Bug 72271 – [chromium] Crash in webkit::npapi::PluginInstance::NPP_SetWindow

• Status: RESOLVED
• Resolution: WORKSFORME
• Component: WebCore Misc.

[Tony Gentilcore]

Over my current gardening stint, I've seen a crash in NPP_SetWindow in several tests. Here's an example in fast/loader/javascript-url-in-embed.html:
http://test-results.appspot.com/dashboards/flakiness_dashboard.html#showExpectations=true&tests=fast%2Floader%2Fjavascript-url-in-embed.html

I'm going to try to find more examples and details (as well as an owner).

[Tony Gentilcore]

Created attachment 114943 [details]
Patch

[Tony Gentilcore]

Committed r100140: <http://trac.webkit.org/changeset/100140>

[Tony Gentilcore]

sam/abarth -- just copying you guys since you introduced the test and I don't have any strong leads on this yet (although I really don't suspect there is anything wrong with the test itself).

[Tony Gentilcore]

clip-path-text-and-stroke.svg hit this today:
http://test-results.appspot.com/dashboards/flakiness_dashboard.html#tests=svg%2Fclip-path%2Fclip-path-text-and-stroke.svg

Process:         DumpRenderTree [32560]
Path:            /b/build/slave/Webkit_Mac10_5__dbg__2_/build/src/xcodebuild/Debug/DumpRenderTree.app/Contents/MacOS/DumpRenderTree
Identifier:      DumpRenderTree
Version:         ??? (???)
Code Type:       X86 (Native)
Parent Process:  Python [30210]

Date/Time:       2011-09-25 03:32:21.778 -0700
OS Version:      Mac OS X 10.5.8 (9L31a)
Report Version:  6
Anonymous UUID:  7BD660DB-E8BE-4B0E-80C8-AB523315A42F

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_PROTECTION_FAILURE at 0x00000000beefdead
Crashed Thread:  0

Thread 0 Crashed:
0   ???                           	0xbeefdead 0 + 3203391149
1   DumpRenderTree                	0x16a279ff webkit::npapi::PluginInstance::NPP_SetWindow(_NPWindow*) + 421
2   DumpRenderTree                	0x16a5488c webkit::npapi::WebPluginDelegateImpl::WindowlessSetWindow() + 342
3   DumpRenderTree                	0x16a54e50 webkit::npapi::WebPluginDelegateImpl::WindowlessUpdateGeometry(gfx::Rect const&, gfx::Rect const&) + 618
4   DumpRenderTree                	0x16a50723 webkit::npapi::WebPluginDelegateImpl::UpdateGeometry(gfx::Rect const&, gfx::Rect const&) + 121
5   DumpRenderTree                	0x16a5f82a webkit::npapi::WebPluginImpl::updateGeometry(WebKit::WebRect const&, WebKit::WebRect const&, WebKit::WebVector<WebKit::WebRect> const&, bool) + 806
6   DumpRenderTree                	0x1400db06 WebKit::WebPluginContainerImpl::reportGeometry() + 294
7   DumpRenderTree                	0x1400e2d2 WebKit::WebPluginContainerImpl::setFrameRect(WebCore::IntRect const&) + 76
8   DumpRenderTree                	0x162d098c WebCore::RenderWidget::setWidgetGeometry(WebCore::IntRect const&) + 318
9   DumpRenderTree                	0x162d0b99 WebCore::RenderWidget::updateWidgetPosition() + 379
10  DumpRenderTree                	0x162bd933 WebCore::RenderView::updateWidgetPositions() + 103
11  DumpRenderTree                	0x15e74fd4 WebCore::FrameView::performPostLayoutTasks() + 522
12  DumpRenderTree                	0x15e7ae6a WebCore::FrameView::layout(bool) + 4038
13  DumpRenderTree                	0x154091b6 WebCore::Document::updateLayout() + 280
14  DumpRenderTree                	0x1540df16 WebCore::Document::updateLayoutIgnorePendingStylesheets() + 226
15  DumpRenderTree                	0x1546f694 WebCore::Element::innerText() + 60
16  DumpRenderTree                	0x13fd6a8b WebKit::WebElement::innerText() + 67
17  DumpRenderTree                	0x13f2394c __ZL16dumpDocumentTextPN6WebKit8WebFrameE + 150
18  DumpRenderTree                	0x13f23b34 __ZL16dumpFramesAsTextPN6WebKit8WebFrameEb + 380
19  DumpRenderTree                	0x13f23f21 TestShell::dump() + 807 (TestShell.cpp:519)
20  DumpRenderTree                	0x13f244b2 TestShell::testFinished() + 78 (TestShell.cpp:327)
21  DumpRenderTree                	0x13f0147e LayoutTestController::WorkQueue::processWorkSoon() + 174 (LayoutTestController.cpp:264)
22  DumpRenderTree                	0x13f0151b LayoutTestController::locationChangeDone() + 129 (LayoutTestController.cpp:650)
23  DumpRenderTree                	0x13f35df0 WebViewHost::locationChangeDone(WebKit::WebFrame*) + 80 (WebViewHost.cpp:1353)
24  DumpRenderTree                	0x13f35ebf WebViewHost::didFinishLoad(WebKit::WebFrame*) + 171 (WebViewHost.cpp:1006)
25  DumpRenderTree                	0x13f79867 WebKit::FrameLoaderClientImpl::dispatchDidFinishLoad() + 147
26  DumpRenderTree                	0x15d7cb4e WebCore::FrameLoader::checkLoadCompleteForThisFrame() + 1982
27  DumpRenderTree                	0x15d7cd2a WebCore::FrameLoader::checkLoadComplete() + 364
28  DumpRenderTree                	0x15d7ce61 WebCore::FrameLoader::finishedLoading() + 265
29  DumpRenderTree                	0x15d97677 WebCore::MainResourceLoader::didFinishLoading(double) + 359
30  DumpRenderTree                	0x15db1fe9 WebCore::ResourceLoader::didFinishLoading(WebCore::ResourceHandle*, double) + 199
31  DumpRenderTree                	0x13fa72fe WebCore::ResourceHandleInternal::didFinishLoading(WebKit::WebURLLoader*, double) + 248
32  DumpRenderTree                	0x16aab6d2 webkit_glue::WebURLLoaderImpl::Context::OnCompletedRequest(net::URLRequestStatus const&, std::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, base::Time const&) + 832
33  DumpRenderTree                	0x16b8d25d (anonymous namespace)::RequestProxy::NotifyCompletedRequest(net::URLRequestStatus const&, std::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, base::Time const&) + 107 (simple_resource_loader_bridge.cc:290)
34  DumpRenderTree                	0x16b8dc9b void DispatchToMethod<(anonymous namespace)::RequestProxy, void ((anonymous namespace)::RequestProxy::*)(net::URLRequestStatus const&, std::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, base::Time const&), net::URLRequestStatus, std::basic_string<char, std::char_traits<char>, std::allocator<char> >, base::Time>((anonymous namespace)::RequestProxy*, void ((anonymous namespace)::RequestProxy::*)(net::URLRequestStatus const&, std::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, base::Time const&), Tuple3<net::URLRequestStatus, std::basic_string<char, std::char_traits<char>, std::allocator<char> >, base::Time> const&) + 121
35  DumpRenderTree                	0x16b8dd06 RunnableMethod<(anonymous namespace)::RequestProxy, void ((anonymous namespace)::RequestProxy::*)(net::URLRequestStatus const&, std::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, base::Time const&), Tuple3<net::URLRequestStatus, std::basic_string<char, std::char_traits<char>, std::allocator<char> >, base::Time> >::Run() + 80 (task.h:348)
36  DumpRenderTree                	0x1441fb9c base::subtle::TaskClosureAdapter::Run() + 58
37  DumpRenderTree                	0x143abfdc base::internal::Invoker1<false, base::internal::InvokerStorage1<void (base::subtle::TaskClosureAdapter::*)(), base::subtle::TaskClosureAdapter*>, void (base::subtle::TaskClosureAdapter::*)()>::DoInvoke(base::internal::InvokerStorageBase*) + 122
38  DumpRenderTree                	0x143ab4c0 base::Callback<void ()()>::Run() const + 62
39  DumpRenderTree                	0x143a72c9 MessageLoop::RunTask(MessageLoop::PendingTask const&) + 413
40  DumpRenderTree                	0x143a741f MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&) + 85
41  DumpRenderTree                	0x143a775b MessageLoop::DoWork() + 271
42  DumpRenderTree                	0x14345079 base::MessagePumpCFRunLoopBase::RunWork() + 105
43  DumpRenderTree                	0x1434528d base::MessagePumpCFRunLoopBase::RunWorkSource(void*) + 51
44  com.apple.CoreFoundation      	0x92fae3c5 CFRunLoopRunSpecific + 3141
45  com.apple.CoreFoundation      	0x92faeaa8 CFRunLoopRunInMode + 88
46  com.apple.HIToolbox           	0x948562ac RunCurrentEventLoopInMode + 283
47  com.apple.HIToolbox           	0x948560c5 ReceiveNextEventCommon + 374
48  com.apple.HIToolbox           	0x94855f39 BlockUntilNextEventMatchingListInMode + 106
49  com.apple.AppKit              	0x9139d6d5 _DPSNextEvent + 657
50  com.apple.AppKit              	0x9139cf88 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 128
51  com.apple.AppKit              	0x91395f9f -[NSApplication run] + 795
52  DumpRenderTree                	0x1434484c base::MessagePumpNSApplication::DoRun(base::MessagePump::Delegate*) + 304
53  DumpRenderTree                	0x14344d6f base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate*) + 177
54  DumpRenderTree                	0x143a893b MessageLoop::RunInternal() + 245
55  DumpRenderTree                	0x143a8985 MessageLoop::RunHandler() + 45
56  DumpRenderTree                	0x143a8a51 MessageLoop::Run() + 63
57  DumpRenderTree                	0x141875c7 webkit_support::RunMessageLoop() + 41 (webkit_support.cc:398)
58  DumpRenderTree                	0x13f2e478 TestShell::waitTestFinished() + 364 (TestShellMac.mm:121)
59  DumpRenderTree                	0x13f24fca TestShell::runFileTest(TestParams const&) + 684 (TestShell.cpp:236)
60  DumpRenderTree                	0x13eeb7d5 __ZL7runTestR9TestShellR10TestParamsRKSsb + 1069
61  DumpRenderTree                	0x13eec2c5 main + 2741 (DumpRenderTree.cpp:256)
62  DumpRenderTree                	0x13ed32b6 start + 54

Thread 1:
0   libSystem.B.dylib             	0x92c0534e __semwait_signal + 10
1   libSystem.B.dylib             	0x92c2fccd pthread_cond_wait$UNIX2003 + 73
2   DumpRenderTree                	0x1440d008 base::ConditionVariable::Wait() + 84
3   DumpRenderTree                	0x1440fbc3 base::WaitableEvent::TimedWait(base::TimeDelta const&) + 697
4   DumpRenderTree                	0x1440fc3a base::WaitableEvent::Wait() + 78
5   DumpRenderTree                	0x143b7d9c base::MessagePumpDefault::Run(base::MessagePump::Delegate*) + 552
6   DumpRenderTree                	0x143a893b MessageLoop::RunInternal() + 245
7   DumpRenderTree                	0x143a8985 MessageLoop::RunHandler() + 45
8   DumpRenderTree                	0x143a8a51 MessageLoop::Run() + 63
9   DumpRenderTree                	0x14421db7 base::Thread::Run(MessageLoop*) + 51
10  DumpRenderTree                	0x14421c2d base::Thread::ThreadMain() + 279
11  DumpRenderTree                	0x144218d3 base::(anonymous namespace)::ThreadFunc(void*) + 103
12  libSystem.B.dylib             	0x92c2f055 _pthread_start + 321
13  libSystem.B.dylib             	0x92c2ef12 thread_start + 34

Thread 2:
0   libSystem.B.dylib             	0x92c0534e __semwait_signal + 10
1   libSystem.B.dylib             	0x92c05116 usleep$UNIX2003 + 61
2   DumpRenderTree                	0x14d997c5 v8::internal::OS::Sleep(int) + 51
3   DumpRenderTree                	0x14d9b425 v8::internal::SamplerThread::Run() + 173
4   DumpRenderTree                	0x14d98b48 __ZN2v88internalL11ThreadEntryEPv + 144
5   libSystem.B.dylib             	0x92c2f055 _pthread_start + 321
6   libSystem.B.dylib             	0x92c2ef12 thread_start + 34

Thread 3:
0   libSystem.B.dylib             	0x92c2e8c6 kevent + 10
1   DumpRenderTree                	0x14457aa6 event_base_loop + 324 (event.c:516)
2   DumpRenderTree                	0x1433f87b base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) + 725
3   DumpRenderTree                	0x143a893b MessageLoop::RunInternal() + 245
4   DumpRenderTree                	0x143a8985 MessageLoop::RunHandler() + 45
5   DumpRenderTree                	0x143a8a51 MessageLoop::Run() + 63
6   DumpRenderTree                	0x14421db7 base::Thread::Run(MessageLoop*) + 51
7   DumpRenderTree                	0x14421c2d base::Thread::ThreadMain() + 279
8   DumpRenderTree                	0x144218d3 base::(anonymous namespace)::ThreadFunc(void*) + 103
9   libSystem.B.dylib             	0x92c2f055 _pthread_start + 321
10  libSystem.B.dylib             	0x92c2ef12 thread_start + 34

Thread 4:
0   libSystem.B.dylib             	0x92c2e8c6 kevent + 10
1   DumpRenderTree                	0x14457aa6 event_base_loop + 324 (event.c:516)
2   DumpRenderTree                	0x1433f9c5 base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) + 1055
3   DumpRenderTree                	0x143a893b MessageLoop::RunInternal() + 245
4   DumpRenderTree                	0x143a8985 MessageLoop::RunHandler() + 45
5   DumpRenderTree                	0x143a8a51 MessageLoop::Run() + 63
6   DumpRenderTree                	0x14421db7 base::Thread::Run(MessageLoop*) + 51
7   DumpRenderTree                	0x14421c2d base::Thread::ThreadMain() + 279
8   DumpRenderTree                	0x144218d3 base::(anonymous namespace)::ThreadFunc(void*) + 103
9   libSystem.B.dylib             	0x92c2f055 _pthread_start + 321
10  libSystem.B.dylib             	0x92c2ef12 thread_start + 34

Thread 5:
0   libSystem.B.dylib             	0x92bfe166 mach_msg_trap + 10
1   libSystem.B.dylib             	0x92c0595c mach_msg + 72
2   com.apple.CoreFoundation      	0x92fade7e CFRunLoopRunSpecific + 1790
3   com.apple.CoreFoundation      	0x92faeaa8 CFRunLoopRunInMode + 88
4   com.apple.Foundation          	0x936043d5 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 213
5   DumpRenderTree                	0x1434452f base::MessagePumpNSRunLoop::DoRun(base::MessagePump::Delegate*) + 145
6   DumpRenderTree                	0x14344d6f base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate*) + 177
7   DumpRenderTree                	0x143a893b MessageLoop::RunInternal() + 245
8   DumpRenderTree                	0x143a8985 MessageLoop::RunHandler() + 45
9   DumpRenderTree                	0x143a8a51 MessageLoop::Run() + 63
10  DumpRenderTree                	0x14421db7 base::Thread::Run(MessageLoop*) + 51
11  DumpRenderTree                	0x14421c2d base::Thread::ThreadMain() + 279
12  DumpRenderTree                	0x144218d3 base::(anonymous namespace)::ThreadFunc(void*) + 103
13  libSystem.B.dylib             	0x92c2f055 _pthread_start + 321
14  libSystem.B.dylib             	0x92c2ef12 thread_start + 34

Thread 6:
0   libSystem.B.dylib             	0x92c0534e __semwait_signal + 10
1   libSystem.B.dylib             	0x92c2fccd pthread_cond_wait$UNIX2003 + 73
2   DumpRenderTree                	0x1440d008 base::ConditionVariable::Wait() + 84
3   DumpRenderTree                	0x1440fbc3 base::WaitableEvent::TimedWait(base::TimeDelta const&) + 697
4   DumpRenderTree                	0x1440fc3a base::WaitableEvent::Wait() + 78
5   DumpRenderTree                	0x143b7d9c base::MessagePumpDefault::Run(base::MessagePump::Delegate*) + 552
6   DumpRenderTree                	0x143a893b MessageLoop::RunInternal() + 245
7   DumpRenderTree                	0x143a8985 MessageLoop::RunHandler() + 45
8   DumpRenderTree                	0x143a8a51 MessageLoop::Run() + 63
9   DumpRenderTree                	0x14421db7 base::Thread::Run(MessageLoop*) + 51
10  DumpRenderTree                	0x14421c2d base::Thread::ThreadMain() + 279
11  DumpRenderTree                	0x144218d3 base::(anonymous namespace)::ThreadFunc(void*) + 103
12  libSystem.B.dylib             	0x92c2f055 _pthread_start + 321
13  libSystem.B.dylib             	0x92c2ef12 thread_start + 34

Thread 7:
0   libSystem.B.dylib             	0x92c0534e __semwait_signal + 10
1   libSystem.B.dylib             	0x92c55908 pthread_cond_timedwait$UNIX2003 + 72
2   DumpRenderTree                	0x1440cedb base::ConditionVariable::TimedWait(base::TimeDelta const&) + 551
3   DumpRenderTree                	0x14424ff6 base::PosixDynamicThreadPool::WaitForTask() + 312
4   DumpRenderTree                	0x14425dea base::(anonymous namespace)::WorkerThread::ThreadMain() + 136
5   DumpRenderTree                	0x144218d3 base::(anonymous namespace)::ThreadFunc(void*) + 103
6   libSystem.B.dylib             	0x92c2f055 _pthread_start + 321
7   libSystem.B.dylib             	0x92c2ef12 thread_start + 34

Thread 8:
0   libSystem.B.dylib             	0x92c0534e __semwait_signal + 10
1   libSystem.B.dylib             	0x92c55908 pthread_cond_timedwait$UNIX2003 + 72
2   DumpRenderTree                	0x1440cedb base::ConditionVariable::TimedWait(base::TimeDelta const&) + 551
3   DumpRenderTree                	0x14424ff6 base::PosixDynamicThreadPool::WaitForTask() + 312
4   DumpRenderTree                	0x14425dea base::(anonymous namespace)::WorkerThread::ThreadMain() + 136
5   DumpRenderTree                	0x144218d3 base::(anonymous namespace)::ThreadFunc(void*) + 103
6   libSystem.B.dylib             	0x92c2f055 _pthread_start + 321
7   libSystem.B.dylib             	0x92c2ef12 thread_start + 34

Thread 9:
0   libSystem.B.dylib             	0x92c0534e __semwait_signal + 10
1   com.apple.Foundation          	0x9366d151 +[NSThread sleepUntilDate:] + 97
2   DumpRenderTree                	0x13f2e5e6 -[WatchDogTarget run:] + 282 (TestShellMac.mm:75)
3   com.apple.Foundation          	0x935cfdfd -[NSThread main] + 45
4   com.apple.Foundation          	0x935cf9a4 __NSThread__main__ + 308
5   libSystem.B.dylib             	0x92c2f055 _pthread_start + 321
6   libSystem.B.dylib             	0x92c2ef12 thread_start + 34

Thread 10:
0   libSystem.B.dylib             	0x92c0534e __semwait_signal + 10
1   com.apple.Foundation          	0x9366d151 +[NSThread sleepUntilDate:] + 97
2   DumpRenderTree                	0x13f2e5e6 -[WatchDogTarget run:] + 282 (TestShellMac.mm:75)
3   com.apple.Foundation          	0x935cfdfd -[NSThread main] + 45
4   com.apple.Foundation          	0x935cf9a4 __NSThread__main__ + 308
5   libSystem.B.dylib             	0x92c2f055 _pthread_start + 321
6   libSystem.B.dylib             	0x92c2ef12 thread_start + 34

Thread 0 crashed with X86 Thread State (32-bit):
  eax: 0x001aa4a0  ebx: 0x1f35073a  ecx: 0xbeefdead  edx: 0x001e0008
  edi: 0x00000001  esi: 0x1e73eb40  ebp: 0xbfffc508  esp: 0xbfffc4cc
   ss: 0x0000001f  efl: 0x00210202  eip: 0xbeefdead   cs: 0x00000017
   ds: 0x0000001f   es: 0x0000001f   fs: 0x00000000   gs: 0x00000037
  cr2: 0xbeefdead

Binary Images:
  0x2c9000 -   0x402fcb +ffmpegsumo.so ??? (???) <2c6df08174a50801772efdb6547b7fc4> /b/build/slave/Webkit_Mac10_5__dbg__2_/build/src/xcodebuild/Debug/ffmpegsumo.so
0x139c6000 - 0x13d5bfe3 +osmesa.so ??? (???) <72f22e3368f9dd3e2d6b675ce9c282b0> /b/build/slave/Webkit_Mac10_5__dbg__2_/build/src/xcodebuild/Debug/osmesa.so
0x13ed2000 - 0x17db2feb +DumpRenderTree ??? (???) <b32fb571156cb7210ee9a0e75e87f2ab> /b/build/slave/Webkit_Mac10_5__dbg__2_/build/src/xcodebuild/Debug/DumpRenderTree.app/Contents/MacOS/DumpRenderTree
0x1f33e000 - 0x1f353ffb  com.apple.testnetscapeplugin 1.0 (1.0) <edf0013d825601cf08bcb2e8f186724e> /b/build/slave/Webkit_Mac10_5__dbg__2_/build/src/xcodebuild/Debug/plugins/TestNetscapePlugIn.plugin/Contents/MacOS/TestNetscapePlugIn
0x1fd67000 - 0x20115fe3  com.apple.RawCamera.bundle 3.3.0 (533) <05a38d218556434c8baa850a6ec99b37> /System/Library/CoreServices/RawCamera.bundle/Contents/MacOS/RawCamera
0x8fe00000 - 0x8fe2db43  dyld 97.1 (???) <458eed38a009e5658a79579e7bc26603> /usr/lib/dyld
0x90039000 - 0x900c6ff7  com.apple.framework.IOKit 1.5.2 (???) <7a3cc24f78f93931731203854ae0d891> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x900c7000 - 0x900efff7  com.apple.shortcut 1.0.1 (1.0) <37e4b08cfaf9edb08b8682a06c4ec844> /System/Library/PrivateFrameworks/Shortcut.framework/Versions/A/Shortcut
0x90115000 - 0x905e6fbe  libGLProgrammability.dylib ??? (???) <d5cb4e7997a873cd77523689e6749acd> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib
0x905e7000 - 0x90606ffa  libJPEG.dylib ??? (???) <6d61215d5adfd74f75fed2e4db29a21c> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x90607000 - 0x90932ff6  com.apple.QuickTime 7.7 (1680.28) <df75ea1435dadaf44ffde0924bc67ec4> /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x90607000 - 0x90932ff6  com.apple.QuickTime 7.7 (1680.28) <df75ea1435dadaf44ffde0924bc67ec4> /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x90607000 - 0x90932ff6  com.apple.QuickTime 7.7 (1680.28) <df75ea1435dadaf44ffde0924bc67ec4> /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x90607000 - 0x90932ff6  com.apple.QuickTime 7.7 (1680.28) <df75ea1435dadaf44ffde0924bc67ec4> /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x90607000 - 0x90932ff6  com.apple.QuickTime 7.7 (1680.28) <df75ea1435dadaf44ffde0924bc67ec4> /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x90607000 - 0x90932ff6  com.apple.QuickTime 7.7 (1680.28) <df75ea1435dadaf44ffde0924bc67ec4> /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x90607000 - 0x90932ff6  com.apple.QuickTime 7.7 (1680.28) <df75ea1435dadaf44ffde0924bc67ec4> /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x90607000 - 0x90932ff6  com.apple.QuickTime 7.7 (1680.28) <df75ea1435dadaf44ffde0924bc67ec4> /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x90607000 - 0x90932ff6  com.apple.QuickTime 7.7 (1680.28) <df75ea1435dadaf44ffde0924bc67ec4> /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x90607000 - 0x90932ff6  com.apple.QuickTime 7.7 (1680.28) <df75ea1435dadaf44ffde0924bc67ec4> /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x90607000 - 0x90932ff6  com.apple.QuickTime 7.7 (1680.28) <df75ea1435dadaf44ffde0924bc67ec4> /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x90933000 - 0x9093fff9  com.apple.helpdata 1.0.1 (14.2) /System/Library/PrivateFrameworks/HelpData.framework/Versions/A/HelpData
0x9095a000 - 0x9095affb  com.apple.installserver.framework 1.0 (8) /System/Library/PrivateFrameworks/InstallServer.framework/Versions/A/InstallServer
0x9095b000 - 0x909d5ff8  com.apple.print.framework.PrintCore 5.5.4 (245.6) <9ae833544b8249984c07544dbe6a97fa> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x909d6000 - 0x90a88ffb  libcrypto.0.9.7.dylib ??? (???) <d02f7e5b8a68813bb7a77f5edb34ff9d> /usr/lib/libcrypto.0.9.7.dylib
0x90a89000 - 0x90b10ff7  libsqlite3.0.dylib ??? (???) <aaaf72c093e13f34b96e2688b95bdb4a> /usr/lib/libsqlite3.0.dylib
0x90b11000 - 0x90b40fe3  com.apple.AE 402.3 (402.3) <dba512e47f68eea1dd0ab35f596edb34> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x90b41000 - 0x90c22ff7  libxml2.2.dylib ??? (???) <f274ba384fb55203873f9c17569ef131> /usr/lib/libxml2.2.dylib
0x90c35000 - 0x90d7eff7  com.apple.ImageIO.framework 2.0.9 (2.0.9) <717938c4837f88bbe8ec613d4d25bc52> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x90d7f000 - 0x90f03fef  com.apple.MediaToolbox 0.484.2 (484.2) <03c5c5966a91ad3ae9c825340fa21970> /System/Library/PrivateFrameworks/MediaToolbox.framework/Versions/A/MediaToolbox
0x90d7f000 - 0x90f03fef  com.apple.MediaToolbox 0.484.2 (484.2) <03c5c5966a91ad3ae9c825340fa21970> /System/Library/PrivateFrameworks/MediaToolbox.framework/Versions/A/MediaToolbox
0x90d7f000 - 0x90f03fef  com.apple.MediaToolbox 0.484.2 (484.2) <03c5c5966a91ad3ae9c825340fa21970> /System/Library/PrivateFrameworks/MediaToolbox.framework/Versions/A/MediaToolbox
0x90d7f000 - 0x90f03fef  com.apple.MediaToolbox 0.484.2 (484.2) <03c5c5966a91ad3ae9c825340fa21970> /System/Library/PrivateFrameworks/MediaToolbox.framework/Versions/A/MediaToolbox
0x90d7f000 - 0x90f03fef  com.apple.MediaToolbox 0.484.2 (484.2) <03c5c5966a91ad3ae9c825340fa21970> /System/Library/PrivateFrameworks/MediaToolbox.framework/Versions/A/MediaToolbox
0x90d7f000 - 0x90f03fef  com.apple.MediaToolbox 0.484.2 (484.2) <03c5c5966a91ad3ae9c825340fa21970> /System/Library/PrivateFrameworks/MediaToolbox.framework/Versions/A/MediaToolbox
0x90d7f000 - 0x90f03fef  com.apple.MediaToolbox 0.484.2 (484.2) <03c5c5966a91ad3ae9c825340fa21970> /System/Library/PrivateFrameworks/MediaToolbox.framework/Versions/A/MediaToolbox
0x90d7f000 - 0x90f03fef  com.apple.MediaToolbox 0.484.2 (484.2) <03c5c5966a91ad3ae9c825340fa21970> /System/Library/PrivateFrameworks/MediaToolbox.framework/Versions/A/MediaToolbox
0x90d7f000 - 0x90f03fef  com.apple.MediaToolbox 0.484.2 (484.2) <03c5c5966a91ad3ae9c825340fa21970> /System/Library/PrivateFrameworks/MediaToolbox.framework/Versions/A/MediaToolbox
0x90d7f000 - 0x90f03fef  com.apple.MediaToolbox 0.484.2 (484.2) <03c5c5966a91ad3ae9c825340fa21970> /System/Library/PrivateFrameworks/MediaToolbox.framework/Versions/A/MediaToolbox
0x90d7f000 - 0x90f03fef  com.apple.MediaToolbox 0.484.2 (484.2) <03c5c5966a91ad3ae9c825340fa21970> /System/Library/PrivateFrameworks/MediaToolbox.framework/Versions/A/MediaToolbox
0x90f04000 - 0x90f60ff7  com.apple.htmlrendering 68 (1.1.3) <1c5c0c417891b920dfe139385fc6c155> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x90f61000 - 0x91132fef  com.apple.security 5.0.7 (1) <44e26a9c40630a54d5a9f70c18483411> /System/Library/Frameworks/Security.framework/Versions/A/Security
0x91134000 - 0x91134ffd  com.apple.Accelerate.vecLib 3.4.2 (vecLib 3.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x91135000 - 0x91159fff  libxslt.1.dylib ??? (???) <c372568bd2f7169efa0faee6546eead3> /usr/lib/libxslt.1.dylib
0x9115a000 - 0x9123afff  libobjc.A.dylib ??? (???) <3ca288b625a47bbcfe378158e4dc328f> /usr/lib/libobjc.A.dylib
0x9123b000 - 0x91242ffe  libbsm.dylib ??? (???) <fa7ae5f1a621d9b69e7e18747c9405fb> /usr/lib/libbsm.dylib
0x91243000 - 0x91245fff  com.apple.securityhi 3.0 (30817) <b3517782ad664a21e4fd60242e92723e> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x9135d000 - 0x91b5bfef  com.apple.AppKit 6.5.9 (949.54) <4df5d2e2271175452103f789b4f4d8a8> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x91b5c000 - 0x91b63fe9  libgcc_s.1.dylib ??? (???) <e280ddf3f5fb3049e674edcb109f389a> /usr/lib/libgcc_s.1.dylib
0x91b64000 - 0x91c1ffe3  com.apple.CoreServices.OSServices 228.1 (228.1) <9c640e79ad97f335730d8a49f6cb2032> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x91c20000 - 0x91c4dfeb  libvDSP.dylib ??? (???) <f39d424bd56a0e75d5c7a2280a25cd76> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x91c4e000 - 0x91c59fe7  libCSync.A.dylib ??? (???) <f3228c803584320fde5e1bb9f04b4d44> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x91ea5000 - 0x91ef0ff7  com.apple.CoreMediaIOServices 140.0 (1492) <3fd3879b31be7659c1008e8991e9f69b> /System/Library/PrivateFrameworks/CoreMediaIOServices.framework/Versions/A/CoreMediaIOServices
0x91ea5000 - 0x91ef0ff7  com.apple.CoreMediaIOServices 140.0 (1492) <3fd3879b31be7659c1008e8991e9f69b> /System/Library/PrivateFrameworks/CoreMediaIOServices.framework/Versions/A/CoreMediaIOServices
0x91ea5000 - 0x91ef0ff7  com.apple.CoreMediaIOServices 140.0 (1492) <3fd3879b31be7659c1008e8991e9f69b> /System/Library/PrivateFrameworks/CoreMediaIOServices.framework/Versions/A/CoreMediaIOServices
0x91ea5000 - 0x91ef0ff7  com.apple.CoreMediaIOServices 140.0 (1492) <3fd3879b31be7659c1008e8991e9f69b> /System/Library/PrivateFrameworks/CoreMediaIOServices.framework/Versions/A/CoreMediaIOServices
0x91ea5000 - 0x91ef0ff7  com.apple.CoreMediaIOServices 140.0 (1492) <3fd3879b31be7659c1008e8991e9f69b> /System/Library/PrivateFrameworks/CoreMediaIOServices.framework/Versions/A/CoreMediaIOServices
0x91ea5000 - 0x91ef0ff7  com.apple.CoreMediaIOServices 140.0 (1492) <3fd3879b31be7659c1008e8991e9f69b> /System/Library/PrivateFrameworks/CoreMediaIOServices.framework/Versions/A/CoreMediaIOServices
0x91ea5000 - 0x91ef0ff7  com.apple.CoreMediaIOServices 140.0 (1492) <3fd3879b31be7659c1008e8991e9f69b> /System/Library/PrivateFrameworks/CoreMediaIOServices.framework/Versions/A/CoreMediaIOServices
0x91ea5000 - 0x91ef0ff7  com.apple.CoreMediaIOServices 140.0 (1492) <3fd3879b31be7659c1008e8991e9f69b> /System/Library/PrivateFrameworks/CoreMediaIOServices.framework/Versions/A/CoreMediaIOServices
0x91ea5000 - 0x91ef0ff7  com.apple.CoreMediaIOServices 140.0 (1492) <3fd3879b31be7659c1008e8991e9f69b> /System/Library/PrivateFrameworks/CoreMediaIOServices.framework/Versions/A/CoreMediaIOServices
0x91ea5000 - 0x91ef0ff7  com.apple.CoreMediaIOServices 140.0 (1492) <3fd3879b31be7659c1008e8991e9f69b> /System/Library/PrivateFrameworks/CoreMediaIOServices.framework/Versions/A/CoreMediaIOServices
0x91ea5000 - 0x91ef0ff7  com.apple.CoreMediaIOServices 140.0 (1492) <3fd3879b31be7659c1008e8991e9f69b> /System/Library/PrivateFrameworks/CoreMediaIOServices.framework/Versions/A/CoreMediaIOServices
0x91f5f000 - 0x91f8afe7  libauto.dylib ??? (???) <4f3e58cb81da07a1662c1f647ce30225> /usr/lib/libauto.dylib
0x91f8b000 - 0x91f93fff  com.apple.DiskArbitration 2.2.1 (2.2.1) <ba64dd6ada417b5e7be736957f380bca> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x91f94000 - 0x9203bfec  com.apple.CFNetwork 438.16 (438.16) <0a2f633dc532b176109547367f209ced> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x9203c000 - 0x92046feb  com.apple.audio.SoundManager 3.9.2 (3.9.2) <df077a8048afc3075c6f2d9e7780e78e> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x92047000 - 0x92095fe3  com.apple.AppleVAFramework 4.1.17 (4.1.17) /System/Library/PrivateFrameworks/AppleVA.framework/Versions/A/AppleVA
0x92047000 - 0x92095fe3  com.apple.AppleVAFramework 4.1.17 (4.1.17) /System/Library/PrivateFrameworks/AppleVA.framework/Versions/A/AppleVA
0x92047000 - 0x92095fe3  com.apple.AppleVAFramework 4.1.17 (4.1.17) /System/Library/PrivateFrameworks/AppleVA.framework/Versions/A/AppleVA
0x92047000 - 0x92095fe3  com.apple.AppleVAFramework 4.1.17 (4.1.17) /System/Library/PrivateFrameworks/AppleVA.framework/Versions/A/AppleVA
0x92047000 - 0x92095fe3  com.apple.AppleVAFramework 4.1.17 (4.1.17) /System/Library/PrivateFrameworks/AppleVA.framework/Versions/A/AppleVA
0x92047000 - 0x92095fe3  com.apple.AppleVAFramework 4.1.17 (4.1.17) /System/Library/PrivateFrameworks/AppleVA.framework/Versions/A/AppleVA
0x92047000 - 0x92095fe3  com.apple.AppleVAFramework 4.1.17 (4.1.17) /System/Library/PrivateFrameworks/AppleVA.framework/Versions/A/AppleVA
0x92047000 - 0x92095fe3  com.apple.AppleVAFramework 4.1.17 (4.1.17) /System/Library/PrivateFrameworks/AppleVA.framework/Versions/A/AppleVA
0x92047000 - 0x92095fe3  com.apple.AppleVAFramework 4.1.17 (4.1.17) /System/Library/PrivateFrameworks/AppleVA.framework/Versions/A/AppleVA
0x92047000 - 0x92095fe3  com.apple.AppleVAFramework 4.1.17 (4.1.17) /System/Library/PrivateFrameworks/AppleVA.framework/Versions/A/AppleVA
0x92047000 - 0x92095fe3  com.apple.AppleVAFramework 4.1.17 (4.1.17) /System/Library/PrivateFrameworks/AppleVA.framework/Versions/A/AppleVA
0x92096000 - 0x92147fff  edu.mit.Kerberos 6.0.15 (6.0.15) <28005ea82ba82307f185c255c25bfdd3> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
0x922d8000 - 0x92694ff4  com.apple.VideoToolbox 0.484.2 (484.2) <f8e0dbf848f7441bc31428305a2f65bf> /System/Library/PrivateFrameworks/VideoToolbox.framework/Versions/A/VideoToolbox
0x922d8000 - 0x92694ff4  com.apple.VideoToolbox 0.484.2 (484.2) <f8e0dbf848f7441bc31428305a2f65bf> /System/Library/PrivateFrameworks/VideoToolbox.framework/Versions/A/VideoToolbox
0x922d8000 - 0x92694ff4  com.apple.VideoToolbox 0.484.2 (484.2) <f8e0dbf848f7441bc31428305a2f65bf> /System/Library/PrivateFrameworks/VideoToolbox.framework/Versions/A/VideoToolbox
0x922d8000 - 0x92694ff4  com.apple.VideoToolbox 0.484.2 (484.2) <f8e0dbf848f7441bc31428305a2f65bf> /System/Library/PrivateFrameworks/VideoToolbox.framework/Versions/A/VideoToolbox
0x922d8000 - 0x92694ff4  com.apple.VideoToolbox 0.484.2 (484.2) <f8e0dbf848f7441bc31428305a2f65bf> /System/Library/PrivateFrameworks/VideoToolbox.framework/Versions/A/VideoToolbox
0x922d8000 - 0x92694ff4  com.apple.VideoToolbox 0.484.2 (484.2) <f8e0dbf848f7441bc31428305a2f65bf> /System/Library/PrivateFrameworks/VideoToolbox.framework/Versions/A/VideoToolbox
0x922d8000 - 0x92694ff4  com.apple.VideoToolbox 0.484.2 (484.2) <f8e0dbf848f7441bc31428305a2f65bf> /System/Library/PrivateFrameworks/VideoToolbox.framework/Versions/A/VideoToolbox
0x922d8000 - 0x92694ff4  com.apple.VideoToolbox 0.484.2 (484.2) <f8e0dbf848f7441bc31428305a2f65bf> /System/Library/PrivateFrameworks/VideoToolbox.framework/Versions/A/VideoToolbox
0x922d8000 - 0x92694ff4  com.apple.VideoToolbox 0.484.2 (484.2) <f8e0dbf848f7441bc31428305a2f65bf> /System/Library/PrivateFrameworks/VideoToolbox.framework/Versions/A/VideoToolbox
0x922d8000 - 0x92694ff4  com.apple.VideoToolbox 0.484.2 (484.2) <f8e0dbf848f7441bc31428305a2f65bf> /System/Library/PrivateFrameworks/VideoToolbox.framework/Versions/A/VideoToolbox
0x922d8000 - 0x92694ff4  com.apple.VideoToolbox 0.484.2 (484.2) <f8e0dbf848f7441bc31428305a2f65bf> /System/Library/PrivateFrameworks/VideoToolbox.framework/Versions/A/VideoToolbox
0x92778000 - 0x927f5feb  com.apple.audio.CoreAudio 3.1.2 (3.1.2) <782a08c44be4698597f4bbd79cac21c6> /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x927f6000 - 0x9282dfff  com.apple.SystemConfiguration 1.9.2 (1.9.2) <41d5aeffefc6d19d471f51ae0b15024f> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x928bf000 - 0x928ddfff  libresolv.9.dylib ??? (???) <0e26b308654f33fc94a0c010a50751f9> /usr/lib/libresolv.9.dylib
0x928de000 - 0x92985feb  com.apple.QD 3.11.57 (???) <35f058678972d42b88ebdf652df79956> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x92986000 - 0x92986fff  com.apple.Carbon 136 (136) <eb3c292d5544512f86e1e4e743c23f8e> /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x92987000 - 0x929e0ff7  libGLU.dylib ??? (???) <64d010e31d7596bd8f9edc6e027d1d0c> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x929e1000 - 0x929e3ff5  libRadiance.dylib ??? (???) <73169d8c3fc31df4005e8eaa0d16bde5> /System/Library/Frameworks/Applicatio

[Tony Gentilcore]

John, I'm assigning this to you just because you authored the most lines in plugins/npapi/plugin_instance.cc where the crash is so I thought you might be able to add some insight or find a more appropriate owner.

[Adam Klein]

Seen today in fast/dom/node-iterator-reference-node-moved-crash.html:


Process:         DumpRenderTree [81352]
Path:            /b/build/slave/Webkit_Mac10_6__dbg_/build/src/xcodebuild/Debug/DumpRenderTree.app/Contents/MacOS/DumpRenderTree
Identifier:      DumpRenderTree
Version:         ??? (???)
Code Type:       X86 (Native)
Parent Process:  Python [80031]

Date/Time:       2011-11-17 15:48:10.598 -0800
OS Version:      Mac OS X Server 10.6.8 (10K549)
Report Version:  6

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_PROTECTION_FAILURE at 0x00000000bea80010
Crashed Thread:  0  Dispatch queue: com.apple.main-thread

Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   com.apple.testnetscapeplugin  	0x25f16ec9 NPP_SetWindow + 297
1   DumpRenderTree                	0x1943ca93 webkit::npapi::PluginInstance::NPP_SetWindow(_NPWindow*) + 515
2   DumpRenderTree                	0x19477b5d webkit::npapi::WebPluginDelegateImpl::WindowlessSetWindow() + 349
3   DumpRenderTree                	0x19479a30 webkit::npapi::WebPluginDelegateImpl::WindowlessUpdateGeometry(gfx::Rect const&, gfx::Rect const&) + 656
4   DumpRenderTree                	0x19474bcb webkit::npapi::WebPluginDelegateImpl::UpdateGeometry(gfx::Rect const&, gfx::Rect const&) + 139
5   DumpRenderTree                	0x19481959 webkit::npapi::WebPluginImpl::updateGeometry(WebKit::WebRect const&, WebKit::WebRect const&, WebKit::WebVector<WebKit::WebRect> const&, bool) + 857
6   DumpRenderTree                	0x19481c7a non-virtual thunk to webkit::npapi::WebPluginImpl::updateGeometry(WebKit::WebRect const&, WebKit::WebRect const&, WebKit::WebVector<WebKit::WebRect> const&, bool) + 90
7   DumpRenderTree                	0x15ee33c5 WebKit::WebPluginContainerImpl::reportGeometry() + 341
8   DumpRenderTree                	0x15ee1948 WebKit::WebPluginContainerImpl::setFrameRect(WebCore::IntRect const&) + 88
9   DumpRenderTree                	0x18abc251 WebCore::RenderWidget::setWidgetGeometry(WebCore::IntRect const&) + 321
10  DumpRenderTree                	0x18abc4d6 WebCore::RenderWidget::updateWidgetGeometry() + 470
11  DumpRenderTree                	0x18abd624 WebCore::RenderWidget::updateWidgetPosition() + 100
12  DumpRenderTree                	0x18aa67f5 WebCore::RenderView::updateWidgetPositions() + 117
13  DumpRenderTree                	0x1856e451 WebCore::FrameView::performPostLayoutTasks() + 465
14  DumpRenderTree                	0x1856dfdc WebCore::FrameView::layout(bool) + 4236
15  DumpRenderTree                	0x177fa087 WebCore::Document::updateLayout() + 311
16  DumpRenderTree                	0x177fa233 WebCore::Document::updateLayoutIgnorePendingStylesheets() + 243
17  DumpRenderTree                	0x1787add8 WebCore::Element::scrollHeight() + 56
18  DumpRenderTree                	0x15e9dc77 WebKit::WebFrameImpl::documentElementScrollHeight() const + 135
19  DumpRenderTree                	0x15dc3fa8 WebViewHost::didUpdateLayout(WebKit::WebFrame*) + 136
20  DumpRenderTree                	0x15dc4009 non-virtual thunk to WebViewHost::didUpdateLayout(WebKit::WebFrame*) + 41
21  DumpRenderTree                	0x15df4ae7 WebKit::ChromeClientImpl::layoutUpdated(WebCore::Frame*) const + 103
22  DumpRenderTree                	0x1856e1c3 WebCore::FrameView::layout(bool) + 4723
23  DumpRenderTree                	0x177f99b5 WebCore::Document::implicitClose() + 997
24  DumpRenderTree                	0x18429722 WebCore::FrameLoader::checkCallImplicitClose() + 178
25  DumpRenderTree                	0x1842942a WebCore::FrameLoader::checkCompleted() + 330
26  DumpRenderTree                	0x18427e9e WebCore::FrameLoader::finishedParsing() + 190
27  DumpRenderTree                	0x17806942 WebCore::Document::finishedParsing() + 626
28  DumpRenderTree                	0x17b15a7a WebCore::HTMLTreeBuilder::finished() + 170
29  DumpRenderTree                	0x17adcfce WebCore::HTMLDocumentParser::end() + 254
30  DumpRenderTree                	0x17adbdcc WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd() + 300
31  DumpRenderTree                	0x17adbb3c WebCore::HTMLDocumentParser::prepareToStopParsing() + 300
32  DumpRenderTree                	0x17add045 WebCore::HTMLDocumentParser::attemptToEnd() + 85
33  DumpRenderTree                	0x17add0c9 WebCore::HTMLDocumentParser::finish() + 89
34  DumpRenderTree                	0x1841baaa WebCore::DocumentWriter::endIfNotLoadingMainResource() + 282
35  DumpRenderTree                	0x1841afe3 WebCore::DocumentWriter::end() + 67
36  DumpRenderTree                	0x18400c42 WebCore::DocumentLoader::finishedLoading() + 114
37  DumpRenderTree                	0x184333c5 WebCore::FrameLoader::finishedLoading() + 101
38  DumpRenderTree                	0x184518c2 WebCore::MainResourceLoader::didFinishLoading(double) + 434
39  DumpRenderTree                	0x18471f78 WebCore::ResourceLoader::didFinishLoading(WebCore::ResourceHandle*, double) + 200
40  DumpRenderTree                	0x15e57149 WebCore::ResourceHandleInternal::didFinishLoading(WebKit::WebURLLoader*, double) + 265
41  DumpRenderTree                	0x194b8456 webkit_glue::WebURLLoaderImpl::Context::OnCompletedRequest(net::URLRequestStatus const&, std::string const&, base::Time const&) + 1110
42  DumpRenderTree                	0x1960be2d (anonymous namespace)::RequestProxy::NotifyCompletedRequest(net::URLRequestStatus const&, std::string const&, base::Time const&) + 109
43  DumpRenderTree                	0x1960c4e7 base::internal::Invoker4<false, base::internal::InvokerStorage4<void ((anonymous namespace)::RequestProxy::*)(net::URLRequestStatus const&, std::string const&, base::Time const&), (anonymous namespace)::RequestProxy*, net::URLRequestStatus, std::string, base::Time>, void ((anonymous namespace)::RequestProxy::*)(net::URLRequestStatus const&, std::string const&, base::Time const&)>::DoInvoke(base::internal::InvokerStorageBase*) + 295
44  DumpRenderTree                	0x163314eb base::Callback<void ()()>::Run() const + 75
45  DumpRenderTree                	0x1632ed4d MessageLoop::RunTask(base::PendingTask const&) + 1069
46  DumpRenderTree                	0x1632ef51 MessageLoop::DeferOrRunPendingTask(base::PendingTask const&) + 97
47  DumpRenderTree                	0x1632f188 MessageLoop::DoWork() + 312
48  DumpRenderTree                	0x162afe9b base::MessagePumpCFRunLoopBase::RunWork() + 107
49  DumpRenderTree                	0x162af592 base::MessagePumpCFRunLoopBase::RunWorkSource(void*) + 50
50  com.apple.CoreFoundation      	0x956da42b __CFRunLoopDoSources0 + 1563
51  com.apple.CoreFoundation      	0x956d7eef __CFRunLoopRun + 1071
52  com.apple.CoreFoundation      	0x956d73c4 CFRunLoopRunSpecific + 452
53  com.apple.CoreFoundation      	0x956d71f1 CFRunLoopRunInMode + 97
54  com.apple.HIToolbox           	0x98477e04 RunCurrentEventLoopInMode + 392
55  com.apple.HIToolbox           	0x98477bb9 ReceiveNextEventCommon + 354
56  com.apple.HIToolbox           	0x98477a3e BlockUntilNextEventMatchingListInMode + 81
57  com.apple.AppKit              	0x97282595 _DPSNextEvent + 847
58  com.apple.AppKit              	0x97281dd6 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 156
59  com.apple.AppKit              	0x972441f3 -[NSApplication run] + 821
60  DumpRenderTree                	0x162b0bbe base::MessagePumpNSApplication::DoRun(base::MessagePump::Delegate*) + 350
61  DumpRenderTree                	0x162afb8d base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate*) + 189
62  DumpRenderTree                	0x1632e5d3 MessageLoop::RunInternal() + 291
63  DumpRenderTree                	0x1632d8cb MessageLoop::RunHandler() + 43
64  DumpRenderTree                	0x1632d810 MessageLoop::Run() + 64
65  DumpRenderTree                	0x160ac167 webkit_support::RunMessageLoop() + 39
66  DumpRenderTree                	0x15db6e85 TestShell::waitTestFinished() + 389
67  DumpRenderTree                	0x15da840c TestShell::runFileTest(TestParams const&) + 956
68  DumpRenderTree                	0x15d64773 runTest(TestShell&, TestParams&, std::string const&, bool) + 1395
69  DumpRenderTree                	0x15d64042 main + 3602
70  DumpRenderTree                	0x15d43bc6 start + 54

[John Abd-El-Malek]

I defer to stuartmorgan, who's the mac plugins expert afaik.

[Tony Gentilcore]

stuartmorgan, any ideas?

[Adam Klein]

Committed r101093: <http://trac.webkit.org/changeset/101093>

[Stuart Morgan]

Hard to tell without more specific crash details, but it looks like there might be an object lifetime issue relating to the plugin instance itself? I wouldn't expect that to be Mac-specific though.

Worth noting though that plugins aren't supported in-process for Mac, so DRT tests that include plugins are a bit questionable in the first place on Mac. But if this is new, it's shouldn't be due to that, because there haven't been any Mac plugin changes recently that I can think of.

[Ryosuke Niwa]

No longer observing this.