Bug 144020 – Safari WebKit crash when loading Google Spreadsheet

• Status: RESOLVED
• Resolution: FIXED
• Component: JavaScriptCore

[John]

Created attachment 251272 [details]
Crashlog for the problem

Crash when opening a relatively large Google Spreadsheet in Safari 8.0.5 (10600.5.17) on a Yosemite device. The spreadsheet repeatedly shows the 'problem occurred loading' message and re-loads, in a loop. Then come the crash reports from OS X (see attached).

[Benjamin Poulain]

<rdar://problem/20656809>

[Benjamin Poulain]

Odd, I cannot reproduce on Yosemite.

Do you have any extension enabled?

[Benjamin Poulain]

(In reply to comment #2)
> Odd, I cannot reproduce on Yosemite.
> 
> Do you have any extension enabled?

John answered that on twitter: no extension on his side.

[John]

Tried with WebKit r183168 (built on 23 April 2015) and the initial load threw an error from Google about the document being unavailable (even though I could see most of the content behind the popup error). The reload button fixed that, and the second load was OK.

Sorting on column J ascending immediately threw the "A problem occurred with this webpage so it was reloaded" banner at the top and reloaded the sheet. This time it is not getting stuck in the loop doing that over and over though.

I will attach the crashlog for this.

[John]

Created attachment 251444 [details]
Crashlog from nightly build r183168

[Benjamin Poulain]

The last one is a FTL crash with security impact. Let's add Phil in CC.

[Benjamin Poulain]

Created attachment 251472 [details]
Crashlog

I can reproduce with ToT.
-Open the document shared with the Safari testing.
-On the column "J", select "Sort sheet Z to A"
->crash in FTL.

[Mark Lam]

Created attachment 251970 [details]
the patch.

[WebKit Commit Bot]

Comment on attachment 251970 [details]
the patch.

Clearing flags on attachment: 251970

Committed r183564: <http://trac.webkit.org/changeset/183564>

[WebKit Commit Bot]

All reviewed patches have been landed.  Closing bug.