I have hit this assertion failure 5 times today while browsing the intarweb. I've tried to find steps to reproduce, but have had zero luck. Backtrace follows. Exception: EXC_BAD_ACCESS (0x0001) Codes: KERN_INVALID_ADDRESS (0x0001) at 0xbbadbeef Thread 0 Crashed: 0 com.apple.WebKit 0x00418259 -[WebBaseNetscapePluginView willCallPlugInFunction] + 69 (WebBaseNetscapePluginView.mm:1784) 1 com.apple.WebKit 0x004181b6 -[WebBaseNetscapePluginView createPluginScriptableObject] + 64 (WebBaseNetscapePluginView.mm:1774) 2 com.apple.WebCore 0x010e3232 WebCore::getPluginInstanceForWidget(WebCore::Widget*) + 324 (FrameMac.mm:670) 3 com.apple.WebCore 0x010e32b4 WebCore::FrameMac::getObjectInstanceForWidget(WebCore::Widget*) + 14 (FrameMac.mm:691) 4 com.apple.WebCore 0x0128172e WebCore::HTMLObjectElement::getInstance() const + 184 (HTMLObjectElement.cpp:86) 5 com.apple.WebCore 0x0125871e KJS::getRuntimeObject(KJS::ExecState*, WebCore::Node*) + 178 (kjs_dom.cpp:1060) 6 com.apple.WebCore 0x01263c0d KJS::JSHTMLElement::getOwnPropertySlot(KJS::ExecState*, KJS::Identifier const&, KJS::PropertySlot&) + 453 (kjs_html.cpp:727) 7 com.apple.JavaScriptCore 0x0065bb2f KJS::JSObject::getPropertySlot(KJS::ExecState*, KJS::Identifier const&, KJS::PropertySlot&) + 51 (object.h:555) 8 com.apple.JavaScriptCore 0x005f94e0 KJS::JSObject::get(KJS::ExecState*, KJS::Identifier const&) const + 38 (object.cpp:164) 9 com.apple.JavaScriptCore 0x005f0ced KJS::DotAccessorNode::evaluate(KJS::ExecState*) + 185 (nodes.cpp:548) 10 com.apple.JavaScriptCore 0x005ed95f KJS::BinaryLogicalNode::evaluate(KJS::ExecState*) + 41 (nodes.cpp:1297) 11 com.apple.JavaScriptCore 0x005ecfe0 KJS::IfNode::execute(KJS::ExecState*) + 148 (nodes.cpp:1685) 12 com.apple.JavaScriptCore 0x005eaf2a KJS::SourceElementsNode::execute(KJS::ExecState*) + 566 (nodes.cpp:2455) 13 com.apple.JavaScriptCore 0x005e972c KJS::BlockNode::execute(KJS::ExecState*) + 140 (nodes.cpp:1648) 14 com.apple.JavaScriptCore 0x005db5fe KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 50 (function.cpp:362) 15 com.apple.JavaScriptCore 0x005dd8e1 KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 573 (function.cpp:111) 16 com.apple.JavaScriptCore 0x005fa158 KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 210 (object.cpp:97) 17 com.apple.JavaScriptCore 0x005effdf KJS::FunctionCallDotNode::evaluate(KJS::ExecState*) + 843 (nodes.cpp:772) 18 com.apple.JavaScriptCore 0x005ed1fc KJS::ExprStatementNode::execute(KJS::ExecState*) + 148 (nodes.cpp:1672) 19 com.apple.JavaScriptCore 0x005eaf2a KJS::SourceElementsNode::execute(KJS::ExecState*) + 566 (nodes.cpp:2455) 20 com.apple.JavaScriptCore 0x005e972c KJS::BlockNode::execute(KJS::ExecState*) + 140 (nodes.cpp:1648) 21 com.apple.JavaScriptCore 0x005db5fe KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 50 (function.cpp:362) 22 com.apple.JavaScriptCore 0x005dd8e1 KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 573 (function.cpp:111) 23 com.apple.JavaScriptCore 0x005fa158 KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 210 (object.cpp:97) 24 com.apple.JavaScriptCore 0x005f0760 KJS::FunctionCallResolveNode::evaluate(KJS::ExecState*) + 716 (nodes.cpp:679) 25 com.apple.JavaScriptCore 0x005ed1fc KJS::ExprStatementNode::execute(KJS::ExecState*) + 148 (nodes.cpp:1672) 26 com.apple.JavaScriptCore 0x005eadf4 KJS::SourceElementsNode::execute(KJS::ExecState*) + 256 (nodes.cpp:2449) 27 com.apple.JavaScriptCore 0x005e972c KJS::BlockNode::execute(KJS::ExecState*) + 140 (nodes.cpp:1648) 28 com.apple.JavaScriptCore 0x005ed0f0 KJS::IfNode::execute(KJS::ExecState*) + 420 (nodes.cpp:1691) 29 com.apple.JavaScriptCore 0x005eadf4 KJS::SourceElementsNode::execute(KJS::ExecState*) + 256 (nodes.cpp:2449) 30 com.apple.JavaScriptCore 0x005e972c KJS::BlockNode::execute(KJS::ExecState*) + 140 (nodes.cpp:1648) 31 com.apple.JavaScriptCore 0x005db5fe KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 50 (function.cpp:362) 32 com.apple.JavaScriptCore 0x005dd8e1 KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 573 (function.cpp:111) 33 com.apple.JavaScriptCore 0x005fa158 KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 210 (object.cpp:97) 34 com.apple.JavaScriptCore 0x005f0760 KJS::FunctionCallResolveNode::evaluate(KJS::ExecState*) + 716 (nodes.cpp:679) 35 com.apple.JavaScriptCore 0x005ed1fc KJS::ExprStatementNode::execute(KJS::ExecState*) + 148 (nodes.cpp:1672) 36 com.apple.JavaScriptCore 0x005eadf4 KJS::SourceElementsNode::execute(KJS::ExecState*) + 256 (nodes.cpp:2449) 37 com.apple.JavaScriptCore 0x005e972c KJS::BlockNode::execute(KJS::ExecState*) + 140 (nodes.cpp:1648) 38 com.apple.JavaScriptCore 0x005e2d51 KJS::Interpreter::evaluate(KJS::UString const&, int, KJS::UChar const*, int, KJS::JSValue*) + 977 (interpreter.cpp:478) 39 com.apple.WebCore 0x012691e1 WebCore::KJSProxy::evaluate(WebCore::String const&, int, WebCore::String const&, WebCore::Node*) + 319 (kjs_proxy.cpp:65) 40 com.apple.WebCore 0x013c119d WebCore::FrameLoader::executeScript(WebCore::String const&, int, WebCore::Node*, WebCore::String const&) + 99 (FrameLoader.cpp:700) 41 com.apple.WebCore 0x013c124b WebCore::FrameLoader::executeScript(WebCore::Node*, WebCore::String const&, bool) + 123 (FrameLoader.cpp:688) 42 com.apple.WebCore 0x01270316 KJS::ScheduledAction::execute(KJS::Window*) + 888 (kjs_window.cpp:1863) 43 com.apple.WebCore 0x01272c26 KJS::Window::timerFired(KJS::DOMWindowTimer*) + 402 (kjs_window.cpp:1979) 44 com.apple.WebCore 0x01272c7d KJS::DOMWindowTimer::fired() + 47 (kjs_window.cpp:2540) 45 com.apple.WebCore 0x0120bac2 WebCore::TimerBase::fireTimers(double, WTF::Vector<WebCore::TimerBase*, (unsigned long)0> const&) + 196 (Timer.cpp:322) 46 com.apple.WebCore 0x0120bb5f WebCore::TimerBase::sharedTimerFired() + 109 (Timer.cpp:355) 47 com.apple.WebCore 0x0120b216 WebCore::timerFired(__CFRunLoopTimer*, void*) + 22 (SharedTimerMac.cpp:47) 48 com.apple.CoreFoundation 0x90829bc9 CFRunLoopRunSpecific + 3341 49 com.apple.CoreFoundation 0x90828eb5 CFRunLoopRunInMode + 61 50 com.apple.HIToolbox 0x92dcdb90 RunCurrentEventLoopInMode + 285 51 com.apple.HIToolbox 0x92dcd297 ReceiveNextEventCommon + 385 52 com.apple.HIToolbox 0x92dcd0ee BlockUntilNextEventMatchingListInMode + 81 53 com.apple.AppKit 0x9326f465 _DPSNextEvent + 572 54 com.apple.AppKit 0x9326f056 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 137 55 com.apple.Safari 0x00026335 -[BrowserApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 202 56 com.apple.AppKit 0x93268ddb -[NSApplication run] + 512 57 com.apple.AppKit 0x9325cd2f NSApplicationMain + 573 58 com.apple.Safari 0x000bde5a main + 113 59 com.apple.Safari 0x00002caa _start + 216 60 com.apple.Safari 0x00002bd1 start + 41
*** This bug has been marked as a duplicate of 12050 ***