Bug 17471 – REGRESSION (r30438): Crash in deleteLineBoxes in cursor-adjusting code browsing Acid3

• Status: RESOLVED
• Resolution: FIXED
• Component: Layout and Rendering

[Robert Blaut]

Repeatedly crashes during loading Acid3 test (13/100) using compiled Webkit r30456 on Leopard. The crash happens after a couple of minutes after first load Acid3 test

Process:         Safari [43924]
Path:            /Applications/Safari.app/Contents/MacOS/Safari
Identifier:      com.apple.Safari
Version:         3.1 (5525.9)
Build Info:      WebBrowser-55250900~1
Code Type:       X86 (Native)
Parent Process:  perl [43917]

Date/Time:       2008-02-21 12:10:55.712 +0100
OS Version:      Mac OS X 10.5.2 (9C31)
Report Version:  6

Exception Type:  EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000037
Crashed Thread:  0

Thread 0 Crashed:
0   com.apple.WebCore             	0x0112f752 WebCore::RenderFlow::deleteLineBoxes() + 34 (InlineRunBox.h:40)
1   com.apple.WebCore             	0x012e55f9 WebCore::RenderBlock::layoutInlineChildren(bool, int&, int&) + 473 (bidi.cpp:848)
2   com.apple.WebCore             	0x0111655a WebCore::RenderBlock::layoutBlock(bool) + 730 (RenderBlock.cpp:586)
3   com.apple.WebCore             	0x01108bb8 WebCore::RenderBlock::layout() + 40 (RenderBlock.cpp:494)
4   com.apple.WebCore             	0x0110e99b WebCore::RenderBlock::layoutPositionedObjects(bool) + 107 (ListHashSet.h:303)
5   com.apple.WebCore             	0x0111668e WebCore::RenderBlock::layoutBlock(bool) + 1038 (RenderBlock.cpp:633)
6   com.apple.WebCore             	0x01108bb8 WebCore::RenderBlock::layout() + 40 (RenderBlock.cpp:494)
7   com.apple.WebCore             	0x01193a18 WebCore::RenderView::layout() + 200 (RenderView.cpp:114)
8   com.apple.WebCore             	0x00f4f469 WebCore::FrameView::layout(bool) + 473 (FrameView.cpp:471)
9   com.apple.WebCore             	0x00ece6c0 WebCore::Document::updateLayout() + 112 (Document.cpp:1164)
10  com.apple.WebCore             	0x0113f426 WebCore::RenderLayer::hitTest(WebCore::HitTestRequest const&, WebCore::HitTestResult&) + 38 (IntPoint.h:65)
11  com.apple.WebCore             	0x00f0177e WebCore::EventHandler::hitTestResultAtPoint(WebCore::IntPoint const&, bool) + 110 (RefPtr.h:49)
12  com.apple.WebKit              	0x001bbd94 -[WebHTMLView(WebDocumentInternalProtocols) elementAtPoint:allowShadowContent:] + 148 (WebHTMLView.mm:5674)
13  com.apple.WebKit              	0x001af314 setCursor(NSWindow*, objc_selector*, _NSPoint) + 244 (WebHTMLView.mm:164)
14  com.apple.AppKit              	0x92a2003c _handleInvalidCursorRectsNote + 570
15  com.apple.CoreFoundation      	0x942689c2 __CFRunLoopDoObservers + 466
16  com.apple.CoreFoundation      	0x94269d25 CFRunLoopRunSpecific + 853
17  com.apple.CoreFoundation      	0x9426ad18 CFRunLoopRunInMode + 88
18  com.apple.HIToolbox           	0x91ea16a0 RunCurrentEventLoopInMode + 283
19  com.apple.HIToolbox           	0x91ea14b9 ReceiveNextEventCommon + 374
20  com.apple.HIToolbox           	0x91ea132d BlockUntilNextEventMatchingListInMode + 106
21  com.apple.AppKit              	0x929947d9 _DPSNextEvent + 657
22  com.apple.AppKit              	0x9299408e -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 128
23  com.apple.Safari              	0x0000965e 0x1000 + 34398
24  com.apple.AppKit              	0x9298d0c5 -[NSApplication run] + 795
25  com.apple.AppKit              	0x9295a30a NSApplicationMain + 574
26  com.apple.Safari              	0x00002a76 0x1000 + 6774

Thread 1:
0   libSystem.B.dylib             	0x93369bce __semwait_signal + 10
1   libSystem.B.dylib             	0x933948cd pthread_cond_wait$UNIX2003 + 73
2   com.apple.WebCore             	0x00fbdb4f WebCore::IconDatabase::syncThreadMainLoop() + 239 (IconDatabase.cpp:1311)
3   com.apple.WebCore             	0x00fbdc65 WebCore::IconDatabase::iconDatabaseSyncThread() + 181 (IconDatabase.cpp:1013)
4   libSystem.B.dylib             	0x93393c55 _pthread_start + 321
5   libSystem.B.dylib             	0x93393b12 thread_start + 34

Thread 2:
0   libSystem.B.dylib             	0x933629e6 mach_msg_trap + 10
1   libSystem.B.dylib             	0x9336a1dc mach_msg + 72
2   com.apple.CoreFoundation      	0x9426a0de CFRunLoopRunSpecific + 1806
3   com.apple.CoreFoundation      	0x9426ad18 CFRunLoopRunInMode + 88
4   com.apple.CFNetwork           	0x9493c6cc CFURLCacheWorkerThread(void*) + 396
5   libSystem.B.dylib             	0x93393c55 _pthread_start + 321
6   libSystem.B.dylib             	0x93393b12 thread_start + 34

Thread 3:
0   libSystem.B.dylib             	0x933629e6 mach_msg_trap + 10
1   libSystem.B.dylib             	0x9336a1dc mach_msg + 72
2   com.apple.CoreFoundation      	0x9426a0de CFRunLoopRunSpecific + 1806
3   com.apple.CoreFoundation      	0x9426ad18 CFRunLoopRunInMode + 88
4   com.apple.Foundation          	0x95e62ac0 +[NSURLConnection(NSURLConnectionReallyInternal) _resourceLoadLoop:] + 320
5   com.apple.Foundation          	0x95dff5ad -[NSThread main] + 45
6   com.apple.Foundation          	0x95dff154 __NSThread__main__ + 308
7   libSystem.B.dylib             	0x93393c55 _pthread_start + 321
8   libSystem.B.dylib             	0x93393b12 thread_start + 34

Thread 4:
0   libSystem.B.dylib             	0x933b2b3a select$DARWIN_EXTSN + 10
1   libSystem.B.dylib             	0x93393c55 _pthread_start + 321
2   libSystem.B.dylib             	0x93393b12 thread_start + 34

Thread 5:
0   libSystem.B.dylib             	0x933629e6 mach_msg_trap + 10
1   libSystem.B.dylib             	0x9336a1dc mach_msg + 72
2   com.apple.CoreFoundation      	0x9426a0de CFRunLoopRunSpecific + 1806
3   com.apple.CoreFoundation      	0x9426ad18 CFRunLoopRunInMode + 88
4   com.apple.CFNetwork           	0x94989db9 _KeychainThread + 230
5   libSystem.B.dylib             	0x93393c55 _pthread_start + 321
6   libSystem.B.dylib             	0x93393b12 thread_start + 34

Thread 6:
0   libSystem.B.dylib             	0x933629e6 mach_msg_trap + 10
1   libSystem.B.dylib             	0x9336a1dc mach_msg + 72
2   ...romedia.Flash Player.plugin	0x1a658341 memcopy_mmx + 709497
3   libSystem.B.dylib             	0x93393c55 _pthread_start + 321
4   libSystem.B.dylib             	0x93393b12 thread_start + 34

Thread 7:
0   libSystem.B.dylib             	0x93362a2e semaphore_wait_signal_trap + 10
1   libSystem.B.dylib             	0x93394dc6 _pthread_cond_wait + 1267
2   libSystem.B.dylib             	0x933da8bb pthread_cond_wait + 48
3   ...romedia.Flash Player.plugin	0x1a51f572 0x1a190000 + 3732850
4   ...romedia.Flash Player.plugin	0x1a556e68 Flash_EnforceLocalSecurity + 124992
5   ...romedia.Flash Player.plugin	0x1a51f81c 0x1a190000 + 3733532
6   libSystem.B.dylib             	0x93393c55 _pthread_start + 321
7   libSystem.B.dylib             	0x93393b12 thread_start + 34

Thread 8:
0   libSystem.B.dylib             	0x93362a2e semaphore_wait_signal_trap + 10
1   libSystem.B.dylib             	0x93394dc6 _pthread_cond_wait + 1267
2   libSystem.B.dylib             	0x933da8bb pthread_cond_wait + 48
3   ...romedia.Flash Player.plugin	0x1a51f572 0x1a190000 + 3732850
4   ...romedia.Flash Player.plugin	0x1a556e68 Flash_EnforceLocalSecurity + 124992
5   ...romedia.Flash Player.plugin	0x1a51f81c 0x1a190000 + 3733532
6   libSystem.B.dylib             	0x93393c55 _pthread_start + 321
7   libSystem.B.dylib             	0x93393b12 thread_start + 34

Thread 9:
0   libSystem.B.dylib             	0x93362a46 semaphore_timedwait_signal_trap + 10
1   libSystem.B.dylib             	0x93394daf _pthread_cond_wait + 1244
2   libSystem.B.dylib             	0x93396633 pthread_cond_timedwait_relative_np + 47
3   com.apple.Foundation          	0x95e454fc -[NSCondition waitUntilDate:] + 236
4   com.apple.Foundation          	0x95e45310 -[NSConditionLock lockWhenCondition:beforeDate:] + 144
5   com.apple.Foundation          	0x95e45275 -[NSConditionLock lockWhenCondition:] + 69
6   com.apple.AppKit              	0x929fa7f0 -[NSUIHeartBeat _heartBeatThread:] + 753
7   com.apple.Foundation          	0x95dff5ad -[NSThread main] + 45
8   com.apple.Foundation          	0x95dff154 __NSThread__main__ + 308
9   libSystem.B.dylib             	0x93393c55 _pthread_start + 321
10  libSystem.B.dylib             	0x93393b12 thread_start + 34

Thread 10:
0   libSystem.B.dylib             	0x933cc5c6 __workq_ops + 10
1   libSystem.B.dylib             	0x933cc5f6 start_wqthread + 30

Thread 11:

Thread 12:
0   libSystem.B.dylib             	0x933629e6 mach_msg_trap + 10
1   libSystem.B.dylib             	0x9336a1dc mach_msg + 72
2   libSystem.B.dylib             	0x933859bf mach_port_insert_member + 133
3   com.apple.CoreFoundation      	0x9426925b CFRunLoopAddTimer + 363
4   com.apple.Safari              	0x0004af4f 0x1000 + 302927
5   com.apple.Foundation          	0x95dff5ad -[NSThread main] + 45
6   com.apple.Foundation          	0x95dff154 __NSThread__main__ + 308
7   libSystem.B.dylib             	0x93393c55 _pthread_start + 321
8   libSystem.B.dylib             	0x93393b12 thread_start + 34

Thread 0 crashed with X86 Thread State (32-bit):
  eax: 0x0142b768  ebx: 0x012e5557  ecx: 0x19a40310  edx: 0x00000007
  edi: 0x1ba1be00  esi: 0x00000007  ebp: 0xbfffe1b8  esp: 0xbfffe1a0
   ss: 0x0000001f  efl: 0x00010202  eip: 0x0112f752   cs: 0x00000017
   ds: 0x0000001f   es: 0x0000001f   fs: 0x00000000   gs: 0x00000037
  cr2: 0x00000037

Binary Images:
    0x1000 -   0x132fef  com.apple.Safari 3.1 (5525.9) <2015039426872d80a6de236eb89a3b12> /Applications/Safari.app/Contents/MacOS/Safari
  0x17a000 -   0x236fff  com.apple.WebKit 526+ (526+) <2aa00d37c10a7e5c5a2619c01624baa0> /Users/quiris/WebKit/WebKitBuild/Release/WebKit.framework/Versions/A/WebKit
  0x32f000 -   0x33eff8  SyndicationUI ??? (???) <56bd5db31ca37f7e176e588d8b060179> /System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI
  0x34c000 -   0x41aff7  com.apple.JavaScriptCore 526+ (526+) <e1b338ac980846fb86808215ab9da93d> /Users/quiris/WebKit/WebKitBuild/Release/JavaScriptCore.framework/Versions/A/JavaScriptCore
  0xdc0000 -  0x1418fff  com.apple.WebCore 526+ (526+) <f666488706d5169832f2a5b1da2418cd> /Users/quiris/WebKit/WebKitBuild/Release/WebCore.framework/Versions/A/WebCore
 0x1be5000 -  0x1be6ff3  ATSHI.dylib ??? (???) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/ATSHI.dylib
 0x1e44000 -  0x1f32fef  com.apple.RawCamera.bundle 2.0.2 (2.0.2) /System/Library/CoreServices/RawCamera.bundle/Contents/MacOS/RawCamera
 0x1fd3000 -  0x1fd8ff3  libCGXCoreImage.A.dylib ??? (???) <1d164317677d5eb499d27388a0f0bb29> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGXCoreImage.A.dylib
0x15d55000 - 0x15d56ff7 +com.google.GoogleNotifierQuickAddCMPlugin 1.9.100 (1.9.100.215) /Users/quiris/Library/Contextual Menu Items/Google Notifier Quick Add CM Plugin.plugin/Contents/MacOS/Google Notifier Quick Add CM Plugin
0x15d5b000 - 0x15d67ff6  com.apple.airport.diskmenu 1.2.1 (121.4) /System/Library/Contextual Menu Items/AirPort Disk Menu.plugin/Contents/MacOS/AirPort Disk Menu
0x15d6c000 - 0x15d6effe  com.apple.AutomatorCMM 1.1 (156) <df0822b8a335cb31d931850fe9d42ab4> /System/Library/Contextual Menu Items/AutomatorCMM.plugin/Contents/MacOS/AutomatorCMM
0x15d74000 - 0x15d75ffd  com.apple.BluetoothMenu 2.1 (2.1f14) /System/Library/Contextual Menu Items/BluetoothContextualMenu.plugin/Contents/MacOS/BluetoothContextualMenu
0x15d7a000 - 0x15d7dfff  com.apple.BezelServicesFW 1.4.624 (1.4.624) /System/Library/PrivateFrameworks/BezelServices.framework/Versions/A/BezelServices
0x15ea0000 - 0x15f0eff7  com.apple.Bluetooth 2.1 (2.1f14) <70a4e6ec34e101a812923b2422a4a386> /System/Library/Frameworks/IOBluetooth.framework/Versions/A/IOBluetooth
0x15f5a000 - 0x15f5ffff  com.apple.FolderActionsMenu 1.3.2 (1.3.2) <9ba69ef0bec96264a79fa28b3a5f058b> /System/Library/Contextual Menu Items/FolderActionsMenu.plugin/Contents/MacOS/FolderActionsMenu
0x169aa000 - 0x169aaffe  com.apple.JavaPluginCocoa 12.0.0 (12.0.0) <02a9f23a8bfc902c32ac0adfb66d6816> /Library/Internet Plug-Ins/JavaPluginCocoa.bundle/Contents/MacOS/JavaPluginCocoa
0x1870a000 - 0x18711ffd  com.apple.JavaVM 12.0.2 (12.0.2) <44b9536fe4d7c7fcb3506adb695a180f> /System/Library/Frameworks/JavaVM.framework/Versions/A/JavaVM
0x1a190000 - 0x1a78dff3 +com.macromedia.Flash Player.plugin 9.0.115 (1.0.4f60) <9fa57b6dc7ff4cfe9a518442325e91cb> /Library/Internet Plug-Ins/Flash Player.plugin/Contents/MacOS/Flash Player
0x1a8ce000 - 0x1a8edfed  com.apple.audio.CoreAudioKit 1.5 (1.5) <82f2e52c502db7f3b32349a54209a0fe> /System/Library/Frameworks/CoreAudioKit.framework/Versions/A/CoreAudioKit
0x8fe00000 - 0x8fe2da53  dyld 96.2 (???) <7af47d3b00b2268947563c7fa8c59a07> /usr/lib/dyld
0x900c7000 - 0x900c7ffd  com.apple.Accelerate.vecLib 3.4.2 (vecLib 3.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x900c8000 - 0x900d7ffe  com.apple.DSObjCWrappers.Framework 1.2.1 (1.2.1) <eac1c7b7c07ed3148c85934b6f656308> /System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
0x900d8000 - 0x90128ff7  com.apple.HIServices 1.7.0 (???) <f7e78891a6d08265c83dca8e378be1ea> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x90129000 - 0x9012efff  com.apple.backup.framework 1.0 (1.0) /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup
0x910c4000 - 0x91157fff  com.apple.ink.framework 101.3 (86) <bf3fa8927b4b8baae92381a976fd2079> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x9122c000 - 0x9132dfef  com.apple.PubSub 1.0.3 (65.1) /System/Library/Frameworks/PubSub.framework/Versions/A/PubSub
0x9132e000 - 0x9134cff3  com.apple.DirectoryService.Framework 3.5.1 (3.5.1) <96407dca4d6b1d10ae5ca1881e31b27a> /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x9134d000 - 0x91383fef  libtidy.A.dylib ??? (???) <e4d3e7399fb83d7f145f9b4ec8196242> /usr/lib/libtidy.A.dylib
0x9138e000 - 0x913adffa  libJPEG.dylib ??? (???) <0dd7e9d7fb22174b78205a944144f9c3> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x913ae000 - 0x913b0ff5  libRadiance.dylib ??? (???) <b9e04afa91e4b597a00797d67a7268fb> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x913b1000 - 0x913f6fef  com.apple.Metadata 10.5.2 (398.7) <73a6424c06effc474e699cde6883de99> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x913f7000 - 0x913f9fff  com.apple.securityhi 3.0 (30817) <dbe328cd62d603a952a4226342711e8b> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x913fa000 - 0x913faffc  com.apple.audio.units.AudioUnit 1.5 (1.5) /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x913fb000 - 0x91407fe7  com.apple.opengl 1.5.6 (1.5.6) <d599b1bb0f8a8da6fd125e2587b27776> /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x91408000 - 0x9140dfff  com.apple.CommonPanels 1.2.4 (85) <ea0665f57cd267609466ed8b2b20e893> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x9140e000 - 0x91473ffb  com.apple.ISSupport 1.6 (34) /System/Library/PrivateFrameworks/ISSupport.framework/Versions/A/ISSupport
0x91474000 - 0x9149ffe7  libauto.dylib ??? (???) <42d8422dc23a18071869fdf7b5d8fab5> /usr/lib/libauto.dylib
0x914a0000 - 0x914a0fff  com.apple.Carbon 136 (136) <9961570a497d79f13b8ea159826af42d> /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x914a1000 - 0x914a1ffd  com.apple.Accelerate 1.4.2 (Accelerate 1.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x914a2000 - 0x9155cfe3  com.apple.CoreServices.OSServices 224.4 (224.4) <ff5007ab220908ac54b6c661e447d593> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x9155d000 - 0x91bf6fff  com.apple.CoreGraphics 1.351.21 (???) <6c93fd21149f389129fe47fa6ef71880> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x91bf7000 - 0x91d75fff  com.apple.AddressBook.framework 4.1 (687.1) <b2f2f2c925eb080e53b841014e4f9a7c> /System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x91d76000 - 0x91d8efff  com.apple.openscripting 1.2.6 (???) <b8e553df643f2aec68fa968b3b459b2b> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x91d8f000 - 0x91e70ff7  libxml2.2.dylib ??? (???) <ccd6e2cb514fcd0b541bf153aae13481> /usr/lib/libxml2.2.dylib
0x91e71000 - 0x92179fff  com.apple.HIToolbox 1.5.2 (???) <7449d6f2da33ded6936243a92e307459> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x9217a000 - 0x9218affc  com.apple.LangAnalysis 1.6.4 (1.6.4) <cbeb17ab39f28351fe2ab5b82bf465bc> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x9218b000 - 0x9220aff5  com.apple.SearchKit 1.2.0 (1.2.0) <277b460da86bc222785159fe77e2e2ed> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x9220b000 - 0x9220dfff  com.apple.CrashReporterSupport 10.5.0 (156) <a9cf092be7a554b3cda00fe946d1c1a7> /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/CrashReporterSupport
0x9220e000 - 0x9229aff7  com.apple.LaunchServices 286.5 (286.5) <33c3ae54abb276b61a99d4c764d883e2> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x9229b000 - 0x92574ff3  com.apple.CoreServices.CarbonCore 785.8 (785.8) <827c228e7d717b397cdb4941eba69553> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x92575000 - 0x9257cfe9  libgcc_s.1.dylib ??? (???) <a9ab135a5f81f6e345527df87f51bfc9> /usr/lib/libgcc_s.1.dylib
0x92672000 - 0x927b7ff7  com.apple.ImageIO.framework 2.0.1 (2.0.1) <68ba11e689a9ca30f8310935cd1e02d6> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x927b8000 - 0x92814ff7  com.apple.htmlrendering 68 (1.1.3) <fe87a9dede38db00e6c8949942c6bd4f> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x92815000 - 0x92830ffb  libPng.dylib ??? (???) <85ca18172d7a4b5a5be3574e4e879880> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x928be000 - 0x928beff8  com.apple.Cocoa 6.5 (???) <e064f94d969ce25cb7de3cfb980c3249> /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x928bf000 - 0x928eefe3  com.apple.AE 402.2 (402.2) <e01596187e91af5d48653920017b8c8e> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x928ef000 - 0x92921fff  com.apple.LDAPFramework 1.4.3 (106) <94a26abfc0a5d88c752763b44a10ae51> /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x92954000 - 0x93151fef  com.apple.AppKit 6.5.2 (949.26) <bc4593edd8a224409fb6953a354505a0> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x93152000 - 0x93162fff  com.apple.speech.synthesis.framework 3.6.59 (3.6.59) <4ffef145fad3d4d787e0c33eab26b336> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x931e3000 - 0x9326aff7  libsqlite3.0.dylib ??? (???) <6978bbcca4277d6ae9f042beff643f7d> /usr/lib/libsqlite3.0.dylib
0x9326b000 - 0x93272ffe  libbsm.dylib ??? (???) <d25c63378a5029648ffd4b4669be31bf> /usr/lib/libbsm.dylib
0x93273000 - 0x932d0ffb  libstdc++.6.dylib ??? (???) <04b812dcec670daa8b7d2852ab14be60> /usr/lib/libstdc++.6.dylib
0x932d1000 - 0x932d9fff  com.apple.DiskArbitration 2.2.1 (2.2.1) <75b0c8d8940a8a27816961dddcac8e0f> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x932da000 - 0x932e9fff  libsasl2.2.dylib ??? (???) <b9e1ca0b6612e280b6cbea6df0eec5f6> /usr/lib/libsasl2.2.dylib
0x9335d000 - 0x93361fff  libGIF.dylib ??? (???) <b8f61e346fa243a7138910bed3dcdb6b> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x93362000 - 0x934c1ff3  libSystem.B.dylib ??? (???) <4899376234e55593b22fc370935f8cdf> /usr/lib/libSystem.B.dylib
0x934c2000 - 0x9354bfe3  com.apple.DesktopServices 1.4.5 (1.4.5) <8b264cd6abbbd750928c637e1247269d> /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x93708000 - 0x9371efe7  com.apple.CoreVideo 1.5.0 (1.5.0) <7e010557527a0e6d49147c297d16850a> /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo
0x93758000 - 0x9375ffff  com.apple.agl 3.0.9 (AGL-3.0.9) <7dac4a7cb0de2f6d08ae71c1249379e3> /System/Library/Frameworks/AGL.framework/Versions/A/AGL
0x93760000 - 0x9379afff  com.apple.coreui 1.1 (61) /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI
0x9379b000 - 0x9382eff3  com.apple.ApplicationServices.ATS 3.2 (???) <cdf31bd0ac7de54a35ee2d27cf86b6be> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x93905000 - 0x93a29fe3  com.apple.audio.toolbox.AudioToolbox 1.5.1 (1.5.1) /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x93a2a000 - 0x93ad1feb  com.apple.QD 3.11.52 (???) <c72bd7bd2ce12694c3640a731d1ad878> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x93d59000 - 0x93d6dff3  com.apple.ImageCapture 4.0 (5.0.0) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x93dbd000 - 0x93dbdff8  com.apple.ApplicationServices 34 (34) <8f910fa65f01d401ad8d04cc933cf887> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x93e14000 - 0x93e8eff8  com.apple.print.framework.PrintCore 5.5.2 (245.1) <3c9de512e95fbd838694ee5008d56a28> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x93e8f000 - 0x93fc7ff7  libicucore.A.dylib ??? (???) <afcea652ff2ec36885b2c81c57d06d4c> /usr/lib/libicucore.A.dylib
0x93fe6000 - 0x94040ff7  com.apple.CoreText 2.0.1 (???) <07494945ad1e3f5395599f42748457cc> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x94041000 - 0x94108ff2  com.apple.vImage 3.0 (3.0) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x941e9000 - 0x941f7ffd  libz.1.dylib ??? (???) <5ddd8539ae2ebfd8e7cc1c57525385c7> /usr/lib/libz.1.dylib
0x941f8000 - 0x9432afef  com.apple.CoreFoundation 6.5.1 (476.10) <d5bed2688a5eea11a6dc3a3c5c17030e> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x9435b000 - 0x9437bff2  libGL.dylib ??? (???) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x943c1000 - 0x943faffe  com.apple.securityfoundation 3.0 (32989) <e9171eda22c69c884a04a001aeb526e0> /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x943fb000 - 0x9470ffe2  com.apple.QuickTime 7.4.1 (14) <1a4838d29e0804a2a102f03c053600f0> /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x9472d000 - 0x94812ff3  com.apple.CoreData 100.1 (186) <8e28162ef2288692615b52acc01f8b54> /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x948db000 - 0x948e5feb  com.apple.audio.SoundManager 3.9.2 (3.9.2) <0f2ba6e891d3761212cf5a5e6134d683> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x948e6000 - 0x948f1fe7  libCSync.A.dylib ??? (???) <482d16ba55f91a5dc05f78cc9db707a7> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x948f2000 - 0x94930ff7  libGLImage.dylib ??? (???) <090de775838db03ddc710f57abbf6218> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x94931000 - 0x949a8fe3  com.apple.CFNetwork 221.5 (221.5) <5474cdd7d2a8b2e8059de249c702df9e> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x949a9000 - 0x94a25feb  com.apple.audio.CoreAudio 3.1.0 (3.1) <483e0d3879d52ba9ac10b4bcfb0728d6> /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x94a26000 - 0x94a29fff  com.apple.help 1.1 (36) <b507b08e484cb89033e9cf23062d77de> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x94a2a000 - 0x94adcffb  libcrypto.0.9.7.dylib ??? (???) <330b0e48e67faffc8c22dfc069ca7a47> /usr/lib/libcrypto.0.9.7.dylib
0x94add000 - 0x94ae4ff7  libCGATS.A.dylib ??? (???) <dd3161e6653fa6400b9ef9c144309fa5> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib
0x94ae5000 - 0x94ae6ffc  libffi.dylib ??? (???) <a3b573eb950ca583290f7b2b4c486d09> /usr/lib/libffi.dylib
0x94ae7000 - 0x94b05fff  libresolv.9.dylib ??? (???) <0629b6dcd71f4aac6a891cbe26253e85> /usr/lib/libresolv.9.dylib
0x94b57000 - 0x94b6dfff  com.apple.DictionaryServices 1.0.0 (1.0.0) <ad0aa0252e3323d182e17f50defe56fc> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices
0x94b6e000 - 0x94bf9fff  com.apple.framework.IOKit 1.5.1 (???) <a17f9f5ea7e8016a467e67349f4d3d03> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x94bfa000 - 0x94c77fef  libvMisc.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x94c78000 - 0x94c83ff9  com.apple.helpdata 1.0 (14) /System/Library/PrivateFrameworks/HelpData.framework/Versions/A/HelpData
0x94c98000 - 0x9516bfde  libGLProgrammability.dylib ??? (???) <a3d68f17f37ff55a3e61aca1e3aee522> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib
0x9516c000 - 0x951b6fe1  com.apple.securityinterface 3.0 (32532) <f521dae416ce7a3bdd594b0d4e2fb517> /System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
0x951b7000 - 0x955c7fef  libBLAS.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x955c8000 - 0x95986fea  libLAPACK.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x95ae0000 - 0x95b1ffef  libTIFF.dylib ??? (???) <76301b3506f310fb454b58897c8d0a9f> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x95b20000 - 0x95bfffff  libobjc.A.dylib ??? (???) <a53206274b6c2d42691f677863f379ae> /usr/lib/libobjc.A.dylib
0x95c00000 - 0x95ccbfff  com.apple.ColorSync 4.5.0 (4.5.0) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x95ccc000 - 0x95d7cfff  edu.mit.Kerberos 6.0.12 (6.0.12) <9e98dfb4cde8b0510fdd972dc9fa1dc9> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
0x95db2000 - 0x95df4fef  com.apple.NavigationServices 3.5.1 (161) <cc6bd78eabf1e2e7166914e9f12f5850> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x95df5000 - 0x9606ffe7  com.apple.Foundation 6.5.4 (677.15) <6216196287f98a65ddb654d04d773e7b> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x96088000 - 0x960e1ff7  libGLU.dylib ??? (???) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x960e2000 - 0x96478ff7  com.apple.QuartzCore 1.5.1 (1.5.1) <665c80f6e28555b303020c8007c36b8b> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x96479000 - 0x9647dfff  libmathCommon.A.dylib ??? (???) /usr/lib/system/libmathCommon.A.dylib
0x9647e000 - 0x9647effd  com.apple.vecLib 3.4.2 (vecLib 3.4.2) /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib
0x9654e000 - 0x9657bfeb  libvDSP.dylib ??? (???) <b232c018ddd040ec4e2c2af632dd497f> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x9657c000 - 0x965a2fff  libcups.2.dylib ??? (???) <85ce204da14d62d6a3a5a9adfba01455> /usr/lib/libcups.2.dylib
0x96bf5000 - 0x96c1dff7  com.apple.shortcut 1 (1.0) <057783867138902b52bc0941fedb74d1> /System/Library/PrivateFrameworks/Shortcut.framework/Versions/A/Shortcut
0x96c1e000 - 0x96c42feb  libssl.0.9.7.dylib ??? (???) <acee7fc534674498dcac211318aa23e8> /usr/lib/libssl.0.9.7.dylib
0x96d7b000 - 0x96d7bffb  com.apple.installserver.framework 1.0 (8) /System/Library/PrivateFrameworks/InstallServer.framework/Versions/A/InstallServer
0x96d7c000 - 0x96da0fff  libxslt.1.dylib ??? (???) <4933ddc7f6618743197aadc85b33b5ab> /usr/lib/libxslt.1.dylib
0x96da1000 - 0x96f6cff7  com.apple.security 5.0.2 (33001) <0788969ffe7961153219be10786da436> /System/Library/Frameworks/Security.framework/Versions/A/Security
0x96fda000 - 0x96fe0fff  com.apple.print.framework.Print 218.0.2 (220.1) <8bf7ef71216376d12fcd5ec17e43742c> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x96fe1000 - 0x97022fe7  libRIP.A.dylib ??? (???) <9d42e83d860433f9126c4871d1fe0ce8> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x97023000 - 0x9705afff  com.apple.SystemConfiguration 1.9.1 (1.9.1) <8a76e429301afe4eba1330bfeaabd9f2> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x9705b000 - 0x9705bffa  com.apple.CoreServices 32 (32) <2fcc8f3bd5bbfc000b476cad8e6a3dd2> /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x9705d000 - 0x97066fff  com.apple.speech.recognition.framework 3.7.24 (3.7.24) <d3180f9edbd9a5e6f283d6156aa3c602> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0xba900000 - 0xba916fff  libJapaneseConverter.dylib ??? (???) <1e92e348e73fc6fce723936c11e4b25c> /System/Library/CoreServices/Encodings/libJapaneseConverter.dylib
0xbad00000 - 0xbad01fff  libLatin2Converter.dylib ??? (???) <2448a9d19ea5bd0ad43091ebcbffd197> /System/Library/CoreServices/Encodings/libLatin2Converter.dylib
0xfffe8000 - 0xfffebfff  libobjc.A.dylib ??? (???) /usr/lib/libobjc.A.dylib
0xffff0000 - 0xffff1780  libSystem.B.dylib ??? (???) /usr/lib/libSystem.B.dylib

[Robert Blaut]

The crash bug also occurs sometimes in recently downloaded Webkit r30459 running on different machine.

Process:         Safari [583]
Path:            /Applications/WebKit.app/Contents/MacOS/WebKit
Identifier:      org.webkit.nightly.WebKit
Version:         r30459 (30459)
Code Type:       X86 (Native)
Parent Process:  launchd [92]

Date/Time:       2008-02-21 23:41:33.329 +0100
OS Version:      Mac OS X 10.5.2 (9C31)
Report Version:  6

Exception Type:  EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000037
Crashed Thread:  0

Thread 0 Crashed:
0   com.apple.WebCore             	0x00dab6f2 WebCore::RenderFlow::deleteLineBoxes() + 34
1   com.apple.WebCore             	0x00f61599 WebCore::RenderBlock::layoutInlineChildren(bool, int&, int&) + 473
2   com.apple.WebCore             	0x00d924fa WebCore::RenderBlock::layoutBlock(bool) + 730
3   com.apple.WebCore             	0x00d84b58 WebCore::RenderBlock::layout() + 40
4   com.apple.WebCore             	0x00d8a93b WebCore::RenderBlock::layoutPositionedObjects(bool) + 107
5   com.apple.WebCore             	0x00d9262e WebCore::RenderBlock::layoutBlock(bool) + 1038
6   com.apple.WebCore             	0x00d84b58 WebCore::RenderBlock::layout() + 40
7   com.apple.WebCore             	0x00e0f9b8 WebCore::RenderView::layout() + 200
8   com.apple.WebCore             	0x00bcb3f9 WebCore::FrameView::layout(bool) + 473
9   com.apple.WebCore             	0x00f2ac6c -[WebCoreFrameBridge forceLayoutAdjustingViewSize:] + 44
10  com.apple.WebKit              	0x001b831d -[WebHTMLView layoutToMinimumPageWidth:maximumPageWidth:adjustingViewSize:] + 381
11  com.apple.WebKit              	0x001b8364 -[WebHTMLView layout] + 52
12  com.apple.WebKit              	0x001bdac4 -[WebHTMLView(WebInternal) _web_layoutIfNeededRecursive] + 36
13  com.apple.WebKit              	0x001b46f2 -[WebHTMLView(WebPrivate) viewWillDraw] + 114
14  com.apple.AppKit              	0x924d8516 -[NSView viewWillDraw] + 579
15  com.apple.AppKit              	0x924d8516 -[NSView viewWillDraw] + 579
16  com.apple.AppKit              	0x924d8516 -[NSView viewWillDraw] + 579
17  com.apple.AppKit              	0x924d8516 -[NSView viewWillDraw] + 579
18  com.apple.AppKit              	0x924d8516 -[NSView viewWillDraw] + 579
19  com.apple.AppKit              	0x924d8516 -[NSView viewWillDraw] + 579
20  com.apple.AppKit              	0x924d8516 -[NSView viewWillDraw] + 579
21  com.apple.AppKit              	0x924d8516 -[NSView viewWillDraw] + 579
22  com.apple.AppKit              	0x924d7bf8 -[NSView _sendViewWillDrawInRect:] + 1015
23  com.apple.AppKit              	0x92419ec9 -[NSView displayIfNeeded] + 869
24  com.apple.AppKit              	0x92419ab9 -[NSWindow displayIfNeeded] + 189
25  com.apple.Safari              	0x000233a9 0x1000 + 140201
26  com.apple.AppKit              	0x924198e0 _handleWindowNeedsDisplay + 436
27  com.apple.CoreFoundation      	0x904b39c2 __CFRunLoopDoObservers + 466
28  com.apple.CoreFoundation      	0x904b4d25 CFRunLoopRunSpecific + 853
29  com.apple.CoreFoundation      	0x904b5d18 CFRunLoopRunInMode + 88
30  com.apple.HIToolbox           	0x9061b6a0 RunCurrentEventLoopInMode + 283
31  com.apple.HIToolbox           	0x9061b4b9 ReceiveNextEventCommon + 374
32  com.apple.HIToolbox           	0x9061b32d BlockUntilNextEventMatchingListInMode + 106
33  com.apple.AppKit              	0x924177d9 _DPSNextEvent + 657
34  com.apple.AppKit              	0x9241708e -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 128
35  com.apple.Safari              	0x0000965e 0x1000 + 34398
36  com.apple.AppKit              	0x924100c5 -[NSApplication run] + 795
37  com.apple.AppKit              	0x923dd30a NSApplicationMain + 574
38  com.apple.Safari              	0x00002a76 0x1000 + 6774

Thread 1:
0   libSystem.B.dylib             	0x916f7bce __semwait_signal + 10
1   libSystem.B.dylib             	0x917228cd pthread_cond_wait$UNIX2003 + 73
2   com.apple.WebCore             	0x00c39aef WebCore::IconDatabase::syncThreadMainLoop() + 239
3   com.apple.WebCore             	0x00c39c05 WebCore::IconDatabase::iconDatabaseSyncThread() + 181
4   libSystem.B.dylib             	0x91721c55 _pthread_start + 321
5   libSystem.B.dylib             	0x91721b12 thread_start + 34

Thread 2:
0   libSystem.B.dylib             	0x916f09e6 mach_msg_trap + 10
1   libSystem.B.dylib             	0x916f81dc mach_msg + 72
2   com.apple.CoreFoundation      	0x904b50de CFRunLoopRunSpecific + 1806
3   com.apple.CoreFoundation      	0x904b5d18 CFRunLoopRunInMode + 88
4   com.apple.CFNetwork           	0x92fc56cc CFURLCacheWorkerThread(void*) + 396
5   libSystem.B.dylib             	0x91721c55 _pthread_start + 321
6   libSystem.B.dylib             	0x91721b12 thread_start + 34

Thread 3:
0   libSystem.B.dylib             	0x916f09e6 mach_msg_trap + 10
1   libSystem.B.dylib             	0x916f81dc mach_msg + 72
2   com.apple.CoreFoundation      	0x904b50de CFRunLoopRunSpecific + 1806
3   com.apple.CoreFoundation      	0x904b5d18 CFRunLoopRunInMode + 88
4   com.apple.Foundation          	0x96b73ac0 +[NSURLConnection(NSURLConnectionReallyInternal) _resourceLoadLoop:] + 320
5   com.apple.Foundation          	0x96b105ad -[NSThread main] + 45
6   com.apple.Foundation          	0x96b10154 __NSThread__main__ + 308
7   libSystem.B.dylib             	0x91721c55 _pthread_start + 321
8   libSystem.B.dylib             	0x91721b12 thread_start + 34

Thread 4:
0   libSystem.B.dylib             	0x91740b3a select$DARWIN_EXTSN + 10
1   libSystem.B.dylib             	0x91721c55 _pthread_start + 321
2   libSystem.B.dylib             	0x91721b12 thread_start + 34

Thread 5:
0   libSystem.B.dylib             	0x916f0a46 semaphore_timedwait_signal_trap + 10
1   libSystem.B.dylib             	0x91722daf _pthread_cond_wait + 1244
2   libSystem.B.dylib             	0x91724633 pthread_cond_timedwait_relative_np + 47
3   com.apple.Foundation          	0x96b564fc -[NSCondition waitUntilDate:] + 236
4   com.apple.Foundation          	0x96b56310 -[NSConditionLock lockWhenCondition:beforeDate:] + 144
5   com.apple.Foundation          	0x96b56275 -[NSConditionLock lockWhenCondition:] + 69
6   com.apple.AppKit              	0x9247d7f0 -[NSUIHeartBeat _heartBeatThread:] + 753
7   com.apple.Foundation          	0x96b105ad -[NSThread main] + 45
8   com.apple.Foundation          	0x96b10154 __NSThread__main__ + 308
9   libSystem.B.dylib             	0x91721c55 _pthread_start + 321
10  libSystem.B.dylib             	0x91721b12 thread_start + 34

Thread 6:
0   libSystem.B.dylib             	0x916f09e6 mach_msg_trap + 10
1   libSystem.B.dylib             	0x916f81dc mach_msg + 72
2   com.apple.CoreFoundation      	0x904b50de CFRunLoopRunSpecific + 1806
3   com.apple.CoreFoundation      	0x904b5d18 CFRunLoopRunInMode + 88
4   com.apple.Foundation          	0x96b44b15 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 213
5   com.apple.Foundation          	0x96b50c34 -[NSRunLoop(NSRunLoop) run] + 84
6   com.apple.Safari              	0x0004af60 0x1000 + 302944
7   com.apple.Foundation          	0x96b105ad -[NSThread main] + 45
8   com.apple.Foundation          	0x96b10154 __NSThread__main__ + 308
9   libSystem.B.dylib             	0x91721c55 _pthread_start + 321
10  libSystem.B.dylib             	0x91721b12 thread_start + 34

Thread 0 crashed with X86 Thread State (32-bit):
  eax: 0x010a7768  ebx: 0x00f614f7  ecx: 0x185c5310  edx: 0x00000007
  edi: 0x18ba88c0  esi: 0x00000007  ebp: 0xbfffdc98  esp: 0xbfffdc80
   ss: 0x0000001f  efl: 0x00010202  eip: 0x00dab6f2   cs: 0x00000017
   ds: 0x0000001f   es: 0x0000001f   fs: 0x00000000   gs: 0x00000037
  cr2: 0x00000037

Binary Images:
    0x1000 -   0x132fef  com.apple.Safari 3.1 (5525.9) <2015039426872d80a6de236eb89a3b12> /Applications/Safari.app/Contents/MacOS/Safari
  0x177000 -   0x178ffc +WebKitNightlyEnabler.dylib ??? (???) /Applications/WebKit.app/Contents/Resources/WebKitNightlyEnabler.dylib
  0x17d000 -   0x239fff  com.apple.WebKit 526+ (526+) /Applications/WebKit.app/Contents/Frameworks/10.5/WebKit.framework/Versions/A/WebKit
  0x2d5000 -   0x2e4ff8  SyndicationUI ??? (???) <56bd5db31ca37f7e176e588d8b060179> /System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI
  0x2f2000 -   0x3c0ff7  com.apple.JavaScriptCore 526+ (526+) /Applications/WebKit.app/Contents/Frameworks/10.5/JavaScriptCore.framework/Versions/A/JavaScriptCore
  0xa3c000 -  0x1094fff  com.apple.WebCore 526+ (526+) /Applications/WebKit.app/Contents/Frameworks/10.5/WebCore.framework/Versions/A/WebCore
 0x14e8000 -  0x14edff3  libCGXCoreImage.A.dylib ??? (???) <978986709159e5fe9e094df5efddac1d> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGXCoreImage.A.dylib
 0x1700000 -  0x17eefef  com.apple.RawCamera.bundle 2.0.2 (2.0.2) /System/Library/CoreServices/RawCamera.bundle/Contents/MacOS/RawCamera
0x175f8000 - 0x175f8ffe  com.apple.JavaPluginCocoa 12.0.0 (12.0.0) <02a9f23a8bfc902c32ac0adfb66d6816> /Library/Internet Plug-Ins/JavaPluginCocoa.bundle/Contents/MacOS/JavaPluginCocoa
0x17d02000 - 0x17d09ffd  com.apple.JavaVM 12.0.2 (12.0.2) <44b9536fe4d7c7fcb3506adb695a180f> /System/Library/Frameworks/JavaVM.framework/Versions/A/JavaVM
0x17fa0000 - 0x17fa1ff3  ATSHI.dylib ??? (???) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/ATSHI.dylib
0x1a040000 - 0x1a05ffed  com.apple.audio.CoreAudioKit 1.5 (1.5) <82f2e52c502db7f3b32349a54209a0fe> /System/Library/Frameworks/CoreAudioKit.framework/Versions/A/CoreAudioKit
0x1a107000 - 0x1a174fff +com.DivXInc.DivXDecoder 6.6.0 (6.6.0) /Library/QuickTime/DivX Decoder.component/Contents/MacOS/DivX Decoder
0x1a4c1000 - 0x1aabeff3 +com.macromedia.Flash Player.plugin 9.0.115 (1.0.4f60) <9fa57b6dc7ff4cfe9a518442325e91cb> /Library/Internet Plug-Ins/Flash Player.plugin/Contents/MacOS/Flash Player
0x8fe00000 - 0x8fe2da53  dyld 96.2 (???) <7af47d3b00b2268947563c7fa8c59a07> /usr/lib/dyld
0x90003000 - 0x90012ffe  com.apple.DSObjCWrappers.Framework 1.2.1 (1.2.1) <eac1c7b7c07ed3148c85934b6f656308> /System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
0x90013000 - 0x9001cfff  com.apple.speech.recognition.framework 3.7.24 (3.7.24) <d3180f9edbd9a5e6f283d6156aa3c602> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x9001d000 - 0x90023fff  com.apple.print.framework.Print 218.0.2 (220.1) <8bf7ef71216376d12fcd5ec17e43742c> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x90024000 - 0x90024ff8  com.apple.Cocoa 6.5 (???) <e064f94d969ce25cb7de3cfb980c3249> /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x90025000 - 0x903bbff7  com.apple.QuartzCore 1.5.1 (1.5.1) <665c80f6e28555b303020c8007c36b8b> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x903bc000 - 0x90436ff8  com.apple.print.framework.PrintCore 5.5.2 (245.1) <3c9de512e95fbd838694ee5008d56a28> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x9043c000 - 0x9043cffc  com.apple.audio.units.AudioUnit 1.5 (1.5) /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x9043d000 - 0x9043dfff  com.apple.Carbon 136 (136) <98a5e3bc0c4fa44bbb09713bb88707fe> /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x9043e000 - 0x90442fff  libGIF.dylib ??? (???) <d4234e6f5e5f530bdafb969157f1f17b> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x90443000 - 0x90575fef  com.apple.CoreFoundation 6.5.1 (476.10) <d5bed2688a5eea11a6dc3a3c5c17030e> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x905a8000 - 0x905eafef  com.apple.NavigationServices 3.5.1 (161) <cc6bd78eabf1e2e7166914e9f12f5850> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x905eb000 - 0x908f3fff  com.apple.HIToolbox 1.5.2 (???) <7449d6f2da33ded6936243a92e307459> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x908f4000 - 0x908f4ffd  com.apple.Accelerate.vecLib 3.4.2 (vecLib 3.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x908f5000 - 0x90933ff7  libGLImage.dylib ??? (???) <090de775838db03ddc710f57abbf6218> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x90934000 - 0x9094afe7  com.apple.CoreVideo 1.5.0 (1.5.0) <7e010557527a0e6d49147c297d16850a> /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo
0x9094b000 - 0x909b0ffb  com.apple.ISSupport 1.6 (34) /System/Library/PrivateFrameworks/ISSupport.framework/Versions/A/ISSupport
0x909b1000 - 0x90ae9ff7  libicucore.A.dylib ??? (???) <afcea652ff2ec36885b2c81c57d06d4c> /usr/lib/libicucore.A.dylib
0x90aea000 - 0x90aecfff  com.apple.securityhi 3.0 (30817) <2b2854123fed609d1820d2779e2e0963> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x90ce7000 - 0x90d12fe7  libauto.dylib ??? (???) <42d8422dc23a18071869fdf7b5d8fab5> /usr/lib/libauto.dylib
0x90d13000 - 0x90d6dff7  com.apple.CoreText 2.0.1 (???) <07494945ad1e3f5395599f42748457cc> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x90d6e000 - 0x90d9dfe3  com.apple.AE 402.2 (402.2) <e01596187e91af5d48653920017b8c8e> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x90f03000 - 0x90f0dfeb  com.apple.audio.SoundManager 3.9.2 (3.9.2) <0f2ba6e891d3761212cf5a5e6134d683> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x90f0e000 - 0x90fc8fe3  com.apple.CoreServices.OSServices 224.4 (224.4) <ff5007ab220908ac54b6c661e447d593> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x91101000 - 0x91108ff7  libCGATS.A.dylib ??? (???) <9b29a5500efe01cc3adea67bbc42568e> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib
0x911c7000 - 0x911ceffe  libbsm.dylib ??? (???) <d25c63378a5029648ffd4b4669be31bf> /usr/lib/libbsm.dylib
0x911e3000 - 0x91307fe3  com.apple.audio.toolbox.AudioToolbox 1.5.1 (1.5.1) /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x91308000 - 0x9133afff  com.apple.LDAPFramework 1.4.3 (106) <3a5c9df6032143cd6bc2658a9d328d8e> /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x9140f000 - 0x9140fffb  com.apple.installserver.framework 1.0 (8) /System/Library/PrivateFrameworks/InstallServer.framework/Versions/A/InstallServer
0x914d8000 - 0x914fcfeb  libssl.0.9.7.dylib ??? (???) <acee7fc534674498dcac211318aa23e8> /usr/lib/libssl.0.9.7.dylib
0x91507000 - 0x9153efff  com.apple.SystemConfiguration 1.9.1 (1.9.1) <8a76e429301afe4eba1330bfeaabd9f2> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x9153f000 - 0x91606ff2  com.apple.vImage 3.0 (3.0) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x91607000 - 0x91692fff  com.apple.framework.IOKit 1.5.1 (???) <a17f9f5ea7e8016a467e67349f4d3d03> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x91693000 - 0x916efff7  com.apple.htmlrendering 68 (1.1.3) <fe87a9dede38db00e6c8949942c6bd4f> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x916f0000 - 0x9184fff3  libSystem.B.dylib ??? (???) <4899376234e55593b22fc370935f8cdf> /usr/lib/libSystem.B.dylib
0x9191f000 - 0x91964fef  com.apple.Metadata 10.5.2 (398.7) <73a6424c06effc474e699cde6883de99> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x91965000 - 0x91989fff  libxslt.1.dylib ??? (???) <4933ddc7f6618743197aadc85b33b5ab> /usr/lib/libxslt.1.dylib
0x9198a000 - 0x9198aff8  com.apple.ApplicationServices 34 (34) <8f910fa65f01d401ad8d04cc933cf887> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x9198b000 - 0x91996ff9  com.apple.helpdata 1.0 (14) /System/Library/PrivateFrameworks/HelpData.framework/Versions/A/HelpData
0x91997000 - 0x919b5ff3  com.apple.DirectoryService.Framework 3.5.1 (3.5.1) <96407dca4d6b1d10ae5ca1881e31b27a> /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x91a29000 - 0x91a79ff7  com.apple.HIServices 1.7.0 (???) <f7e78891a6d08265c83dca8e378be1ea> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x91a7a000 - 0x91c45ff7  com.apple.security 5.0.2 (33001) <0788969ffe7961153219be10786da436> /System/Library/Frameworks/Security.framework/Versions/A/Security
0x91c46000 - 0x91f1fff3  com.apple.CoreServices.CarbonCore 785.8 (785.8) <827c228e7d717b397cdb4941eba69553> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x91f20000 - 0x91fa9fe3  com.apple.DesktopServices 1.4.5 (1.4.5) <8b264cd6abbbd750928c637e1247269d> /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x91faa000 - 0x91facfff  com.apple.CrashReporterSupport 10.5.0 (156) <3088b785b10d03504ed02f3fee5d3aab> /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/CrashReporterSupport
0x91fad000 - 0x91fccffa  libJPEG.dylib ??? (???) <0cfb80109d624beb9ceb3c43b6c5ec10> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x91fdb000 - 0x92082feb  com.apple.QD 3.11.52 (???) <c72bd7bd2ce12694c3640a731d1ad878> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x92083000 - 0x92162fff  libobjc.A.dylib ??? (???) <a53206274b6c2d42691f677863f379ae> /usr/lib/libobjc.A.dylib
0x921a1000 - 0x922e6ff7  com.apple.ImageIO.framework 2.0.1 (2.0.1) <68ba11e689a9ca30f8310935cd1e02d6> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x922e7000 - 0x92340ff7  libGLU.dylib ??? (???) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x92341000 - 0x923befef  libvMisc.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x923d7000 - 0x92bd4fef  com.apple.AppKit 6.5.2 (949.26) <bc4593edd8a224409fb6953a354505a0> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x92bd5000 - 0x92be5fff  com.apple.speech.synthesis.framework 3.6.59 (3.6.59) <4ffef145fad3d4d787e0c33eab26b336> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x92be6000 - 0x92c62feb  com.apple.audio.CoreAudio 3.1.0 (3.1) <70bb7c657061631491029a61babe0b26> /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x92c63000 - 0x92c6afe9  libgcc_s.1.dylib ??? (???) <f53c808e87d1184c0f9df63aef53ce0b> /usr/lib/libgcc_s.1.dylib
0x92c6b000 - 0x92f7ffe2  com.apple.QuickTime 7.4.1 (14) <1a4838d29e0804a2a102f03c053600f0> /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x92f80000 - 0x92fb9ffe  com.apple.securityfoundation 3.0 (32989) <e9171eda22c69c884a04a001aeb526e0> /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x92fba000 - 0x93031fe3  com.apple.CFNetwork 221.5 (221.5) <5474cdd7d2a8b2e8059de249c702df9e> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x93032000 - 0x93037fff  com.apple.CommonPanels 1.2.4 (85) <ea0665f57cd267609466ed8b2b20e893> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x93038000 - 0x93095ffb  libstdc++.6.dylib ??? (???) <04b812dcec670daa8b7d2852ab14be60> /usr/lib/libstdc++.6.dylib
0x93131000 - 0x93136fff  com.apple.backup.framework 1.0 (1.0) /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup
0x9313d000 - 0x93208fff  com.apple.ColorSync 4.5.0 (4.5.0) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x93209000 - 0x9322ffff  libcups.2.dylib ??? (???) <85ce204da14d62d6a3a5a9adfba01455> /usr/lib/libcups.2.dylib
0x93285000 - 0x93403fff  com.apple.AddressBook.framework 4.1 (687.1) <b2f2f2c925eb080e53b841014e4f9a7c> /System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x93404000 - 0x934a2fef  com.apple.QuickTimeImporters.component 7.4.1 (14) /System/Library/QuickTime/QuickTimeImporters.component/Contents/MacOS/QuickTimeImporters
0x93598000 - 0x935b0fff  com.apple.openscripting 1.2.6 (???) <b8e553df643f2aec68fa968b3b459b2b> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x935b1000 - 0x935ccffb  libPng.dylib ??? (???) <b6abcac36ec7654ff3e1cfa786b0117b> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x935cd000 - 0x935d0fff  com.apple.help 1.1 (36) <b507b08e484cb89033e9cf23062d77de> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x935d1000 - 0x936d2fef  com.apple.PubSub 1.0.3 (65.1) /System/Library/Frameworks/PubSub.framework/Versions/A/PubSub
0x936d3000 - 0x93ba6fde  libGLProgrammability.dylib ??? (???) <a3d68f17f37ff55a3e61aca1e3aee522> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib
0x93bb4000 - 0x93c66ffb  libcrypto.0.9.7.dylib ??? (???) <330b0e48e67faffc8c22dfc069ca7a47> /usr/lib/libcrypto.0.9.7.dylib
0x93c67000 - 0x94077fef  libBLAS.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x94078000 - 0x94083fe7  libCSync.A.dylib ??? (???) <df82fc093e498a9eb5490761cb292218> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x94084000 - 0x9471dfff  com.apple.CoreGraphics 1.351.21 (???) <6c93fd21149f389129fe47fa6ef71880> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x9471e000 - 0x9471fffc  libffi.dylib ??? (???) <a3b573eb950ca583290f7b2b4c486d09> /usr/lib/libffi.dylib
0x94720000 - 0x947a7ff7  libsqlite3.0.dylib ??? (???) <6978bbcca4277d6ae9f042beff643f7d> /usr/lib/libsqlite3.0.dylib
0x947a8000 - 0x947b4fe7  com.apple.opengl 1.5.6 (1.5.6) <d599b1bb0f8a8da6fd125e2587b27776> /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x947b5000 - 0x94848fff  com.apple.ink.framework 101.3 (86) <bf3fa8927b4b8baae92381a976fd2079> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x948df000 - 0x9495eff5  com.apple.SearchKit 1.2.0 (1.2.0) <277b460da86bc222785159fe77e2e2ed> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x9495f000 - 0x9495fffa  com.apple.CoreServices 32 (32) <2fcc8f3bd5bbfc000b476cad8e6a3dd2> /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x94bca000 - 0x94bd2fff  com.apple.DiskArbitration 2.2.1 (2.2.1) <75b0c8d8940a8a27816961dddcac8e0f> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x94bd3000 - 0x94c00feb  libvDSP.dylib ??? (???) <b232c018ddd040ec4e2c2af632dd497f> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x94c01000 - 0x94ce2ff7  libxml2.2.dylib ??? (???) <ccd6e2cb514fcd0b541bf153aae13481> /usr/lib/libxml2.2.dylib
0x94ce3000 - 0x95c6afea  com.apple.QuickTimeComponents.component 7.4.1 (14) /System/Library/QuickTime/QuickTimeComponents.component/Contents/MacOS/QuickTimeComponents
0x95cd8000 - 0x95ce8ffc  com.apple.LangAnalysis 1.6.4 (1.6.4) <cbeb17ab39f28351fe2ab5b82bf465bc> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x95ce9000 - 0x95cf0fff  com.apple.agl 3.0.9 (AGL-3.0.9) <7dac4a7cb0de2f6d08ae71c1249379e3> /System/Library/Frameworks/AGL.framework/Versions/A/AGL
0x95cf1000 - 0x95cf1ffd  com.apple.vecLib 3.4.2 (vecLib 3.4.2) /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib
0x95d04000 - 0x960c2fea  libLAPACK.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x961a0000 - 0x961b4ff3  com.apple.ImageCapture 4.0 (5.0.0) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x961b5000 - 0x961cbfff  com.apple.DictionaryServices 1.0.0 (1.0.0) <ad0aa0252e3323d182e17f50defe56fc> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices
0x961cc000 - 0x962b1ff3  com.apple.CoreData 100.1 (186) <8e28162ef2288692615b52acc01f8b54> /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x962b2000 - 0x962fcfe1  com.apple.securityinterface 3.0 (32532) <f521dae416ce7a3bdd594b0d4e2fb517> /System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
0x962fd000 - 0x96389ff7  com.apple.LaunchServices 286.5 (286.5) <33c3ae54abb276b61a99d4c764d883e2> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x969dc000 - 0x969eaffd  libz.1.dylib ??? (???) <5ddd8539ae2ebfd8e7cc1c57525385c7> /usr/lib/libz.1.dylib
0x969eb000 - 0x96a0bff2  libGL.dylib ??? (???) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x96a0c000 - 0x96a34ff7  com.apple.shortcut 1 (1.0) <057783867138902b52bc0941fedb74d1> /System/Library/PrivateFrameworks/Shortcut.framework/Versions/A/Shortcut
0x96a35000 - 0x96a53fff  libresolv.9.dylib ??? (???) <0629b6dcd71f4aac6a891cbe26253e85> /usr/lib/libresolv.9.dylib
0x96a84000 - 0x96ac3fef  libTIFF.dylib ??? (???) <6d0f80e9d4d81f3f64c876aca005bd53> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x96ac4000 - 0x96ad3fff  libsasl2.2.dylib ??? (???) <b9e1ca0b6612e280b6cbea6df0eec5f6> /usr/lib/libsasl2.2.dylib
0x96b06000 - 0x96d80fe7  com.apple.Foundation 6.5.4 (677.15) <6216196287f98a65ddb654d04d773e7b> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x96d81000 - 0x96e14ff3  com.apple.ApplicationServices.ATS 3.2 (???) <cdf31bd0ac7de54a35ee2d27cf86b6be> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x96ef5000 - 0x96f2ffff  com.apple.coreui 1.1 (61) /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI
0x96f34000 - 0x96f38fff  libmathCommon.A.dylib ??? (???) /usr/lib/system/libmathCommon.A.dylib
0x96f39000 - 0x96f39ffd  com.apple.Accelerate 1.4.2 (Accelerate 1.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x96f3a000 - 0x96f3cff5  libRadiance.dylib ??? (???) <20eadb285da83df96c795c2c5fa20590> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x96f3d000 - 0x96f73fef  libtidy.A.dylib ??? (???) <e4d3e7399fb83d7f145f9b4ec8196242> /usr/lib/libtidy.A.dylib
0x96f74000 - 0x96fb5fe7  libRIP.A.dylib ??? (???) <9d42e83d860433f9126c4871d1fe0ce8> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x96fb6000 - 0x97066fff  edu.mit.Kerberos 6.0.12 (6.0.12) <9e98dfb4cde8b0510fdd972dc9fa1dc9> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
0xba900000 - 0xba916fff  libJapaneseConverter.dylib ??? (???) <7b0248c392848338f5d6ed093313eeef> /System/Library/CoreServices/Encodings/libJapaneseConverter.dylib
0xbad00000 - 0xbad01fff  libLatin2Converter.dylib ??? (???) <a0d7f272f583e99a533bd7cea96d90c1> /System/Library/CoreServices/Encodings/libLatin2Converter.dylib
0xfffe8000 - 0xfffebfff  libobjc.A.dylib ??? (???) /usr/lib/libobjc.A.dylib
0xffff0000 - 0xffff1780  libSystem.B.dylib ??? (???) /usr/lib/libSystem.B.dylib

Crashes when I open the test, navigate to about:blank then go back to the test.

The crash is caused by HTMLObjectElement::attach() casting a RenderBlock into a RenderImage, which happens because renderFallbackContent() is called under attach():

#0  WebCore::HTMLObjectElement::renderFallbackContent (this=0x19717150) at WebCore/html/HTMLObjectElement.cpp:290
#1  0x010e8834 in WebCore::HTMLImageLoader::notifyFinished (this=0x1894a380, image=0x19350490) at WebCore/html/HTMLImageLoader.cpp:148
#2  0x00f7baa0 in WebCore::CachedImage::ref (this=0x19350490, c=0x1894a380) at WebCore/loader/CachedImage.cpp:82
#3  0x010e8bea in WebCore::HTMLImageLoader::updateFromElement (this=0x1894a380) at WebCore/html/HTMLImageLoader.cpp:115
#4  0x01105df1 in WebCore::HTMLObjectElement::attach (this=0x19717150) at WebCore/html/HTMLObjectElement.cpp:173

[Matt Lilek]

*** Bug 17490 has been marked as a duplicate of this bug. ***

[Matt Lilek]

*** Bug 17515 has been marked as a duplicate of this bug. ***

[Luke]

This problem appears to be fixed in r30549.

[Robert Blaut]

(In reply to comment #6)
> This problem appears to be fixed in r30549.
> 

No, it is still reproducible.

[Matt Lilek]

*** Bug 17512 has been marked as a duplicate of this bug. ***

[Robert Blaut]

*** Bug 17519 has been marked as a duplicate of this bug. ***

[Darin Adler]

Duplicate bug 17512 has simple steps to reproduce.

Hyatt, can you take a look at this one?

I think it might be safe to just check m_useFallbackContent after calling updateFromElement() and bail out if it changed (i.e. if it is true).

Created attachment 19325 [details]
Return early if updateFromElement() has changed the object to use fallback content (and re-attached it)

[Darin Adler]

Comment on attachment 19325 [details]
Return early if updateFromElement() has changed the object to use fallback content (and re-attached it)

r=me

Fixed in <http://trac.webkit.org/projects/webkit/changeset/30554>.

[Matt Lilek]

*** Bug 17536 has been marked as a duplicate of this bug. ***

<rdar://problem/5762152>

[Mark Rowe (bdash)]

*** Bug 17540 has been marked as a duplicate of this bug. ***