Bug 79687 - Webkit crashes on site access
Summary: Webkit crashes on site access
Status: RESOLVED INVALID
Alias: None
Product: WebKit
Classification: Unclassified
Component: New Bugs (show other bugs)
Version: 528+ (Nightly build)
Hardware: Mac (Intel) OS X 10.7
: P2 Normal
Assignee: Nobody
URL: http://www.trf5.jus.br/
Keywords:
Depends on:
Blocks:
 
Reported: 2012-02-27 11:32 PST by bernhard
Modified: 2012-02-27 14:03 PST (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description bernhard 2012-02-27 11:32:18 PST
Steps to reproduce: open http://www.trf5.jus.br/

Results:  Accessing http://www.trf5.jus.br/ reloads the website a couple of times and then crashes the webkit nighly build (WebKit r109005).

Expected result: Webkit displaying the site

Build: WebKit r109005 on Max OS x 10.7.3

This seems to be a longer standing bug - e.g. chrome crashes completely and webkit on safari 5.1.3 also crashes.

Crash log excerpt:
Version:         535+ (535.24+)
Code Type:       X86-64 (Native)

Date/Time:       2012-02-27 11:29:33.086 -0800
OS Version:      Mac OS X 10.7.3 (11D50)

Crashed Thread:  4  com.apple.NSURLConnectionLoader

Exception Type:  EXC_CRASH (SIGABRT)
Exception Codes: 0x0000000000000000, 0x0000000000000000

Application Specific Information:
*** error for object 0x7fe78d9ca320: pointer being freed was not allocated
 
objc[3310]: garbage collection is OFF

Thread 4 Crashed:: com.apple.NSURLConnectionLoader
0   libsystem_kernel.dylib        	0x00007fff87ecbce2 __pthread_kill + 10
1   libsystem_c.dylib             	0x00007fff8b8c87d2 pthread_kill + 95
2   libsystem_c.dylib             	0x00007fff8b8b9a7a abort + 143
3   libsystem_c.dylib             	0x00007fff8b91884c free + 389
4   com.apple.security            	0x00007fff8bf7fb76 Security::CssmAllocatorMemoryFunctions::relayFree(void*, void*) + 22
5   com.apple.security            	0x00007fff8bf7fb56 Security::CssmMemoryFunctions::free(void*) const + 20
6   com.apple.security            	0x00007fff8bf88b65 Attachment::upcallFree(long, void*) + 105
7   com.apple.security            	0x00007fff8bf88af1 Security::PluginSession::free(void*) + 21
8   com.apple.security            	0x00007fff8bf9fc17 Security::CssmRemoteData::~CssmRemoteData() + 49
9   com.apple.security            	0x00007fff8c0837f4 _ZL21CL_freeCssmExtensionsR20cssm_x509_extensionsRN8Security9AllocatorE + 381
10  com.apple.security            	0x00007fff8c082a4f freeField_SignedCrl(Security::CssmOwnedData&) + 461
Comment 1 Alexey Proskuryakov 2012-02-27 14:03:23 PST
Thank you for the report! This is a problem in a lower level system framework, so closing as INVALID per our policy.

This issue is tracked internally by Apple as <rdar://problem/10393070>.