1bccfef  com.apple.RawCamera.bundle 2.0.15 (471) <557c94fbd7c15219746393464a79cf87> /System/Library/CoreServices/RawCamera.bundle/Contents/MacOS/RawCamera
 0x1f45000 -  0x1f45ffd  liblangid.dylib ??? (???) <4310e568d617f1ce7178266630e1b71a> /usr/lib/liblangid.dylib
 0xd8a8000 -  0xd8a9ff3  ATSHI.dylib ??? (???) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/ATSHI.dylib
 0xe3e7000 -  0xe3edffc  com.apple.JavaVM 12.3.0 (12.3.0) <ee9b9f648e9b98b1c7644b6a7c630a91> /System/Library/Frameworks/JavaVM.framework/Versions/A/JavaVM
 0xebb1000 -  0xebb6ff3  libCGXCoreImage.A.dylib ??? (???) <3a78abc535c80f9819931b670da804a2> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGXCoreImage.A.dylib
 0xeeb4000 -  0xf039fe3  GLEngine ??? (???) <3bd4729832411ff31de5bb9d97e3718d> /System/Library/Frameworks/OpenGL.framework/Resources/GLEngine.bundle/GLEngine
 0xf067000 -  0xf3d0fe8  com.apple.GeForce8xxxGLDriver 1.5.44 (5.4.4) <59268db992cb4c6d08ca7b5bba366863> /System/Library/Extensions/GeForce8xxxGLDriver.bundle/Contents/MacOS/GeForce8xxxGLDriver
 0xf716000 -  0xf732ff7  GLRendererFloat ??? (???) <927b7d5ce6a7c21fdc761f6f29cdf4ee> /System/Library/Frameworks/OpenGL.framework/Versions/A/Resources/GLRendererFloat.bundle/GLRendererFloat
0x10e00000 - 0x10e0efeb  libSimplifiedChineseConverter.dylib ??? (???) <548d5a699dbe2bb8fcc8275321fdc0d4> /System/Library/CoreServices/Encodings/libSimplifiedChineseConverter.dylib
0x12fd8000 - 0x12fddfff  com.apple.DictionaryServiceComponent 1.1 (1.1) <8edc1180f52db18e9ddfb4e95debe61b> /System/Library/Components/DictionaryService.component/Contents/MacOS/DictionaryService
0x13063000 - 0x13255fea +com.elgato.mpegsupport EyeTV MPEG Support 1.0.7 (build 43) (1.0.7) /Library/QuickTime/EyeTV MPEG Support.component/Contents/MacOS/EyeTV MPEG Support
0x13b8b000 - 0x13d57fff +com.elgato.Turbo.component 1.3 (294)  (1.3) <6ee3c05d1689b11393d2dbefeb37a179> /Library/QuickTime/Elgato Turbo.component/Contents/MacOS/Elgato Turbo
0x13fdd000 - 0x141e0fc3 +com.elgato.mpegsupport EyeTV MPEG Support 1.0.8 (build 45) (1.0.8) <a68abe078aec491e8b27cfc729e99602> /Library/QuickTime/Elgato Turbo.component/Contents/Resources/EyeTV MPEG Support.component/Contents/MacOS/EyeTV MPEG Support
0x1592c000 - 0x15962fff  com.apple.MediaKit 9.1 (401) <36149a69962ed3101199093a6220ef74> /System/Library/PrivateFrameworks/MediaKit.framework/Versions/A/MediaKit
0x16bd7000 - 0x16d02ff7  libmecab.1.0.0.dylib ??? (???) <bef4c5c9918bc623b9137e9bf59b1e5e> /usr/lib/libmecab.1.0.0.dylib
0x1da6d000 - 0x1da98ffb  libcurl.4.dylib ??? (???) <54ada27deb3b4ff7043d8836264eca0d> /usr/lib/libcurl.4.dylib
0x1dae8000 - 0x1dbe1fe0  com.apple.DiskImagesFramework 10.5.5 (199) <221119fb6b335af96fb0e85a9403cbc5> /System/Library/PrivateFrameworks/DiskImages.framework/DiskImages
0x1dc47000 - 0x1dd10fe5  com.apple.DiscRecording 4.0.5 (4050.4.1) <503c77a4da92eb3262d3fbfe46e74f20> /System/Library/Frameworks/DiscRecording.framework/Versions/A/DiscRecording
0x8fe00000 - 0x8fe2db43  dyld 97.1 (???) <100d362e03410f181a34e04e94189ae5> /usr/lib/dyld
0x90003000 - 0x90004ffc  libffi.dylib ??? (???) <a3b573eb950ca583290f7b2b4c486d09> /usr/lib/libffi.dylib
0x90005000 - 0x90011ff9  com.apple.helpdata 1.0.1 (14.2) /System/Library/PrivateFrameworks/HelpData.framework/Versions/A/HelpData
0x90012000 - 0x90022fff  com.apple.speech.synthesis.framework 3.7.1 (3.7.1) <06d8fc0307314f8ffc16f206ad3dbf44> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x90023000 - 0x9009dff8  com.apple.print.framework.PrintCore 5.5.4 (245.6) <03d0585059c20cb0bde5e000438c49e1> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x9009e000 - 0x900c9fe7  libauto.dylib ??? (???) <42d8422dc23a18071869fdf7b5d8fab5> /usr/lib/libauto.dylib
0x90107000 - 0x90107ffd  com.apple.Accelerate 1.4.2 (Accelerate 1.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x90108000 - 0x9010dfff  com.apple.CommonPanels 1.2.4 (85) <ea0665f57cd267609466ed8b2b20e893> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x9010e000 - 0x90247ff7  libicucore.A.dylib ??? (???) <cac059ebdac7d9a63ee0f7a648c9f6cf> /usr/lib/libicucore.A.dylib
0x90248000 - 0x90265ff7  com.apple.QuickLookFramework 1.3.1 (170.9) /System/Library/Frameworks/QuickLook.framework/Versions/A/QuickLook
0x90266000 - 0x903f5fe7  com.apple.CoreAUC 3.07.3 (3.07.3) <f98585dd6479989bf85beae472aa3656> /System/Library/PrivateFrameworks/CoreAUC.framework/Versions/A/CoreAUC
0x903f6000 - 0x903fffff  com.apple.speech.recognition.framework 3.7.24 (3.7.24) <d3180f9edbd9a5e6f283d6156aa3c602> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x90400000 - 0x9047fff5  com.apple.SearchKit 1.2.1 (1.2.1) <3140a605db2abf56b237fa156a08b28b> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x90480000 - 0x90788fff  com.apple.HIToolbox 1.5.5 (???) <b17766e3d8800a73f534c41f624f5ac4> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x90789000 - 0x90789ff8  com.apple.Cocoa 6.5 (???) <e064f94d969ce25cb7de3cfb980c3249> /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x9078a000 - 0x907b3fff  libcups.2.dylib ??? (???) <1b0435164b9dc6c773d0b1f24701e554> /usr/lib/libcups.2.dylib
0x907b4000 - 0x9087bff2  com.apple.vImage 3.0 (3.0) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x9087c000 - 0x90894fff  com.apple.openscripting 1.2.8 (???) <572c7452d7e740e8948a5ad07a99602b> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x908a9000 - 0x90905ff7  com.apple.htmlrendering 68 (1.1.3) <fe87a9dede38db00e6c8949942c6bd4f> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x90906000 - 0x90908ff5  libRadiance.dylib ??? (???) <8a844202fcd65662bb9ab25f08c45a62> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x90909000 - 0x9093affb  com.apple.quartzfilters 1.5.0 (1.5.0) <22581f8fe9dd2cb261f97a897407ec3e> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuartzFilters.framework/Versions/A/QuartzFilters
0x9093b000 - 0x90942fe9  libgcc_s.1.dylib ??? (???) <f53c808e87d1184c0f9df63aef53ce0b> /usr/lib/libgcc_s.1.dylib
0x90943000 - 0x9098cfef  com.apple.Metadata 10.5.2 (398.25) <e0572f20350523116f23000676122a8d> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x9098d000 - 0x90c09fe7  com.apple.Foundation 6.5.8 (677.24) <aa84b0383891378c348ffa4a94853082> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x90c0a000 - 0x90c3cfff  com.apple.LDAPFramework 1.4.5 (110) <cc04500cf7b6edccc75bb3fe2973f72c> /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x90c3d000 - 0x90d1dfff  libobjc.A.dylib ??? (???) <7b92613fdf804fd9a0a3733a0674c30b> /usr/lib/libobjc.A.dylib
0x90d1e000 - 0x90dc2fec  com.apple.CFNetwork 438.10 (438.12) <fde64bbb20532794396fb21911ccaa98> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x90dc3000 - 0x90dc3ff8  com.apple.ApplicationServices 34 (34) <8f910fa65f01d401ad8d04cc933cf887> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x90dc4000 - 0x90dcbffe  libbsm.dylib ??? (???) <d25c63378a5029648ffd4b4669be31bf> /usr/lib/libbsm.dylib
0x90dcc000 - 0x90f4bfff  com.apple.AddressBook.framework 4.1.2 (700) <41a71b250286dc8d8bcee30784b894c8> /System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x90f4c000 - 0x90fdffff  com.apple.ink.framework 101.3 (86) <bf3fa8927b4b8baae92381a976fd2079> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x90fe0000 - 0x90fe0ffd  com.apple.Accelerate.vecLib 3.4.2 (vecLib 3.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x90fe1000 - 0x90ff6ffb  com.apple.ImageCapture 5.0.2 (5.0.2) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x90ff7000 - 0x910c2fff  com.apple.ColorSync 4.5.1 (4.5.1) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x910c3000 - 0x910d0fe7  com.apple.opengl 1.5.10 (1.5.10) <5a2813f80c9441170cc1ab8a3dac5038> /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x910d1000 - 0x91238ff3  libSystem.B.dylib ??? (???) <b47c8e6e45aef620730710a732bf1930> /usr/lib/libSystem.B.dylib
0x9123f000 - 0x9128efff  com.apple.QuickLookUIFramework 1.3.1 (170.9) /System/Library/PrivateFrameworks/QuickLookUI.framework/Versions/A/QuickLookUI
0x9128f000 - 0x912f5ffb  com.apple.ISSupport 1.8 (38.3) /System/Library/PrivateFrameworks/ISSupport.framework/Versions/A/ISSupport
0x912f6000 - 0x91301fe7  libCSync.A.dylib ??? (???) <9e3544fe087bb4dc760b7afe0850dd6c> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x91302000 - 0x91435fef  com.apple.CoreFoundation 6.5.6 (476.18) <2d52bab73660117571bd6486dc318f8e> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x91436000 - 0x91493ffb  libstdc++.6.dylib ??? (???) <04b812dcec670daa8b7d2852ab14be60> /usr/lib/libstdc++.6.dylib
0x91494000 - 0x91496ffd  com.apple.CrashReporterSupport 10.5.7 (161) <dc6dfd99e332f53791f5c0a4e6889cb3> /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/CrashReporterSupport
0x914a9000 - 0x91530ff7  libsqlite3.0.dylib ??? (???) <3334ea5af7a911637413334154bb4100> /usr/lib/libsqlite3.0.dylib
0x91531000 - 0x91941fef  libBLAS.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x91942000 - 0x91b13ffb  com.apple.security 5.0.5 (36371) <c13e0bb1acfdcf94be4d3ee118ef190e> /System/Library/Frameworks/Security.framework/Versions/A/Security
0x91b14000 - 0x91b1afff  com.apple.print.framework.Print 218.0.3 (220.2) <5b7f4ef7c2df36aff9605377775781e4> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x91b1b000 - 0x91b1bffe  com.apple.MonitorPanelFramework 1.2.0 (1.2.0) <a2b462be6c51187eddf7d097ef0e0a04> /System/Library/PrivateFrameworks/MonitorPanel.framework/Versions/A/MonitorPanel
0x91b8f000 - 0x91ba7ff7  com.apple.CoreVideo 1.6.0 (20.0) <dd60118bac9aefaf88d9ab44558f05c4> /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo
0x91e1d000 - 0x91e2cffe  com.apple.DSObjCWrappers.Framework 1.3 (1.3) <09deb9e32d0d09dfb95ae569bdd2b7a4> /System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
0x91e4f000 - 0x91e86fff  com.apple.SystemConfiguration 1.9.2 (1.9.2) <8b26ebf26a009a098484f1ed01ec499c> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x91e87000 - 0x91ea5ff3  com.apple.DirectoryService.Framework 3.5.6 (3.5.6) <daa1307737197c7757f44f16370249dc> /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x91ea6000 - 0x91ee7fe7  libRIP.A.dylib ??? (???) <69bd09fcd8d8b235cee7a405290d6818> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x91ee8000 - 0x9202eff7  com.apple.ImageIO.framework 2.0.4 (2.0.4) <6a6623d3d1a7292b5c3763dcd108b55f> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x9202f000 - 0x92045fff  com.apple.DictionaryServices 1.0.0 (1.0.0) <ad0aa0252e3323d182e17f50defe56fc> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices
0x92046000 - 0x9217efe7  com.apple.imageKit 1.0.2 (1.0) <2e354566521df8b1e3a78e9aeab5e6b4> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/ImageKit.framework/Versions/A/ImageKit
0x92261000 - 0x9227cffb  libPng.dylib ??? (???) <4780e979d35aa5ec2cea22678836cea5> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x9227d000 - 0x92a7bfef  com.apple.AppKit 6.5.7 (949.46) <a80f8cb62f6bdcb3bed3c8675d55881d> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x92a7c000 - 0x92a8bfff  libsasl2.2.dylib ??? (???) <bb7971ca2f609c070f87786a93d1041e> /usr/lib/libsasl2.2.dylib
0x92a8f000 - 0x92b0cfef  libvMisc.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x92b3d000 - 0x93b18ff6  com.apple.QuickTimeComponents.component 7.6.2 (1327) /System/Library/QuickTime/QuickTimeComponents.component/Contents/MacOS/QuickTimeComponents
0x93b19000 - 0x93b29ffc  com.apple.LangAnalysis 1.6.4 (1.6.4) <8b7831b5f74a950a56cf2d22a2d436f6> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x93b2a000 - 0x93b2cfff  com.apple.securityhi 3.0 (30817) <2b2854123fed609d1820d2779e2e0963> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x93b2d000 - 0x93cb4feb  com.apple.JavaScriptCore 5530 (5530.17) <687d2f3063f4d922f233623d8f219822> /System/Library/Frameworks/JavaScriptCore.framework/Versions/A/JavaScriptCore
0x93d37000 - 0x93dc3ff7  com.apple.LaunchServices 290.3 (290.6) <bdba267184df88bd5b8e2116ea903872> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x93dc4000 - 0x93dd2ffd  libz.1.dylib ??? (???) <5ddd8539ae2ebfd8e7cc1c57525385c7> /usr/lib/libz.1.dylib
0x93dd3000 - 0x93ddffff  libbz2.1.0.dylib ??? (???) <9ea4fe135c9e52bd0590eec12c738e82> /usr/lib/libbz2.1.0.dylib
0x93de0000 - 0x93dffffa  libJPEG.dylib ??? (???) <e7eb56555109e23144924cd64aa8daec> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x93e00000 - 0x944a0fe3  com.apple.CoreGraphics 1.409.3 (???) <25dceb14af3455b768f56e8765ecf3ca> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x944a1000 - 0x944cafff  com.apple.CoreMediaPrivate 15.0 (15.0) /System/Library/PrivateFrameworks/CoreMediaPrivate.framework/Versions/A/CoreMediaPrivate
0x944cb000 - 0x94525ff7  com.apple.CoreText 2.0.4 (???) <f0b6c1d4f40bd21505097f0255abfead> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x94526000 - 0x94529fff  com.apple.help 1.1 (36) <b507b08e484cb89033e9cf23062d77de> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x9452a000 - 0x94564ffe  com.apple.securityfoundation 3.0.2 (36131) <39663c9b6f1a09d0566305d9f87cfc91> /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x94565000 - 0x94565ffe  com.apple.quartzframework 1.5 (1.5) <4b8f505e32e4f2d67967a276401f9aaf> /System/Library/Frameworks/Quartz.framework/Versions/A/Quartz
0x94566000 - 0x94570feb  com.apple.audio.SoundManager 3.9.2 (3.9.2) <0f2ba6e891d3761212cf5a5e6134d683> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x94571000 - 0x94576fff  com.apple.backup.framework 1.0 (1.0) /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup
0x94577000 - 0x94577ffc  com.apple.audio.units.AudioUnit 1.5 (1.5) /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x945e6000 - 0x945e6ffb  com.apple.installserver.framework 1.0 (8) /System/Library/PrivateFrameworks/InstallServer.framework/Versions/A/InstallServer
0x946b1000 - 0x946cffff  libresolv.9.dylib ??? (???) <a8018c42930596593ddf27f7c20fe7af> /usr/lib/libresolv.9.dylib
0x946d5000 - 0x94768ff3  com.apple.ApplicationServices.ATS 3.7 (???) <a535fc4982d3acff6530ec25c402e679> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x94769000 - 0x94771fff  com.apple.DiskArbitration 2.2.1 (2.2.1) <75b0c8d8940a8a27816961dddcac8e0f> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x94772000 - 0x947feff7  com.apple.framework.IOKit 1.5.2 (???) <97b9f9d584f48891377f0481b9104434> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x947ff000 - 0x94806ff7  libCGATS.A.dylib ??? (???) <211348279493364e9920adc86484cedd> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib
0x9483c000 - 0x94895ff7  libGLU.dylib ??? (???) <a3b9be30100a25a6cd3ad109892f52b7> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x94896000 - 0x9489dfff  com.apple.agl 3.0.9 (AGL-3.0.9) <2f39c480cfcee9358a23d61b20a6aa56> /System/Library/Frameworks/AGL.framework/Versions/A/AGL
0x9489e000 - 0x94950ffb  libcrypto.0.9.7.dylib ??? (???) <9d714c92872a93dd127ea8556b2c8945> /usr/lib/libcrypto.0.9.7.dylib
0x94951000 - 0x949dbfe3  com.apple.DesktopServices 1.4.8 (1.4.8) <3065de6531ce839c7cb5b6dd70e03f4f> /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x94a2e000 - 0x94a78fe1  com.apple.securityinterface 3.0.2 (36684) <7109034b9898a11506fc67e887e69d2b> /System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
0x94a79000 - 0x94a79ffd  com.apple.vecLib 3.4.2 (vecLib 3.4.2) /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib
0x94a7a000 - 0x94b53ff7  com.apple.WebKit 5530 (5530.17) <a7127d7d7f22d74df35aaa16b776912c> /System/Library/Frameworks/WebKit.framework/Versions/A/WebKit
0x94b54000 - 0x94b60ffe  libGL.dylib ??? (???) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x94b61000 - 0x94c55ff4  libiconv.2.dylib ??? (???) <c508c60fafca17824c0017b2e4369802> /usr/lib/libiconv.2.dylib
0x94c56000 - 0x94c56ffa  com.apple.CoreServices 32 (32) <2fcc8f3bd5bbfc000b476cad8e6a3dd2> /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x94c57000 - 0x94c86fe3  com.apple.AE 402.3 (402.3) <b13bfda0ad9314922ee37c0d018d7de9> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x94c87000 - 0x94cf9fff  com.apple.PDFKit 2.1.2 (2.1.2) /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/PDFKit.framework/Versions/A/PDFKit
0x94cfa000 - 0x94d27feb  libvDSP.dylib ??? (???) <b232c018ddd040ec4e2c2af632dd497f> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x94d28000 - 0x94ddfff3  com.apple.QTKit 7.6.2 (1327) /System/Library/Frameworks/QTKit.framework/Versions/A/QTKit
0x94de0000 - 0x94f9cff3  com.apple.QuartzComposer 2.1 (106.13) <40f034e8c8fd31c9081f5283dcf22b78> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuartzComposer.framework/Versions/A/QuartzComposer
0x94f9d000 - 0x94fd3fef  libtidy.A.dylib ??? (???) <7b9fc90dc0d50da27a24f6f84ccdd7b7> /usr/lib/libtidy.A.dylib
0x94fd4000 - 0x95126ff3  com.apple.audio.toolbox.AudioToolbox 1.5.2 (1.5.2) /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x95127000 - 0x9514bfff  libxslt.1.dylib ??? (???) <0a9778d6368ae668826f446878deb99b> /usr/lib/libxslt.1.dylib
0x9514c000 - 0x95150fff  libmathCommon.A.dylib ??? (???) /usr/lib/system/libmathCommon.A.dylib
0x95151000 - 0x95201fff  edu.mit.Kerberos 6.0.13 (6.0.13) <804bd1b3f08fb57396781f012006367c> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
0x95202000 - 0x9523cfe7  com.apple.coreui 1.2 (62) /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI
0x9523d000 - 0x95241fff  libGIF.dylib ??? (???) <572a32e46e33be1ec041c5ef5b0341ae> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x95242000 - 0x9532aff3  com.apple.CoreData 100.2 (186.1) <8fb61e1714a4b8d587ce97605ad32547> /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x9532b000 - 0x9540cff7  libxml2.2.dylib ??? (???) <2f6b294896866822330a8888b7f53b75> /usr/lib/libxml2.2.dylib
0x9540d000 - 0x95435ff7  com.apple.shortcut 1.0.1 (1.0) <131202e7766e327d02d55c0f5fc44ad7> /System/Library/PrivateFrameworks/Shortcut.framework/Versions/A/Shortcut
0x95436000 - 0x9543bfff  com.apple.DisplayServicesFW 2.0.2 (2.0.2) <97878a73074e7da4fe31ea010a5d5ae1> /System/Library/PrivateFrameworks/DisplayServices.framework/Versions/A/DisplayServices
0x9543c000 - 0x954e3feb  com.apple.QD 3.11.56 (???) <a94d0f5438b730e88e5efdb233295c52> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x9552e000 - 0x95854fe2  com.apple.QuickTime 7.6.2 (1327) <3754e41d846b7948f96c9ec4c690b520> /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x95855000 - 0x958d2feb  com.apple.audio.CoreAudio 3.1.2 (3.1.2) <5a4e6329f8dbca5dcd70924525afd24a> /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x958d3000 - 0x95912fef  libTIFF.dylib ??? (???) <3589442575ac77746ae99ecf724f5f87> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x95913000 - 0x95de4fbe  libGLProgrammability.dylib ??? (???) <7f18294a7bd0b6afe4319f29187fc70d> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib
0x95dea000 - 0x95ea4fe3  com.apple.CoreServices.OSServices 227 (227) <30cebcb68b1b571df7d77474e0c31556> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x95f49000 - 0x95f8bfef  com.apple.NavigationServices 3.5.2 (163) <91844980804067b07a0b6124310d3f31> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x95f8c000 - 0x95f8cfff  com.apple.Carbon 136 (136) <98a5e3bc0c4fa44bbb09713bb88707fe> /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x95f8d000 - 0x95fcdfff  com.apple.CoreMediaIOServicesPrivate 20.0 (20.0) /System/Library/PrivateFrameworks/CoreMediaIOServicesPrivate.framework/Versions/A/CoreMediaIOServicesPrivate
0x95fce000 - 0x962a8ff3  com.apple.CoreServices.CarbonCore 786.11 (786.13) <9e2d85d52e5e2951aa4dd53c48ccc52f> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x962a9000 - 0x962faff7  com.apple.HIServices 1.7.0 (???) <01b690d1f376e400ac873105533e39eb> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x962fb000 - 0x9631ffeb  libssl.0.9.7.dylib ??? (???) <8084593b773bec8f2b9614fd23c5ed73> /usr/lib/libssl.0.9.7.dylib
0x9633d000 - 0x966dafef  com.apple.QuartzCore 1.5.8 (1.5.8) <a28fa54346a9f9d5b3bef076a1ee0fcf> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x9683f000 - 0x9687dfff  libGLImage.dylib ??? (???) <a6425aeb77f4da13212ac75df57b056d> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x9687e000 - 0x9710efff  com.apple.WebCore 5530 (5530.17) <9868576f7495c85d5f4513dd4e0f9b95> /System/Library/Frameworks/WebKit.framework/Versions/A/Frameworks/WebCore.framework/Versions/A/WebCore
0x9710f000 - 0x974cdfea  libLAPACK.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0xba900000 - 0xba916fff  libJapaneseConverter.dylib ??? (???) <7b0248c392848338f5d6ed093313eeef> /System/Library/CoreServices/Encodings/libJapaneseConverter.dylib
0xfffe8000 - 0xfffebfff  libobjc.A.dylib ??? (???) /usr/lib/libobjc.A.dylib
0xffff0000 - 0xffff1780  libSystem.B.dylib ??? (???) /usr/lib/libSystem.B.dylib

[Mark Rowe (bdash)]

Does it crash in the latest WebKit nightly build from <http://nightly.webkit.org/>?

[Rob Raguet-Schofield]

Yes, it crashes in "WebKit r44794 was built on 18 June 2009"

[Rahul Kuchhal]

This is duplicate of bug 30350.

[Mark Rowe (bdash)]

*** Bug 30350 has been marked as a duplicate of this bug. ***

[Federico Lebrón]

Created attachment 41247 [details]
Attaching test case from duplicate bug

Since bug 30350 is a duplicate of this one, I'm attaching the same reduced test case, which should trigger this bug as well. Mouseover "fooooooooo" and continue to "baaaaaaaar" -> Crash.

[Tony Chang]

*** Bug 33006 has been marked as a duplicate of this bug. ***

[Simon Fraser (smfr)]

No longer crashes in Safari 5.0.1