Status: Untriaged Owner: ---- CC: jia...@chromium.org, dglaz...@chromium.org Labels: Type-Bug Pri-1 OS-All Area-WebKit Size-Medium Crash
New issue 15547 by hu...@chromium.org: Crash on RenderView::DidFinishDocumentLoadForFrame http://code.google.com/p/chromium/issues/detail?id=15547 This started to happen since latest WebKit merge 45203:45247 (r19392) Possible URLs to repro: http://www.keralakaumudi.com/ http://www.tennisforum.com/forumdisplay.php http://www.usatoday.com/life/default.htm http://www.fish4.co.uk/iad/homes/advert http://search.cbsnews.com/ http://www.fish4.co.uk/iad/cars/result http://www.runehq.com/databasesearch.php http://www.theonion.com/content/news/2008_tax_records_reveal_sasha http://www.fish4.co.uk/iad/jobs/result http://timesofindia.indiatimes.com/default1.cms http://www.tomadivx.org/peliculas-buscador.html http://investorshub.advfn.com/boards/favorites.aspx http://www.fish4.co.uk/iad/homes/result Call stack: chrome_23a0000!RenderView::DidFinishDocumentLoadForFrame+0x32 [c:\b\slave\chromium-rel-xp\build\src\chrome\renderer\render_view.cc @ 1344] chrome_23a0000!WebFrameLoaderClient::dispatchDidFinishDocumentLoad+0x41 [c:\b\slave\chromium-rel- xp\build\src\webkit\glue\webframeloaderclient_impl.cc @ 397] chrome_23a0000!WebCore::FrameLoader::finishedParsing+0x2e [c:\b\slave\chromium-rel- xp\build\src\third_party\webkit\webcore\loader\frameloader.cpp @ 1218] chrome_23a0000!WebCore::Document::finishedParsing+0x8f [c:\b\slave\chromium-rel- xp\build\src\third_party\webkit\webcore\dom\document.cpp @ 3910] chrome_23a0000!WebCore::HTMLTokenizer::end+0x8d [c:\b\slave\chromium-rel- xp\build\src\third_party\webkit\webcore\html\htmltokenizer.cpp @ 1829] chrome_23a0000!WebCore::HTMLTokenizer::finish+0x401 [c:\b\slave\chromium- rel-xp\build\src\third_party\webkit\webcore\html\htmltokenizer.cpp @ 1869] chrome_23a0000!WebCore::FrameLoader::endIfNotLoadingMainResource+0x47 [c:\b\slave\chromium-rel- xp\build\src\third_party\webkit\webcore\loader\frameloader.cpp @ 1070] chrome_23a0000!WebCore::Document::close+0x18 [c:\b\slave\chromium-rel- xp\build\src\third_party\webkit\webcore\dom\document.cpp @ 1575] chrome_23a0000!WebCore::HTMLDocumentInternal::closeCallback+0x19 [c:\b\slave\chromium-rel- xp\build\src\chrome\release\obj\webcore\bindings\v8htmldocument.cpp @ 222] chrome_23a0000!v8::internal::Builtin_HandleApiCall+0x226 [c:\b\slave\chromium-rel-xp\build\src\v8\src\builtins.cc @ 381] chrome_23a0000!v8::internal::Invoke+0x81 [c:\b\slave\chromium-rel- xp\build\src\v8\src\execution.cc @ 94] chrome_23a0000!v8::internal::Execution::Call+0x25 [c:\b\slave\chromium-rel- xp\build\src\v8\src\execution.cc @ 119] chrome_23a0000!v8::Script::Run+0xbf [c:\b\slave\chromium-rel- xp\build\src\v8\src\api.cc @ 1124] chrome_23a0000!WebCore::V8Proxy::RunScript+0xe2 [c:\b\slave\chromium-rel- xp\build\src\webkit\port\bindings\v8\v8_proxy.cpp @ 1189] chrome_23a0000!WebCore::V8Proxy::evaluate+0xb0 [c:\b\slave\chromium-rel- xp\build\src\webkit\port\bindings\v8\v8_proxy.cpp @ 1143] chrome_23a0000!WebCore::ScheduledAction::execute+0x9d [c:\b\slave\chromium- rel-xp\build\src\third_party\webkit\webcore\bindings\v8\scheduledaction.cpp @ 125] chrome_23a0000!WebCore::ScheduledAction::execute+0x1f [c:\b\slave\chromium- rel-xp\build\src\third_party\webkit\webcore\bindings\v8\scheduledaction.cpp @ 95] chrome_23a0000!WebCore::DOMTimer::fired+0x81 [c:\b\slave\chromium-rel- xp\build\src\third_party\webkit\webcore\page\domtimer.cpp @ 126] chrome_23a0000!WebCore::ThreadTimers::fireTimers+0x74 [c:\b\slave\chromium- rel-xp\build\src\third_party\webkit\webcore\platform\threadtimers.cpp @ 114] chrome_23a0000!WebCore::ThreadTimers::sharedTimerFiredInternal+0x4f [c:\b\slave\chromium-rel- xp\build\src\third_party\webkit\webcore\platform\threadtimers.cpp @ 143] chrome_23a0000!MessageLoop::RunTask+0x7e [c:\b\slave\chromium-rel- xp\build\src\base\message_loop.cc @ 310] chrome_23a0000!MessageLoop::DoWork+0x1ea [c:\b\slave\chromium-rel- xp\build\src\base\message_loop.cc @ 431] chrome_23a0000!base::MessagePumpDefault::Run+0x111 [c:\b\slave\chromium- rel-xp\build\src\base\message_pump_default.cc @ 50] chrome_23a0000!MessageLoop::RunInternal+0xb7 [c:\b\slave\chromium-rel- xp\build\src\base\message_loop.cc @ 198] chrome_23a0000!MessageLoop::RunHandler+0xa0 [c:\b\slave\chromium-rel- xp\build\src\base\message_loop.cc @ 182] chrome_23a0000!MessageLoop::Run+0x3d [c:\b\slave\chromium-rel- xp\build\src\base\message_loop.cc @ 156] chrome_23a0000!base::Thread::ThreadMain+0x8a [c:\b\slave\chromium-rel- xp\build\src\base\thread.cc @ 159] chrome_23a0000!`anonymous namespace'::ThreadFunc+0xd [c:\b\slave\chromium- rel-xp\build\src\base\platform_thread_win.cc @ 27] -- You received this message because you are listed in the owner or CC fields of this issue, or because you starred this issue. You may adjust your issue notification preferences at: http://code.google.com/hosting/settings --~--~---------~--~----~------------~-------~--~----~ Automated mail from issue updates at http://crbug.com/ Subscription options: http://groups.google.com/group/chromium-bugs -~----------~----~----~----~------~----~------~--~---