On r31081, I've gotten a reproducible crash in WebCore::CSSStyleSelector::hasSelectorForAttribute. You can reproduce the crash when loading http://www.freebsd.org/java/newsflash.html
Created attachment 19807 [details] r31081 crash log crash log from r31081
Darin fixed this in r31080, a new nightly with the fix is available. *** This bug has been marked as a duplicate of 17876 ***
The crash happens with the latest nightly, r31084, so this looks like a different bug than 17876. Note that the attached crash log actually comes from r31084... r31081 mentioned before was a typo.
(In reply to comment #3) > The crash happens with the latest nightly, r31084, so this looks like a > different bug than 17876. > > Note that the attached crash log actually comes from r31084... r31081 mentioned > before was a typo. > Oops! You're right, I should have looked closer.
Created attachment 19809 [details] r31084 crash log The crash log from r31084 looks slightly different actually. My bad. Added a new attachment for it.
*** Bug 17891 has been marked as a duplicate of this bug. ***
*** Bug 17892 has been marked as a duplicate of this bug. ***
I think this was fixed in r31095 (additional fix for bug 17876) - can someone still reproduce the crash?
(In reply to comment #8) > I think this was fixed in r31095 (additional fix for bug 17876) - can someone > still reproduce the crash? > I've got no crash in Webkit r31114 on Mac OS X 10.5. So it's probably fixed.
Webkit r31114 seems to resolve the issue for me.
Per comment #9, #10 and #11 resolved as fixed.