Bug 9062 – Safari crashes when loading major website home page

• Status: RESOLVED
• Resolution: FIXED
• Component: Page Loading

[Za]

Safari crashes when loading www.voyages-sncf.com , which the home page of the French national railway company. And this page is W3C valid XHTML 1.0 Transitional.

[Geoffrey Garen]

This is the crash log on 10.4.7:

Date/Time:      2006-05-23 10:53:47.981 -0700
OS Version:     10.4.7 (Build 8J107)
Report Version: 4

Command: Safari
Path:    /Applications/Safari.app/Contents/MacOS/Safari
Parent:  WindowServer [64]

Version:        2.0.3 (418.3)
Build Version:  2
Project Name:   WebBrowser
Source Version: 4180300

PID:    5137
Thread: 0

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000048

Thread 0 Crashed:
0   com.apple.WebCore        	0x959296a4 QString::QString[unified](QString const&) + 20
1   com.apple.WebCore        	0x95976cfc DOM::DocumentImpl::processHttpEquiv(DOM::DOMString const&, DOM::DOMString const&) + 1952
2   com.apple.WebCore        	0x95955128 DOM::NodeBaseImpl::addChild(DOM::NodeImpl*) + 228
3   com.apple.WebCore        	0x95afabd4 khtml::XMLTokenizer::startElement(unsigned char const*, unsigned char const**) + 1768
4   libxml2.2.dylib          	0x92ca0860 xmlParseStartTag + 1028
5   libxml2.2.dylib          	0x92ca42f8 xmlParseDocument + 3380
6   libxml2.2.dylib          	0x92c88c0c xmlParseChunk + 424
7   com.apple.WebCore        	0x95afb9d4 khtml::XMLTokenizer::finish() + 196
8   com.apple.WebCore        	0x95a464d0 KJS::XMLHttpRequest::getValueProperty(KJS::ExecState*, int) const + 1104
9   com.apple.WebCore        	0x95a43c04 KJS::XMLHttpRequest::tryGet(KJS::ExecState*, KJS::Identifier const&) const + 144
10  com.apple.WebCore        	0x95995478 KJS::DOMObject::get(KJS::ExecState*, KJS::Identifier const&) const + 60
11  com.apple.JavaScriptCore 	0x9580c55c KJS::Reference::getValue(KJS::ExecState*) const + 584
12  com.apple.JavaScriptCore 	0x9580c078 KJS::AccessorNode2::evaluate(KJS::ExecState*) + 60
13  com.apple.JavaScriptCore 	0x95811580 KJS::ArgumentListNode::evaluateList(KJS::ExecState*) + 80
14  com.apple.JavaScriptCore 	0x9580cf30 KJS::ArgumentsNode::evaluateList(KJS::ExecState*) + 44
15  com.apple.JavaScriptCore 	0x9580bb04 KJS::FunctionCallNode::evaluate(KJS::ExecState*) + 220
16  com.apple.JavaScriptCore 	0x95810ab4 KJS::ExprStatementNode::execute(KJS::ExecState*) + 120
17  com.apple.JavaScriptCore 	0x9580b3ec KJS::SourceElementsNode::execute(KJS::ExecState*) + 208
18  com.apple.JavaScriptCore 	0x9580b2ac KJS::BlockNode::execute(KJS::ExecState*) + 140
19  com.apple.JavaScriptCore 	0x9581820c KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 44
20  com.apple.JavaScriptCore 	0x95817a8c KJS::FunctionImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) + 408
21  com.apple.JavaScriptCore 	0x9580d590 KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) + 136
22  com.apple.JavaScriptCore 	0x95827df0 KJS::FunctionProtoFuncImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) + 2556
23  com.apple.JavaScriptCore 	0x9580d590 KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) + 136
24  com.apple.JavaScriptCore 	0x9580be38 KJS::FunctionCallNode::evaluate(KJS::ExecState*) + 1040
25  com.apple.JavaScriptCore 	0x95810ab4 KJS::ExprStatementNode::execute(KJS::ExecState*) + 120
26  com.apple.JavaScriptCore 	0x9580b53c KJS::SourceElementsNode::execute(KJS::ExecState*) + 544
27  com.apple.JavaScriptCore 	0x9580b2ac KJS::BlockNode::execute(KJS::ExecState*) + 140
28  com.apple.JavaScriptCore 	0x9581820c KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 44
29  com.apple.JavaScriptCore 	0x95817a8c KJS::FunctionImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) + 408
30  com.apple.JavaScriptCore 	0x9580d590 KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) + 136
31  com.apple.JavaScriptCore 	0x95827f74 KJS::FunctionProtoFuncImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) + 2944
32  com.apple.JavaScriptCore 	0x9580d590 KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) + 136
33  com.apple.JavaScriptCore 	0x9580be38 KJS::FunctionCallNode::evaluate(KJS::ExecState*) + 1040
34  com.apple.JavaScriptCore 	0x95811410 KJS::EqualNode::evaluate(KJS::ExecState*) + 60
35  com.apple.JavaScriptCore 	0x9581136c KJS::BinaryLogicalNode::evaluate(KJS::ExecState*) + 252
36  com.apple.JavaScriptCore 	0x958166c8 KJS::IfNode::execute(KJS::ExecState*) + 136
37  com.apple.JavaScriptCore 	0x9580b53c KJS::SourceElementsNode::execute(KJS::ExecState*) + 544
38  com.apple.JavaScriptCore 	0x9580b2ac KJS::BlockNode::execute(KJS::ExecState*) + 140
39  com.apple.JavaScriptCore 	0x9581ae00 KJS::ForNode::execute(KJS::ExecState*) + 592
40  com.apple.JavaScriptCore 	0x9580b53c KJS::SourceElementsNode::execute(KJS::ExecState*) + 544
41  com.apple.JavaScriptCore 	0x9580b2ac KJS::BlockNode::execute(KJS::ExecState*) + 140
42  com.apple.JavaScriptCore 	0x9581820c KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 44
43  com.apple.JavaScriptCore 	0x95817a8c KJS::FunctionImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) + 408
44  com.apple.JavaScriptCore 	0x9580d590 KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) + 136
45  com.apple.JavaScriptCore 	0x9580be38 KJS::FunctionCallNode::evaluate(KJS::ExecState*) + 1040
46  com.apple.JavaScriptCore 	0x9580ba10 KJS::AssignExprNode::evaluate(KJS::ExecState*) + 40
47  com.apple.JavaScriptCore 	0x9580b918 KJS::VarDeclNode::evaluate(KJS::ExecState*) + 100
48  com.apple.JavaScriptCore 	0x9580b84c KJS::VarDeclListNode::evaluate(KJS::ExecState*) + 72
49  com.apple.JavaScriptCore 	0x9580b708 KJS::VarStatementNode::execute(KJS::ExecState*) + 120
50  com.apple.JavaScriptCore 	0x9580b53c KJS::SourceElementsNode::execute(KJS::ExecState*) + 544
51  com.apple.JavaScriptCore 	0x9580b2ac KJS::BlockNode::execute(KJS::ExecState*) + 140
52  com.apple.JavaScriptCore 	0x9581820c KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 44
53  com.apple.JavaScriptCore 	0x95817a8c KJS::FunctionImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) + 408
54  com.apple.JavaScriptCore 	0x9580d590 KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) + 136
55  com.apple.JavaScriptCore 	0x95827df0 KJS::FunctionProtoFuncImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) + 2556
56  com.apple.JavaScriptCore 	0x9580d590 KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) + 136
57  com.apple.JavaScriptCore 	0x9580be38 KJS::FunctionCallNode::evaluate(KJS::ExecState*) + 1040
58  com.apple.JavaScriptCore 	0x95810ab4 KJS::ExprStatementNode::execute(KJS::ExecState*) + 120
59  com.apple.JavaScriptCore 	0x9580b53c KJS::SourceElementsNode::execute(KJS::ExecState*) + 544
60  com.apple.JavaScriptCore 	0x9580b2ac KJS::BlockNode::execute(KJS::ExecState*) + 140
61  com.apple.JavaScriptCore 	0x9581820c KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 44
62  com.apple.JavaScriptCore 	0x95817a8c KJS::FunctionImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) + 408
63  com.apple.JavaScriptCore 	0x9580d590 KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) + 136
64  com.apple.WebCore        	0x95ab3c98 KJS::JSAbstractEventListener::handleEvent(DOM::Event&, bool) + 492
65  com.apple.WebCore        	0x95a44ef8 KJS::XMLHttpRequest::changeState(KJS::XMLHttpRequestState) + 384
66  com.apple.WebCore        	0x95a46014 KJS::XMLHttpRequest::slotFinished(KIO::Job*) + 112
67  com.apple.WebCore        	0x95930b64 KWQSignal::call(KIO::Job*) const + 128
68  com.apple.WebCore        	0x95985db8 -[KWQResourceLoader finishJobAndHandle:] + 80
69  com.apple.WebKit         	0x95726908 -[WebSubresourceClient didFinishLoading] + 72
70  com.apple.WebKit         	0x95725b90 -[WebBaseResourceHandleDelegate connectionDidFinishLoading:] + 48
71  com.apple.Foundation     	0x9299384c -[NSURLConnection(NSURLConnectionInternal) _sendDidFinishLoadingCallback] + 188
72  com.apple.Foundation     	0x92991ab8 -[NSURLConnection(NSURLConnectionInternal) _sendCallbacks] + 556
73  com.apple.Foundation     	0x92991810 _sendCallbacks + 156
74  com.apple.CoreFoundation 	0x907dc4cc __CFRunLoopDoSources0 + 384
75  com.apple.CoreFoundation 	0x907db9fc __CFRunLoopRun + 452
76  com.apple.CoreFoundation 	0x907db47c CFRunLoopRunSpecific + 268
77  com.apple.HIToolbox      	0x93208a60 RunCurrentEventLoopInMode + 264
78  com.apple.HIToolbox      	0x932080f4 ReceiveNextEventCommon + 380
79  com.apple.HIToolbox      	0x93207f60 BlockUntilNextEventMatchingListInMode + 96
80  com.apple.AppKit         	0x9370ae84 _DPSNextEvent + 384
81  com.apple.AppKit         	0x9370ab48 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 116
82  com.apple.Safari         	0x00006d54 0x1000 + 23892
83  com.apple.AppKit         	0x9370708c -[NSApplication run] + 472
84  com.apple.AppKit         	0x937f7bfc NSApplicationMain + 452
85  com.apple.Safari         	0x0005cc10 0x1000 + 375824
86  com.apple.Safari         	0x0005cab8 0x1000 + 375480

Thread 1:
0   libSystem.B.dylib        	0x9000b0a8 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000affc mach_msg + 60
2   com.apple.CoreFoundation 	0x907dbb78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x907db47c CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x92970164 -[NSRunLoop runMode:beforeDate:] + 172
5   com.apple.Foundation     	0x9297009c -[NSRunLoop run] + 76
6   com.apple.WebKit         	0x957103f0 +[WebFileDatabase _syncLoop:] + 176
7   com.apple.Foundation     	0x92961194 forkThreadForFunction + 108
8   libSystem.B.dylib        	0x9002ba68 _pthread_body + 96

Thread 2:
0   libSystem.B.dylib        	0x9000b0a8 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000affc mach_msg + 60
2   com.apple.CoreFoundation 	0x907dbb78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x907db47c CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x9298869c +[NSURLConnection(NSURLConnectionInternal) _resourceLoadLoop:] + 264
5   com.apple.Foundation     	0x92961194 forkThreadForFunction + 108
6   libSystem.B.dylib        	0x9002ba68 _pthread_body + 96

Thread 3:
0   libSystem.B.dylib        	0x9000b0a8 mach_msg_trap + 8
1   libSystem.B.dylib        	0x9000affc mach_msg + 60
2   com.apple.CoreFoundation 	0x907dbb78 __CFRunLoopRun + 832
3   com.apple.CoreFoundation 	0x907db47c CFRunLoopRunSpecific + 268
4   com.apple.Foundation     	0x929897dc +[NSURLCache _diskCacheSyncLoop:] + 152
5   com.apple.Foundation     	0x92961194 forkThreadForFunction + 108
6   libSystem.B.dylib        	0x9002ba68 _pthread_body + 96

Thread 4:
0   libSystem.B.dylib        	0x9001f5ec select + 12
1   com.apple.CoreFoundation 	0x907ee40c __CFSocketManager + 472
2   libSystem.B.dylib        	0x9002ba68 _pthread_body + 96

Thread 5:
0   libSystem.B.dylib        	0x9002c128 semaphore_wait_signal_trap + 8
1   libSystem.B.dylib        	0x90030bec pthread_cond_wait + 480
2   com.apple.Foundation     	0x92968300 -[NSConditionLock lockWhenCondition:] + 68
3   com.apple.Syndication    	0x9a03142c -[AsyncDB _run:] + 192
4   com.apple.Foundation     	0x92961194 forkThreadForFunction + 108
5   libSystem.B.dylib        	0x9002ba68 _pthread_body + 96

Thread 6:
0   libSystem.B.dylib        	0x90033a48 mk_timer_arm + 8
1   com.apple.CoreFoundation 	0x907ef70c __CFRunLoopTimerRescheduleWithAllModes + 68
2   com.apple.CoreFoundation 	0x907ef698 __CFRunLoopDoTimer + 512
3   com.apple.CoreFoundation 	0x907dbec8 __CFRunLoopRun + 1680
4   com.apple.CoreFoundation 	0x907db47c CFRunLoopRunSpecific + 268
5   com.apple.Foundation     	0x92970164 -[NSRunLoop runMode:beforeDate:] + 172
6   com.apple.Foundation     	0x9297009c -[NSRunLoop run] + 76
7   com.apple.Safari         	0x0003db3c 0x1000 + 248636
8   com.apple.Foundation     	0x92961194 forkThreadForFunction + 108
9   libSystem.B.dylib        	0x9002ba68 _pthread_body + 96

Thread 0 crashed with PPC Thread State 64:
  srr0: 0x00000000959296a4 srr1: 0x100000000200f030                        vrsave: 0x0000000000000000
    cr: 0x24024212          xer: 0x0000000020000000   lr: 0x0000000095976cfc  ctr: 0x00000000901313a0
    r0: 0x0000000095976cfc   r1: 0x00000000bfffbba0   r2: 0x0000000000000001   r3: 0x00000000bfffbc10
    r4: 0x0000000000000048   r5: 0x0000000000000010   r6: 0x006e006f002d0063   r7: 0x00000000959276e0
    r8: 0x0061006300680065   r9: 0x000000000000002b  r10: 0x00000000959744a8  r11: 0x00000000a592727c
   r12: 0x000000000537f4f0  r13: 0x0000000000000000  r14: 0x0000000000000001  r15: 0x0000000000000001
   r16: 0x0000000000000000  r17: 0x0000000000000000  r18: 0x0000000000009edb  r19: 0x0000000000000000
   r20: 0x0000000001970b5c  r21: 0x00000000bfffbe80  r22: 0x00000000bfffbe10  r23: 0x00000000bfffbde0
   r24: 0x00000000bfffbe40  r25: 0x0000000005405d00  r26: 0x0000000000000000  r27: 0x00000000bfffbc10
   r28: 0x00000000bfffbe90  r29: 0x00000000bfffbc10  r30: 0x00000000bfffbc14  r31: 0x000000009597656c

Binary Images Description:
    0x1000 -    0xdcfff com.apple.Safari 2.0.3 (418.3)	/Applications/Safari.app/Contents/MacOS/Safari
 0x5a84000 -  0x5a86fff com.apple.textencoding.unicode 2.0	/System/Library/TextEncodings/Unicode Encodings.bundle/Contents/MacOS/Unicode Encodings
0x8fe00000 - 0x8fe51fff dyld 44.4	/usr/lib/dyld
0x90000000 - 0x901bbfff libSystem.B.dylib 	/usr/lib/libSystem.B.dylib
0x90213000 - 0x90218fff libmathCommon.A.dylib 	/usr/lib/system/libmathCommon.A.dylib
0x9021a000 - 0x90267fff com.apple.CoreText 1.0.1 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x90292000 - 0x90343fff ATS 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x90372000 - 0x9072cfff com.apple.CoreGraphics 1.258.30 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x907b9000 - 0x90892fff com.apple.CoreFoundation 6.4.6 (368.27)	/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x908db000 - 0x908dbfff com.apple.CoreServices 10.4 (???)	/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x908dd000 - 0x909dffff libicucore.A.dylib 	/usr/lib/libicucore.A.dylib
0x90a39000 - 0x90abdfff libobjc.A.dylib 	/usr/lib/libobjc.A.dylib
0x90ae7000 - 0x90b55fff IOKit 	/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x90b6c000 - 0x90b7efff libauto.dylib 	/usr/lib/libauto.dylib
0x90b85000 - 0x90e5cfff com.apple.CoreServices.CarbonCore 681.3 (671.2)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x90ec2000 - 0x90f42fff com.apple.CoreServices.OSServices 4.1	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x90f8c000 - 0x90fcdfff com.apple.CFNetwork 129.16	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x90fe2000 - 0x90ffafff com.apple.WebServices 1.1.2 (1.1.0)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/WebServicesCore.framework/Versions/A/WebServicesCore
0x9100a000 - 0x9108bfff com.apple.SearchKit 1.0.5	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x910d1000 - 0x910fbfff com.apple.Metadata 10.4.4 (121.36)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x9110c000 - 0x9111afff libz.1.dylib 	/usr/lib/libz.1.dylib
0x9111d000 - 0x912d7fff com.apple.security 4.4 (27566)	/System/Library/Frameworks/Security.framework/Versions/A/Security
0x913d5000 - 0x913defff com.apple.DiskArbitration 2.1	/System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x913e5000 - 0x9140cfff com.apple.SystemConfiguration 1.8.2	/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x9141f000 - 0x9142afff libgcc_s.1.dylib 	/usr/lib/libgcc_s.1.dylib
0x9142f000 - 0x91450fff libmx.A.dylib 	/usr/lib/libmx.A.dylib
0x91456000 - 0x9145efff libbsm.dylib 	/usr/lib/libbsm.dylib
0x91462000 - 0x914ddfff com.apple.audio.CoreAudio 3.0.3	/System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x9151a000 - 0x9151afff com.apple.ApplicationServices 10.4 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x9151c000 - 0x91554fff com.apple.AE 1.5 (297)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x9156f000 - 0x9163cfff com.apple.ColorSync 4.4.4	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x91691000 - 0x91722fff com.apple.print.framework.PrintCore 4.5 (177.10)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x91769000 - 0x91820fff com.apple.QD 3.10.11 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x9185d000 - 0x918bbfff com.apple.HIServices 1.5.3 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x918ea000 - 0x9190efff com.apple.LangAnalysis 1.6.1	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x91922000 - 0x91947fff com.apple.FindByContent 1.5	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/FindByContent.framework/Versions/A/FindByContent
0x9195a000 - 0x9199cfff com.apple.LaunchServices 177	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x919b8000 - 0x919ccfff com.apple.speech.synthesis.framework 3.3	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x919da000 - 0x91a19fff com.apple.ImageIO.framework 1.4.6	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x91a2f000 - 0x91af7fff libcrypto.0.9.7.dylib 	/usr/lib/libcrypto.0.9.7.dylib
0x91b45000 - 0x91b5afff libcups.2.dylib 	/usr/lib/libcups.2.dylib
0x91b5f000 - 0x91b7cfff libJPEG.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x91b81000 - 0x91bf0fff libJP2.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib
0x91c07000 - 0x91c0bfff libGIF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x91c0d000 - 0x91c54fff libRaw.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRaw.dylib
0x91c59000 - 0x91c96fff libTIFF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x91c9d000 - 0x91cb6fff libPng.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x91cbb000 - 0x91cbefff libRadiance.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x91cc0000 - 0x91cc0fff com.apple.Accelerate 1.2.1 (Accelerate 1.2.1)	/System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x91cc2000 - 0x91da2fff com.apple.vImage 2.3	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x91daa000 - 0x91dc9fff com.apple.Accelerate.vecLib 3.2.1 (vecLib 3.2.1)	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x91e35000 - 0x91ea3fff libvMisc.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x91eae000 - 0x91f42fff libvDSP.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x91f5c000 - 0x924e4fff libBLAS.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x92517000 - 0x92842fff libLAPACK.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x92872000 - 0x928fafff com.apple.DesktopServices 1.3.3	/System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x9293b000 - 0x92b66fff com.apple.Foundation 6.4.5 (567.26)	/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x92c84000 - 0x92d62fff libxml2.2.dylib 	/usr/lib/libxml2.2.dylib
0x92d82000 - 0x92e70fff libiconv.2.dylib 	/usr/lib/libiconv.2.dylib
0x92e82000 - 0x92ea0fff libGL.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x92eab000 - 0x92f05fff libGLU.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x92f23000 - 0x92f23fff com.apple.Carbon 10.4 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x92f25000 - 0x92f39fff com.apple.ImageCapture 3.0	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x92f51000 - 0x92f61fff com.apple.speech.recognition.framework 3.4	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x92f6d000 - 0x92f82fff com.apple.securityhi 2.0 (203)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x92f94000 - 0x9301bfff com.apple.ink.framework 101.2 (69)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x9302f000 - 0x9303afff com.apple.help 1.0.3 (32)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x93044000 - 0x93071fff com.apple.openscripting 1.2.5 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x9308b000 - 0x9309bfff com.apple.print.framework.Print 5.0 (190.1)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x930a7000 - 0x9310dfff com.apple.htmlrendering 1.1.2	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x9313e000 - 0x9318dfff com.apple.NavigationServices 3.4.4 (3.4.3)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x931bb000 - 0x931d8fff com.apple.audio.SoundManager 3.9	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x931ea000 - 0x931f7fff com.apple.CommonPanels 1.2.2 (73)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x93200000 - 0x9350dfff com.apple.HIToolbox 1.4.6 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x9365c000 - 0x93668fff com.apple.opengl 1.4.7	/System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x9366d000 - 0x9368dfff com.apple.DirectoryService.Framework 3.1	/System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x93701000 - 0x93701fff com.apple.Cocoa 6.4 (???)	/System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x93703000 - 0x93d35fff com.apple.AppKit 6.4.6 (824.38)	/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x940c2000 - 0x94132fff com.apple.CoreData 80	/System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x9416b000 - 0x94235fff com.apple.audio.toolbox.AudioToolbox 1.4.1	/System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x94289000 - 0x94289fff com.apple.audio.units.AudioUnit 1.4	/System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x9428b000 - 0x9443ffff com.apple.QuartzCore 1.4.7	/System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x94492000 - 0x944cffff libsqlite3.0.dylib 	/usr/lib/libsqlite3.0.dylib
0x944d7000 - 0x94527fff libGLImage.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x945b7000 - 0x945effff com.apple.vmutils 4.0.0 (85)	/System/Library/PrivateFrameworks/vmutils.framework/Versions/A/vmutils
0x94632000 - 0x9464efff com.apple.securityfoundation 2.1 (24988)	/System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x94662000 - 0x946a6fff com.apple.securityinterface 2.1 (27544)	/System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
0x946ca000 - 0x946d9fff libCGATS.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib
0x946e1000 - 0x946edfff libCSync.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x94733000 - 0x9474bfff libRIP.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x94938000 - 0x94a66fff com.apple.AddressBook.framework 4.0.3 (483)	/System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x94af8000 - 0x94b07fff com.apple.DSObjCWrappers.Framework 1.1	/System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
0x94b0f000 - 0x94b3cfff com.apple.LDAPFramework 1.4.1 (69.0.1)	/System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x94b43000 - 0x94b53fff libsasl2.2.dylib 	/usr/lib/libsasl2.2.dylib
0x94b57000 - 0x94b86fff libssl.0.9.7.dylib 	/usr/lib/libssl.0.9.7.dylib
0x94b96000 - 0x94bb3fff libresolv.9.dylib 	/usr/lib/libresolv.9.dylib
0x9570e000 - 0x9579afff com.apple.WebKit 418	/System/Library/Frameworks/WebKit.framework/Versions/A/WebKit
0x957f5000 - 0x958eafff com.apple.JavaScriptCore 417.11	/System/Library/Frameworks/WebKit.framework/Versions/A/Frameworks/JavaScriptCore.framework/Versions/A/JavaScriptCore
0x95926000 - 0x95c30fff com.apple.WebCore 417.24	/System/Library/Frameworks/WebKit.framework/Versions/A/Frameworks/WebCore.framework/Versions/A/WebCore
0x95db8000 - 0x95de1fff libxslt.1.dylib 	/usr/lib/libxslt.1.dylib
0x9a02e000 - 0x9a064fff com.apple.Syndication 1.0.6 (53)	/System/Library/PrivateFrameworks/Syndication.framework/Versions/A/Syndication
0x9a081000 - 0x9a093fff com.apple.SyndicationUI 1.0.6 (53)	/System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI

Model: PowerMac7,3, BootROM 5.1.8f8, 2 processors, PowerPC G5  (3.0), 2.5 GHz, 1.5 GB
Graphics: ATI Radeon 9600 XT, ATY,RV360, AGP, 128 MB
Memory Module: DIMM0/J11, 256 MB, DDR SDRAM, PC3200U-30330
Memory Module: DIMM1/J12, 256 MB, DDR SDRAM, PC3200U-30330
Memory Module: DIMM2/J13, 512 MB, DDR SDRAM, PC3200U-30330
Memory Module: DIMM3/J14, 512 MB, DDR SDRAM, PC3200U-30330
Modem: Jump, , V.92, Version 1.0, 
Network Service: Built-in Ethernet, Ethernet, en0
Serial ATA Device: ST3160023AS, 149.05 GB
Parallel ATA Device: SONY DVD RW DW-U21A, 
USB Device: Hub, , Up to 480 Mb/sec, 500 mA
USB Device: Apple Optical USB Mouse, Mitsumi Electric, Up to 1.5 Mb/sec, 500 mA
USB Device: Hub in Apple Pro Keyboard, Mitsumi Electric, Up to 12 Mb/sec, 500 mA
USB Device: Apple Pro Keyboard, Mitsumi Electric, Up to 12 Mb/sec, 250 mA
USB Device: Apple Cinema Display, , Up to 1.5 Mb/sec, 500 mA
FireWire Device: unknown_device, unknown_value, Up to 400 Mb/sec

[Geoffrey Garen]

TOT crashes with a bidi.cpp assertion failure:

/Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/bidi.cpp:851: failed assertion `m_tabWidth != 0'

(gdb) bt
#0  0x90047e4c in kill ()
#1  0x9012dff4 in abort ()
#2  0x9479c0b0 in __eprintf ()
#3  0x0192b2b0 in WebCore::RenderBlock::tabWidth (this=0x185f1cfc, isWhitespacePre=true) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/bidi.cpp:851
#4  0x01981b30 in WebCore::RenderObject::tabWidth (this=0x185f203c) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderObject.cpp:1958
#5  0x019994b4 in WebCore::RenderText::calcMinMaxWidth (this=0x185f203c, leadWidth=0) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderText.cpp:656
#6  0x01999d5c in WebCore::RenderText::calcMinMaxWidth (this=0x185f203c) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderText.cpp:577
#7  0x01982b50 in WebCore::RenderObject::recalcMinMaxWidths (this=0x185f203c) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderObject.cpp:2286
#8  0x01982968 in WebCore::RenderObject::recalcMinMaxWidths (this=0x185f1cfc) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderObject.cpp:2271
#9  0x01982968 in WebCore::RenderObject::recalcMinMaxWidths (this=0x185f1c3c) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderObject.cpp:2271
#10 0x01982968 in WebCore::RenderObject::recalcMinMaxWidths (this=0x185f088c) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderObject.cpp:2271
#11 0x01982968 in WebCore::RenderObject::recalcMinMaxWidths (this=0x185ef65c) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderObject.cpp:2271
#12 0x01982968 in WebCore::RenderObject::recalcMinMaxWidths (this=0x185ee50c) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderObject.cpp:2271
#13 0x01982968 in WebCore::RenderObject::recalcMinMaxWidths (this=0x185ecfec) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderObject.cpp:2271
#14 0x01982968 in WebCore::RenderObject::recalcMinMaxWidths (this=0x185ebc8c) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderObject.cpp:2271
#15 0x01982968 in WebCore::RenderObject::recalcMinMaxWidths (this=0x185ea7fc) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderObject.cpp:2271
#16 0x01982968 in WebCore::RenderObject::recalcMinMaxWidths (this=0x185c58fc) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderObject.cpp:2271
#17 0x01982968 in WebCore::RenderObject::recalcMinMaxWidths (this=0x185c511c) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderObject.cpp:2271
#18 0x01982968 in WebCore::RenderObject::recalcMinMaxWidths (this=0x1859c79c) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderObject.cpp:2271
#19 0x01982968 in WebCore::RenderObject::recalcMinMaxWidths (this=0x1858450c) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderObject.cpp:2271
#20 0x01982968 in WebCore::RenderObject::recalcMinMaxWidths (this=0x17e56d4c) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderObject.cpp:2271
#21 0x01982968 in WebCore::RenderObject::recalcMinMaxWidths (this=0x17e5497c) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderObject.cpp:2271
#22 0x0195adcc in WebCore::RenderCanvas::layout (this=0x17e5497c) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/rendering/RenderCanvas.cpp:112
#23 0x01899304 in WebCore::FrameView::layout (this=0x17e88b40) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/page/FrameView.cpp:410
#24 0x0186f4b8 in WebCore::Frame::forceLayout (this=0x1322d670) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/page/Frame.cpp:2983
#25 0x018b433c in -[WebCoreFrameBridge forceLayoutAdjustingViewSize:] (self=0x13260d40, _cmd=0x90a927f8, flag=0 '\0') at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebCore/bridge/mac/WebCoreFrameBridge.mm:872
#26 0x0036c7cc in -[WebHTMLView layoutToMinimumPageWidth:maximumPageWidth:adjustingViewSize:] (self=0x17eaa400, _cmd=0x90a9e1ec, minPageWidth=0, maxPageWidth=0, adjustViewSize=0 '\0') at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebKit/WebView/WebHTMLView.m:2420
#27 0x0036ca98 in -[WebHTMLView layout] (self=0x17eaa400, _cmd=0x90a9df78) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebKit/WebView/WebHTMLView.m:2447
#28 0x00366740 in -[WebHTMLView(WebPrivate) _layoutIfNeeded] (self=0x17eaa400, _cmd=0x3fe05c) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebKit/WebView/WebHTMLView.m:1451
#29 0x00366a00 in -[WebHTMLView(WebPrivate) _web_layoutIfNeededRecursive:testDirtyRect:] (self=0x17eaa400, _cmd=0x90a7fea4, displayRect={origin = {x = 0, y = 0}, size = {width = 926, height = 915}}, testDirtyRect=true) at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebKit/WebView/WebHTMLView.m:1471
#30 0x003623e4 in -[WebHTMLView(WebPrivate) _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] (self=0x17eaa400, _cmd=0x90a6fed8, rect={origin = {x = 0, y = 0}, size = {width = 926, height = 915}}, isVisibleRect=1 '\001', visibleView=0x132cc420, topView=0 '\0') at /Volumes/Home/Users/ggaren/Labyrinth/OpenSource/WebKit/WebView/WebHTMLView.m:817
#31 0x9374fd48 in -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] ()
#32 0x9374fd48 in -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] ()
#33 0x9374fd48 in -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] ()
#34 0x9374fd48 in -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] ()
#35 0x9374fd48 in -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] ()
#36 0x9374fd48 in -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] ()
#37 0x9374fd48 in -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] ()
#38 0x937703e4 in -[NSThemeFrame _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] ()
#39 0x937493f4 in -[NSView _displayRectIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:] ()
#40 0x9373e6e8 in -[NSView displayIfNeeded] ()
#41 0x9373e558 in -[NSWindow displayIfNeeded] ()
#42 0x0001ac0c in ?? ()
#43 0x9373e404 in _handleWindowNeedsDisplay ()
#44 0x907db73c in __CFRunLoopDoObservers ()
#45 0x907db9dc in __CFRunLoopRun ()
#46 0x907db47c in CFRunLoopRunSpecific ()
#47 0x93208a60 in RunCurrentEventLoopInMode ()
#48 0x9320806c in ReceiveNextEventCommon ()
#49 0x93207f60 in BlockUntilNextEventMatchingListInMode ()
#50 0x9370ae84 in _DPSNextEvent ()
#51 0x9370ab48 in -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] ()
#52 0x00006d54 in ?? ()
#53 0x9370708c in -[NSApplication run] ()
#54 0x937f7bfc in NSApplicationMain ()
#55 0x0005cc10 in ?? ()
#56 0x0005cab8 in ?? ()

Created attachment 8485 [details]
Reduction

The space width (and hence the tab width) for Arial 1.0pt is 0.

Comment on attachment 8485 [details]
Reduction

I think the bidi.cpp assert is a red herring. The backtrace from the release build looks quite different from the one from the debug build. This "reduction" fails the assert but doesn't crash the release build.

[Alexey Proskuryakov]

Yes, commenting out the assertion makes the page load and work OK, albeit slowly, at a first glance (it also doesn't crash in a nightly). However, there are errors in the console:

(event handler):Maximum call stack size exceeded.
(event handler):Maximum call stack size exceeded.
...

[Alexey Proskuryakov]

Looks like the crash was fixed here (the page makes XMLHttpRequests the responses for which have http-equiv pragma):

2005-12-30  Darin Adler  <[e-mail]>
...
        * khtml/xml/dom_docimpl.cpp: (DocumentImpl::processHttpEquiv): Replaced use of strcasecmp
        with equalIgnoringCase. Added parentheses to fix incorrect operator precedence in one case
        (&& binds tighter than ||) which fixes a crash when using a http-equiv pragma when there
        is no part (not sure how to reproduce that).

[Darin Adler]

The attached reduction does not crash for me. I don't get the bidi.cpp assertion either. I do get the "Maximum call stack size exceeded" message. I think we can probably close this bug.

[Alexey Proskuryakov]

The problem with the assertion was fixed in bug 9109. I have filed bug 9300 for the problem with the site being painfully slow.