Bug 119027 – Crashes on html5rocks Native HTML5 Drag and Drop tutorial's dataTransfer.setDragImage() example

• Status: RESOLVED
• Resolution: DUPLICATE
• Component: WebKit2

[Daniel Trebbien]

Created attachment 207362 [details]
Crash log

1. Using the latest WebKit nightly r153061 built on 23 July 2013, go to http://www.html5rocks.com/en/tutorials/dnd/basics/#toc-drag-properties
2. Try to drag one of the gray boxes under "Result (you should see the Google logo when dragging these columns):"

Chrome 28.0.1500.71 does not crash on this example.

Safari 6.0.5 also crashes, but looking through the crash log, I see basically the same backtrace as Bug 83276

The nightly's crash log (attached) is different, which is why I think that this might be a different issue:
Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   libsystem_kernel.dylib        	0x00007fff8e895ce2 __pthread_kill + 10
1   libsystem_c.dylib             	0x00007fff8d4cd7d2 pthread_kill + 95
2   libsystem_c.dylib             	0x00007fff8d4bea7a abort + 143
3   libsystem_c.dylib             	0x00007fff8d4f15de __assert_rtn + 146
4   com.apple.WebKit2             	0x0000000102f68b58 WKSetDragImage + 1145
5   com.apple.WebCore             	0x0000000103fa1660 WebCore::Pasteboard::setDragImage(WTF::RetainPtr<NSImage>, WebCore::IntPoint const&) + 112
6   com.apple.WebCore             	0x0000000103771390 WebCore::Clipboard::updateDragImage() + 80
...

[Alexey Proskuryakov]

For Apple engineers: tracked as <rdar://problem/14528247>.

[Tim Horton]

*** This bug has been marked as a duplicate of bug 119297 ***