Bug 6398
| Summary: | REGRESSION (TOT): crash in KWQKHTMLPart::generateFrameName due to nil _bridge | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | John Sullivan <sullivan> |
| Component: | Frames | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | Normal | CC: | chezsmithy |
| Priority: | P1 | ||
| Version: | 420+ | ||
| Hardware: | Mac | ||
| OS: | OS X 10.4 | ||
| URL: | http://www.the-lizard-lounge.com/ | ||
John Sullivan
To reproduce:
1. Go to http://www.the-lizard-lounge.com/
2. Click "Web Design" link at bottom of page
This crashes with the following abbreviated backtrace:
#0 0x01d46d70 in KWQKHTMLPart::generateFrameName (this=0x0) at /Volumes/Big/johnsullivan/
Projects/Labyrinth/WebCore/kwq/KWQKHTMLPart.mm:205
#1 0x01dbc4e8 in KHTMLPart::requestFrameName (this=0x0) at /Volumes/Big/johnsullivan/Projects/
Labyrinth/WebCore/khtml/khtml_part.cpp:1742
#2 0x01d59780 in KWQKHTMLPart::setName (this=0xd96fe00, name=@0xbfffcfd0) at /Volumes/Big/
johnsullivan/Projects/Labyrinth/WebCore/kwq/KWQKHTMLPart.mm:3830
#3 0x01daf4a8 in -[WebCoreBridge setName:] (self=0x22d13490, _cmd=0x90a31188,
name=0x22de2c60) at /Volumes/Big/johnsullivan/Projects/Labyrinth/WebCore/kwq/
WebCoreBridge.mm:1627
#4 0x01257880 in -[WebFrame(WebPrivate)
_continueLoadRequestAfterNewWindowPolicy:frameName:formState:] (self=0xe132e10,
_cmd=0x909da6e8, request=0x22dec3e0, frameName=0x22de2c60, formState=0x0) at /Volumes/
Big/johnsullivan/Projects/Labyrinth/WebKit/WebView.subproj/WebFrame.m:1825
#5 0x0125011c in -[NSObject(WebExtraPerformMethod)
performSelector:withObject:withObject:withObject:] (self=0xe132e10, _cmd=0x90a253d0,
aSelector=0x909da6e8, object1=0x22dec3e0, object2=0x22de2c60, object3=0x0) at /Volumes/Big/
johnsullivan/Projects/Labyrinth/WebKit/WebView.subproj/WebFrame.m:125
#6 0x01256be8 in -[WebFrame(WebPrivate) _continueAfterNewWindowPolicy:] (self=0xe132e10,
_cmd=0x909da638, policy=WebPolicyUse) at /Volumes/Big/johnsullivan/Projects/Labyrinth/WebKit/
WebView.subproj/WebFrame.m:1660
#7 0x012a0af4 in -[WebPolicyDecisionListener _usePolicy:] (self=0x22d82c20, _cmd=0x909feba8,
policy=WebPolicyUse) at /Volumes/Big/johnsullivan/Projects/Labyrinth/WebKit/WebView.subproj/
WebPolicyDelegate.m:90
#8 0x012a0bcc in -[WebPolicyDecisionListener use] (self=0x22d82c20, _cmd=0x90a3aa70) at /
Volumes/Big/johnsullivan/Projects/Labyrinth/WebKit/WebView.subproj/WebPolicyDelegate.m:106
#9 0x00133268 in -[BrowserWebView informDecisionListener:ofPolicyDecision:] (self=0xe166100,
_cmd=0x18fd68, listener=0x22d82c20, decision=PolicyUse) at /Volumes/Big/johnsullivan/Projects/
Labyrinth/WebBrowser/BrowserWebView.m:1435
The immediate cause of the crash is that _bridge is nil in KWQKHTMLPart::generateFrameName. This
causes [_bridge generateFrameName] to return nil, which then causes QString::fromNSString() to choke.
This seems likely to be fallout from Maciej's recent refactoring of where the frame traversal code lives.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
John Sullivan
I should explicitly add that this does not occur on released versions of Safari.
Alexey Proskuryakov
*** Bug 6406 has been marked as a duplicate of this bug. ***
mitz
*** This bug has been marked as a duplicate of 6382 ***