Status: Untriaged
Owner: ----
CC: jia...@chromium.org,  dglaz...@chromium.org
Labels: Type-Bug Pri-1 OS-All Area-WebKit Size-Medium Crash

New issue 15547 by hu...@chromium.org: Crash on  
RenderView::DidFinishDocumentLoadForFrame
http://code.google.com/p/chromium/issues/detail?id=15547

This started to happen since latest WebKit merge 45203:45247 (r19392)

Possible URLs to repro:

http://www.keralakaumudi.com/
http://www.tennisforum.com/forumdisplay.php
http://www.usatoday.com/life/default.htm
http://www.fish4.co.uk/iad/homes/advert
http://search.cbsnews.com/
http://www.fish4.co.uk/iad/cars/result
http://www.runehq.com/databasesearch.php
http://www.theonion.com/content/news/2008_tax_records_reveal_sasha
http://www.fish4.co.uk/iad/jobs/result
http://timesofindia.indiatimes.com/default1.cms
http://www.tomadivx.org/peliculas-buscador.html
http://investorshub.advfn.com/boards/favorites.aspx
http://www.fish4.co.uk/iad/homes/result

Call stack:
chrome_23a0000!RenderView::DidFinishDocumentLoadForFrame+0x32
[c:\b\slave\chromium-rel-xp\build\src\chrome\renderer\render_view.cc @
1344]
chrome_23a0000!WebFrameLoaderClient::dispatchDidFinishDocumentLoad+0x41
[c:\b\slave\chromium-rel-
xp\build\src\webkit\glue\webframeloaderclient_impl.cc @ 397]
chrome_23a0000!WebCore::FrameLoader::finishedParsing+0x2e
[c:\b\slave\chromium-rel-
xp\build\src\third_party\webkit\webcore\loader\frameloader.cpp @ 1218]
chrome_23a0000!WebCore::Document::finishedParsing+0x8f
[c:\b\slave\chromium-rel-
xp\build\src\third_party\webkit\webcore\dom\document.cpp @ 3910]
chrome_23a0000!WebCore::HTMLTokenizer::end+0x8d [c:\b\slave\chromium-rel-
xp\build\src\third_party\webkit\webcore\html\htmltokenizer.cpp @ 1829]
chrome_23a0000!WebCore::HTMLTokenizer::finish+0x401 [c:\b\slave\chromium-
rel-xp\build\src\third_party\webkit\webcore\html\htmltokenizer.cpp @ 1869]
chrome_23a0000!WebCore::FrameLoader::endIfNotLoadingMainResource+0x47
[c:\b\slave\chromium-rel-
xp\build\src\third_party\webkit\webcore\loader\frameloader.cpp @ 1070]
chrome_23a0000!WebCore::Document::close+0x18 [c:\b\slave\chromium-rel-
xp\build\src\third_party\webkit\webcore\dom\document.cpp @ 1575]
chrome_23a0000!WebCore::HTMLDocumentInternal::closeCallback+0x19
[c:\b\slave\chromium-rel-
xp\build\src\chrome\release\obj\webcore\bindings\v8htmldocument.cpp @ 222]
chrome_23a0000!v8::internal::Builtin_HandleApiCall+0x226
[c:\b\slave\chromium-rel-xp\build\src\v8\src\builtins.cc @ 381]
chrome_23a0000!v8::internal::Invoke+0x81 [c:\b\slave\chromium-rel-
xp\build\src\v8\src\execution.cc @ 94]
chrome_23a0000!v8::internal::Execution::Call+0x25 [c:\b\slave\chromium-rel-
xp\build\src\v8\src\execution.cc @ 119]
chrome_23a0000!v8::Script::Run+0xbf [c:\b\slave\chromium-rel-
xp\build\src\v8\src\api.cc @ 1124]
chrome_23a0000!WebCore::V8Proxy::RunScript+0xe2 [c:\b\slave\chromium-rel-
xp\build\src\webkit\port\bindings\v8\v8_proxy.cpp @ 1189]
chrome_23a0000!WebCore::V8Proxy::evaluate+0xb0 [c:\b\slave\chromium-rel-
xp\build\src\webkit\port\bindings\v8\v8_proxy.cpp @ 1143]
chrome_23a0000!WebCore::ScheduledAction::execute+0x9d [c:\b\slave\chromium-
rel-xp\build\src\third_party\webkit\webcore\bindings\v8\scheduledaction.cpp
@ 125]
chrome_23a0000!WebCore::ScheduledAction::execute+0x1f [c:\b\slave\chromium-
rel-xp\build\src\third_party\webkit\webcore\bindings\v8\scheduledaction.cpp
@ 95]
chrome_23a0000!WebCore::DOMTimer::fired+0x81 [c:\b\slave\chromium-rel-
xp\build\src\third_party\webkit\webcore\page\domtimer.cpp @ 126]
chrome_23a0000!WebCore::ThreadTimers::fireTimers+0x74 [c:\b\slave\chromium-
rel-xp\build\src\third_party\webkit\webcore\platform\threadtimers.cpp @
114]
chrome_23a0000!WebCore::ThreadTimers::sharedTimerFiredInternal+0x4f
[c:\b\slave\chromium-rel-
xp\build\src\third_party\webkit\webcore\platform\threadtimers.cpp @ 143]
chrome_23a0000!MessageLoop::RunTask+0x7e [c:\b\slave\chromium-rel-
xp\build\src\base\message_loop.cc @ 310]
chrome_23a0000!MessageLoop::DoWork+0x1ea [c:\b\slave\chromium-rel-
xp\build\src\base\message_loop.cc @ 431]
chrome_23a0000!base::MessagePumpDefault::Run+0x111 [c:\b\slave\chromium-
rel-xp\build\src\base\message_pump_default.cc @ 50]
chrome_23a0000!MessageLoop::RunInternal+0xb7 [c:\b\slave\chromium-rel-
xp\build\src\base\message_loop.cc @ 198]
chrome_23a0000!MessageLoop::RunHandler+0xa0 [c:\b\slave\chromium-rel-
xp\build\src\base\message_loop.cc @ 182]
chrome_23a0000!MessageLoop::Run+0x3d [c:\b\slave\chromium-rel-
xp\build\src\base\message_loop.cc @ 156]
chrome_23a0000!base::Thread::ThreadMain+0x8a [c:\b\slave\chromium-rel-
xp\build\src\base\thread.cc @ 159]
chrome_23a0000!`anonymous namespace'::ThreadFunc+0xd [c:\b\slave\chromium-
rel-xp\build\src\base\platform_thread_win.cc @ 27]


--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---

Reply via email to