Status: Untriaged
Owner: [email protected]
Labels: Type-Bug Pri-2 OS-All Area-Misc Size-Medium purify Fixit

New issue 17119 by [email protected]: [IPW] Invalid pointer write  
in url_canon::CanonOutputT<char>::push_back(char) in  
AutomationProxyVisibleTest.WindowGetViewBounds
http://code.google.com/p/chromium/issues/detail?id=17119

Reproducible with:
        AutomationProxyVisibleTest.WindowGetViewBounds

Sample error details:
=====================
Invalid pointer write in url_canon::CanonOutputT<char>::push_back(char)

Error Location
    googleurl/src/url_canon.h:128  url_canon::CanonOutputT::push_back(char)
    googleurl/src/url_canon_pathurl.cc:68  ?docanonicalizepath...@_w_w@?
a0x81ac3...@url_canon@@YA_NABU?
$urlcomponentsou...@_w@1...@abuparsed@url_parse@@PAV?
$canonoutp...@d@1...@pau34@@Z
    googleurl/src/url_canon_pathurl.cc:100
url_canon::CanonicalizePathURL(wchar_t const *,int,struct url_parse::Parsed
const &,class url_canon::CanonOutputT *,struct url_parse::Parsed *)
    googleurl/src/url_util.cc:217  ?docanonical...@_w@?
a0xcda28...@url_util@@ya_npb_whpavcharsetconver...@url_canon@@PAV?
$canonoutp...@d@3...@pauparsed@url_parse@@@Z
    googleurl/src/url_util.cc:267  ?doresolverelat...@_w@?
a0xcda28...@url_util@@ya_npbdhabupar...@url_parse@@PB_WHPAVCharsetConverter
@url_canon@@pav?$canonoutp...@d@5...@pau23@@Z
    googleurl/src/url_util.cc:403  url_util::ResolveRelative(char const
*,int,struct url_parse::Parsed const &,wchar_t const *,int,class
url_canon::CharsetConverter *,class url_canon::CanonOutputT *,struct
url_parse::Parsed *)
    third_party/webkit/webcore/platform/kurlgoogle.cpp:237
WebCore::KURLGooglePrivate::init(class WebCore::KURL const &,wchar_t const
*,int,class WebCore::TextEncoding const *)
    third_party/webkit/webcore/platform/kurlgoogle.cpp:176
WebCore::KURLGooglePrivate::init(KURL::WebCore const&,String::WebCore
const&,TextEncoding::WebCore const*)
    third_party/webkit/webcore/platform/kurlgoogle.cpp:378
WebCore::KURL::KURL(KURL::WebCore const&,String::WebCore
const&,TextEncoding::WebCore const&)
    third_party/webkit/webcore/dom/document.cpp:3118
WebCore::Document::completeURL(String::WebCore const&)const
    third_party/webkit/webcore/loader/docloader.cpp:200
WebCore::DocLoader::requestResource(Type::CachedResource::WebCore,String::W
ebCore const&,String::WebCore const&,bool)
    third_party/webkit/webcore/loader/docloader.cpp:123
WebCore::DocLoader::requestImage(String::WebCore const&)
    third_party/webkit/webcore/loader/imageloader.cpp:130
WebCore::ImageLoader::updateFromElement(void)
    third_party/webkit/webcore/loader/imageloader.cpp:158
WebCore::ImageLoader::updateFromElementIgnoringPreviousError(void)
    third_party/webkit/webcore/html/htmlimageelement.cpp:87
WebCore::HTMLImageElement::parseMappedAttribute(MappedAttribute::WebCore *)
    third_party/webkit/webcore/dom/styledelement.cpp:195
WebCore::StyledElement::attributeChanged(Attribute::WebCore *,bool)
    third_party/webkit/webcore/dom/element.cpp:639
WebCore::Element::setAttributeMap(PassRefPtr::WTF)
    third_party/webkit/webcore/html/htmlparser.cpp:258
WebCore::HTMLParser::parseToken(Token::WebCore *)
    third_party/webkit/webcore/html/htmltokenizer.cpp:1917
WebCore::HTMLTokenizer::processToken(void)
    third_party/webkit/webcore/html/htmltokenizer.cpp:1502
WebCore::HTMLTokenizer::parseTag(SegmentedString::WebCore&,State::HTMLToken
izer::WebCore)
    third_party/webkit/webcore/html/htmltokenizer.cpp:1748
WebCore::HTMLTokenizer::write(SegmentedString::WebCore const&,bool)
    third_party/webkit/webcore/loader/frameloader.cpp:1019
WebCore::FrameLoader::write(char const*,int,bool)
    third_party/webkit/webcore/loader/frameloader.cpp:1779
WebCore::FrameLoader::addData(char const*,int)
    webkit/glue/webframe_impl.cc:1529
WebFrameImpl::DidReceiveData(DocumentLoader::WebCore *,char const*,int)
    webkit/glue/webframeloaderclient_impl.cc:1082
WebFrameLoaderClient::committedLoad(DocumentLoader::WebCore *,char
const*,int)
    third_party/webkit/webcore/loader/frameloader.cpp:3600
WebCore::FrameLoader::committedLoad(DocumentLoader::WebCore *,char
const*,int)
    third_party/webkit/webcore/loader/documentloader.cpp:361
WebCore::DocumentLoader::commitLoad(char const*,int)
    third_party/webkit/webcore/loader/documentloader.cpp:373
WebCore::DocumentLoader::receivedData(char const*,int)
    third_party/webkit/webcore/loader/frameloader.cpp:2417
WebCore::FrameLoader::receivedData(char const*,int)
    third_party/webkit/webcore/loader/mainresourceloader.cpp:148
WebCore::MainResourceLoader::addData(char const*,int,bool)


--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---

Reply via email to