Bug 21184 – REGRESSION: Reproducible crash below StringImpl::hash while running editing/deleting/5408255.html

• Status: RESOLVED
• Resolution: FIXED
• Component: Page Loading

[Mark Rowe (bdash)]

The buildbot sees the crash all of the time, but because it happens after the test result has been written it rarely shows the test as having failed or crashed.  I bisected through the layout tests to narrow it down to editing/deleting/5408255.html.

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_PROTECTION_FAILURE at address: 0x00000010
0x036f3045 in WebCore::StringImpl::hash (this=0x0) at text/StringImpl.h:89
89	    unsigned hash() { if (m_hash == 0) m_hash = computeHash(m_data, m_length); return m_hash; }
(gdb) bt 10
#0  0x036f3045 in WebCore::StringImpl::hash (this=0x0) at text/StringImpl.h:89
#1  0x039ccae9 in WebCore::StringHash::hash (key=@0x12cae2c) at text/StringHash.h:69
#2  0x039d10a5 in WTF::IdentityHashTranslator<WebCore::String, std::pair<WebCore::String, WebCore::CachedResource*>, WebCore::StringHash>::hash (key=@0x12cae2c) at HashTable.h:267
#3  0x039da967 in WTF::HashTable<WebCore::String, std::pair<WebCore::String, WebCore::CachedResource*>, WTF::PairFirstExtractor<std::pair<WebCore::String, WebCore::CachedResource*> >, WebCore::StringHash, WTF::PairHashTraits<WTF::HashTraits<WebCore::String>, WTF::HashTraits<WebCore::CachedResource*> >, WTF::HashTraits<WebCore::String> >::lookup<WebCore::String, WTF::IdentityHashTranslator<WebCore::String, std::pair<WebCore::String, WebCore::CachedResource*>, WebCore::StringHash> > (this=0x7035be8, key=@0x12cae2c) at HashTable.h:462
#4  0x0371a80c in WTF::HashTable<WebCore::String, std::pair<WebCore::String, WebCore::CachedResource*>, WTF::PairFirstExtractor<std::pair<WebCore::String, WebCore::CachedResource*> >, WebCore::StringHash, WTF::PairHashTraits<WTF::HashTraits<WebCore::String>, WTF::HashTraits<WebCore::CachedResource*> >, WTF::HashTraits<WebCore::String> >::lookup (this=0x7035be8, key=@0x12cae2c) at HashTable.h:330
#5  0x039daa40 in WTF::HashMap<WebCore::String, WebCore::CachedResource*, WebCore::StringHash, WTF::HashTraits<WebCore::String>, WTF::HashTraits<WebCore::CachedResource*> >::get (this=0x7035be8, key=@0x12cae2c) at HashMap.h:207
#6  0x03716996 in WebCore::Cache::resourceForURL (this=0x7035a00, url=@0x12cae2c) at WebCore/loader/Cache.cpp:244
#7  0x03721a56 in WebCore::CachedResource::~CachedResource (this=0x12cae10) at WebCore/loader/CachedResource.cpp:85
[...]

[Mark Rowe (bdash)]

Landed in r37016.