Noticed in passing while looking for something else this morning
(though they may have been there a while).
These sound potentially nasty; is anybody looking at them already?

$ valgrind --track-origins=yes Hammer/test_shell_tests
...
[ RUN      ] WebFrameTest.GetContentAsPlainText
UNIMPLEMENTED:
(/home/dank/chromium/src/webkit/port/bindings/v8/ScriptController.cpp:143
updatePlatformScriptObjects)
Mismatched free() / delete / delete []
  at free (vg_replace_malloc.c:323)
  by WTF::fastFree(void*) (FastMalloc.cpp:216)
  by 
WebCore::CSSSelectorList::adoptSelectorVector(WTF::Vector<WebCore::CSSSelector*,
0u>&) (CSSSelectorList.cpp:57)
  by 
WebCore::CSSStyleRule::adoptSelectorVector(WTF::Vector<WebCore::CSSSelector*,
0u>&) (CSSStyleRule.h:53)
  by WebCore::CSSParser::createStyleRule(WTF::Vector<WebCore::CSSSelector*,
0u>*) (CSSParser.cpp:4547)
  by cssyyparse(void*) (CSSGrammar.y:792)
  by WebCore::CSSParser::parseSheet(WebCore::CSSStyleSheet*,
WebCore::String const&) (CSSParser.cpp:224)
  by WebCore::CSSStyleSheet::parseString(WebCore::String const&,
bool) (CSSStyleSheet.cpp:164)
  by WebCore::parseUASheet(WebCore::String const&) (CSSStyleSelector.cpp:486)
  by WebCore::parseUASheet(char const*, unsigned int)
(CSSStyleSelector.cpp:492)
  by WebCore::loadSimpleDefaultStyle() (CSSStyleSelector.cpp:531)
  by WebCore::CSSStyleSelector::CSSStyleSelector(WebCore::Document*,
WebCore::String const&, WebCore::StyleSheetList*,
WebCore::CSSStyleSheet*, bool, bool) (CSSStyleSelector.cpp:406)
 Address 0x127ac840 is 0 bytes inside a block of size 16 alloc'd
  at operator new(unsigned int) (vg_replace_malloc.c:224)
  by WebCore::CSSParser::createFloatingSelector() (CSSParser.cpp:4382)
  by cssyyparse(void*) (CSSGrammar.y:883)
  by WebCore::CSSParser::parseSheet(WebCore::CSSStyleSheet*,
WebCore::String const&) (CSSParser.cpp:224)
  by WebCore::CSSStyleSheet::parseString(WebCore::String const&,
bool) (CSSStyleSheet.cpp:164)
  by WebCore::parseUASheet(WebCore::String const&) (CSSStyleSelector.cpp:486)
  by WebCore::parseUASheet(char const*, unsigned int)
(CSSStyleSelector.cpp:492)
  by WebCore::loadSimpleDefaultStyle() (CSSStyleSelector.cpp:531)
  by WebCore::CSSStyleSelector::CSSStyleSelector(WebCore::Document*,
WebCore::String const&, WebCore::StyleSheetList*,
WebCore::CSSStyleSheet*, bool, bool) (CSSStyleSelector.cpp:406)
  by WebCore::Document::attach() (Document.cpp:1383)
  by WebCore::Frame::setDocument(WTF::PassRefPtr<WebCore::Document>)
(Frame.cpp:272)
  by WebCore::FrameLoader::begin(WebCore::KURL const&, bool,
WebCore::SecurityOrigin*) (FrameLoader.cpp:949)

Mismatched free() / delete / delete []
  at operator delete(void*) (vg_replace_malloc.c:342)
  by WebCore::V8Proxy::InitContextIfNeeded() (v8_proxy.cpp:2318)
  by WebCore::V8Proxy::GetContext(WebCore::Frame*) (v8_proxy.cpp:2473)
  by WebCore::ScriptController::BindToWindowObject(WebCore::Frame*,
WebCore::String const&, NPObject*) (ScriptController.cpp:278)
  by WebFrameImpl::BindToWindowObject(std::basic_string<wchar_t,
std::char_traits<wchar_t>, std::allocator<wchar_t> > const&,
NPObject*) (webframe_impl.cc:689)
  by CppBoundClass::BindToJavascript(WebFrame*,
std::basic_string<wchar_t, std::char_traits<wchar_t>,
std::allocator<wchar_t> > const&) (cpp_bound_class.cc:255)
  by TestShell::BindJSObjectsToWindow(WebFrame*) (test_shell.cc:409)
  by TestWebViewDelegate::WindowObjectCleared(WebFrame*)
(test_webview_delegate.cc:122)
  by WebFrameLoaderClient::windowObjectCleared()
(webframeloaderclient_impl.cc:100)
  by WebCore::FrameLoader::dispatchWindowObjectAvailable()
(FrameLoader.cpp:5180)
  by WebCore::FrameLoader::receivedFirstData() (FrameLoader.cpp:878)
  by WebCore::FrameLoader::setEncoding(WebCore::String const&, bool)
(FrameLoader.cpp:1899)
 Address 0x11c66678 is 0 bytes inside a block of size 4 alloc'd
  at operator new[](unsigned int) (vg_replace_malloc.c:268)
  by WebCore::V8Proxy::InitContextIfNeeded() (v8_proxy.cpp:2309)
  by WebCore::V8Proxy::GetContext(WebCore::Frame*) (v8_proxy.cpp:2473)
  by WebCore::ScriptController::BindToWindowObject(WebCore::Frame*,
WebCore::String const&, NPObject*) (ScriptController.cpp:278)
  by WebFrameImpl::BindToWindowObject(std::basic_string<wchar_t,
std::char_traits<wchar_t>, std::allocator<wchar_t> > const&,
NPObject*) (webframe_impl.cc:689)
  by CppBoundClass::BindToJavascript(WebFrame*,
std::basic_string<wchar_t, std::char_traits<wchar_t>,
std::allocator<wchar_t> > const&) (cpp_bound_class.cc:255)
  by TestShell::BindJSObjectsToWindow(WebFrame*) (test_shell.cc:409)
  by TestWebViewDelegate::WindowObjectCleared(WebFrame*)
(test_webview_delegate.cc:122)
  by WebFrameLoaderClient::windowObjectCleared()
(webframeloaderclient_impl.cc:100)
  by WebCore::FrameLoader::dispatchWindowObjectAvailable()
(FrameLoader.cpp:5180)
  by WebCore::FrameLoader::receivedFirstData() (FrameLoader.cpp:878)
  by WebCore::FrameLoader::setEncoding(WebCore::String const&, bool)
(FrameLoader.cpp:1899)
UNIMPLEMENTED:
(/home/dank/chromium/src/third_party/WebKit/WebCore/inspector/InspectorController.cpp:873
inspectedWindowScriptObjectCleared)

Mismatched free() / delete / delete []
  at operator delete(void*) (vg_replace_malloc.c:342)
  by WebCore::V8Proxy::InitContextIfNeeded() (v8_proxy.cpp:2318)
  by WebCore::V8Proxy::clearForNavigation() (v8_proxy.cpp:2057)
  by WebCore::ScriptController::clearWindowShell() (ScriptController.cpp:438)
  by WebCore::FrameLoader::clear(bool, bool) (FrameLoader.cpp:840)
  by WebCore::FrameLoader::begin(WebCore::KURL const&, bool,
WebCore::SecurityOrigin*) (FrameLoader.cpp:924)
  by WebCore::FrameLoader::receivedFirstData() (FrameLoader.cpp:875)
  by WebCore::FrameLoader::setEncoding(WebCore::String const&, bool)
(FrameLoader.cpp:1899)
  by WebFrameImpl::DidReceiveData(WebCore::DocumentLoader*, char
const*, int) (webframe_impl.cc:1506)
  by WebFrameLoaderClient::committedLoad(WebCore::DocumentLoader*,
char const*, int) (webframeloaderclient_impl.cc:1078)
  by WebCore::FrameLoader::committedLoad(WebCore::DocumentLoader*,
char const*, int) (FrameLoader.cpp:3686)
  by WebCore::DocumentLoader::commitLoad(char const*, int)
(DocumentLoader.cpp:357)
 Address 0x121d3dd8 is 0 bytes inside a block of size 4 alloc'd
  at operator new[](unsigned int) (vg_replace_malloc.c:268)
  by WebCore::V8Proxy::InitContextIfNeeded() (v8_proxy.cpp:2309)
  by WebCore::V8Proxy::clearForNavigation() (v8_proxy.cpp:2057)
  by WebCore::ScriptController::clearWindowShell() (ScriptController.cpp:438)
  by WebCore::FrameLoader::clear(bool, bool) (FrameLoader.cpp:840)
  by WebCore::FrameLoader::begin(WebCore::KURL const&, bool,
WebCore::SecurityOrigin*) (FrameLoader.cpp:924)
  by WebCore::FrameLoader::receivedFirstData() (FrameLoader.cpp:875)
  by WebCore::FrameLoader::setEncoding(WebCore::String const&, bool)
(FrameLoader.cpp:1899)
  by WebFrameImpl::DidReceiveData(WebCore::DocumentLoader*, char
const*, int) (webframe_impl.cc:1506)
  by WebFrameLoaderClient::committedLoad(WebCore::DocumentLoader*,
char const*, int) (webframeloaderclient_impl.cc:1078)
  by WebCore::FrameLoader::committedLoad(WebCore::DocumentLoader*,
char const*, int) (FrameLoader.cpp:3686)
  by WebCore::DocumentLoader::commitLoad(char const*, int)
(DocumentLoader.cpp:357)
UNIMPLEMENTED:
(/home/dank/chromium/src/third_party/WebKit/WebCore/platform/graphics/chromium/FontCacheLinux.cpp:175
getGenericFontForScript)
UNIMPLEMENTED:
(/home/dank/chromium/src/third_party/WebKit/WebCore/platform/graphics/chromium/FontPlatformDataLinux.cpp:135
isFixedPitch)

Mismatched free() / delete / delete []
  at free (vg_replace_malloc.c:323)
  by WTF::fastFree(void*) (FastMalloc.cpp:216)
  by WebCore::CSSSelectorList::deleteSelectors() (CSSSelectorList.cpp:76)
  by WebCore::CSSSelectorList::~CSSSelectorList() (CSSSelectorList.cpp:33)
  by WebCore::CSSStyleRule::~CSSStyleRule() (CSSStyleRule.cpp:39)
  by WTF::RefCounted<WebCore::StyleBase>::deref() (RefCounted.h:96)
  by WTF::RefPtr<WebCore::StyleBase>::~RefPtr() (RefPtr.h:50)
  by WTF::VectorDestructor<true, WTF::RefPtr<WebCore::StyleBase>
>::destruct(WTF::RefPtr<WebCore::StyleBase>*,
WTF::RefPtr<WebCore::StyleBase>*) (Vector.h:80)
  by WTF::VectorTypeOperations<WTF::RefPtr<WebCore::StyleBase>
>::destruct(WTF::RefPtr<WebCore::StyleBase>*,
WTF::RefPtr<WebCore::StyleBase>*) (Vector.h:235)
  by WTF::Vector<WTF::RefPtr<WebCore::StyleBase>,
0u>::shrink(unsigned int) (Vector.h:707)
  by WTF::Vector<WTF::RefPtr<WebCore::StyleBase>, 0u>::~Vector() (Vector.h:457)
  by WebCore::StyleList::~StyleList() (StyleList.h:33)
 Address 0x127ad958 is 0 bytes inside a block of size 16 alloc'd
  at operator new(unsigned int) (vg_replace_malloc.c:224)
  by WebCore::CSSParser::createFloatingSelector() (CSSParser.cpp:4382)
  by cssyyparse(void*) (CSSGrammar.y:883)
  by WebCore::CSSParser::parseSheet(WebCore::CSSStyleSheet*,
WebCore::String const&) (CSSParser.cpp:224)
  by WebCore::CSSStyleSheet::parseString(WebCore::String const&,
bool) (CSSStyleSheet.cpp:164)
  by WebCore::parseUASheet(WebCore::String const&) (CSSStyleSelector.cpp:486)
  by WebCore::parseUASheet(char const*, unsigned int)
(CSSStyleSelector.cpp:492)
  by WebCore::loadSimpleDefaultStyle() (CSSStyleSelector.cpp:531)
  by WebCore::CSSStyleSelector::CSSStyleSelector(WebCore::Document*,
WebCore::String const&, WebCore::StyleSheetList*,
WebCore::CSSStyleSheet*, bool, bool) (CSSStyleSelector.cpp:406)
  by WebCore::Document::attach() (Document.cpp:1383)
  by WebCore::Frame::setDocument(WTF::PassRefPtr<WebCore::Document>)
(Frame.cpp:272)
  by WebCore::FrameLoader::begin(WebCore::KURL const&, bool,
WebCore::SecurityOrigin*) (FrameLoader.cpp:949)
#TEST_TIMED_OUT

--~--~---------~--~----~------------~-------~--~----~
Chromium Developers mailing list: chromium-dev@googlegroups.com 
View archives, change email options, or unsubscribe: 
    http://groups.google.com/group/chromium-dev
-~----------~----~----~----~------~----~------~--~---

Reply via email to