Bug 21721 - 1 crash in Safari at com.apple.WebCore • WebCore::RenderTableSection::numColumns const + 12
Summary: 1 crash in Safari at com.apple.WebCore • WebCore::RenderTableSection::numColu...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Accessibility (show other bugs)
Version: 528+ (Nightly build)
Hardware: Mac OS X 10.5
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-10-17 18:34 PDT by chris fleizach
Modified: 2008-10-20 10:57 PDT (History)
0 users

See Also:

Attachments
Patch for a crash in AX code (4.50 KB, patch)
2008-10-17 18:36 PDT, chris fleizach 		no flags Details | Formatted Diff | Diff
patch to fix crash in AX table code (4.06 KB, patch)
2008-10-17 18:40 PDT, chris fleizach 		jhoneycutt: review+
Details | Formatted Diff | Diff
Show Obsolete (1) View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description chris fleizach 2008-10-17 18:34:19 PDT 
Crash with this bt

Thread 0 Crashed (i386):
>#0   com.apple.WebCore          0x95f5d17c  WebCore::RenderTableSection::numColumns() const + 12
  #1   com.apple.WebCore          0x9649e370  WebCore::AccessibilityTable::addChildren() + 512
  #2   com.apple.WebCore          0x9647833b  WebCore::AccessibilityRenderObject::children() + 27
  #3   com.apple.WebCore          0x9642b595  -[AccessibilityObjectWrapper accessibilityArrayAttributeValues:index:maxCount:] + 69
  #4   com.apple.AppKit           0x92bf3279  CopyAttributeValues + 289
  #5   com.apple.HIServices       0x91a9c123  _AXXMIGCopyAttributeValues + 297
  #6   com.apple.HIServices       0x91aa2f1d  _XCopyAttributeValues + 545
  #7   com.apple.HIServices       0x91a6fad5  mshMIGPerform + 492
  #8   com.apple.CoreFoundation   0x966eb5fe  __CFRunLoopDoSource1 + 366
  #9   com.apple.CoreFoundation   0x966ea254  __CFRunLoopRun + 4708
  #10  com.apple.CoreFoundation   0x9666cd87  CFRunLoopRunSpecific + 439
  #11  com.apple.CoreFoundation   0x9666cbc1  CFRunLoopRunInMode + 97
  #12  com.apple.HIToolbox        0x94cc5af6  RunCurrentEventLoopInMode + 392
  #13  com.apple.HIToolbox        0x94cc58ab  ReceiveNextEventCommon + 354
  #14  com.apple.HIToolbox        0x94cc5730  BlockUntilNextEventMatchingListInMode + 81
  #15  com.apple.AppKit           0x9289f1fe  _DPSNextEvent + 820
Comment 1 chris fleizach 2008-10-17 18:36:41 PDT 
Created attachment 24471 [details]
Patch for a crash in AX code
Comment 2 chris fleizach 2008-10-17 18:40:09 PDT 
Created attachment 24472 [details]
patch to fix crash in AX table code
Comment 3 Jon Honeycutt 2008-10-17 19:21:39 PDT 
Comment on attachment 24472 [details]
patch to fix crash in AX table code

r=me
Comment 4 chris fleizach 2008-10-20 10:57:50 PDT 
fixed
http://trac.webkit.org/changeset/37737