Bug 111211 – Crash at WebCore::SharedBuffer::hasPlatformData writing an image to the pasteboard

• Status: RESOLVED
• Resolution: FIXED
• Component: HTML Editing

[Enrica Casucci]

Here is the stack trace:


>  1 com.apple.WebCore              0x7fff82ba7008 WebCore::SharedBuffer::hasPlatformData() const + 0x4
   2 com.apple.WebCore              0x7fff82ba6fda WebCore::SharedBuffer::size() const + 0x14
   3 com.apple.WebCore              0x7fff83348799 WebCore::Pasteboard::writeImage(WebCore::Node*, WebCore::KURL const&, WTF::String const&) + 0x1cf
   4 com.apple.WebCore              0x7fff82ffd60a WebCore::Editor::copyImage(WebCore::HitTestResult const&) + 0xa4
   5 com.apple.WebCore              0x7fff82ed563d WebCore::ContextMenuController::contextMenuItemSelected(WebCore::ContextMenuItem*) + 0x24f
   6 com.apple.WebCore              0x7fff82ed537c -[WebCoreMenuTarget forwardContextMenuAction:] + 0x8c
   7 com.apple.CoreFoundation       0x7fff8233a3ed -[NSObject performSelector:withObject:] + 0x3d
   8 com.apple.AppKit               0x7fff8ba5c99a -[NSApplication sendAction:to:from:] + 0x77
   9 com.apple.AppKit               0x7fff8ba7d9e3 -[NSMenuItem _corePerformAction] + 0x18f
  10 com.apple.AppKit               0x7fff8ba7d73c -[NSCarbonMenuImpl performActionWithHighlightingForItemAtIndex:] + 0x7d
  11 com.apple.AppKit               0x7fff8bd13c43 -[NSMenu _internalPerformActionForItemAtIndex:] + 0x26
  12 com.apple.AppKit               0x7fff8bbb436a -[NSCarbonMenuImpl _carbonCommandProcessEvent:handlerCallRef:] + 0x8a
  13 com.apple.AppKit               0x7fff8ba62d4e NSSLMMenuEventHandler + 0x14a
  14 com.apple.HIToolbox            0x7fff84fa5084 DispatchEventToHandlers(EventTargetRec*, OpaqueEventRef*, HandlerCallRec*) + 0x4ee
  15 com.apple.HIToolbox            0x7fff84fa45aa SendEventToEventTargetInternal(OpaqueEventRef*, OpaqueEventTargetRef*, HandlerCallRec*) + 0x1be
  16 com.apple.HIToolbox            0x7fff84fbfcce SendEventToEventTarget + 0x4c
  17 com.apple.HIToolbox            0x7fff84fec785 SendHICommandEvent(unsigned int, HICommand const*, unsigned int, unsigned int, unsigned char, void const*, OpaqueEventTargetRef*, OpaqueEventTargetRef*, OpaqueEventRef**) + 0x18e
  18 com.apple.HIToolbox            0x7fff85019cb1 SendMenuCommandWithContextAndModifiers + 0x38
  19 com.apple.HIToolbox            0x7fff85019c61 SendMenuItemSelectedEvent + 0xc3
  20 com.apple.HIToolbox            0x7fff85019b31 FinishMenuSelection(SelectionData*, MenuResult*, MenuResult*) + 0x65
  21 com.apple.HIToolbox            0x7fff85128857 PopUpMenuSelectCore(MenuData*, Point, double, Point, unsigned short, unsigned int, Rect const*, unsigned short, unsigned int, Rect const*, Rect const*, __CFString const*, OpaqueMenuRef**, unsigned short*) + 0x685
  22 com.apple.HIToolbox            0x7fff85128b16 _HandlePopUpMenuSelection7 + 0x26d
  23 com.apple.AppKit               0x7fff8bbb6da1 _NSSLMPopUpCarbonMenu3 + 0xf04
  24 com.apple.AppKit               0x7fff8bbb4ec1 -[NSCarbonMenuImpl _popUpContextMenu:withEvent:forView:withFont:] + 0xbe
  25 com.apple.AppKit               0x7fff8bd13a7a -[NSMenu _popUpContextMenu:withEvent:forView:withFont:] + 0xc1
  26 com.apple.AppKit               0x7fff8bed7b78 -[NSView rightMouseDown:] + 0x81
  27 com.apple.AppKit               0x7fff8bc02746 -[NSControl _rightMouseUpOrDown:] + 0x1b6
  28 com.apple.AppKit               0x7fff8ba07dc0 -[NSWindow sendEvent:] + 0x1c61
  29 com.apple.AppKit               0x7fff8b93fbb7 -[NSApplication sendEvent:] + 0xed2
  30 com.apple.mail                 0x1007ba94e -[MailApp sendEvent:] + 0x0 (/SourceCache/Mail/Mail-1180/MailApp.m:390)
  31 com.apple.AppKit               0x7fff8b8d83d9 -[NSApplication run] + 0x21d
  32 com.apple.AppKit               0x7fff8b8d1160 NSApplicationMain + 0x35c
  33 com.apple.mail                 0x10078ca40 start + 0x0

<rdar://problem/8772758>

[Enrica Casucci]

Created attachment 191015 [details]
Patch

[Ryosuke Niwa]

Comment on attachment 191015 [details]
Patch

rs=me.

[Enrica Casucci]

Committed revision 144483.