Status: Untriaged
Owner: ----
Labels: Type-Bug Pri-2 OS-All Area-WebKit Size-Medium Valgrind

New issue 18984 by [email protected]: Mismatched free / delete / delete[]  
in WebCore::CSSSelectorList::adoptSelectorVector()
http://code.google.com/p/chromium/issues/detail?id=18984

A bug that was fixed in March or so,
https://bugs.webkit.org/show_bug.cgi?id=22834
about a mismatched free/delete[] in css/CSSSelectorList.cpp
seems to have regressed, even though that file hasn't changed.
A fix has already been committed upstream.
http://trac.webkit.org/changeset/47010
Submitting bug report just so we have a name for the suppression

Valgrind complains

Mismatched free() / delete / delete []
  operator delete(void*) (vg_replace_malloc.c:345)
WebCore::CSSSelectorList::adoptSelectorVector(WTF::Vector<WebCore::CSSSelector*,
0u>&) (third_party/WebKit/WebCore/css/CSSSelectorList.cpp:62)
  WebCore::CSSParser::createStyleRule(WTF::Vector<WebCore::CSSSelector*,
0u>*) (third_party/WebKit/WebCore/css/CSSStyleRule.h:53)
  cssyyparse(void*) (third_party/WebKit/WebCore/css/CSSGrammar.y:798)
  WebCore::CSSParser::parseSheet(WebCore::CSSStyleSheet*,
WebCore::String const&)
(third_party/WebKit/WebCore/css/CSSParser.cpp:224)
  WebCore::CSSStyleSheet::parseString(WebCore::String const&, bool)
(third_party/WebKit/WebCore/css/CSSStyleSheet.cpp:164)
  WebCore::parseUASheet(WebCore::String const&)
(third_party/WebKit/WebCore/css/CSSStyleSelector.cpp:504)
  WebCore::parseUASheet(char const*, unsigned int)
(third_party/WebKit/WebCore/css/CSSStyleSelector.cpp:510)
  WebCore::loadSimpleDefaultStyle()
(third_party/WebKit/WebCore/css/CSSStyleSelector.cpp:549)
  WebCore::CSSStyleSelector::CSSStyleSelector(WebCore::Document*,
WebCore::String const&, WebCore::StyleSheetList*,
WebCore::CSSStyleSheet*, bool, bool)
(third_party/WebKit/WebCore/css/CSSStyleSelector.cpp:424)
  WebCore::Document::attach()  
(third_party/WebKit/WebCore/dom/Document.cpp:1325)
  WebCore::Frame::setDocument(WTF::PassRefPtr<WebCore::Document>)
(third_party/WebKit/WebCore/page/Frame.cpp:267)
  WebCore::FrameLoader::begin(WebCore::KURL const&, bool,
WebCore::SecurityOrigin*)
(third_party/WebKit/WebCore/loader/FrameLoader.cpp:919)
  WebCore::FrameLoader::init()
(third_party/WebKit/WebCore/loader/FrameLoader.cpp:296)
  WebCore::Frame::init() (third_party/WebKit/WebCore/page/Frame.cpp:211)

Address 0x50a7348 is 0 bytes inside a block of size 20 alloc'd
  malloc (vg_replace_malloc.c:194)
  WTF::fastMalloc(unsigned int)
(third_party/WebKit/JavaScriptCore/wtf/FastMalloc.cpp:232)
  WebCore::CSSParser::createFloatingSelector()
(third_party/WebKit/JavaScriptCore/wtf/FastAllocBase.h:96)
  cssyyparse(void*) (third_party/WebKit/WebCore/css/CSSGrammar.y:889)
  WebCore::CSSParser::parseSheet(WebCore::CSSStyleSheet*,
WebCore::String const&)
(third_party/WebKit/WebCore/css/CSSParser.cpp:224)
  WebCore::CSSStyleSheet::parseString(WebCore::String const&, bool)
(third_party/WebKit/WebCore/css/CSSStyleSheet.cpp:164)
  WebCore::parseUASheet(WebCore::String const&)
(third_party/WebKit/WebCore/css/CSSStyleSelector.cpp:504)
  WebCore::parseUASheet(char const*, unsigned int)
(third_party/WebKit/WebCore/css/CSSStyleSelector.cpp:510)
  WebCore::loadSimpleDefaultStyle()
(third_party/WebKit/WebCore/css/CSSStyleSelector.cpp:549)
  WebCore::CSSStyleSelector::CSSStyleSelector(WebCore::Document*,
WebCore::String const&, WebCore::StyleSheetList*,
WebCore::CSSStyleSheet*, bool, bool)
(third_party/WebKit/WebCore/css/CSSStyleSelector.cpp:424)
  WebCore::Document::attach()  
(third_party/WebKit/WebCore/dom/Document.cpp:1325)
  WebCore::Frame::setDocument(WTF::PassRefPtr<WebCore::Document>)
(third_party/WebKit/WebCore/page/Frame.cpp:267)
  WebCore::FrameLoader::begin(WebCore::KURL const&, bool,
WebCore::SecurityOrigin*)
(third_party/WebKit/WebCore/loader/FrameLoader.cpp:919)
  WebCore::FrameLoader::init()
(third_party/WebKit/WebCore/loader/FrameLoader.cpp:296)
  WebCore::Frame::init() (third_party/WebKit/WebCore/page/Frame.cpp:211)

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---

Reply via email to