RESOLVED INVALID 47484
Assertion failure in JSEventListener::jsFunction() (m_wrapper || !m_jsFunction) 
https://bugs.webkit.org/show_bug.cgi?id=47484
Summary Assertion failure in JSEventListener::jsFunction() (m_wrapper || !m_jsFunction)
mitz
Reported 2010-10-11 00:20:48 PDT
To reproduce, load the URL and drag across the middle third of the chart. Repeat several times. ASSERTION FAILED: m_wrapper || !m_jsFunction (WebCore/bindings/js/JSEventListener.h:83 JSC::JSObject* WebCore::JSEventListener::jsFunction(WebCore::ScriptExecutionContext*) const) Backtrace: #0 0x10309fc7e in WebCore::JSEventListener::jsFunction at JSEventListener.h:83 #1 0x103149a8c in WebCore::JSEventListener::handleEvent at JSEventListener.cpp:69 #2 0x102e186c8 in WebCore::EventTarget::fireEventListeners at EventTarget.cpp:335 #3 0x102e18d32 in WebCore::EventTarget::fireEventListeners at EventTarget.cpp:304 #4 0x10339c1e3 in WebCore::Node::handleLocalEvents at Node.cpp:2524 #5 0x10339c88f in WebCore::Node::dispatchGenericEvent at Node.cpp:2642 #6 0x10339cd3d in WebCore::Node::dispatchEvent at Node.cpp:2587 #7 0x10339b0ff in WebCore::Node::dispatchMouseEvent at Node.cpp:2851 #8 0x10339b5e3 in WebCore::Node::dispatchMouseEvent at Node.cpp:2760 #9 0x102e06e93 in WebCore::EventHandler::updateMouseEventTargetNode at EventHandler.cpp:1818 #10 0x102e06fea in WebCore::EventHandler::dispatchMouseEvent at EventHandler.cpp:1835 #11 0x102e0c210 in WebCore::EventHandler::handleMouseMoveEvent at EventHandler.cpp:1511 #12 0x102e0c2f7 in WebCore::EventHandler::mouseMoved at EventHandler.cpp:1392 #13 0x102e130a0 in WebCore::EventHandler::mouseMoved at EventHandlerMac.mm:625 #14 0x102563a5c in -[WebHTMLView(WebPrivate) _updateMouseoverWithEvent:] at WebHTMLView.mm:1653 #15 0x10255026a in -[WebHTMLView(WebPrivate) _updateMouseoverWithFakeEvent] at WebHTMLView.mm:1188 #16 0x10255a53b in -[WebHTMLView mouseUp:] at WebHTMLView.mm:3759 #17 0x7fff875607ed in -[NSWindow sendEvent:] #18 0x100439b2c in -[Window sendEvent:] at Window.m:97
Attachments
Add attachment proposed patch, testcase, etc.
Alexey Proskuryakov
Comment 1 2010-10-11 10:08:08 PDT
It's common for this assertion to fail when someone dispatches an event to a node that has lost its wrapper during garbage collection. There are known cases where wrappers aren't protected, which all need to be fixed eventually. This needs to be reduced for the actual problem to be discovered.
Alexey Proskuryakov
Comment 2 2012-09-13 10:07:24 PDT
This site opens a blank page in both Safari and Firefox now (due to some JS exception, it appears). It doesn't look like this bug is actionable any more.
Note You need to log in before you can comment on or make changes to this bug.