Status: Untriaged Owner: [email protected] CC: [email protected], [email protected] Labels: Type-Bug Pri-2 OS-All Area-WebKit Crash
New issue 7951 by [email protected]: Reliability crash in WebCore::FrameLoader::submitFormAgain http://code.google.com/p/chromium/issues/detail?id=7951 Started happening in r10146, but does not appear to be related to that checkin. 0x0298af1e [chrome.dll] - frameloader.cpp:511 WebCore::FrameLoader::submitFormAgain() 0x0297f64c [chrome.dll] - frameloader.cpp:787 WebCore::FrameLoader::executeScript(WebCore::ScriptSourceCode const &) 0x02ab67b6 [chrome.dll] - htmltokenizer.cpp:608 WebCore::HTMLTokenizer::scriptExecution(WebCore::ScriptSourceCode const &,WebCore::HTMLTokenizer::State) 0x02ab7933 [chrome.dll] - htmltokenizer.cpp:1986 WebCore::HTMLTokenizer::notifyFinished(WebCore::CachedResource *) 0x02a6c932 [chrome.dll] - cachedscript.cpp:57 WebCore::CachedScript::addClient(WebCore::CachedResourceClient *) 0x02ab84a3 [chrome.dll] - htmltokenizer.cpp:493 WebCore::HTMLTokenizer::scriptHandler(WebCore::HTMLTokenizer::State) 0x02ab8afc [chrome.dll] - htmltokenizer.cpp:347 WebCore::HTMLTokenizer::parseSpecial(WebCore::SegmentedString &,WebCore::HTMLTokenizer::State) 0x02ab9d7b [chrome.dll] - htmltokenizer.cpp:1495 WebCore::HTMLTokenizer::parseTag(WebCore::SegmentedString &,WebCore::HTMLTokenizer::State) 0x02aba3ff [chrome.dll] - htmltokenizer.cpp:1726 WebCore::HTMLTokenizer::write(WebCore::SegmentedString const &,bool) 0x02ab79ab [chrome.dll] - htmltokenizer.cpp:2012 WebCore::HTMLTokenizer::notifyFinished(WebCore::CachedResource *) 0x02a6cc79 [chrome.dll] - cachedscript.cpp:108 WebCore::CachedImage::checkNotify() 0x02a6cd78 [chrome.dll] - cachedscript.cpp:98 WebCore::CachedScript::data(WTF::PassRefPtr<WebCore::SharedBuffer>,bool) 0x02aa7eba [chrome.dll] - loader.cpp:304 WebCore::Loader::Host::didFinishLoading(WebCore::SubresourceLoader *) 0x02b58a2a [chrome.dll] - subresourceloader.cpp:183 WebCore::SubresourceLoader::didFinishLoading() 0x02b2cd56 [chrome.dll] - resourceloader.cpp:416 WebCore::ResourceLoader::didFinishLoading(WebCore::ResourceHandle *) 0x02800f26 [chrome.dll] - resource_handle_impl.cc:632 WebCore::ResourceHandleInternal::OnCompletedRequest(URLRequestStatus const &) 0x026dd395 [chrome.dll] - resource_dispatcher.cc:417 ResourceDispatcher::OnRequestComplete(int,URLRequestStatus const &) 0x026dda8f [chrome.dll] - ipc_message_utils.h:1134 IPC::MessageWithTuple<Tuple2<int,URLRequestStatus> >::Dispatch<ResourceDispatcher,void ( ResourceDispatcher::*)(int,URLRequestStatus const &)>(IPC::Message const *,ResourceDispatcher *,void ( ResourceDispatcher::*)(int,URLRequestStatus const &)) 0x026de316 [chrome.dll] - resource_dispatcher.cc:464 ResourceDispatcher::DispatchMessageW(IPC::Message const &) 0x026deb33 [chrome.dll] - resource_dispatcher.cc:277 ResourceDispatcher::OnMessageReceived(IPC::Message const &) 0x02715740 [chrome.dll] - render_view.cc:333 RenderView::OnMessageReceived(IPC::Message const &) 0x026e4d23 [chrome.dll] - message_router.cc:39 MessageRouter::RouteMessage(IPC::Message const &) 0x026e4cdf [chrome.dll] - message_router.cc:30 MessageRouter::OnMessageReceived(IPC::Message const &) 0x026e1945 [chrome.dll] - child_thread.cc:72 ChildThread::OnMessageReceived(IPC::Message const &) 0x02c35636 [chrome.dll] - task.h:308 RunnableMethod<CancelableRequest<CallbackRunner<Tuple2<int,scoped_refptr<RefCountedVector<unsigned char> > > > >,void ( CancelableRequest<CallbackRunner<Tuple2<int,scoped_refptr<RefCountedVector<unsigned char> > > > >::*)(Tuple2<int,scoped_refptr<RefCountedVector<unsigned char> > > const &),Tuple1<Tuple2<int,scoped_refptr<RefCountedVector<unsigned char> > > > > >::Run() 0x023f23cf [chrome.dll] - message_loop.cc:308 MessageLoop::RunTask(Task *) 0x023f2f29 [chrome.dll] - message_loop.cc:408 MessageLoop::DoWork() 0x024079a0 [chrome.dll] - message_pump_default.cc:50 base::MessagePumpDefault::Run(base::MessagePump::Delegate *) 0x023f2aa6 [chrome.dll] - message_loop.cc:197 MessageLoop::RunInternal() 0x023f2c3f [chrome.dll] - message_loop.cc:180 MessageLoop::RunHandler() 0x023f34dc [chrome.dll] - message_loop.cc:154 MessageLoop::Run() 0x02941079 [chrome.dll] - thread.cc:156 base::Thread::ThreadMain() 0x023fb56c [chrome.dll] - platform_thread_win.cc:26 `anonymous namespace'::ThreadFunc(void *) 0x7c80b682 [kernel32.dll] +0x0000b682 BaseThreadStart Possible repro URLs: http://www.americangreetings.com/ecards/custom.pd http://www.americangreetings.com/ecards/display.pd http://www.americangreetings.com/ecards/view.pd http://www.evite.com/app/ecards/gallery/cards.do -- You received this message because you are listed in the owner or CC fields of this issue, or because you starred this issue. You may adjust your issue notification preferences at: http://code.google.com/hosting/settings --~--~---------~--~----~------------~-------~--~----~ Automated mail from issue updates at http://crbug.com/ Subscription options: http://groups.google.com/group/chromium-bugs -~----------~----~----~----~------~----~------~--~---
