Created attachment 210434 [details] Test case Failing test: <html> <applet class="dummyclass" code="any.class"> <select autofocus="autofocus"></select> <object data="brr.svg"></object> </applet> <iframe onload="alert('foo')"></iframe> Backtrace: Program received signal SIGSEGV, Segmentation fault. 0x00007ffff56dafad in WTFCrash () at /home/reni/Data/REPOS/webkit_sec/Source/WTF/wtf/Assertions.cpp:342 342 *(int *)(uintptr_t)0xbbadbeef = 0; (gdb) bt #0 0x00007ffff56dafad in WTFCrash () at /home/reni/Data/REPOS/webkit_sec/Source/WTF/wtf/Assertions.cpp:342 #1 0x00007ffff458a390 in WebCore::DocumentLoader::mainReceivedError (this=0x936a40, error=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:233 #2 0x00007ffff458a955 in WebCore::DocumentLoader::notifyFinished (this=0x936a40, resource=0x9372d0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:353 #3 0x00007ffff4571afe in WebCore::CachedResource::checkNotify (this=0x9372d0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedResource.cpp:369 #4 0x00007ffff4571cc6 in WebCore::CachedResource::cancelLoad (this=0x9372d0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedResource.cpp:405 #5 0x00007ffff45d4ee3 in WebCore::SubresourceLoader::didCancel (this=0x93b430) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubresourceLoader.cpp:340 #6 0x00007ffff45caf4a in WebCore::ResourceLoader::cancel (this=0x93b430, error=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/ResourceLoader.cpp:429 #7 0x00007ffff458f036 in WebCore::DocumentLoader::cancelMainResourceLoad (this=0x936a40, resourceError=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:1433 #8 0x00007ffff458a5e4 in WebCore::DocumentLoader::stopLoading (this=0x936a40) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:297 #9 0x00007ffff45c8361 in WebCore::NavigationScheduler::schedule (this=0x912b90, redirect=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/NavigationScheduler.cpp:441 #10 0x00007ffff45c7dd9 in WebCore::NavigationScheduler::scheduleLocationChange (this=0x912b90, securityOrigin=0x7970b0, url=..., referrer=..., lockHistory=true, lockBackForwardList=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/NavigationScheduler.cpp:362 #11 0x00007ffff45d2bb3 in WebCore::SubframeLoader::loadOrRedirectSubframe (this=0x7d1518, ownerElement=0x8fc130, url=..., frameName=..., lockHistory=true, lockBackForwardList=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:333 #12 0x00007ffff45d24d3 in WebCore::SubframeLoader::requestObject (this=0x7d1518, ownerElement=0x8fc130, url=..., frameName=..., mimeType=..., paramNames=..., paramValues=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:236 #13 0x00007ffff43a51c7 in WebCore::HTMLObjectElement::updateWidget (this=0x8fc130, pluginCreationOption=WebCore::CreateOnlyNonNetscapePlugins) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLObjectElement.cpp:319 #14 0x00007ffff43ac4ff in WebCore::HTMLPlugInImageElement::updateWidgetIfNecessary (this=0x8fc130) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLPlugInImageElement.cpp:268 #15 0x00007ffff43ac7c1 in WebCore::HTMLPlugInImageElement::updateWidgetCallback (n=0x8fc130) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLPlugInImageElement.cpp:325 #16 0x00007ffff4187c5e in WebCore::ContainerNode::dispatchPostAttachCallbacks () at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/ContainerNode.cpp:789 #17 0x00007ffff4187955 in WebCore::ContainerNode::resumePostAttachCallbacks (this=0x89fa40) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/ContainerNode.cpp:756 #18 0x00007ffff418fe9f in WebCore::PostAttachCallbackDisabler::~PostAttachCallbackDisabler (this=0x7fffffff9160, __in_chrg=<optimized out>) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/ContainerNode.h:317 #19 0x00007ffff419977d in WebCore::Document::recalcStyle (this=0x89fa40, change=WebCore::Style::NoChange) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:1803 #20 0x00007ffff4199989 in WebCore::Document::updateStyleIfNeeded (this=0x89fa40) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:1833 #21 0x00007ffff49c995e in WebCore::RenderView::repaintSelection (this=0x78d798) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderView.cpp:702 #22 0x00007ffff42de370 in WebCore::FrameSelection::focusedOrActiveStateChanged (this=0x7cfa40) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/FrameSelection.cpp:1714 #23 0x00007ffff42de4cb in WebCore::FrameSelection::setFocused (this=0x7cfa40, flag=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/FrameSelection.cpp:1746 #24 0x00007ffff4657f0d in WebCore::FocusController::setFocused (this=0x763a90, focused=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/page/FocusController.cpp:228 #25 0x00007ffff3ba4032 in QWebPageAdapter::focusInEvent (this=0x768890) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/QWebPageAdapter.cpp:1344 #26 0x00007ffff7bb3d9c in QWebPage::event (this=0x766200, ev=0x7fffffff9b00) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WidgetApi/qwebpage.cpp:2521 #27 0x00007ffff7bb989d in QWebView::focusInEvent (this=0x79ee70, ev=0x7fffffff9b00) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WidgetApi/qwebview.cpp:952 #28 0x00007ffff30647b2 in QWidget::event(QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Widgets.so.5 #29 0x00007ffff7bb923b in QWebView::event (this=0x79ee70, e=0x7fffffff9b00) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WidgetApi/qwebview.cpp:733 ---Type <return> to continue, or q <return> to quit--- #30 0x00007ffff302ddbc in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Widgets.so.5 #31 0x00007ffff3031075 in QApplication::notify(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Widgets.so.5 #32 0x00007ffff21c1dbe in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #33 0x00007ffff3029f0e in QApplicationPrivate::setFocusWidget(QWidget*, Qt::FocusReason) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Widgets.so.5 #34 0x00007ffff3059e06 in QWidget::setFocus(Qt::FocusReason) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Widgets.so.5 #35 0x00007ffff302d85a in QApplication::setActiveWindow(QWidget*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Widgets.so.5 #36 0x00007ffff2698d94 in QGuiApplicationPrivate::processActivatedEvent(QWindowSystemInterfacePrivate::ActivatedWindowEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Gui.so.5 #37 0x00007ffff269f43b in QGuiApplicationPrivate::processWindowSystemEvent(QWindowSystemInterfacePrivate::WindowSystemEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Gui.so.5 #38 0x00007ffff268ea68 in QWindowSystemInterface::sendWindowSystemEventsImplementation(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Gui.so.5 #39 0x00007fffe80776b0 in ?? () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/plugins/platforms/libxcb.so #40 0x00007fffee34a2d6 in g_main_dispatch (context=0x6632f0) at /build/buildd/glib2.0-2.37.6/./glib/gmain.c:3065 #41 g_main_context_dispatch (context=context@entry=0x6632f0) at /build/buildd/glib2.0-2.37.6/./glib/gmain.c:3641 #42 0x00007fffee34a628 in g_main_context_iterate (context=context@entry=0x6632f0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at /build/buildd/glib2.0-2.37.6/./glib/gmain.c:3712 #43 0x00007fffee34a6cc in g_main_context_iteration (context=0x6632f0, may_block=1) at /build/buildd/glib2.0-2.37.6/./glib/gmain.c:3773 #44 0x00007ffff22094bc in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #45 0x00007ffff21c0d3b in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #46 0x00007ffff31e881b in QDialog::exec() () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Widgets.so.5 #47 0x00007ffff7bb0da1 in QWebPage::javaScriptAlert (this=0x766200, frame=0x794810, msg=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WidgetApi/qwebpage.cpp:1516 #48 0x00007ffff7bae058 in QWebPagePrivate::javaScriptAlert (this=0x768890, frame=0x7ceeb0, msg=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WidgetApi/qwebpage.cpp:288 #49 0x00007ffff3b6391b in WebCore::ChromeClientQt::runJavaScriptAlert (this=0x768bc0, f=0x7d1460, msg=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/ChromeClientQt.cpp:343 #50 0x00007ffff46079d2 in WebCore::Chrome::runJavaScriptAlert (this=0x7662d0, frame=0x7d1460, message=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/page/Chrome.cpp:322 #51 0x00007ffff4629527 in WebCore::DOMWindow::alert (this=0x78d590, message=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/page/DOMWindow.cpp:1049 #52 0x00007ffff505be13 in WebCore::jsDOMWindowPrototypeFunctionAlert (exec=0x7fff941e20a8) at generated/JSDOMWindow.cpp:14219 #53 0x00007fff9ffff0e5 in ?? () #54 0x00007fffffffa3e0 in ?? () #55 0x00007ffff679ffa2 in llint_op_call () from /home/reni/Data/REPOS/webkit_sec/WebKitBuild/Debug/lib/libQt5WebKit.so.5 #56 0x00007fff941e2060 in ?? () #57 0x00000000007d0e48 in ?? () #58 0x00007fffffffa3a0 in ?? () #59 0x00007ffff5506ba3 in JSC::JSStack::installTrapsAfterFrame (this=0x0, frame=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/interpreter/JSStackInlines.h:212 #60 0x00007ffff551752c in JSC::JITCode::execute (this=0x8e4b40, stack=0x7d0e48, callFrame=0x7fff941e2060, vm=0x815a60) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/jit/JITCode.cpp:46 #61 0x00007ffff5503a02 in JSC::Interpreter::executeCall (this=0x7d0e30, callFrame=0x7fffe402f9e0, function=0x7fff9c03e5f0, callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/interpreter/Interpreter.cpp:841 #62 0x00007ffff55d58b7 in JSC::call (exec=0x7fffe402f9e0, functionObject=..., callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/runtime/CallData.cpp:39 #63 0x00007ffff3f118bf in WebCore::JSMainThreadExecState::call (exec=0x7fffe402f9e0, functionObject=..., callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/bindings/js/JSMainThreadExecState.h:53 #64 0x00007ffff3f40c6d in WebCore::JSEventListener::handleEvent (this=0x7cc8a0, scriptExecutionContext=0x89faf0, event=0x906ca0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/bindings/js/JSEventListener.cpp:130 #65 0x00007ffff420f7aa in WebCore::EventTarget::fireEventListeners (this=0x8badf0, event=0x906ca0, d=0x8af210, entry=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventTarget.cpp:271 #66 0x00007ffff420f4c7 in WebCore::EventTarget::fireEventListeners (this=0x8badf0, event=0x906ca0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventTarget.cpp:227 ---Type <return> to continue, or q <return> to quit--- #67 0x00007ffff423b79b in WebCore::Node::handleLocalEvents (this=0x8badf0, event=0x906ca0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Node.cpp:2097 #68 0x00007ffff4201d54 in WebCore::EventContext::handleLocalEvents (this=0x8bc0e0, event=0x906ca0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventContext.cpp:58 #69 0x00007ffff4203c33 in WebCore::EventDispatcher::dispatchEventAtTarget (this=0x7fffffffaa20) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatcher.cpp:161 #70 0x00007ffff42038f0 in WebCore::EventDispatcher::dispatch (this=0x7fffffffaa20) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatcher.cpp:118 #71 0x00007ffff4202715 in WebCore::EventDispatchMediator::dispatchEvent (this=0x9062f0, dispatcher=0x7fffffffaa20) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatchMediator.cpp:54 #72 0x00007ffff4202e9d in WebCore::EventDispatcher::dispatchEvent (node=0x8badf0, mediator=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatcher.cpp:52 #73 0x00007ffff423b9b0 in WebCore::Node::dispatchEvent (this=0x8badf0, event=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Node.cpp:2118 #74 0x00007ffff462bc41 in WebCore::DOMWindow::dispatchLoadEvent (this=0x8e6400) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/page/DOMWindow.cpp:1714 #75 0x00007ffff41a03c0 in WebCore::Document::dispatchWindowLoadEvent (this=0x907da0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:3639 #76 0x00007ffff419ba6b in WebCore::Document::implicitClose (this=0x907da0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:2419 #77 0x00007ffff45a08af in WebCore::FrameLoader::checkCallImplicitClose (this=0x8bc580) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:848 #78 0x00007ffff45a0620 in WebCore::FrameLoader::checkCompleted (this=0x8bc580) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:791 #79 0x00007ffff45a0355 in WebCore::FrameLoader::finishedParsing (this=0x8bc580) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:724 #80 0x00007ffff41a2c9b in WebCore::Document::finishedParsing (this=0x907da0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:4437 #81 0x00007ffff43f6273 in WebCore::HTMLConstructionSite::finishedParsing (this=0x8e1c18) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLConstructionSite.cpp:352 #82 0x00007ffff442a989 in WebCore::HTMLTreeBuilder::finished (this=0x8e1c00) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLTreeBuilder.cpp:2912 #83 0x00007ffff43fd99e in WebCore::HTMLDocumentParser::end (this=0x9063c0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:763 #84 0x00007ffff43fda89 in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x9063c0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:774 #85 0x00007ffff43fc5f8 in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x9063c0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:211 #86 0x00007ffff43fdace in WebCore::HTMLDocumentParser::attemptToEnd (this=0x9063c0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:786 #87 0x00007ffff43fdb87 in WebCore::HTMLDocumentParser::finish (this=0x9063c0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:835 #88 0x00007ffff45980ab in WebCore::DocumentWriter::end (this=0x903450) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentWriter.cpp:244 #89 0x00007ffff458ab61 in WebCore::DocumentLoader::finishedLoading (this=0x9033b0, finishTime=1346.3951553530001) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:407 #90 0x00007ffff458e738 in WebCore::DocumentLoader::maybeLoadEmpty (this=0x9033b0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:1348 #91 0x00007ffff458e857 in WebCore::DocumentLoader::startLoadingMainResource (this=0x9033b0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:1360 #92 0x00007ffff45a6c86 in WebCore::FrameLoader::continueLoadAfterWillSubmitForm (this=0x8bc580) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:2229 #93 0x00007ffff45a98de in WebCore::FrameLoader::continueLoadAfterNavigationPolicy (this=0x8bc580, formState=..., shouldContinue=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:2883 #94 0x00007ffff45a8df7 in WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy (argument=0x8bc580, request=..., formState=..., shouldContinue=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:2713 #95 0x00007ffff45c220b in WebCore::PolicyCallback::call (this=0x7fffffffb670, shouldContinue=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/PolicyCallback.cpp:103 #96 0x00007ffff45c33a2 in WebCore::PolicyChecker::continueAfterNavigationPolicy (this=0x8be4c0, policy=WebCore::PolicyUse) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/PolicyChecker.cpp:180 #97 0x00007ffff3b764b4 in WebCore::FrameLoaderClientQt::callPolicyFunction (this=0x8db1f0, function= (void (WebCore::PolicyChecker::*)(WebCore::PolicyChecker * const, WebCore::PolicyAction)) 0x7ffff45c3138 <WebCore::PolicyChecker::continueAfterNavigationPo---Type <return> to continue, or q <return> to quit--- licy(WebCore::PolicyAction)>, action=WebCore::PolicyUse) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:246 #98 0x00007ffff3b7c3c6 in WebCore::FrameLoaderClientQt::dispatchDecidePolicyForNavigationAction (this=0x8db1f0, function= (void (WebCore::PolicyChecker::*)(WebCore::PolicyChecker * const, WebCore::PolicyAction)) 0x7ffff45c3138 <WebCore::PolicyChecker::continueAfterNavigationPolicy(WebCore::PolicyAction)>, action=..., request=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:1282 #99 0x00007ffff45c2c7d in WebCore::PolicyChecker::checkNavigationPolicy (this=0x8be4c0, request=..., loader=0x9033b0, formState=..., function=0x7ffff45a8da8 <WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy(void*, WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool)>, argument=0x8bc580) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/PolicyChecker.cpp:99 #100 0x00007ffff45a36ce in WebCore::FrameLoader::loadWithDocumentLoader (this=0x8bc580, loader=0x9033b0, type=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, prpFormState=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:1421 #101 0x00007ffff45a2f4f in WebCore::FrameLoader::loadWithNavigationAction (this=0x8bc580, request=..., action=..., lockHistory=false, type=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, formState=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:1325 #102 0x00007ffff45a251d in WebCore::FrameLoader::loadURL (this=0x8bc580, newURL=..., referrer=..., frameName=..., lockHistory=false, newLoadType=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, event=..., prpFormState=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:1260 #103 0x00007ffff45a0b42 in WebCore::FrameLoader::loadURLIntoChildFrame (this=0x7d14f0, url=..., referer=..., childFrame=0x8bc4f0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:876 #104 0x00007ffff3b7c834 in WebCore::FrameLoaderClientQt::createFrame (this=0x761cd0, url=..., name=..., ownerElement=0x8badf0, referrer=..., allowsScrolling=true, marginWidth=-1, marginHeight=-1) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:1327 #105 0x00007ffff45d2e59 in WebCore::SubframeLoader::loadSubframe (this=0x7d1518, ownerElement=0x8badf0, url=..., name=..., referrer=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:361 #106 0x00007ffff45d2c0d in WebCore::SubframeLoader::loadOrRedirectSubframe (this=0x7d1518, ownerElement=0x8badf0, url=..., frameName=..., lockHistory=true, lockBackForwardList=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:335 #107 0x00007ffff45d18be in WebCore::SubframeLoader::requestFrame (this=0x7d1518, ownerElement=0x8badf0, urlString=..., frameName=..., lockHistory=true, lockBackForwardList=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:89 #108 0x00007ffff438d38e in WebCore::HTMLFrameElementBase::openURL (this=0x8badf0, lockHistory=true, lockBackForwardList=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLFrameElementBase.cpp:89 #109 0x00007ffff438d888 in WebCore::HTMLFrameElementBase::setNameAndOpenURL (this=0x8badf0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLFrameElementBase.cpp:142 #110 0x00007ffff438d953 in WebCore::HTMLFrameElementBase::didNotifySubtreeInsertions (this=0x8badf0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLFrameElementBase.cpp:173 #111 0x00007ffff41848e0 in WebCore::ChildNodeInsertionNotifier::notify (this=0x7fffffffc6b0, node=0x8badf0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/ContainerNodeAlgorithms.h:233 #112 0x00007ffff4187833 in WebCore::ContainerNode::parserAppendChild (this=0x767380, newChild=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/ContainerNode.cpp:730 #113 0x00007ffff43f4e10 in WebCore::executeTask (task=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLConstructionSite.cpp:97 #114 0x00007ffff43f5249 in WebCore::HTMLConstructionSite::executeQueuedTasks (this=0x791e78) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLConstructionSite.cpp:150 #115 0x00007ffff441e6d0 in WebCore::HTMLTreeBuilder::constructTree (this=0x791e60, token=0x7fffffffc7e0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLTreeBuilder.cpp:368 #116 0x00007ffff43fd322 in WebCore::HTMLDocumentParser::constructTreeFromHTMLToken (this=0x795970, rawToken=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:597 #117 0x00007ffff43fcf57 in WebCore::HTMLDocumentParser::pumpTokenizer (this=0x795970, mode=WebCore::HTMLDocumentParser::AllowYield) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:551 #118 0x00007ffff43fc71f in WebCore::HTMLDocumentParser::pumpTokenizerIfPossible (this=0x795970, mode=WebCore::HTMLDocumentParser::AllowYield) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:235 #119 0x00007ffff43fd8be in WebCore::HTMLDocumentParser::append (this=0x795970, inputSource=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:747 #120 0x00007ffff418dc07 in WebCore::DecodedDataDocumentParser::flush (this=0x795970, writer=0x694220) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/DecodedDataDocumentParser.cpp:60 #121 0x00007ffff4598071 in WebCore::DocumentWriter::end (this=0x694220) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentWriter.cpp:241 #122 0x00007ffff458ab61 in WebCore::DocumentLoader::finishedLoading (this=0x694180, finishTime=0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:407 ---Type <return> to continue, or q <return> to quit--- #123 0x00007ffff458a8ca in WebCore::DocumentLoader::notifyFinished (this=0x694180, resource=0x7b2d20) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:344 #124 0x00007ffff4571afe in WebCore::CachedResource::checkNotify (this=0x7b2d20) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedResource.cpp:369 #125 0x00007ffff4571bd4 in WebCore::CachedResource::finishLoading (this=0x7b2d20) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedResource.cpp:385 #126 0x00007ffff456e326 in WebCore::CachedRawResource::finishLoading (this=0x7b2d20, data=0x7b8570) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedRawResource.cpp:94 #127 0x00007ffff45d4a15 in WebCore::SubresourceLoader::didFinishLoading (this=0x75d820, finishTime=0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubresourceLoader.cpp:282 #128 0x00007ffff45cb33b in WebCore::ResourceLoader::didFinishLoading (this=0x75d820, finishTime=0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/ResourceLoader.cpp:488 #129 0x00007ffff4a86713 in WebCore::QNetworkReplyHandler::finish (this=0x7c71b0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:516 #130 0x00007ffff4a85432 in WebCore::QNetworkReplyHandlerCallQueue::flush (this=0x7c71e8) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:250 #131 0x00007ffff4a8512f in WebCore::QNetworkReplyHandlerCallQueue::push (this=0x7c71e8, method=(void (WebCore::QNetworkReplyHandler::*)(WebCore::QNetworkReplyHandler * const)) 0x7ffff4a86558 <WebCore::QNetworkReplyHandler::finish()>) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:216 #132 0x00007ffff4a8607c in WebCore::QNetworkReplyWrapper::didReceiveFinished (this=0x7ad290) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:409 #133 0x00007ffff4a88a0e in WebCore::QNetworkReplyWrapper::qt_static_metacall (_o=0x7ad290, _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0x7fffffffce30) at .moc/release-shared/moc_QNetworkReplyHandler.cpp:176 #134 0x00007ffff21e65cb in QMetaObject::activate(QObject*, int, int, void**) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #135 0x00007ffff21e784e in QObject::event(QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #136 0x00007ffff302ddbc in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Widgets.so.5 #137 0x00007ffff3031075 in QApplication::notify(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Widgets.so.5 #138 0x00007ffff21c1dbe in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #139 0x00007ffff21c3a76 in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #140 0x00007ffff2209333 in ?? () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #141 0x00007fffee34a2d6 in g_main_dispatch (context=0x6632f0) at /build/buildd/glib2.0-2.37.6/./glib/gmain.c:3065 #142 g_main_context_dispatch (context=context@entry=0x6632f0) at /build/buildd/glib2.0-2.37.6/./glib/gmain.c:3641 #143 0x00007fffee34a628 in g_main_context_iterate (context=context@entry=0x6632f0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at /build/buildd/glib2.0-2.37.6/./glib/gmain.c:3712 #144 0x00007fffee34a6cc in g_main_context_iteration (context=0x6632f0, may_block=1) at /build/buildd/glib2.0-2.37.6/./glib/gmain.c:3773 #145 0x00007ffff22094bc in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #146 0x00007ffff21c0d3b in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #147 0x00007ffff21c4120 in QCoreApplication::exec() () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #148 0x0000000000421ba0 in launcherMain (app=...) at /home/reni/Data/REPOS/webkit_sec/Tools/QtTestBrowser/qttestbrowser.cpp:49 #149 0x0000000000423680 in main (argc=2, argv=0x7fffffffdb08) at /home/reni/Data/REPOS/webkit_sec/Tools/QtTestBrowser/qttestbrowser.cpp:318