Bug 209892 - Crash in WebCore::HTMLDocumentParser::insert
Summary: Crash in WebCore::HTMLDocumentParser::insert
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: DOM (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Ryosuke Niwa
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2020-04-01 19:51 PDT by Ryosuke Niwa
Modified: 2020-04-01 22:22 PDT (History)
8 users (show)

See Also:

Attachments
Fixes the bug (2.00 KB, patch)
2020-04-01 19:58 PDT, Ryosuke Niwa 		darin: review+
Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Ryosuke Niwa 2020-04-01 19:51:00 PDT 
e.g.
0   com.apple.WebCore             	0x00007fff3fb0f505 WebCore::HTMLDocumentParser::insert(WebCore::SegmentedString&&) + 181
1   com.apple.WebCore             	0x00007fff3f7a36b2 WebCore::Document::write(WebCore::Document*, WebCore::SegmentedString&&) + 194
2   com.apple.WebCore             	0x00007fff3f7a38ab WebCore::Document::write(WebCore::Document*, WTF::Vector<WTF::String, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&&) + 427
3   com.apple.WebCore             	0x00007fff3ea8ae60 WebCore::jsDocumentPrototypeFunctionWrite(JSC::JSGlobalObject*, JSC::CallFrame*) + 176
4   ???                           	0x00003b2c95e01178 0 + 65062679089528
5   com.apple.JavaScriptCore      	0x00007fff33658a1d llint_entry + 93344
6   com.apple.JavaScriptCore      	0x00007fff33641bcf vmEntryToJavaScript + 200
Comment 1 Ryosuke Niwa 2020-04-01 19:51:10 PDT 
<rdar://problem/53488855>
Comment 2 Ryosuke Niwa 2020-04-01 19:58:24 PDT 
Created attachment 395238 [details]
Fixes the bug
Comment 3 Ryosuke Niwa 2020-04-01 22:22:51 PDT 
Committed r259378: <https://trac.webkit.org/changeset/259378>