Bug 112220

Summary:	Crash in FrameLoader::dispatchDidCommitLoad() running editing/selection/selection-in-iframe-removed-crash.html
Product:	WebKit	Reporter:	Simon Fraser (smfr) <simon.fraser>
Component:	Layout and Rendering	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED DUPLICATE
Severity:	Normal	CC:	ap, enrica, leviw, rniwa
Priority:	P2	Keywords:	MakingBotsRed
Version:	528+ (Nightly build)
Hardware:	Unspecified
OS:	Unspecified

Simon Fraser (smfr)

Reported 2013-03-12 18:42:25 PDT

ML WK1 Release bot is showing crashes here: Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000070 VM Regions Near 0x70: --> __TEXT 000000010d203000-000000010d261000 [ 376K] r-x/rwx SM=COW /Volumes/VOLUME/* Application Specific Information: CRASHING TEST: editing/selection/selection-in-iframe-removed-crash.html Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.WebCore 0x000000010dfc29f0 WebCore::FrameLoader::dispatchDidCommitLoad() + 128 (RefPtr.h:58) 1 com.apple.WebCore 0x000000010dfc2765 WebCore::FrameLoader::receivedFirstData() + 21 (FrameLoader.cpp:602) 2 com.apple.WebCore 0x000000010de325df WebCore::DocumentLoader::commitData(char const*, unsigned long) + 239 (RefPtr.h:43) 3 com.apple.WebKit 0x000000010d9819d4 -[WebHTMLRepresentation receivedData:withDataSource:] + 100 (WebHTMLRepresentation.mm:186) 4 com.apple.WebKit 0x000000010d954c8d -[WebDataSource(WebInternal) _receivedData:] + 77 (WebDataSource.mm:216) 5 com.apple.WebKit 0x000000010d96caf7 WebFrameLoaderClient::committedLoad(WebCore::DocumentLoader*, char const*, int) + 103 (WebFrameLoaderClient.mm:848) 6 com.apple.WebCore 0x000000010de32790 WebCore::DocumentLoader::commitLoad(char const*, int) + 144 (RefCounted.h:148) 7 com.apple.WebCore 0x000000010e556fb5 WebCore::MainResourceLoader::dataReceived(WebCore::CachedResource*, char const*, int) + 837 (MainResourceLoader.cpp:529) 8 com.apple.WebCore 0x000000010e556109 WebCore::MainResourceLoader::continueAfterContentPolicy(WebCore::PolicyAction, WebCore::ResourceResponse const&) + 1257 (RefPtr.h:64) 9 com.apple.WebCore 0x000000010e556ab6 WebCore::MainResourceLoader::responseReceived(WebCore::CachedResource*, WebCore::ResourceResponse const&) + 1766 (RefCounted.h:148) 10 com.apple.WebCore 0x000000010e554efd WebCore::MainResourceLoader::handleSubstituteDataLoadNow(WTF::RunLoopTimer<WebCore::MainResourceLoader>*) + 717 (RetainPtr.h:84) 11 com.apple.JavaScriptCore 0x000000010d610e68 WTF::timerFired(__CFRunLoopTimer*, void*) + 40 (RunLoopTimerCF.cpp:53) 12 com.apple.CoreFoundation 0x00007fff92ac7da4 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20

Attachments
Add attachment proposed patch, testcase, etc.

Ryosuke Niwa

Comment 1 2013-03-12 19:12:03 PDT

*** This bug has been marked as a duplicate of bug 111521 ***

Note You need to log in before you can comment on or make changes to this bug.