Bug 5868

Summary:

Crash on HP.com with ToT and Safari 2.0.2 in khtml::RenderContainer::detach()

Product:

WebKit

Reporter:

Samuel Allen <allen.sam>

Component:

Layout and Rendering

Assignee:

Nobody <webkit-unassigned>

Status:

VERIFIED FIXED

Severity:

Normal

CC:

mitz

Priority:

Keywords:

HasReduction

Version:

420+

Hardware:

Mac

OS:

OS X 10.4

URL:

http://www.hp.com/

Attachments:

Description	Flags
Reduction of assertion failure	none
Handle insertion before elements in anonymous cells	darin: review+

Samuel Allen

Reported 2005-11-28 20:06:13 PST

I have reproduced this bug three times, on both Safari 2.0.2 and ToT. Browsing for computers on HP.com causes Safari to crash. I will try to post a detailed guide to reproduce this crash. (It seems very easy to do.) Date/Time: 2005-11-28 19:48:04.742 -0800 OS Version: 10.4.3 (Build 8F46) Report Version: 3 Command: Safari Path: /Applications/Safari.app/Contents/MacOS/Safari Parent: WindowServer [60] Version: 2.0.2 (416.12) Build Version: 1 Project Name: WebBrowser Source Version: 4161200 PID: 2649 Thread: 0 Exception: EXC_BAD_ACCESS (0x0001) Codes: KERN_PROTECTION_FAILURE (0x0002) at 0x00000008 Thread 0 Crashed: 0 <<00000000>> 0x00000008 0 + 8 1 com.apple.WebCore 0x95c9c018 khtml::RenderContainer::detach() + 148 2 com.apple.WebCore 0x95c9c018 khtml::RenderContainer::detach() + 148 3 com.apple.WebCore 0x95c79fd8 DOM::NodeImpl::detach() + 48 4 com.apple.WebCore 0x95c79f88 DOM::NodeBaseImpl::detach() + 56 5 com.apple.WebCore 0x95c79f88 DOM::NodeBaseImpl::detach() + 56 6 com.apple.WebCore 0x95c79f88 DOM::NodeBaseImpl::detach() + 56 7 com.apple.WebCore 0x95c79f88 DOM::NodeBaseImpl::detach() + 56 8 com.apple.WebCore 0x95c79f88 DOM::NodeBaseImpl::detach() + 56 9 com.apple.WebCore 0x95c79f88 DOM::NodeBaseImpl::detach() + 56 10 com.apple.WebCore 0x95c79f88 DOM::NodeBaseImpl::detach() + 56 11 com.apple.WebCore 0x95c79f88 DOM::NodeBaseImpl::detach() + 56 12 com.apple.WebCore 0x95c79f88 DOM::NodeBaseImpl::detach() + 56 13 com.apple.WebCore 0x95c79f88 DOM::NodeBaseImpl::detach() + 56 14 com.apple.WebCore 0x95c79f88 DOM::NodeBaseImpl::detach() + 56 15 com.apple.WebCore 0x95c79f88 DOM::NodeBaseImpl::detach() + 56 16 com.apple.WebCore 0x95c79f88 DOM::NodeBaseImpl::detach() + 56 17 com.apple.WebCore 0x95c79f88 DOM::NodeBaseImpl::detach() + 56 18 com.apple.WebCore 0x95c9bdb4 DOM::DocumentImpl::detach() + 128 19 com.apple.WebCore 0x95ce2968 -[KWQPageState dealloc] + 100 20 com.apple.CoreFoundation 0x907538bc __CFDictionaryDeallocate + 552 21 com.apple.CoreFoundation 0x9073d4f4 _CFRelease + 240 22 com.apple.Foundation 0x928b7ea8 NSPopAutoreleasePool + 536 23 com.apple.Foundation 0x928de520 __NSFireTimer + 248 24 com.apple.CoreFoundation 0x90770ae0 __CFRunLoopDoTimer + 184 25 com.apple.CoreFoundation 0x9075d458 __CFRunLoopRun + 1680 26 com.apple.CoreFoundation 0x9075ca0c CFRunLoopRunSpecific + 268 27 com.apple.HIToolbox 0x931831e0 RunCurrentEventLoopInMode + 264 28 com.apple.HIToolbox 0x93182874 ReceiveNextEventCommon + 380 29 com.apple.HIToolbox 0x931826e0 BlockUntilNextEventMatchingListInMode + 96 30 com.apple.AppKit 0x93681904 _DPSNextEvent + 384 31 com.apple.AppKit 0x936815c8 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 116 32 com.apple.Safari 0x00006ef0 0x1000 + 24304 33 com.apple.AppKit 0x9367db0c -[NSApplication run] + 472 34 com.apple.AppKit 0x9376e618 NSApplicationMain + 452 35 com.apple.Safari 0x0000265c 0x1000 + 5724 36 com.apple.Safari 0x00056d1c 0x1000 + 351516 Thread 1: 0 libSystem.B.dylib 0x9000b208 mach_msg_trap + 8 1 libSystem.B.dylib 0x9000b15c mach_msg + 60 2 com.apple.CoreFoundation 0x9075d108 __CFRunLoopRun + 832 3 com.apple.CoreFoundation 0x9075ca0c CFRunLoopRunSpecific + 268 4 com.apple.Foundation 0x928ea664 -[NSRunLoop runMode:beforeDate:] + 172 5 com.apple.Foundation 0x928ea59c -[NSRunLoop run] + 76 6 com.apple.WebKit 0x95990870 +[WebFileDatabase _syncLoop:] + 176 7 com.apple.Foundation 0x928db6d4 forkThreadForFunction + 108 8 libSystem.B.dylib 0x9002b200 _pthread_body + 96 Thread 2: 0 libSystem.B.dylib 0x9000b208 mach_msg_trap + 8 1 libSystem.B.dylib 0x9000b15c mach_msg + 60 2 com.apple.CoreFoundation 0x9075d108 __CFRunLoopRun + 832 3 com.apple.CoreFoundation 0x9075ca0c CFRunLoopRunSpecific + 268 4 com.apple.Foundation 0x92902b9c +[NSURLConnection(NSURLConnectionInternal) _resourceLoadLoop:] + 264 5 com.apple.Foundation 0x928db6d4 forkThreadForFunction + 108 6 libSystem.B.dylib 0x9002b200 _pthread_body + 96 Thread 3: 0 libSystem.B.dylib 0x9000b208 mach_msg_trap + 8 1 libSystem.B.dylib 0x9000b15c mach_msg + 60 2 com.apple.CoreFoundation 0x9075d108 __CFRunLoopRun + 832 3 com.apple.CoreFoundation 0x9075ca0c CFRunLoopRunSpecific + 268 4 com.apple.Foundation 0x92903cdc +[NSURLCache _diskCacheSyncLoop:] + 152 5 com.apple.Foundation 0x928db6d4 forkThreadForFunction + 108 6 libSystem.B.dylib 0x9002b200 _pthread_body + 96 Thread 4: 0 libSystem.B.dylib 0x9002b8a8 semaphore_wait_signal_trap + 8 1 libSystem.B.dylib 0x9003001c pthread_cond_wait + 488 2 com.apple.Foundation 0x928e2840 -[NSConditionLock lockWhenCondition:] + 68 3 com.apple.Syndication 0x9afd39ec -[AsyncDB _run:] + 192 4 com.apple.Foundation 0x928db6d4 forkThreadForFunction + 108 5 libSystem.B.dylib 0x9002b200 _pthread_body + 96 Thread 5: 0 libSystem.B.dylib 0x9001f20c select + 12 1 com.apple.CoreFoundation 0x9076f99c __CFSocketManager + 472 2 libSystem.B.dylib 0x9002b200 _pthread_body + 96 Thread 0 crashed with PPC Thread State 64: srr0: 0x0000000000000008 srr1: 0x000000004200f030 vrsave: 0x0000000000000000 cr: 0x24024244 xer: 0x0000000000000004 lr: 0x0000000095c9bff4 ctr: 0x000000000000000a r0: 0x0000000008a50ae4 r1: 0x00000000bfffda50 r2: 0x00000000049db81c r3: 0x0000000008a50ae4 r4: 0x00000000000000bf r5: 0x0000000008a50ae4 r6: 0x00000000ffffffff r7: 0x0000000000000001 r8: 0x0000000005bd6322 r9: 0x0000000000000000 r10: 0x0000000095d6d668 r11: 0x0000000044024242 r12: 0x000000000000000a r13: 0x0000000000000000 r14: 0x0000000000000001 r15: 0x0000000000000001 r16: 0x0000000000000000 r17: 0x0000000000000001 r18: 0x0000000000009deb r19: 0x0000000000000000 r20: 0x000000002442c0ba r21: 0x000000000f171464 r22: 0x0000000000412638 r23: 0x000000000736e430 r24: 0x0000000000000005 r25: 0x0000000000000000 r26: 0x00000000a073a150 r27: 0x00000000a073c45c r28: 0x0000000004fe05b0 r29: 0x00000000088f1df0 r30: 0x0000000007c94f9c r31: 0x0000000095ce2904 Binary Images Description: 0x1000 - 0xd9fff com.apple.Safari 2.0.2 (416.12) /Applications/Safari.app/Contents/MacOS/ Safari 0x3fe000 - 0x3fe74c Flash Player Enabler PEF binary: Flash Player Enabler 0x415320 - 0x415403 CFMPriv_FindByContent PEF binary: CFMPriv_FindByContent 0x15df000 - 0x15dffff com.apple.SpotLightCM 1.0 (121.20.2) /System/Library/Contextual Menu Items/SpotlightCM.plugin/Contents/MacOS/SpotlightCM 0x31e7000 - 0x31e9fff com.apple.textencoding.unicode 2.0 /System/Library/TextEncodings/Unicode Encodings.bundle/Contents/MacOS/Unicode Encodings 0x32b4ab0 - 0x32b4b6e CFMPriv_Print PEF binary: CFMPriv_Print 0x4f72840 - 0x4f7291a CFMPriv_HIServices PEF binary: CFMPriv_HIServices 0x4f93f90 - 0x4f9405d CFMPriv_SecurityHI PEF binary: CFMPriv_SecurityHI 0x4fcb1a0 - 0x4fcb282 CFMPriv_SpeechRecognition PEF binary: CFMPriv_SpeechRecognition 0x4fd8ab0 - 0x4fd8b62 CFMPriv_CoreFoundation PEF binary: CFMPriv_CoreFoundation 0x4fe5180 - 0x4fe5245 CFMPriv_ATS PEF binary: CFMPriv_ATS 0x523f0e0 - 0x523f183 CFMPriv_QuickTime PEF binary: CFMPriv_QuickTime 0x5246800 - 0x52468d6 CFMPriv_HTMLRendering PEF binary: CFMPriv_HTMLRendering 0x52508e0 - 0x5250995 CFMPriv_DVComponentGlue PEF binary: CFMPriv_DVComponentGlue 0x538d000 - 0x538ffff com.apple.AutomatorCMM 1.0 (48) /System/Library/Contextual Menu Items/AutomatorCMM.plugin/Contents/MacOS/AutomatorCMM 0x5431070 - 0x543113a CFMPriv_HIToolbox PEF binary: CFMPriv_HIToolbox 0x5439400 - 0x5439477 CFMPriv_System PEF binary: CFMPriv_System 0x545e140 - 0x545e226 CFMPriv_LaunchServices PEF binary: CFMPriv_LaunchServices 0x546f2c0 - 0x546f3a9 CFMPriv_SpeechSynthesis PEF binary: CFMPriv_SpeechSynthesis 0x54daa70 - 0x54dab2b CFMPriv_Help PEF binary: CFMPriv_Help 0x5563000 - 0x55b23c7 CarbonLibpwpc PEF binary: CarbonLibpwpc 0x55b23d0 - 0x55ca6bd Apple;Carbon;Multimedia PEF binary: Apple;Carbon;Multimedia 0x55cbc00 - 0x55cd98b Apple;Carbon;Networking PEF binary: Apple;Carbon;Networking 0x5838000 - 0x583cfff com.apple.FolderActionsMenu 1.3 /System/Library/Contextual Menu Items/FolderActionsMenu.plugin/Contents/MacOS/FolderActionsMenu 0x5861000 - 0x586ffff com.apple.quicktime.webplugin 7.0.3 /Library/Internet Plug-Ins/QuickTime Plugin.webplugin/Contents/MacOS/QuickTime Plugin 0x5b218f0 - 0x5b219c6 CFMPriv_OpenScripting PEF binary: CFMPriv_OpenScripting 0x5b68230 - 0x5b68300 CFMPriv_CarbonSound PEF binary: CFMPriv_CarbonSound 0x5b86ec0 - 0x5b86f97 CFMPriv_ColorSync PEF binary: CFMPriv_ColorSync 0x5bacce0 - 0x5bacdb3 CFMPriv_CarbonCore PEF binary: CFMPriv_CarbonCore 0x5bb6940 - 0x5bb6a25 CFMPriv_NavigationServices PEF binary: CFMPriv_NavigationServices 0x5bbd0d0 - 0x5bbd192 CFMPriv_QD PEF binary: CFMPriv_QD 0x5bc3450 - 0x5bc3512 CFMPriv_AE PEF binary: CFMPriv_AE 0x5be8d40 - 0x5be8e17 CFMPriv_PrintCore PEF binary: CFMPriv_PrintCore 0x5bf0d00 - 0x5bf0dd3 CFMPriv_OSServices PEF binary: CFMPriv_OSServices 0x5bff4c0 - 0x5bff5a0 CFMPriv_LangAnalysis PEF binary: CFMPriv_LangAnalysis 0x5bff9e0 - 0x5bffab3 CFMPriv_ImageCapture PEF binary: CFMPriv_ImageCapture 0x5d53ba0 - 0x5d53c73 CFMPriv_CommonPanels PEF binary: CFMPriv_CommonPanels 0x6377000 - 0x63b9fff com.apple.QuickTimeFireWireDV.component 7.0.3 /System/Library/QuickTime/QuickTimeFireWireDV.component/Contents/MacOS/ QuickTimeFireWireDV 0x63ca000 - 0x6433fff com.apple.AppleIntermediateCodec 1.0.1 (124) /Library/QuickTime/AppleIntermediateCodec.component/Contents/MacOS/ AppleIntermediateCodec 0x65ef000 - 0x6727e45 Flash Player PEF binary: Flash Player 0x7005000 - 0x707efff com.apple.applepixletvideo 1.2.5 (1.2d5) /System/Library/QuickTime/ApplePixletVideo.component/Contents/MacOS/ApplePixletVideo 0x8fe00000 - 0x8fe54fff dyld 44.2 /usr/lib/dyld 0x90000000 - 0x901b3fff libSystem.B.dylib /usr/lib/libSystem.B.dylib 0x9020b000 - 0x9020ffff libmathCommon.A.dylib /usr/lib/system/libmathCommon.A.dylib 0x90211000 - 0x90264fff com.apple.CoreText 1.0.1 (???) /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText 0x90291000 - 0x90342fff ATS /System/Library/Frameworks/ApplicationServices.framework/ Versions/A/Frameworks/ATS.framework/Versions/A/ATS 0x90371000 - 0x906aefff com.apple.CoreGraphics 1.256.27 (???) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ CoreGraphics.framework/Versions/A/CoreGraphics 0x9073a000 - 0x90813fff com.apple.CoreFoundation 6.4.4 (368.18) /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation 0x9085c000 - 0x9085cfff com.apple.CoreServices 10.4 (???) /System/Library/Frameworks/ CoreServices.framework/Versions/A/CoreServices 0x9085e000 - 0x90960fff libicucore.A.dylib /usr/lib/libicucore.A.dylib 0x909ba000 - 0x90a3efff libobjc.A.dylib /usr/lib/libobjc.A.dylib 0x90a68000 - 0x90ad6fff com.apple.framework.IOKit 1.4 (???) /System/Library/Frameworks/ IOKit.framework/Versions/A/IOKit 0x90aed000 - 0x90afffff libauto.dylib /usr/lib/libauto.dylib 0x90b06000 - 0x90dddfff com.apple.CoreServices.CarbonCore 671.2 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/ CarbonCore.framework/Versions/A/CarbonCore 0x90e43000 - 0x90ec3fff com.apple.CoreServices.OSServices 4.1 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/ OSServices.framework/Versions/A/OSServices 0x90f0d000 - 0x90f4efff com.apple.CFNetwork 4.0 (129.2) /System/Library/Frameworks/ CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork 0x90f63000 - 0x90f7bfff com.apple.WebServices 1.1.2 (1.1.0) /System/Library/Frameworks/ CoreServices.framework/Versions/A/Frameworks/WebServicesCore.framework/Versions/A/ WebServicesCore 0x90f8b000 - 0x9100cfff com.apple.SearchKit 1.0.4 /System/Library/Frameworks/ CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit 0x91052000 - 0x9107bfff com.apple.Metadata 10.4.3 (121.20.2) /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/ Metadata.framework/Versions/A/Metadata 0x9108c000 - 0x9109afff libz.1.dylib /usr/lib/libz.1.dylib 0x9109d000 - 0x9125ffff com.apple.security 4.2 (24844) /System/Library/Frameworks/ Security.framework/Versions/A/Security 0x91362000 - 0x9136bfff com.apple.DiskArbitration 2.1 /System/Library/Frameworks/ DiskArbitration.framework/Versions/A/DiskArbitration 0x91372000 - 0x91399fff com.apple.SystemConfiguration 1.8.1 /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration 0x913ac000 - 0x913b4fff libgcc_s.1.dylib /usr/lib/libgcc_s.1.dylib 0x913b9000 - 0x913d9fff libmx.A.dylib /usr/lib/libmx.A.dylib 0x913df000 - 0x913e7fff libbsm.dylib /usr/lib/libbsm.dylib 0x913eb000 - 0x91469fff com.apple.audio.CoreAudio 3.0.1 /System/Library/Frameworks/ CoreAudio.framework/Versions/A/CoreAudio 0x914a7000 - 0x914a7fff com.apple.ApplicationServices 10.4 (???) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices 0x914a9000 - 0x914e1fff com.apple.AE 1.5 (297) /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE 0x914fc000 - 0x915c9fff com.apple.ColorSync 4.4.3 /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync 0x9161e000 - 0x916b1fff com.apple.print.framework.PrintCore 4.3 (172.3) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ PrintCore.framework/Versions/A/PrintCore 0x916f8000 - 0x917b5fff com.apple.QD 3.8.18 (???) /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD 0x917f3000 - 0x91851fff com.apple.HIServices 1.5.1 (???) /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices 0x9187f000 - 0x918a3fff com.apple.LangAnalysis 1.6.1 /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/ LangAnalysis 0x918b7000 - 0x918dcfff com.apple.FindByContent 1.5 /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/FindByContent.framework/Versions/A/ FindByContent 0x918ef000 - 0x91931fff com.apple.LaunchServices 10.4.5 (168) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ LaunchServices.framework/Versions/A/LaunchServices 0x9194d000 - 0x91961fff com.apple.speech.synthesis.framework 3.3 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ SpeechSynthesis.framework/Versions/A/SpeechSynthesis 0x9196f000 - 0x919a8fff com.apple.ImageIO.framework 1.4.3 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ ImageIO.framework/Versions/A/ImageIO 0x919bd000 - 0x91a83fff libcrypto.0.9.7.dylib /usr/lib/libcrypto.0.9.7.dylib 0x91ad0000 - 0x91ae5fff libcups.2.dylib /usr/lib/libcups.2.dylib 0x91aea000 - 0x91b06fff libJPEG.dylib /System/Library/Frameworks/ApplicationServices.framework/ Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib 0x91b0b000 - 0x91b7afff libJP2.dylib /System/Library/Frameworks/ApplicationServices.framework/ Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib 0x91b91000 - 0x91b95fff libGIF.dylib /System/Library/Frameworks/ApplicationServices.framework/ Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib 0x91b97000 - 0x91bc8fff libRaw.dylib /System/Library/Frameworks/ApplicationServices.framework/ Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRaw.dylib 0x91bcc000 - 0x91c0ffff libTIFF.dylib /System/Library/Frameworks/ApplicationServices.framework/ Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib 0x91c16000 - 0x91c2ffff libPng.dylib /System/Library/Frameworks/ApplicationServices.framework/ Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib 0x91c34000 - 0x91c37fff libRadiance.dylib /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/ libRadiance.dylib 0x91c39000 - 0x91c39fff com.apple.Accelerate 1.1.1 (Accelerate 1.1.1) /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate 0x91c3b000 - 0x91d25fff com.apple.vImage 2.0 /System/Library/Frameworks/ Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage 0x91d2d000 - 0x91d4cfff com.apple.Accelerate.vecLib 3.1.1 (vecLib 3.1.1) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/ Versions/A/vecLib 0x91db8000 - 0x91e1dfff libvMisc.dylib /System/Library/Frameworks/Accelerate.framework/ Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib 0x91e27000 - 0x91eb9fff libvDSP.dylib /System/Library/Frameworks/Accelerate.framework/ Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib 0x91ed3000 - 0x92463fff libBLAS.dylib /System/Library/Frameworks/Accelerate.framework/ Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib 0x924ab000 - 0x927bbfff libLAPACK.dylib /System/Library/Frameworks/Accelerate.framework/ Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib 0x927e8000 - 0x92874fff com.apple.DesktopServices 1.3.1 /System/Library/PrivateFrameworks/ DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv 0x928b6000 - 0x92ae0fff com.apple.Foundation 6.4.2 (567.21) /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation 0x92bfe000 - 0x92cdcfff libxml2.2.dylib /usr/lib/libxml2.2.dylib 0x92cfc000 - 0x92deafff libiconv.2.dylib /usr/lib/libiconv.2.dylib 0x92dfc000 - 0x92e1afff libGL.dylib /System/Library/Frameworks/OpenGL.framework/Versions/ A/Libraries/libGL.dylib 0x92e25000 - 0x92e7ffff libGLU.dylib /System/Library/Frameworks/OpenGL.framework/Versions/ A/Libraries/libGLU.dylib 0x92e9d000 - 0x92e9dfff com.apple.Carbon 10.4 (???) /System/Library/Frameworks/ Carbon.framework/Versions/A/Carbon 0x92e9f000 - 0x92eb3fff com.apple.ImageCapture 3.0 /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture 0x92ecb000 - 0x92edbfff com.apple.speech.recognition.framework 3.4 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ SpeechRecognition.framework/Versions/A/SpeechRecognition 0x92ee7000 - 0x92efcfff com.apple.securityhi 2.0 (203) /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI 0x92f0e000 - 0x92f95fff com.apple.ink.framework 101.2 (69) /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink 0x92fa9000 - 0x92fb4fff com.apple.help 1.0.3 (32) /System/Library/Frameworks/Carbon.framework/ Versions/A/Frameworks/Help.framework/Versions/A/Help 0x92fbe000 - 0x92febfff com.apple.openscripting 1.2.3 (???) /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting 0x93005000 - 0x93015fff com.apple.print.framework.Print 5.0 (190.1) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/ Versions/A/Print 0x93021000 - 0x93087fff com.apple.htmlrendering 1.1.2 /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering 0x930b8000 - 0x9310afff com.apple.NavigationServices 3.4.2 /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/ NavigationServices 0x93136000 - 0x93153fff com.apple.audio.SoundManager 3.9 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ CarbonSound.framework/Versions/A/CarbonSound 0x93165000 - 0x93172fff com.apple.CommonPanels 1.2.2 (73) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ CommonPanels.framework/Versions/A/CommonPanels 0x9317b000 - 0x9348dfff com.apple.HIToolbox 1.4.4 (???) /System/Library/Frameworks/ Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox 0x935d9000 - 0x935e5fff com.apple.opengl 1.4.6 /System/Library/Frameworks/OpenGL.framework/ Versions/A/OpenGL 0x935ea000 - 0x9360bfff com.apple.DirectoryService.Framework 3.0 /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService 0x93677000 - 0x93677fff com.apple.Cocoa 6.4 (???) /System/Library/Frameworks/ Cocoa.framework/Versions/A/Cocoa 0x93679000 - 0x93cacfff com.apple.AppKit 6.4.3 (824.23) /System/Library/Frameworks/ AppKit.framework/Versions/C/AppKit 0x94038000 - 0x940a7fff com.apple.CoreData 50 (77) /System/Library/Frameworks/ CoreData.framework/Versions/A/CoreData 0x940e0000 - 0x941aafff com.apple.audio.toolbox.AudioToolbox 1.4.1 /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox 0x941fe000 - 0x941fefff com.apple.audio.units.AudioUnit 1.4 /System/Library/Frameworks/ AudioUnit.framework/Versions/A/AudioUnit 0x94200000 - 0x94378fff com.apple.QuartzCore 1.4.3 /System/Library/Frameworks/ QuartzCore.framework/Versions/A/QuartzCore 0x943c2000 - 0x943fffff libsqlite3.0.dylib /usr/lib/libsqlite3.0.dylib 0x94407000 - 0x94457fff libGLImage.dylib /System/Library/Frameworks/OpenGL.framework/ Versions/A/Libraries/libGLImage.dylib 0x944e6000 - 0x9451efff com.apple.vmutils 4.0.0 (85) /System/Library/PrivateFrameworks/ vmutils.framework/Versions/A/vmutils 0x94561000 - 0x9457dfff com.apple.securityfoundation 2.1 (24988) /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation 0x94591000 - 0x945d5fff com.apple.securityinterface 2.1 (24981) /System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface 0x945f9000 - 0x94608fff libCGATS.A.dylib /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/ Resources/libCGATS.A.dylib 0x94610000 - 0x9461cfff libCSync.A.dylib /System/Library/Frameworks/ ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/ Resources/libCSync.A.dylib 0x94661000 - 0x94679fff libRIP.A.dylib /System/Library/Frameworks/ApplicationServices.framework/ Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib 0x94680000 - 0x948eafff com.apple.QuickTime 7.0.3 /System/Library/Frameworks/ QuickTime.framework/Versions/A/QuickTime 0x94ac1000 - 0x94beffff com.apple.AddressBook.framework 4.0.3 (483) /System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook 0x94c81000 - 0x94c90fff com.apple.DSObjCWrappers.Framework 1.1 /System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers 0x94c98000 - 0x94cc5fff com.apple.LDAPFramework 1.4.1 (69.0.1) /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP 0x94ccc000 - 0x94cdcfff libsasl2.2.dylib /usr/lib/libsasl2.2.dylib 0x94ce0000 - 0x94d0efff libssl.0.9.7.dylib /usr/lib/libssl.0.9.7.dylib 0x94d1e000 - 0x94d3bfff libresolv.9.dylib /usr/lib/libresolv.9.dylib 0x954a8000 - 0x9552bfff libstdc++.6.dylib /usr/lib/libstdc++.6.dylib 0x9598e000 - 0x95a1afff com.apple.WebKit 416.11 /System/Library/Frameworks/ WebKit.framework/Versions/A/WebKit 0x95a75000 - 0x95b69fff com.apple.JavaScriptCore 416.13 /System/Library/Frameworks/ WebKit.framework/Versions/A/Frameworks/JavaScriptCore.framework/Versions/A/JavaScriptCore 0x95bba000 - 0x95ebefff com.apple.WebCore 416.13 /System/Library/Frameworks/ WebKit.framework/Versions/A/Frameworks/WebCore.framework/Versions/A/WebCore 0x96043000 - 0x9606cfff libxslt.1.dylib /usr/lib/libxslt.1.dylib 0x9631f000 - 0x96358fff com.apple.QTKit 7.0.3 /System/Library/Frameworks/QTKit.framework/ Versions/A/QTKit 0x968e3000 - 0x968e4fff libCyrillicConverter.dylib /System/Library/CoreServices/Encodings/ libCyrillicConverter.dylib 0x968e6000 - 0x968e7fff libGreekConverter.dylib /System/Library/CoreServices/Encodings/ libGreekConverter.dylib 0x968ec000 - 0x96902fff libJapaneseConverter.dylib /System/Library/CoreServices/Encodings/ libJapaneseConverter.dylib 0x96904000 - 0x96924fff libKoreanConverter.dylib /System/Library/CoreServices/Encodings/ libKoreanConverter.dylib 0x96932000 - 0x96940fff libSimplifiedChineseConverter.dylib /System/Library/CoreServices/Encodings/libSimplifiedChineseConverter.dylib 0x96945000 - 0x96946fff libThaiConverter.dylib /System/Library/CoreServices/Encodings/ libThaiConverter.dylib 0x96948000 - 0x9695bfff libTraditionalChineseConverter.dylib /System/Library/CoreServices/Encodings/libTraditionalChineseConverter.dylib 0x97390000 - 0x973affff com.apple.vecLib 3.1.1 (vecLib 3.1.1) /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib 0x97bb5000 - 0x97bc2fff com.apple.agl 2.5.6 (AGL-2.5.6) /System/Library/Frameworks/ AGL.framework/Versions/A/AGL 0x99687000 - 0x99f3afff com.apple.QuickTimeComponents.component 7.0.3 /System/Library/QuickTime/QuickTimeComponents.component/Contents/MacOS/ QuickTimeComponents 0x9a1ad000 - 0x9a1b0fff com.apple.QuickTimeH264.component 7.0.3 /System/Library/QuickTime/QuickTimeH264.component/Contents/MacOS/QuickTimeH264 0x9a39f000 - 0x9a443fff com.apple.QuickTimeMPEG4.component 7.0.3 /System/Library/QuickTime/QuickTimeMPEG4.component/Contents/MacOS/QuickTimeMPEG4 0x9aba5000 - 0x9abd0fff com.apple.QuickTime Plugin.plugin 7.0.3 /Library/Internet Plug-Ins/QuickTime Plugin.plugin/Contents/MacOS/QuickTime Plugin 0x9ae61000 - 0x9ae62fff com.apple.iokit.dvcomponentglue 1.7.5 /System/Library/Frameworks/DVComponentGlue.framework/Versions/A/DVComponentGlue 0x9afd1000 - 0x9b004fff com.apple.Syndication 1.0.2 (42) /System/Library/PrivateFrameworks/ Syndication.framework/Versions/A/Syndication 0x9b020000 - 0x9b030fff com.apple.SyndicationUI 1.0.2 (42) /System/Library/PrivateFrameworks/ SyndicationUI.framework/Versions/A/SyndicationUI Model: PowerMac10,1, BootROM 4.8.9f4, 1 processors, PowerPC G4 (1.2), 1.42 GHz, 512 MB Graphics: ATI Radeon 9200, ATY,RV280, AGP, 32 MB Memory Module: DIMM0/J11, 512 MB, DDR SDRAM, PC3200U-30330 AirPort: AirPort Extreme, 404.2 (3.90.34.0.p16) Modem: Jump, , V.92, Version 1.0, Network Service: AirPort, AirPort, en1 Parallel ATA Device: ST9808210A, 74.53 GB Parallel ATA Device: MATSHITACD-RW CW-8124, USB Device: Hub, , Up to 480 Mb/sec, 500 mA USB Device: USB-PS/2 Optical Mouse, Logitech, Up to 1.5 Mb/sec, 500 mA USB Device: USB Keyboard, CHESEN, Up to 1.5 Mb/sec, 500 mA FireWire Device: iPod, Apple Computer, Inc., Up to 400 Mb/sec

Attachments
Reduction of assertion failure (211 bytes, text/html) 2006-01-27 05:06 PST, mitz	no flags	Details
Handle insertion before elements in anonymous cells (7.02 KB, patch) 2006-01-27 09:27 PST, mitz	darin: review+	Details Formatted Diff Diff
View All Add attachment proposed patch, testcase, etc.

Samuel Allen

Comment 1 2005-11-28 20:18:20 PST

Steps to Reproduce: 1. Load http://www.hp.com/ 2. Click on Home & Home Office 3. Click on Desktops 4. Click on HP Media Center PC’s 5. Click on m7100y series 6. Click on Customize 7. Back 8. Back 9. Back 10. Click HP Pavilion PC’s

Samuel Allen

Comment 2 2005-11-28 20:49:35 PST

If you don't crash on step 10, do this: 11. Back 12. Click on HP Pavilion PC's again Usually it crashes the first time but I have had it only crash the second time the "HP Pavilion PC" page is loaded.

mitz

Comment 3 2006-01-27 05:06:10 PST

Created attachment 6021 [details] Reduction of assertion failure A debug build hits an assert in RenderContainer::insertChildNode (beforeChild is not a child of the container):RenderContainer.cpp:381: failed assertion `false'. This happens when you reach the "Customize" page. I think the crash later is a result of render tree corruption that follows. This is a reduction of what causes the assertion to fail.

mitz

Comment 4 2006-01-27 09:27:22 PST

Created attachment 6025 [details] Handle insertion before elements in anonymous cells

Darin Adler

Comment 5 2006-01-27 14:23:18 PST

Comment on attachment 6025 [details] Handle insertion before elements in anonymous cells Nice one! r=me

Samuel Allen

Comment 6 2006-01-29 11:47:15 PST

I can't reproduce in a build with this fix. Marking verified.

Note You need to log in before you can comment on or make changes to this bug.