WebKit crashes in WebFrame::loadDataSource() when dereferencing the NULL pointer d->frame->document().
Created attachment 10950 [details] Temporary crash fix This fixes the crash, but it's a hack.
hmm, i wonder why it did not crash for me. i was able to load many pages without any problems. hmm...
It turns out that this bug is not reproducible in Spinneret because Spinneret calls IWebFrame::loadHTMLString to load a chunk of HTML synchronously, which uses a different code path to load data that results in a document being created for the Frame. As a result, there is always a document. The proper solution to this bug probably involves finding a better way to get a DocLoader for the ResourceLoader::start() call.
http://bugs.webkit.org/show_bug.cgi?id=11139 has a fix for this.
Since bug 11139 has a fix for this, I believe we can close this. *** This bug has been marked as a duplicate of 11139 ***