Bug 44230 - REGRESSION: Crash occurs at objc_msgSend when closing a window that is displaying the web inspector
Summary: REGRESSION: Crash occurs at objc_msgSend when closing a window that is displa...
Status: CLOSED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Web Inspector (Deprecated) (show other bugs)
Version: 528+ (Nightly build)
Hardware: All All
: P1 Major
Assignee: Yury Semikhatsky
URL:
Keywords: InRadar, Regression
: 43986 46240 47351 50837 51080 51400 52533 (view as bug list)
Depends on: 44856 45256
Blocks:
  Show dependency treegraph
 
Reported: 2010-08-18 22:33 PDT by Chris Petersen
Modified: 2011-04-28 22:08 PDT (History)
24 users (show)

See Also:


Attachments
Patch (22.74 KB, patch)
2010-08-26 07:24 PDT, Yury Semikhatsky
no flags Details | Formatted Diff | Diff
Patch (24.37 KB, patch)
2010-08-27 02:07 PDT, Yury Semikhatsky
no flags Details | Formatted Diff | Diff
patch that I'm going to land(doesn't crash Qt) (22.84 KB, patch)
2010-09-02 09:14 PDT, Yury Semikhatsky
no flags Details | Formatted Diff | Diff
r67077 crash log (35.87 KB, text/plain)
2010-09-09 09:36 PDT, Rowan Beentje
no flags Details
Patch (6.84 KB, patch)
2011-04-27 07:59 PDT, Yury Semikhatsky
pfeldman: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Chris Petersen 2010-08-18 22:33:22 PDT
Steps to reproduce:

1) Launch a webkit nightly build ( r65398) under 10.6.4 
2) Enable the Develop menu
3) Select Show Web Inspector
4) After web inspector appears in window, close this browser window

Process:         Safari [3320]
Path:            /Applications/Safari.app/Contents/MacOS/Safari
Identifier:      org.webkit.nightly.WebKit
Version:         r65398 (65398)
Code Type:       X86-64 (Native)
Parent Process:  launchd [81]

Date/Time:       2010-08-18 22:16:49.809 -0700
OS Version:      Mac OS X 10.6.4 (10F569)
Report Version:  6

Interval Since Last Report:          163610 sec
Crashes Since Last Report:           6
Per-App Interval Since Last Report:  6353 sec
Per-App Crashes Since Last Report:   5
Anonymous UUID:                      B0A7A7C4-B6FC-43DE-8EBE-1ACD3F221BD4

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000014
Crashed Thread:  0  Dispatch queue: com.apple.main-thread

Application Specific Information:
objc_msgSend() selector name: _isClosed


Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   libobjc.A.dylib               	0x00007fff835bb11c objc_msgSend + 40
1   com.apple.WebKit              	0x0000000100a3b624 -[WebInspectorWindowController close] + 84
2   com.apple.WebKit              	0x0000000100a3bb5f -[WebInspectorWindowController destroyInspectorView] + 159
3   com.apple.WebCore             	0x000000010106d11b WebCore::InspectorFrontendHost::closeWindow() + 27
4   com.apple.WebCore             	0x0000000101225236 WebCore::jsInspectorFrontendHostPrototypeFunctionCloseWindow(JSC::ExecState*) + 118
5   ???                           	0x000029f72b8001aa 0 + 46141563470250
6   com.apple.JavaScriptCore      	0x00000001007d9134 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, JSC::JSValue*) + 900

Thread 1:  Dispatch queue: com.apple.libdispatch-manager
0   libSystem.B.dylib             	0x00007fff85d2608a kevent + 10
1   libSystem.B.dylib             	0x00007fff85d27f5d _dispatch_mgr_invoke + 154
2   libSystem.B.dylib             	0x00007fff85d27c34 _dispatch_queue_invoke + 185
3   libSystem.B.dylib             	0x00007fff85d2775e _dispatch_worker_thread2 + 252
4   libSystem.B.dylib             	0x00007fff85d27088 _pthread_wqthread + 353
5   libSystem.B.dylib             	0x00007fff85d26f25 start_wqthread + 13

Thread 2:  WebCore: IconDatabase
0   libSystem.B.dylib             	0x00007fff85d47eb6 __semwait_signal + 10
1   libSystem.B.dylib             	0x00007fff85d4bcd1 _pthread_cond_wait + 1286
2   com.apple.WebCore             	0x0000000100feba99 WebCore::IconDatabase::syncThreadMainLoop() + 249
3   com.apple.WebCore             	0x0000000100febbcc WebCore::IconDatabase::iconDatabaseSyncThread() + 172
4   libSystem.B.dylib             	0x00007fff85d46456 _pthread_start + 331
5   libSystem.B.dylib             	0x00007fff85d46309 thread_start + 13

Thread 3:  Safari: SafeBrowsingManager
0   libSystem.B.dylib             	0x00007fff85d0d2fa mach_msg_trap + 10
1   libSystem.B.dylib             	0x00007fff85d0d96d mach_msg + 59
2   com.apple.CoreFoundation      	0x00007fff81b683c2 __CFRunLoopRun + 1698
3   com.apple.CoreFoundation      	0x00007fff81b6784f CFRunLoopRunSpecific + 575
4   com.apple.Safari              	0x000000010002ed99 0x100000000 + 191897
5   com.apple.Safari              	0x000000010002ed29 0x100000000 + 191785
6   libSystem.B.dylib             	0x00007fff85d46456 _pthread_start + 331
7   libSystem.B.dylib             	0x00007fff85d46309 thread_start + 13

Thread 4:
0   libSystem.B.dylib             	0x00007fff85d0d2fa mach_msg_trap + 10
1   libSystem.B.dylib             	0x00007fff85d0d96d mach_msg + 59
2   com.apple.CoreFoundation      	0x00007fff81b683c2 __CFRunLoopRun + 1698
3   com.apple.CoreFoundation      	0x00007fff81b6784f CFRunLoopRunSpecific + 575
4   com.apple.Foundation          	0x00007fff86bbf4c3 +[NSURLConnection(NSURLConnectionReallyInternal) _resourceLoadLoop:] + 297
5   com.apple.Foundation          	0x00007fff86b3fe8d __NSThread__main__ + 1429
6   libSystem.B.dylib             	0x00007fff85d46456 _pthread_start + 331
7   libSystem.B.dylib             	0x00007fff85d46309 thread_start + 13

Thread 5:
0   libSystem.B.dylib             	0x00007fff85d26eaa __workq_kernreturn + 10
1   libSystem.B.dylib             	0x00007fff85d272bc _pthread_wqthread + 917
2   libSystem.B.dylib             	0x00007fff85d26f25 start_wqthread + 13

Thread 6:  Safari: SnapshotStore
0   libSystem.B.dylib             	0x00007fff85d47eb6 __semwait_signal + 10
1   libSystem.B.dylib             	0x00007fff85d4bcd1 _pthread_cond_wait + 1286
2   com.apple.JavaScriptCore      	0x00000001008f61f0 WTF::ThreadCondition::timedWait(WTF::Mutex&, double) + 64
3   com.apple.Safari              	0x00000001001bd941 0x100000000 + 1825089
4   com.apple.Safari              	0x0000000100046783 0x100000000 + 288643
5   com.apple.Safari              	0x0000000100046601 0x100000000 + 288257
6   libSystem.B.dylib             	0x00007fff85d46456 _pthread_start + 331
7   libSystem.B.dylib             	0x00007fff85d46309 thread_start + 13

Thread 7:
0   libSystem.B.dylib             	0x00007fff85d50dce select$DARWIN_EXTSN + 10
1   com.apple.CoreFoundation      	0x00007fff81b89e92 __CFSocketManager + 818
2   libSystem.B.dylib             	0x00007fff85d46456 _pthread_start + 331
3   libSystem.B.dylib             	0x00007fff85d46309 thread_start + 13

Thread 0 crashed with X86 Thread State (64-bit):
  rax: 0x0000000000000050  rbx: 0x0000000117530380  rcx: 0x0000000116efe120  rdx: 0x0000000101b2a360
  rdi: 0x0000000102495890  rsi: 0x00007fff859caaa6  rbp: 0x00007fff5fbfe240  rsp: 0x00007fff5fbfe1a8
   r8: 0x0000000117f4f2d8   r9: 0x000000011a6faf70  r10: 0x000000000000001f  r11: 0x0000000000000004
  r12: 0x00007fff80788770  r13: 0x0000000116efe0e0  r14: 0x0000000117530380  r15: 0xffff000000000002
  rip: 0x00007fff835bb11c  rfl: 0x0000000000010206  cr2: 0x0000000000000014

Binary Images:
       0x100000000 -        0x1006adfe7  com.apple.Safari 5.0.1 (6533.17.8) <638C4B83-D91D-E257-40DD-4A16DA94F27F> /Applications/Safari.app/Contents/MacOS/Safari
       0x100759000 -        0x10075cfff +WebKitNightlyEnabler.dylib ??? (???) <87832B44-836A-DB69-81CE-922270855B51> /Users/cp/Desktop/WebKit.app/Contents/Resources/WebKitNightlyEnabler.dylib
       0x100761000 -        0x100951fef  com.apple.JavaScriptCore 534+ (534.6+) <3953A3B7-81B5-DDEE-30C5-68435F030850> /Users/cp/Desktop/WebKit.app/Contents/Frameworks/10.6/JavaScriptCore.framework/Versions/A/JavaScriptCore
       0x1009c3000 -        0x100b4cfe7  com.apple.WebKit r65398 (534.6+) <52B3E2D2-B2FF-3A1B-2BF7-99CE8E2961F9> /Users/cp/Desktop/WebKit.app/Contents/Frameworks/10.6/WebKit.framework/Versions/A/WebKit
       0x100c1f000 -        0x101aa5ff7  com.apple.WebCore 534+ (534.6+) <AADB2481-FD49-C0DB-31AC-E31215F6B371> /Users/cp/Desktop/WebKit.app/Contents/Frameworks/10.6/WebCore.framework/Versions/A/WebCore
       0x102183000 -        0x1021acff7 +org.andymatuschak.Sparkle 1.5 Beta (git) (830f633) <945EA036-7EC3-D020-C889-29ECB588B891> /Users/cp/Desktop/WebKit.app/Contents/Frameworks/10.6/Sparkle.framework/Versions/A/Sparkle
       0x1021c7000 -        0x1022adfe7  libcrypto.0.9.7.dylib 0.9.7 (compatibility 0.9.7) <64B3566E-5F3A-A466-ED3F-B91F4B3E5F56> /usr/lib/libcrypto.0.9.7.dylib
       0x114b36000 -        0x114b5aff7  libPDFRIP.A.dylib 543.50.0 (compatibility 64.0.0) <6A248153-8A28-FFCA-01F1-C85D659876FC> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libPDFRIP.A.dylib
    0x7fff5fc00000 -     0x7fff5fc3bdef  dyld 132.1 (???) <B536F2F1-9DF1-3B6C-1C2C-9075EA219A06> /usr/lib/dyld
    0x7fff80041000 -     0x7fff80a37fff  com.apple.AppKit 6.6.6 (1038.29) <7BDD335D-5425-0354-5AD6-41C4F1B4A2F4> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
    0x7fff80a38000 -     0x7fff80c7afef  com.apple.AddressBook.framework 5.0.2 (870) <A1278575-53F2-CC00-7306-E49713FEC7C6> /System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
    0x7fff80cc1000 -     0x7fff80d46fff  com.apple.print.framework.PrintCore 6.2 (312.5) <2BA9CEF6-CCF4-6719-9642-E9667F815C66> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
    0x7fff80d47000 -     0x7fff80e12fe7  ColorSyncDeprecated.dylib 4.6.0 (compatibility 1.0.0) <3C223A94-EF14-28C5-844B-C25DFC87FB42> /System/Library/Frameworks/ApplicationServices.framework/Frameworks/ColorSync.framework/Versions/A/Resources/ColorSyncDeprecated.dylib
    0x7fff80e13000 -     0x7fff80e19ff7  IOSurface ??? (???) <EB2019F6-7C5C-3D59-E11F-6119466C12A9> /System/Library/Frameworks/IOSurface.framework/Versions/A/IOSurface
    0x7fff80e4d000 -     0x7fff80e4dff7  com.apple.Accelerate.vecLib 3.6 (vecLib 3.6) <4CCE5D69-F1B3-8FD3-1483-E0271DB2CCF3> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
    0x7fff80e4e000 -     0x7fff80e52ff7  libmathCommon.A.dylib 315.0.0 (compatibility 1.0.0) <95718673-FEEE-B6ED-B127-BCDBDB60D4E5> /usr/lib/system/libmathCommon.A.dylib
    0x7fff80e53000 -     0x7fff80f7bff7  com.apple.MediaToolbox 0.484.11 (484.11) <F50B5552-8527-C75D-873F-66A61D04E32A> /System/Library/PrivateFrameworks/MediaToolbox.framework/Versions/A/MediaToolbox
    0x7fff810dd000 -     0x7fff8111efff  com.apple.SystemConfiguration 1.10.2 (1.10.2) <BC27BDD4-9CC8-9AF0-B4C2-DD50FD751CBF> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
    0x7fff8111f000 -     0x7fff811efff7  com.apple.CFNetwork 454.9.7 (454.9.7) <AA6EB690-6CCF-603D-AAC2-35B9E05D1593> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
    0x7fff811f0000 -     0x7fff811f1fff  liblangid.dylib ??? (???) <D0666597-B331-C43C-67BB-F2E754079A7A> /usr/lib/liblangid.dylib
    0x7fff811f2000 -     0x7fff816f6fe7  com.apple.VideoToolbox 0.484.11 (484.11) <4577FF14-E6A7-AAD8-E6E6-ECA9CFCC6989> /System/Library/PrivateFrameworks/VideoToolbox.framework/Versions/A/VideoToolbox
    0x7fff816f7000 -     0x7fff816fdff7  com.apple.DiskArbitration 2.3 (2.3) <AAB5CC56-334A-3C60-3C27-54E8F34D754E> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
    0x7fff816fe000 -     0x7fff816feff7  com.apple.quartzframework 1.5 (1.5) <FA660AAC-70CD-7EA2-5DF1-A8724D8F4B1B> /System/Library/Frameworks/Quartz.framework/Versions/A/Quartz
    0x7fff816ff000 -     0x7fff817aefff  edu.mit.Kerberos 6.5.10 (6.5.10) <F3F76EDF-5660-78F0-FE6E-33B6174F55A4> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
    0x7fff817af000 -     0x7fff817feff7  com.apple.DirectoryService.PasswordServerFramework 6.0 (6.0) <F5B744D7-AEAF-6B66-43CF-6E31CDA18EAB> /System/Library/PrivateFrameworks/PasswordServer.framework/Versions/A/PasswordServer
    0x7fff817ff000 -     0x7fff8180afff  com.apple.corelocation 12 (12) <844D4E9D-2BAC-C20E-478B-10E7DC911DC0> /System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocation
    0x7fff81827000 -     0x7fff81895fff  com.apple.AppleVAFramework 4.9.20 (4.9.20) <78727165-8D44-0354-6F6C-68FD798E04A1> /System/Library/PrivateFrameworks/AppleVA.framework/Versions/A/AppleVA
    0x7fff819f2000 -     0x7fff819f7ff7  com.apple.CommonPanels 1.2.4 (91) <8B088D78-E508-6622-E477-E34C22CF2F67> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
    0x7fff819f8000 -     0x7fff819f8ff7  com.apple.ApplicationServices 38 (38) <0E2FC75E-2BE2-D04D-CA78-76E38A89DD30> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
    0x7fff819f9000 -     0x7fff81ad3fff  com.apple.vImage 4.0 (4.0) <B5A8B93B-D302-BC30-5A18-922645DB2F56> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
    0x7fff81ad4000 -     0x7fff81aeafef  libbsm.0.dylib ??? (???) <0321D32C-9FE1-3919-E03E-2530A0C1191B> /usr/lib/libbsm.0.dylib
    0x7fff81aeb000 -     0x7fff81aebff7  com.apple.vecLib 3.6 (vecLib 3.6) <96FB6BAD-5568-C4E0-6FA7-02791A58B584> /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib
    0x7fff81b1c000 -     0x7fff81c91ff7  com.apple.CoreFoundation 6.6.3 (550.29) <48810602-63C3-994D-E563-DD02B16E76E1> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
    0x7fff81c92000 -     0x7fff8249cfe7  libBLAS.dylib 219.0.0 (compatibility 1.0.0) <2F26CDC7-DAE9-9ABE-6806-93BBBDA20DA0> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
    0x7fff8249d000 -     0x7fff82518fff  com.apple.ISSupport 1.9.3 (51) <FED5B421-7B80-AAB5-F552-26AEC9F45800> /System/Library/PrivateFrameworks/ISSupport.framework/Versions/A/ISSupport
    0x7fff82525000 -     0x7fff82548fff  com.apple.opencl 12.1 (12.1) <403E8F37-4348-B9BC-08E6-7693A995B7EC> /System/Library/Frameworks/OpenCL.framework/Versions/A/OpenCL
    0x7fff82549000 -     0x7fff8255dfff  libGL.dylib ??? (???) <5AD69545-D1A3-C017-C7AF-B4AFD6F08FA2> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
    0x7fff8255e000 -     0x7fff825dbfef  com.apple.backup.framework 1.2.2 (1.2.2) <BB72F0C7-20E2-76DC-6764-5B93A7AC0EB5> /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup
    0x7fff825dc000 -     0x7fff82646fe7  libvMisc.dylib 268.0.1 (compatibility 1.0.0) <7BD7F19B-ACD4-186C-B42D-4DEBA6795628> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
    0x7fff826fd000 -     0x7fff82700fff  com.apple.help 1.3.1 (41) <AEDDF93F-BAC0-0308-68FD-039A99F3A158> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
    0x7fff82706000 -     0x7fff8271ffff  com.apple.CFOpenDirectory 10.6 (10.6) <E98F7642-7F87-C3B4-18FB-3D3947E53CD0> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Versions/A/CFOpenDirectory
    0x7fff82720000 -     0x7fff82989ff7  com.apple.QuartzComposer 4.1 (156.16) <0BAE3C90-CF60-C0C7-C29E-BF9922074095> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuartzComposer.framework/Versions/A/QuartzComposer
    0x7fff8298a000 -     0x7fff829f6ff7  com.apple.CorePDF 1.3 (1.3) <6770FFB0-DEA0-61E0-3520-4B95CCF5D1CF> /System/Library/PrivateFrameworks/CorePDF.framework/Versions/A/CorePDF
    0x7fff829f7000 -     0x7fff82a04fe7  libCSync.A.dylib 543.50.0 (compatibility 64.0.0) <7B891D4C-1F19-4DB0-FD12-7A7D5E8F47AE> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
    0x7fff82a05000 -     0x7fff82a42fff  com.apple.LDAPFramework 2.0 (120.1) <F3B7B267-D580-F287-6DE7-8AC91C92AB35> /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
    0x7fff82a7e000 -     0x7fff82ae6fff  com.apple.MeshKitRuntime 1.1 (49.2) <A490FE03-313D-1317-A9B8-25EF75CB1A81> /System/Library/PrivateFrameworks/MeshKit.framework/Versions/A/Frameworks/MeshKitRuntime.framework/Versions/A/MeshKitRuntime
    0x7fff82aed000 -     0x7fff82b03fff  com.apple.ImageCapture 6.0 (6.0) <01E09982-7DD2-0868-0180-42E7D298B35A> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
    0x7fff82bfd000 -     0x7fff82ce3fe7  com.apple.DesktopServices 1.5.7 (1.5.7) <8A697128-B6CA-E4A8-C200-6520D5A35FBE> /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
    0x7fff82ce4000 -     0x7fff82d1ffff  com.apple.AE 496.4 (496.4) <CB905496-4D6B-F26A-399D-840D26DBEE5B> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
    0x7fff82f11000 -     0x7fff82f49fef  libcups.2.dylib 2.8.0 (compatibility 2.0.0) <31A78904-A500-0DA9-0609-F1EB81383326> /usr/lib/libcups.2.dylib
    0x7fff82fbd000 -     0x7fff82fe8ff7  libxslt.1.dylib 3.24.0 (compatibility 3.0.0) <6589F0FC-41DB-8494-CA8B-487F4E328EB9> /usr/lib/libxslt.1.dylib
    0x7fff83222000 -     0x7fff832dfff7  com.apple.CoreServices.OSServices 357 (357) <718F0719-DC9F-E392-7C64-9D7DFE3D02E2> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
    0x7fff832e0000 -     0x7fff832ebff7  com.apple.speech.recognition.framework 3.11.1 (3.11.1) <C359B93B-CC9B-FC0B-959E-FB10674103A7> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
    0x7fff832ec000 -     0x7fff832fbff7  com.apple.opengl 1.6.8 (1.6.8) <0CDC4F98-7981-A114-1778-AF171075138E> /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
    0x7fff832fc000 -     0x7fff83312fe7  com.apple.MultitouchSupport.framework 205.34 (205.34) <01AAE66D-C2DF-4EF5-FC7B-E89E08C02A01> /System/Library/PrivateFrameworks/MultitouchSupport.framework/Versions/A/MultitouchSupport
    0x7fff83313000 -     0x7fff83392fef  com.apple.audio.CoreAudio 3.2.2 (3.2.2) <243E456E-7A74-BE76-FF18-E589BDCAA785> /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
    0x7fff83393000 -     0x7fff83422fff  com.apple.PDFKit 2.5.1 (2.5.1) <C0E3AE4B-E71A-16D8-0D51-FB7D3E3AD793> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/PDFKit.framework/Versions/A/PDFKit
    0x7fff83423000 -     0x7fff83423ff7  com.apple.Accelerate 1.6 (Accelerate 1.6) <15DF8B4A-96B2-CB4E-368D-DEC7DF6B62BB> /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
    0x7fff8342b000 -     0x7fff83430fff  libGFXShared.dylib ??? (???) <1265FAEF-1C97-B339-28A4-4510589B067B> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGFXShared.dylib
    0x7fff83431000 -     0x7fff835a0fe7  com.apple.QTKit 7.6.6 (1742) <7E254184-757D-E87C-5B2A-7612A2C85243> /System/Library/Frameworks/QTKit.framework/Versions/A/QTKit
    0x7fff835a1000 -     0x7fff835b5ff7  com.apple.speech.synthesis.framework 3.10.35 (3.10.35) <574C1BE0-5E5E-CCAF-06F8-92A69CB2892D> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
    0x7fff835b6000 -     0x7fff8366cfff  libobjc.A.dylib 227.0.0 (compatibility 1.0.0) <1960E662-D35C-5D98-EB16-D43166AE6A22> /usr/lib/libobjc.A.dylib
    0x7fff8366d000 -     0x7fff83682ff7  com.apple.LangAnalysis 1.6.6 (1.6.6) <DC999B32-BF41-94C8-0583-27D9AB463E8B> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
    0x7fff83683000 -     0x7fff8369eff7  com.apple.openscripting 1.3.1 (???) <DC329CD4-1159-A40A-A769-70CAA70F601A> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
    0x7fff8369f000 -     0x7fff836a3ff7  libCGXType.A.dylib 543.50.0 (compatibility 64.0.0) <E666EBC7-2D87-A3C6-9461-A596B4E53593> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGXType.A.dylib
    0x7fff836a4000 -     0x7fff8373efff  com.apple.ApplicationServices.ATS 4.3 (???) <A7CD9E1F-C563-E940-130D-AA7E08C5A29F> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
    0x7fff83801000 -     0x7fff83827fe7  libJPEG.dylib ??? (???) <4060F3E2-BAD3-244F-D777-51BA16569DA4> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
    0x7fff83828000 -     0x7fff83829ff7  com.apple.audio.units.AudioUnit 1.6.3 (1.6.3) <65C333FF-3F7A-AD36-DC36-D3F2F46727C5> /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
    0x7fff8382a000 -     0x7fff83ab0ff7  com.apple.security 6.1.1 (37594) <5EDDC08C-C95B-2D24-E1D2-D30D233AB065> /System/Library/Frameworks/Security.framework/Versions/A/Security
    0x7fff83ab1000 -     0x7fff83ab7fff  libCGXCoreImage.A.dylib 543.50.0 (compatibility 64.0.0) <2D72D55A-C8FE-78DD-602E-E934057EDF95> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGXCoreImage.A.dylib
    0x7fff83b21000 -     0x7fff83c30fe7  libcrypto.0.9.8.dylib 0.9.8 (compatibility 0.9.8) <36DA89A6-3AF5-86F2-BDD5-B94C7C0844D4> /usr/lib/libcrypto.0.9.8.dylib
    0x7fff83c31000 -     0x7fff83c42ff7  libz.1.dylib 1.2.3 (compatibility 1.0.0) <FB5EE53A-0534-0FFA-B2ED-486609433717> /usr/lib/libz.1.dylib
    0x7fff83c73000 -     0x7fff840b6fef  libLAPACK.dylib 219.0.0 (compatibility 1.0.0) <57D38705-6F21-2A82-F3F6-03CFFF214775> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
    0x7fff840b7000 -     0x7fff8426dfef  com.apple.ImageIO.framework 3.0.3 (3.0.3) <A32D0B5A-7149-7739-22D3-84D38B07E9E5> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
    0x7fff84270000 -     0x7fff84270ff7  com.apple.Cocoa 6.6 (???) <C69E895A-1C66-3DA9-5F63-8BE85DB9C4E1> /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
    0x7fff84271000 -     0x7fff84331fff  libFontParser.dylib ??? (???) <A4F8189D-1D5B-2F8D-E78E-6D934A8E8407> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontParser.dylib
    0x7fff84673000 -     0x7fff84713fff  com.apple.LaunchServices 362.1 (362.1) <B4083624-2C88-0C4F-B047-40D3CC5B3325> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
    0x7fff84714000 -     0x7fff8471cfff  com.apple.DisplayServicesFW 2.2.2 (251) <A8AA237B-26DA-455D-4133-69B1D1E45DF4> /System/Library/PrivateFrameworks/DisplayServices.framework/Versions/A/DisplayServices
    0x7fff85391000 -     0x7fff85396fff  libGIF.dylib ??? (???) <21FC6B02-6AC3-C4DB-0B50-98144802274C> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
    0x7fff853b2000 -     0x7fff853c3fff  SyndicationUI ??? (???) <AB222D54-3800-754D-C234-9FD5F1ACA7EB> /System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI
    0x7fff853c4000 -     0x7fff85419fef  com.apple.framework.familycontrols 2.0.1 (2010) <239940AC-2427-44C6-9E29-998D0ABECDF3> /System/Library/PrivateFrameworks/FamilyControls.framework/Versions/A/FamilyControls
    0x7fff8541a000 -     0x7fff8545dfef  libtidy.A.dylib ??? (???) <D0239CC6-4480-E54F-67BE-1954C80AEB94> /usr/lib/libtidy.A.dylib
    0x7fff8545e000 -     0x7fff8545ffff  com.apple.MonitorPanelFramework 1.3.0 (1.3.0) <EC039008-5367-090D-51FD-EA4D2623671A> /System/Library/PrivateFrameworks/MonitorPanel.framework/Versions/A/MonitorPanel
    0x7fff85460000 -     0x7fff854a1ff7  com.apple.CoreMedia 0.484.11 (484.11) <AEE7E9C9-9604-B0A7-053B-28954659CFE3> /System/Library/PrivateFrameworks/CoreMedia.framework/Versions/A/CoreMedia
    0x7fff854a2000 -     0x7fff857a0fe7  com.apple.HIToolbox 1.6.3 (???) <CF0C8524-FA82-3908-ACD0-A9176C704AED> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
    0x7fff857a1000 -     0x7fff858bafef  libGLProgrammability.dylib ??? (???) <B057FC52-6A97-F450-48D8-325A70423A53> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib
    0x7fff85ae0000 -     0x7fff85bf7fef  libxml2.2.dylib 10.3.0 (compatibility 10.0.0) <AFE91118-DBF3-6313-37B8-8A2002C6A46B> /usr/lib/libxml2.2.dylib
    0x7fff85bf8000 -     0x7fff85c3ffef  com.apple.QuickLookFramework 2.2 (327.4) <E31F6272-25B1-E477-8E85-B06919705BAC> /System/Library/Frameworks/QuickLook.framework/Versions/A/QuickLook
    0x7fff85c40000 -     0x7fff85c91fe7  com.apple.HIServices 1.8.0 (???) <2D0D9100-B712-ED4B-7622-BBA92053F446> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
    0x7fff85c92000 -     0x7fff85c92ff7  com.apple.CoreServices 44 (44) <616722B1-5E79-DCCF-BF5E-0DD5802CCBD9> /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
    0x7fff85c93000 -     0x7fff85cd7fe7  com.apple.ImageCaptureCore 1.0.2 (1.0.2) <075198A5-4C6B-D945-D3EF-D13960C9F738> /System/Library/Frameworks/ImageCaptureCore.framework/Versions/A/ImageCaptureCore
    0x7fff85cfc000 -     0x7fff85d0bfff  com.apple.NetFS 3.2.1 (3.2.1) <DE59FB56-8536-9999-352A-2016ADCF4FCF> /System/Library/Frameworks/NetFS.framework/Versions/A/NetFS
    0x7fff85d0c000 -     0x7fff85eccfef  libSystem.B.dylib 125.2.0 (compatibility 1.0.0) <95E02DD0-ADEA-745B-E7FA-ABA064E4658C> /usr/lib/libSystem.B.dylib
    0x7fff85ecd000 -     0x7fff85f59fef  SecurityFoundation ??? (???) <6860DE26-0D42-D1E8-CD7C-5B42D78C1E1D> /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
    0x7fff85f5a000 -     0x7fff85f5cfff  libRadiance.dylib ??? (???) <D67C08B6-4D4A-916D-E936-528E145A56E2> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
    0x7fff85f5d000 -     0x7fff85f5eff7  com.apple.TrustEvaluationAgent 1.1 (1) <A91CE5B9-3C63-5F8C-5052-95CCAB866F72> /System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Versions/A/TrustEvaluationAgent
    0x7fff85f5f000 -     0x7fff85fabfff  libauto.dylib ??? (???) <9B1DB6E8-4D79-B79C-D9EC-85592478F632> /usr/lib/libauto.dylib
    0x7fff86004000 -     0x7fff86033fff  com.apple.quartzfilters 1.6.0 (1.6.0) <52D41730-D485-A7AE-4937-FE37FC732F65> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuartzFilters.framework/Versions/A/QuartzFilters
    0x7fff86034000 -     0x7fff86367fe7  com.apple.CoreServices.CarbonCore 861.13 (861.13) <BC2F9B4E-D305-D717-D97E-EC78C7DE9EE9> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
    0x7fff86368000 -     0x7fff8636ffff  com.apple.OpenDirectory 10.6 (10.6) <D72FD8AB-B328-B27B-DA16-3BBB7BC0C08C> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory
    0x7fff86370000 -     0x7fff863a1fef  libTrueTypeScaler.dylib ??? (???) <0A30CA68-46AF-3E74-AE9E-693DB5A680CC> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libTrueTypeScaler.dylib
    0x7fff863a2000 -     0x7fff864e0fff  com.apple.CoreData 102.1 (251) <96C5E9A6-C28C-E9CC-A0DB-27801A22A49F> /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
    0x7fff864e1000 -     0x7fff86502fff  libresolv.9.dylib 41.0.0 (compatibility 1.0.0) <6993F348-428F-C97E-7A84-7BD2EDC46A62> /usr/lib/libresolv.9.dylib
    0x7fff86503000 -     0x7fff86607fff  com.apple.PubSub 1.0.5 (65.20) <4B7C7949-653D-D1D2-FEDF-97863ADD4BE0> /System/Library/Frameworks/PubSub.framework/Versions/A/PubSub
    0x7fff86608000 -     0x7fff86698fff  com.apple.SearchKit 1.3.0 (1.3.0) <45BA1053-9196-3C2F-2421-AFF5E09627CC> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
    0x7fff86699000 -     0x7fff866e2ff7  com.apple.securityinterface 4.0.1 (37214) <08DB37D6-A716-DC37-536C-7889999EF395> /System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
    0x7fff866e3000 -     0x7fff86726ff7  libRIP.A.dylib 543.50.0 (compatibility 64.0.0) <DF457CB3-CE61-0FD4-1403-BB68BC2CC998> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
    0x7fff86727000 -     0x7fff8676eff7  com.apple.coreui 2 (114) <31118426-355F-206A-65AB-CCA2D2D3EBD7> /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI
    0x7fff867ac000 -     0x7fff867aefff  com.apple.print.framework.Print 6.1 (237.1) <87A5BEEC-2D37-5CB7-8B13-7B605397573F> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
    0x7fff867ba000 -     0x7fff86809fef  libTIFF.dylib ??? (???) <A66CBA9C-A38D-5EDB-BFB5-CB398F033D6F> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
    0x7fff8680a000 -     0x7fff868c3fff  libsqlite3.dylib 9.6.0 (compatibility 9.0.0) <00E15F05-E8C2-B1D1-DAEA-497FD72A0481> /usr/lib/libsqlite3.dylib
    0x7fff868c4000 -     0x7fff868c7ff7  com.apple.securityhi 4.0 (36638) <38935851-09E4-DDAB-DB1D-30ADC39F7ED0> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
    0x7fff868c8000 -     0x7fff86946fff  com.apple.CoreText 3.1.0 (???) <E83F0CB9-B937-FE97-A6B3-9466BA560C8B> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
    0x7fff86ac2000 -     0x7fff86afbff7  com.apple.MeshKit 1.1 (49.2) <B85DDDC7-4053-4DB8-E1B5-AA0CBD4CDD1C> /System/Library/PrivateFrameworks/MeshKit.framework/Versions/A/MeshKit
    0x7fff86afc000 -     0x7fff86b0bfff  libxar.1.dylib ??? (???) <2C4E4D13-263B-6EFF-C6FD-FB8BA6DB3EF0> /usr/lib/libxar.1.dylib
    0x7fff86b2f000 -     0x7fff86db0fef  com.apple.Foundation 6.6.3 (751.29) <DAEDB589-9F59-9556-CF8D-07556317937B> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
    0x7fff86db1000 -     0x7fff86df2fef  com.apple.QD 3.35 (???) <6B7D6A89-2578-5C40-C0DE-A5BCB0AA6FD8> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
    0x7fff86df3000 -     0x7fff86e11fff  libPng.dylib ??? (???) <F6932C8D-E6B1-0871-B698-15180AA948F7> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
    0x7fff86e5d000 -     0x7fff871fefe7  com.apple.RawCamera.bundle 3.3.0 (533) <84ACD5A6-A184-0D4A-24C6-41D14291E8EC> /System/Library/CoreServices/RawCamera.bundle/Contents/MacOS/RawCamera
    0x7fff872d8000 -     0x7fff873fdfef  com.apple.audio.toolbox.AudioToolbox 1.6.3 (1.6.3) <72149B5E-BEC7-B6E9-3B34-0E0620827542> /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
    0x7fff873fe000 -     0x7fff875bcfff  libicucore.A.dylib 40.0.0 (compatibility 1.0.0) <0E53A4A6-AC06-1B61-2285-248F534EE356> /usr/lib/libicucore.A.dylib
    0x7fff875bd000 -     0x7fff8761bff7  com.apple.framework.IOKit 2.0 (???) <010C3398-7363-8F4B-719C-263867F15F63> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
    0x7fff8761c000 -     0x7fff87644fff  com.apple.DictionaryServices 1.1.1 (1.1.1) <FBE782D5-F5F5-DA3B-EE10-8D6B24BD6C03> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices
    0x7fff87645000 -     0x7fff879deff7  com.apple.QuartzCore 1.6.2 (227.22) <76EE0A32-B20B-F316-ADDD-4230329253D5> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
    0x7fff87a14000 -     0x7fff87a5dfef  libGLU.dylib ??? (???) <34D118CD-F9EE-D023-FEBF-74581DEF31CD> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
    0x7fff87a60000 -     0x7fff87a9dff7  libFontRegistry.dylib ??? (???) <B63FCC3A-F49E-B42E-6D57-5F59E3A8D8B9> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontRegistry.dylib
    0x7fff87ad9000 -     0x7fff87b56fef  libstdc++.6.dylib 7.9.0 (compatibility 7.0.0) <C82DB84D-6391-2E56-35D4-C4B373334153> /usr/lib/libstdc++.6.dylib
    0x7fff87b57000 -     0x7fff87c0cfe7  com.apple.ink.framework 1.3.3 (107) <A68339AA-909D-E46C-35C0-72808EE3D043> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
    0x7fff87c0d000 -     0x7fff8830a067  com.apple.CoreGraphics 1.543.50 (???) <46A7D60C-0500-B96C-ECAD-1D658487D213> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
    0x7fff8830b000 -     0x7fff88316ff7  com.apple.HelpData 2.0.4 (34) <AB4C41BA-E7A9-DE25-CAE2-21D0A5F909D1> /System/Library/PrivateFrameworks/HelpData.framework/Versions/A/HelpData
    0x7fff884fb000 -     0x7fff884fbff7  com.apple.Carbon 150 (152) <19B37B7B-1594-AD0A-7F14-FA2F85AD7241> /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
    0x7fff885c1000 -     0x7fff88643fff  com.apple.QuickLookUIFramework 2.2 (327.4) <FC41D181-984D-3D2B-4A1F-BAD6D4DD4410> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuickLookUI.framework/Versions/A/QuickLookUI
    0x7fff88644000 -     0x7fff886f9fe7  com.apple.ColorSync 4.6.3 (4.6.3) <AA93AD96-6974-9104-BF55-AF7A813C8A1B> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
    0x7fff886fa000 -     0x7fff8872bfff  libGLImage.dylib ??? (???) <2F18DB77-CF77-1311-9E20-FE460090C166> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
    0x7fff8872c000 -     0x7fff88776ff7  com.apple.Metadata 10.6.3 (507.10) <641395B7-FF2C-B94C-965A-CE6A0830645F> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
    0x7fff88777000 -     0x7fff887bfff7  libvDSP.dylib 268.0.1 (compatibility 1.0.0) <98FC4457-F405-0262-00F7-56119CA107B6> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
    0x7fff887d9000 -     0x7fff887e5fff  libbz2.1.0.dylib 1.0.5 (compatibility 1.0.0) <ECA200F9-9C46-579A-6447-16B8BFB93D96> /usr/lib/libbz2.1.0.dylib
    0x7fff887e6000 -     0x7fff8881eff7  libssl.0.9.8.dylib 0.9.8 (compatibility 0.9.8) <94776929-EF76-D979-5412-940C845BAC5D> /usr/lib/libssl.0.9.8.dylib
    0x7fff8881f000 -     0x7fff8882afff  com.apple.CrashReporterSupport 10.6.3 (250) <F74D84F2-26D0-BE89-00A8-238857AA83C5> /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/CrashReporterSupport
    0x7fff8882b000 -     0x7fff88a66fef  com.apple.imageKit 2.0.3 (1.0) <8DA80BC9-C671-BD89-EA2E-3C632D6ECE30> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/ImageKit.framework/Versions/A/ImageKit
    0x7fff88a97000 -     0x7fff88a9aff7  libCoreVMClient.dylib ??? (???) <DBB2C09F-4BF4-326C-B775-B7A128C501E3> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClient.dylib
    0x7fff88a9b000 -     0x7fff88aacfff  com.apple.DSObjCWrappers.Framework 10.6 (134) <CF1D9C05-8D77-0FFE-38E8-63D8A23E92E1> /System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
    0x7fff88aad000 -     0x7fff88af2fff  com.apple.CoreMediaIOServices 130.0 (1035) <567D7949-3115-4E78-8F27-B28968CC25F7> /System/Library/PrivateFrameworks/CoreMediaIOServices.framework/Versions/A/CoreMediaIOServices
    0x7fff88ba9000 -     0x7fff88bdefef  com.apple.framework.Apple80211 6.2.3 (623.1) <E58C0A3A-BA14-9703-F6A3-3951A862570C> /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Apple80211
    0x7fff88c79000 -     0x7fff88c87ff7  libkxld.dylib ??? (???) <EE840168-1F67-6219-8BA3-C46039BCC8B3> /usr/lib/system/libkxld.dylib
    0x7fff88c88000 -     0x7fff88cadff7  com.apple.CoreVideo 1.6.1 (45.5) <97AF669D-5482-7AD5-849B-A64E7D98AC94> /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo
    0x7fff88cae000 -     0x7fff88cceff7  com.apple.DirectoryService.Framework 3.6 (621.3) <8FBCBA30-5BB6-E447-8146-08486933AEB8> /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
    0x7fff88ccf000 -     0x7fff88d31fe7  com.apple.datadetectorscore 2.0 (80.7) <C3A68083-AFB0-CFC6-8AA5-517C9D1489B6> /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/DataDetectorsCore
    0x7fff88d32000 -     0x7fff88d62fef  com.apple.shortcut 1.1 (1.1) <0A20F092-6161-4EA7-D8E6-859B5C350DE7> /System/Library/PrivateFrameworks/Shortcut.framework/Versions/A/Shortcut
    0x7fff88d63000 -     0x7fff88d75fe7  libsasl2.2.dylib 3.15.0 (compatibility 3.0.0) <30FE378B-99FE-8C7C-06D0-A3AA0A0A70D4> /usr/lib/libsasl2.2.dylib
    0x7fff88fbd000 -     0x7fff890c7ff7  com.apple.MeshKitIO 1.1 (49.2) <D7227401-9DC9-C2CB-C83B-C2B10C61D4E4> /System/Library/PrivateFrameworks/MeshKit.framework/Versions/A/Frameworks/MeshKitIO.framework/Versions/A/MeshKitIO
    0x7fffffe00000 -     0x7fffffe01fff  libSystem.B.dylib ??? (???) <95E02DD0-ADEA-745B-E7FA-ABA064E4658C> /usr/lib/libSystem.B.dylib

Model: MacBook7,1, BootROM MB71.0039.B09, 2 processors, Intel Core 2 Duo, 2.4 GHz, 2 GB, SMC 1.60f5
Graphics: NVIDIA GeForce 320M, NVIDIA GeForce 320M, PCI, 256 MB
Memory Module: global_name
AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x93), Broadcom BCM43xx 1.0 (5.10.131.16.1)
Bluetooth: Version 2.3.7f1, 2 service, 19 devices, 1 incoming serial ports
Network Service: AirPort, AirPort, en1
Serial ATA Device: Hitachi HTS545025B9SA02, 232.89 GB
Serial ATA Device: MATSHITADVD-R   UJ-898
USB Device: Built-in iSight, 0x05ac  (Apple Inc.), 0x8507, 0x24600000
USB Device: Apple Internal Keyboard / Trackpad, 0x05ac  (Apple Inc.), 0x0236, 0x06300000
USB Device: BRCM2070 Hub, 0x0a5c  (Broadcom Corp.), 0x4500, 0x06600000
USB Device: Bluetooth USB Host Controller, 0x05ac  (Apple Inc.), 0x8218, 0x06630000
Comment 1 Jessie Berlin 2010-08-23 16:45:22 PDT
*** Bug 43986 has been marked as a duplicate of this bug. ***
Comment 2 Jessie Berlin 2010-08-24 09:06:29 PDT
I am experiencing a similar crash on Windows in WebInspectorFrontendClient::closeWindow. It appears that the associated Page and/or WebView are destroyed before the Web Inspector is closed on both Mac and Windows.

The closest I could get with bisecting was that this was caused by some change in between r64889 and r65052. I will continue to investigate.
Comment 3 Jessie Berlin 2010-08-24 16:58:58 PDT
(In reply to comment #2)
> I am experiencing a similar crash on Windows in WebInspectorFrontendClient::closeWindow. It appears that the associated Page and/or WebView are destroyed before the Web Inspector is closed on both Mac and Windows.
> 
> The closest I could get with bisecting was that this was caused by some change in between r64889 and r65052. I will continue to investigate.

This regression first shows up after r64951 (http://trac.webkit.org/changeset/64951), which switched from InspectorFrontend to RemoteInspectorFrontend.
Comment 4 Jessie Berlin 2010-08-25 14:10:02 PDT
This should really not be fixed by just adding another null check for the webView in destroyInspectorView (both on Windows and on Mac). Page will always be null here, since it is being called as a result of a asynchronous callback from something called by Page's destructor.
Comment 5 Timothy Hatcher 2010-08-25 14:15:22 PDT
This is happening because _inspectedWebView in WebInspectorClient.mm is not retained. And closing the window deallocs that WebView, which kicks off an asynchronous close process. By the time the asynchronous close finishes the _inspectedWebView is pointing at a dealloced object.

And _inspectedWebView in WebInspectorClient.mm can't be retained because it would cause a reference cycle/leak.
Comment 6 Darin Adler 2010-08-25 14:18:59 PDT
(In reply to comment #5)
> This is happening because _inspectedWebView in WebInspectorClient.mm is not retained. And closing the window deallocs that WebView, which kicks off an asynchronous close process. By the time the asynchronous close finishes the _inspectedWebView is pointing at a dealloced object.
> 
> And _inspectedWebView in WebInspectorClient.mm can't be retained because it would cause a reference cycle/leak.

Given that, the solution has to be a back-pointer from the web view to the inspector client.
Comment 7 Timothy Hatcher 2010-08-25 14:49:53 PDT
(In reply to comment #6)
> (In reply to comment #5)
> > This is happening because _inspectedWebView in WebInspectorClient.mm is not retained. And closing the window deallocs that WebView, which kicks off an asynchronous close process. By the time the asynchronous close finishes the _inspectedWebView is pointing at a dealloced object.
> > 
> > And _inspectedWebView in WebInspectorClient.mm can't be retained because it would cause a reference cycle/leak.
> 
> Given that, the solution has to be a back-pointer from the web view to the inspector client.

That is esentially what we use to do, but it got changed into an async call along the way without considering the lifetime of these objects.
Comment 8 Jessie Berlin 2010-08-25 15:02:34 PDT
Re-assigning to Ilya Tikhonovsky, since Pavel Feldman indicated that he and Yury Semikhatsky were looking at it and were close to a fix.
Comment 9 Yury Semikhatsky 2010-08-26 07:24:08 PDT
Created attachment 65560 [details]
Patch
Comment 10 Pavel Feldman 2010-08-26 07:35:57 PDT
Comment on attachment 65560 [details]
Patch

r+ with nits.

WebCore/inspector/InspectorFrontendHost.cpp:173
 +          disconnectClient(); // Disconnect from client.
Why does disconnecting from backend cut the link to the client? I think it should be cut by the client itself.

WebCore/inspector/front-end/inspector.js:719
 +          return;
Can this happen?

WebKit/chromium/src/InspectorFrontendClientImpl.cpp:110
 +      m_client->closeWindow();
We might want to clear the link to client from here instead.

WebKit/gtk/WebCoreSupport/InspectorClientGtk.cpp:277
 +  void InspectorFrontendClient::destroyInspectorWindow(bool notifyInspectorController)
That is fine for now, but we should remove the link from inspector frontend client to the inspected page. It should go through a inspector / inspectable mapping class as we have it in chromium. Maybe we can implement a common one in WebCore.

WebKit/qt/WebCoreSupport/InspectorClientQt.cpp:1
 +  /* {
Remove this change.
Comment 11 Yury Semikhatsky 2010-08-26 08:38:21 PDT
(In reply to comment #10)
> (From update of attachment 65560 [details])
> r+ with nits.
> 
> WebCore/inspector/InspectorFrontendHost.cpp:173
>  +          disconnectClient(); // Disconnect from client.
> Why does disconnecting from backend cut the link to the client? I think it should be cut by the client itself.
> 
Let's do this in a separate change.

> WebCore/inspector/front-end/inspector.js:719
>  +          return;
> Can this happen?
> 
Hardly. Removed the code.

> WebKit/qt/WebCoreSupport/InspectorClientQt.cpp:1
>  +  /* {
> Remove this change.
Done.
Comment 12 Yury Semikhatsky 2010-08-26 08:38:32 PDT
Committed r66103
Comment 13 WebKit Review Bot 2010-08-26 08:56:10 PDT
http://trac.webkit.org/changeset/66103 might have broken Chromium Win Release
Comment 14 Jessie Berlin 2010-08-26 13:35:27 PDT
r66103 was rolled out in r66106.
Comment 15 Yury Semikhatsky 2010-08-27 02:07:14 PDT
Created attachment 65692 [details]
Patch
Comment 16 Yury Semikhatsky 2010-08-27 03:05:26 PDT
Comment on attachment 65692 [details]
Patch

Clearing flags on attachment: 65692

Committed r66198: <http://trac.webkit.org/changeset/66198>
Comment 17 Yury Semikhatsky 2010-08-27 03:05:38 PDT
All reviewed patches have been landed.  Closing bug.
Comment 18 WebKit Review Bot 2010-08-27 03:38:52 PDT
http://trac.webkit.org/changeset/66198 might have broken Qt Linux Release
Comment 19 Csaba Osztrogonác 2010-08-30 03:11:36 PDT
Reopen, because it was rolled out by http://trac.webkit.org/changeset/66376 
See https://bugs.webkit.org/show_bug.cgi?id=44856 for details
Comment 20 Csaba Osztrogonác 2010-08-30 03:12:53 PDT
.
Comment 22 Yury Semikhatsky 2010-09-02 09:14:12 PDT
Created attachment 66377 [details]
patch that I'm going to land(doesn't crash Qt)

The only difference with the previous one is in InspectorFrontendClientQt::destroyInspectorView which now checks if the inspected page still exists before accessing it.
Comment 23 WebKit Review Bot 2010-09-03 07:25:16 PDT
http://trac.webkit.org/changeset/66720 might have broken Leopard Intel Debug (Tests)
Comment 24 Yury Semikhatsky 2010-09-03 08:05:15 PDT
Committed r66720.
Comment 25 Rowan Beentje 2010-09-09 09:34:59 PDT
I'm still getting crashes every time for this.  My reproducible test case for this is:
 - Open Webkit
 - Go to http://webkit.org
 - Open the Inspector
 - Switch to Resources tab, enable Resources
 - Close the window when the page has reloaded.

On r67077 this still gives the following crash; I'll attach a full crash log as well:

Application Specific Information:
objc_msgSend() selector name: _isClosed

Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   libobjc.A.dylib               	0x00007fff87bf511c objc_msgSend + 40
1   com.apple.WebKit              	0x0000000100a405e4 -[WebInspectorWindowController close] + 84
2   com.apple.WebKit              	0x0000000100a40b1f -[WebInspectorWindowController destroyInspectorView:] + 127
3   com.apple.WebCore             	0x000000010107384b WebCore::InspectorFrontendHost::disconnectFromBackend() + 27
4   com.apple.WebCore             	0x000000010122bd26 WebCore::jsInspectorFrontendHostPrototypeFunctionDisconnectFromBackend(JSC::ExecState*) + 118
5   ???                           	0x00003be32b8001aa 0 + 65846873424298
6   com.apple.JavaScriptCore      	0x00000001007dcba8 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, JSC::JSValue*) + 888
Comment 26 Rowan Beentje 2010-09-09 09:36:47 PDT
Created attachment 67045 [details]
r67077 crash log
Comment 27 Ryosuke Niwa 2010-09-09 14:23:23 PDT
#c25 and #c26 indicate that this bug has not been fully fixed.
Comment 28 Rowan Beentje 2010-09-14 03:14:12 PDT
I'm still getting crashes several times daily on r67358 - just have to keep minimising windows instead of closing them if I've used the inspector, but I still tend to forget.

Using the following steps:
1) Open website
2) Open web inspector
3) Enable resources
4) Close window
…does appear to crash 100% on some sites, but not others.  For example, performing these steps on http://nightly.webkit.org/start/trunk/67358 doesn't cause a crash; performing those steps on http://webkit.org (and seemingly every site I work on) does cause a crash every time.
Comment 29 Jessie Berlin 2010-09-14 06:07:50 PDT
(In reply to comment #28)
> I'm still getting crashes several times daily on r67358 - just have to keep minimising windows instead of closing them if I've used the inspector, but I still tend to forget.
> 
> Using the following steps:
> 1) Open website
> 2) Open web inspector
> 3) Enable resources
> 4) Close window
> …does appear to crash 100% on some sites, but not others.  For example, performing these steps on http://nightly.webkit.org/start/trunk/67358 doesn't cause a crash; performing those steps on http://webkit.org (and seemingly every site I work on) does cause a crash every time.

I cannot reproduce this on Mac in Safari 5.0.2 with WebKit r67358 by following the steps you are describing on http://webkit.org.

Is there a certain way you are opening the web inspector and a certain way you are enabling resources (through the button on the bottom bar)? How soon after you enable resources are you closing the window behind the web inspector? How many other browser windows do you have open when it crashes? Does it happen when you enable scripts?
Comment 30 Rowan Beentje 2010-09-14 06:22:30 PDT
Hi Jessie,

Thanks for looking into this - how curious that you can't replicate it?

I'm on 10.6.4, using r67358 (Safari 5.0.2 installed as the "base" application) from the nightly downloads.

I open the web inspector either via the menu or via the keyboard, and enable the resources pane either via the button within the pane or in the bottom bar - both produce the same crashes.

I don't have to have any other windows open - a freshly launched WebKit will show the problems; I normally have all panels disabled unless I enable them for a particular site.

Here's a screen recording of a quick couple of examples - ~7MB silent .mov: http://beent.je/webkitcrashes.mov
Comment 31 Rowan Beentje 2010-09-14 06:30:27 PDT
Jessie: you're quite correct.  Enabling the script debugger tab before enabling the Resources tab prevents the crash!
Comment 32 Jessie Berlin 2010-09-14 07:13:20 PDT
> Hi Jessie,
> 
> Thanks for looking into this - how curious that you can't replicate it?
> 
> I'm on 10.6.4, using r67358 (Safari 5.0.2 installed as the "base" application) from the nightly downloads.
> 
> I open the web inspector either via the menu or via the keyboard, and enable the resources pane either via the button within the pane or in the bottom bar - both produce the same crashes.
> 
> I don't have to have any other windows open - a freshly launched WebKit will show the problems; I normally have all panels disabled unless I enable them for a particular site.
> 
> Here's a screen recording of a quick couple of examples - ~7MB silent .mov: http://beent.je/webkitcrashes.mov

Even if I follow those exact steps (docking my web inspector which I usually keep as its own separate window, disabling the scripts panel and all other panels, enabling resources by using the button on the main page instead of at the bottom of the screen) I can't reproduce the crash in r67358. This is mildly maddening because you clearly have video evidence of the crash and it is clearly on r67358.

Can anyone else reproduce this?
Comment 33 Rowan Beentje 2010-09-14 09:28:50 PDT
A little further information after testing, prompted by IRC:

1) Enabling the script debugger tab before closing the window does not prevent the crash; this is a red herring.  But:

2) Hiding the resources view before closing the window *does* prevent the crash.  That is: either switching to another inspector view (active or disabled), or closing the inspector pane when still showing resources, prevents the crash on window close.  This doesn't appear to be related to input focus, as ensuring focus is out of the inspector doesn't affect the behaviour observed above.
Comment 34 Rowan Beentje 2010-09-21 05:58:46 PDT
Still happening as of r67838 I'm afraid…

One more data point: crashes only occur if the Web Inspector is docked to a window.  When in its own window, no crashes.
Comment 35 Jessie Berlin 2010-09-21 06:33:28 PDT
(In reply to comment #34)
> Still happening as of r67838 I'm afraid…
> 
> One more data point: crashes only occur if the Web Inspector is docked to a window.  When in its own window, no crashes.

I still cannot reproduce this crash, but looking at the code the issue is probably that in WebInspectorClient.mm's WebInspectorWindowController::close, the it is dereferencing _inspectedWebView to ask if it _isClosed.

This is probably caused by the same issue that was causing this crash before: the Inspected WebView has gone away before this method is called and therefore dereferencing it here to find out if it is closed causes a crash.

The reason we now do not see that crash more often is we have guarded that dereference of the _inspectedWebView in WebInspectorWindowController::destroyInspectorView with a check. We do not access the _inspectedWebView if we aren't told we need to notify the inspector controller to disconnect the front end.

It might be enough to fix it to make the if ([_inspectedWebView _isClosed]) in WebInspectorWindowController::close a if (_inspectedWebView && [_inspectedWebView _isClosed]).

Alternatively, if we know that not needing to notify the inspector controller to disconnect the frontend means that the inspector controller has or will take care of closing the window itself (even if attached), we should not call [self close] in WebInspectorWindowController if we are told that we don't need to notify the inspector controller. I am just not sure at this point that we can definitively say that.
Comment 36 Jessie Berlin 2010-09-21 06:34:13 PDT
(In reply to comment #35)
> (In reply to comment #34)
> > Still happening as of r67838 I'm afraid…
> > 
> > One more data point: crashes only occur if the Web Inspector is docked to a window.  When in its own window, no crashes.
> 
> I still cannot reproduce this crash, but looking at the code the issue is probably that in WebInspectorClient.mm's WebInspectorWindowController::close, the it is dereferencing _inspectedWebView to ask if it _isClosed.
> 
> This is probably caused by the same issue that was causing this crash before: the Inspected WebView has gone away before this method is called and therefore dereferencing it here to find out if it is closed causes a crash.
> 
> The reason we now do not see that crash more often is we have guarded that dereference of the _inspectedWebView in WebInspectorWindowController::destroyInspectorView with a check. We do not access the _inspectedWebView if we aren't told we need to notify the inspector controller to disconnect the front end.
> 
> It might be enough to fix it to make the if ([_inspectedWebView _isClosed]) in WebInspectorWindowController::close a if (_inspectedWebView && [_inspectedWebView _isClosed]).
> 
> Alternatively, if we know that not needing to notify the inspector controller to disconnect the frontend means that the inspector controller has or will take care of closing the window itself (even if attached), we should not call [self close] in WebInspectorWindowController if we are told that we don't need to notify the inspector controller. I am just not sure at this point that we can definitively say that.

I am also a little hesitant to put up a patch with either of these approaches since I cannot reproduce the issue and any fix would be speculative.
Comment 37 Rowan Beentje 2010-09-21 06:53:34 PDT
I'm happy to apply any patches posted here to a local copy and see if it works, although the next couple of days look rather busy!
Comment 38 Jessie Berlin 2010-09-21 07:22:22 PDT
(In reply to comment #36)
> (In reply to comment #35)
> > (In reply to comment #34)
> > > Still happening as of r67838 I'm afraid…
> > > 
> > > One more data point: crashes only occur if the Web Inspector is docked to a window.  When in its own window, no crashes.
> > 
> > I still cannot reproduce this crash, but looking at the code the issue is probably that in WebInspectorClient.mm's WebInspectorWindowController::close, the it is dereferencing _inspectedWebView to ask if it _isClosed.
> > 
> > This is probably caused by the same issue that was causing this crash before: the Inspected WebView has gone away before this method is called and therefore dereferencing it here to find out if it is closed causes a crash.
> > 
> > The reason we now do not see that crash more often is we have guarded that dereference of the _inspectedWebView in WebInspectorWindowController::destroyInspectorView with a check. We do not access the _inspectedWebView if we aren't told we need to notify the inspector controller to disconnect the front end.
> > 
> > It might be enough to fix it to make the if ([_inspectedWebView _isClosed]) in WebInspectorWindowController::close a if (_inspectedWebView && [_inspectedWebView _isClosed]).

Scratch this approach, I forgot that it will still be dependent on the race condition as described earlier.

> > 
> > Alternatively, if we know that not needing to notify the inspector controller to disconnect the frontend means that the inspector controller has or will take care of closing the window itself (even if attached), we should not call [self close] in WebInspectorWindowController if we are told that we don't need to notify the inspector controller. I am just not sure at this point that we can definitively say that.
> 
> I am also a little hesitant to put up a patch with either of these approaches since I cannot reproduce the issue and any fix would be speculative.
Comment 39 Joseph Pecoraro 2010-09-22 09:53:13 PDT
*** Bug 46240 has been marked as a duplicate of this bug. ***
Comment 40 Rowan Beentje 2010-10-05 06:07:22 PDT
I'm still running into this crash several times a day on r69082 - as a web dev I'm always opening and closing the resources pane, and inevitably I close the window before remember to detach the inspector beforehand…

Is there anything I can do to help resolve this?

I can see in the source that the problem could only possibly occur in attached inspectors; in WebInspectorClient.mm, windowShouldClose: calls destroyInspectorView:, which if it's attached to a window calls [self close].  There, if _attachedToInspectedWebView, it checks whether the _inspectedWebView _isClosed - which is where the crash occurs, as _inspectedWebView is no longer retained by WebInspectorWindowController.

But not having experience with the source, I have no idea where to go from here.
Comment 41 Jessie Berlin 2010-10-05 08:44:52 PDT
(In reply to comment #40)
> I'm still running into this crash several times a day on r69082 - as a web dev I'm always opening and closing the resources pane, and inevitably I close the window before remember to detach the inspector beforehand…
> 
> Is there anything I can do to help resolve this?
> 
> I can see in the source that the problem could only possibly occur in attached inspectors; in WebInspectorClient.mm, windowShouldClose: calls destroyInspectorView:, which if it's attached to a window calls [self close].  There, if _attachedToInspectedWebView, it checks whether the _inspectedWebView _isClosed - which is where the crash occurs, as _inspectedWebView is no longer retained by WebInspectorWindowController.
> 
> But not having experience with the source, I have no idea where to go from here.

I have been looking at this, and I have actually been able to reproduce it on a different machine than the one I was trying on before. However, neither of the fixes I proposed above solve the problem.

If you need an immediate fix because you find it impossible to live on it as it is, you can make the if clause in destroyInspectorView be if (_attachedToInspectedWebView && notifyInspectorController) and then move the last call to [_webView close] into the if (notifyInspectorController) statement. That will cause it not crash, but it also will cause the web view to be leaked.
Comment 42 Alexander Pavlov (apavlov) 2010-11-10 03:16:31 PST
*** Bug 47351 has been marked as a duplicate of this bug. ***
Comment 43 Alexey Proskuryakov 2010-12-10 21:48:34 PST
*** Bug 50837 has been marked as a duplicate of this bug. ***
Comment 44 Alexey Proskuryakov 2010-12-10 21:50:14 PST
Is anyone still working on this bug?
Comment 45 Rowan Beentje 2010-12-15 10:37:05 PST
Doesn't look like it ;)

I'm still able to reproduce this issue on demand if required for testing, and am willing to make changes to a local copy of the source to verify patches if you'd like me to try debugging anything.  Just let me know!
Comment 46 Alexey Proskuryakov 2010-12-15 14:47:05 PST
*** Bug 51080 has been marked as a duplicate of this bug. ***
Comment 47 Alexey Proskuryakov 2010-12-21 11:45:32 PST
*** Bug 51400 has been marked as a duplicate of this bug. ***
Comment 48 Alexey Proskuryakov 2011-01-16 22:27:10 PST
*** Bug 52533 has been marked as a duplicate of this bug. ***
Comment 49 Alexey Proskuryakov 2011-01-16 22:27:53 PST
<rdar://problem/8872093>
Comment 50 Daniel Bates 2011-03-18 19:32:29 PDT
*** Bug 55865 has been marked as a duplicate of this bug. ***
Comment 51 Timothy Hatcher 2011-04-01 13:47:55 PDT
<rdar://problem/8415399>
Comment 52 Timothy Hatcher 2011-04-01 14:00:49 PDT
I can't reproduce this on TOT.
Comment 53 Kevin M. Dean 2011-04-01 14:08:24 PDT
(In reply to comment #52)
> I can't reproduce this on TOT.

After a couple of tries I can still trigger a crash although now with a different log than before. I was still getting the objc_msgSend_rtp crash as recent as yesterday.


Process:         Safari [3341]
Path:            /Applications/WebKit.app/Contents/MacOS/WebKit
Identifier:      org.webkit.nightly.WebKit
Version:         r82674 (82674)
Code Type:       PPC (Native)
Parent Process:  launchd [126]

Date/Time:       2011-04-01 17:05:07.072 -0400
OS Version:      Mac OS X 10.5.8 (9L30)
Report Version:  6
Anonymous UUID:  F41C1802-6457-4B49-A738-107FEBA3B7F7

Exception Type:  EXC_BAD_ACCESS (SIGBUS)
Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000030
Crashed Thread:  0

Thread 0 Crashed:
0   com.apple.WebCore             	0x01bef7d8 WebCore::InspectorBackendDispatcher::DOM_hideDOMNodeHighlight(long, WebCore::InspectorObject*) + 56
1   com.apple.WebCore             	0x01edd9ec WebCore::jsInspectorFrontendHostPrototypeFunctionSendMessageToBackend(JSC::ExecState*) + 460
2   com.apple.JavaScriptCore      	0x007cabd0 JSC::Interpreter::privateExecute(JSC::Interpreter::ExecutionFlag, JSC::RegisterFile*, JSC::ExecState*) + 57824
3   com.apple.JavaScriptCore      	0x007d2ed8 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 1720
4   com.apple.JavaScriptCore      	0x00778fd4 JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 84
5   com.apple.WebCore             	0x01dba5dc WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext*, WebCore::Event*) + 2076
6   com.apple.WebCore             	0x01a3d1f8 WebCore::EventTarget::fireEventListeners(WebCore::Event*, WebCore::EventTargetData*, WTF::Vector<WebCore::RegisteredEventListener, 1ul>&) + 376
7   com.apple.WebCore             	0x01a3dc94 WebCore::EventTarget::fireEventListeners(WebCore::Event*) + 116
8   com.apple.WebCore             	0x01a25c28 WebCore::EventContext::handleLocalEvents(WebCore::Event*) const + 136
9   com.apple.WebCore             	0x01a2667c WebCore::EventDispatcher::dispatchEvent(WTF::PassRefPtr<WebCore::Event>) + 972
10  com.apple.WebCore             	0x01a27a10 WebCore::EventDispatcher::dispatchMouseEvent(WebCore::Node*, WebCore::PlatformMouseEvent const&, WTF::AtomicString const&, int, WebCore::Node*) + 480
11  com.apple.WebCore             	0x01a322a4 WebCore::EventHandler::updateMouseEventTargetNode(WebCore::Node*, WebCore::PlatformMouseEvent const&, bool) + 1636
12  com.apple.WebCore             	0x01a3256c WebCore::EventHandler::dispatchMouseEvent(WTF::AtomicString const&, WebCore::Node*, bool, int, WebCore::PlatformMouseEvent const&, bool) + 92
13  com.apple.WebCore             	0x01a34208 WebCore::EventHandler::handleMouseMoveEvent(WebCore::PlatformMouseEvent const&, WebCore::HitTestResult*) + 1512
14  com.apple.WebCore             	0x01a34370 WebCore::EventHandler::mouseMoved(WebCore::PlatformMouseEvent const&) + 64
15  com.apple.WebCore             	0x01a38540 WebCore::EventHandler::mouseMoved(NSEvent*) + 320
16  com.apple.WebKit              	0x009e6f90 -[WebHTMLView(WebPrivate) _updateMouseoverWithEvent:] + 704
17  com.apple.CoreFoundation      	0x91f9e818 CFRunLoopRunSpecific + 2968
18  com.apple.HIToolbox           	0x9034db14 RunCurrentEventLoopInMode + 264
19  com.apple.HIToolbox           	0x9034d8a0 ReceiveNextEventCommon + 260
20  com.apple.HIToolbox           	0x9034d778 BlockUntilNextEventMatchingListInMode + 84
21  com.apple.AppKit              	0x90977244 _DPSNextEvent + 596
22  com.apple.AppKit              	0x90976bfc -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 112
23  com.apple.Safari              	0x00019a10 0x1000 + 100880
24  com.apple.AppKit              	0x9097089c -[NSApplication run] + 744
25  com.apple.AppKit              	0x90941298 NSApplicationMain + 440
26  com.apple.Safari              	0x0000c058 0x1000 + 45144
Comment 54 Rowan Beentje 2011-04-01 14:23:37 PDT
The mixed news is, I can no longer reproduce this bug 100% of the time.  The bad news is that I do still get this exact crash in r82674; to do so I still have to use the attached inspector view:


Process:         Safari [94158]
Path:            /Applications/Safari.app/Contents/MacOS/Safari
Identifier:      org.webkit.nightly.WebKit
Version:         r82674 (82674)
Code Type:       X86-64 (Native)
Parent Process:  launchd [188]

Date/Time:       2011-04-01 22:18:41.820 +0100
OS Version:      Mac OS X 10.6.6 (10J567)
Report Version:  6

Interval Since Last Report:          307747 sec
Crashes Since Last Report:           4
Per-App Interval Since Last Report:  419 sec
Per-App Crashes Since Last Report:   1
Anonymous UUID:                      C9B91413-F1DD-4E5C-970C-BE28C7C58029

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x000000000000001e
Crashed Thread:  0  Dispatch queue: com.apple.main-thread

Application Specific Information:
objc_msgSend() selector name: _isClosed


Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   libobjc.A.dylib               	0x00007fff8082011c objc_msgSend + 40
1   com.apple.WebKit              	0x0000000100a7dd04 -[WebInspectorWindowController close] + 84
2   com.apple.WebKit              	0x0000000100a7e2ff -[WebInspectorWindowController destroyInspectorView:] + 127
3   com.apple.WebCore             	0x00000001011a3ecb WebCore::InspectorFrontendHost::disconnectFromBackend() + 27
4   com.apple.WebCore             	0x000000010138fd4d WebCore::jsInspectorFrontendHostPrototypeFunctionDisconnectFromBackend(JSC::ExecState*) + 93
5   ???                           	0x000049314e4001e8 0 + 80476115042792
6   com.apple.JavaScriptCore      	0x00000001007d9bcf JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 847
7   ???                           	0x000000011c6eaa00 0 + 4771981824
8   ???                           	0x000000012345af20 0 + 4886736672
9   com.apple.JavaScriptCore      	0x000000010083b9a0 JSC::JSFunction::~JSFunction() + 0
10  ???                           	0x001522c0058d48fd 0 + 5949182633134333
Comment 55 Kevin M. Dean 2011-04-01 14:39:31 PDT
(In reply to comment #53)
> (In reply to comment #52)
> > I can't reproduce this on TOT.
> 
> After a couple of tries I can still trigger a crash although now with a different log than before. I was still getting the objc_msgSend_rtp crash as recent as yesterday.

Subsequent crashes since my last comment are back to the usual objc_msgSend_rtp.
Comment 56 Timothy Hatcher 2011-04-01 14:50:44 PDT
Thanks, being attached is the key to reproducing it.

Kevin, please file a new bug about the WebCore::InspectorBackendDispatcher::DOM_hideDOMNodeHighlight crash.
Comment 57 Chris Petersen 2011-04-01 15:33:53 PDT
I can confirm this crash is still occurring with Webkit NB r82674 on 10.6.7. I can reproduce on my first attempt:

1) Launch r82674 
2) Enable Develop menu
3) Select Show Web Inspector ( Inspector is attached to window )
4) Close browser window which contains the web inspector
5) Crash occurs in a few seconds after closing window

Process:         Safari [208]
Path:            /Applications/Safari.app/Contents/MacOS/Safari
Identifier:      org.webkit.nightly.WebKit
Version:         r82674 (82674)
Code Type:       X86-64 (Native)
Parent Process:  launchd [110]

Date/Time:       2011-04-01 15:22:02.726 -0700
OS Version:      Mac OS X 10.6.7 (10J869)
Report Version:  6

Interval Since Last Report:          98812 sec
Crashes Since Last Report:           3
Per-App Interval Since Last Report:  132 sec
Per-App Crashes Since Last Report:   1
Anonymous UUID:                      B0A7A7C4-B6FC-43DE-8EBE-1ACD3F221BD4

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000013
Crashed Thread:  0  Dispatch queue: com.apple.main-thread

Application Specific Information:
objc_msgSend() selector name: _isClosed


Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   libobjc.A.dylib               	0x00007fff85f1a11c objc_msgSend + 40
1   com.apple.WebKit              	0x0000000100a7dd04 -[WebInspectorWindowController close] + 84
2   com.apple.WebKit              	0x0000000100a7e2ff -[WebInspectorWindowController destroyInspectorView:] + 127
3   com.apple.WebCore             	0x00000001011a3ecb WebCore::InspectorFrontendHost::disconnectFromBackend() + 27
4   com.apple.WebCore             	0x000000010138fd4d WebCore::jsInspectorFrontendHostPrototypeFunctionDisconnectFromBackend(JSC::ExecState*) + 93
5   ???                           	0x00004e899d2001e8 0 + 86352953606632
6   com.apple.JavaScriptCore      	0x00000001007d9bcf JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 847
7   ???                           	0x0000000117fd7c00 0 + 4697455616
8   ???                           	0x0000000117de8ec8 0 + 4695428808
9   com.apple.JavaScriptCore      	0x000000010083b9a0 JSC::JSFunction::~JSFunction() + 0
10  ???                           	0x001522c0058d48fd 0 + 5949182633134333

Thread 1:  Dispatch queue: com.apple.libdispatch-manager
0   libSystem.B.dylib             	0x00007fff856b912a kevent + 10
1   libSystem.B.dylib             	0x00007fff856baffd _dispatch_mgr_invoke + 154
2   libSystem.B.dylib             	0x00007fff856bacd4 _dispatch_queue_invoke + 185
3   libSystem.B.dylib             	0x00007fff856ba7fe _dispatch_worker_thread2 + 252
4   libSystem.B.dylib             	0x00007fff856ba128 _pthread_wqthread + 353
5   libSystem.B.dylib             	0x00007fff856b9fc5 start_wqthread + 13

Thread 2:  WebCore: IconDatabase
0   libSystem.B.dylib             	0x00007fff856daf8a __semwait_signal + 10
1   libSystem.B.dylib             	0x00007fff856deda1 _pthread_cond_wait + 1286
2   com.apple.WebCore             	0x0000000101104d99 WebCore::IconDatabase::syncThreadMainLoop() + 265
3   com.apple.WebCore             	0x0000000101104ed1 WebCore::IconDatabase::iconDatabaseSyncThread() + 177
4   libSystem.B.dylib             	0x00007fff856d94f6 _pthread_start + 331
5   libSystem.B.dylib             	0x00007fff856d93a9 thread_start + 13

Thread 3:  Safari: CertRevocationChecker
0   libSystem.B.dylib             	0x00007fff856a029a mach_msg_trap + 10
1   libSystem.B.dylib             	0x00007fff856a090d mach_msg + 59
2   com.apple.CoreFoundation      	0x00007fff82640932 __CFRunLoopRun + 1698
3   com.apple.CoreFoundation      	0x00007fff8263fdbf CFRunLoopRunSpecific + 575
4   com.apple.Safari              	0x000000010002f629 0x100000000 + 194089
5   com.apple.Safari              	0x000000010002f5b9 0x100000000 + 193977
6   libSystem.B.dylib             	0x00007fff856d94f6 _pthread_start + 331
7   libSystem.B.dylib             	0x00007fff856d93a9 thread_start + 13

Thread 4:  WebCore: LocalStorage
0   libSystem.B.dylib             	0x00007fff856daf8a __semwait_signal + 10
1   libSystem.B.dylib             	0x00007fff856deda1 _pthread_cond_wait + 1286
2   com.apple.JavaScriptCore      	0x00000001008eba00 WTF::ThreadCondition::timedWait(WTF::Mutex&, double) + 64
3   com.apple.WebCore             	0x00000001015bc481 WebCore::LocalStorageThread::threadEntryPoint() + 177
4   libSystem.B.dylib             	0x00007fff856d94f6 _pthread_start + 331
5   libSystem.B.dylib             	0x00007fff856d93a9 thread_start + 13
Comment 58 Brian Weinstein 2011-04-26 10:53:59 PDT
Is there any update on this? It is still a reproducible crash in closing the docked inspector, which is pretty bad.
Comment 59 Yury Semikhatsky 2011-04-27 07:59:26 PDT
Created attachment 91282 [details]
Patch
Comment 60 Yury Semikhatsky 2011-04-27 08:10:48 PDT
Committed r85051: <http://trac.webkit.org/changeset/85051>
Comment 61 Chris Petersen 2011-04-27 09:05:50 PDT
Great. Pulled TOT webkit r85053 and building it now to verify fix.
Comment 62 Chris Petersen 2011-04-27 11:01:58 PDT
With r85053, I no longer encounter this crash based on my steps in comment #57. Verified fixed in r85053.
Comment 63 Chris Petersen 2011-04-27 13:34:17 PDT
I'm closing since the issue has been verified and fixed in r85053
Comment 64 Yury Semikhatsky 2011-04-28 03:29:17 PDT
(In reply to comment #63)
> I'm closing since the issue has been verified and fixed in r85053

Thanks for verifying this!
Comment 65 Timothy Hatcher 2011-04-28 10:56:00 PDT
Comment on attachment 91282 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=91282&action=review

> Source/WebKit/mac/WebCoreSupport/WebInspectorClient.mm:-524
> -

This code is absolutely used. It keeps the Develop menu items in Safari working when the Inspector window is front. Please add this code back and don't delete something when you don't know what it does.

Please add it back.
Comment 66 Brian Weinstein 2011-04-28 15:18:18 PDT
(In reply to comment #65)
> (From update of attachment 91282 [details])
> View in context: https://bugs.webkit.org/attachment.cgi?id=91282&action=review
> 
> > Source/WebKit/mac/WebCoreSupport/WebInspectorClient.mm:-524
> > -
> 
> This code is absolutely used. It keeps the Develop menu items in Safari working when the Inspector window is front. Please add this code back and don't delete something when you don't know what it does.
> 
> Please add it back.

Filed https://bugs.webkit.org/show_bug.cgi?id=59747 about the removed code.
Comment 67 Pavel Feldman 2011-04-28 22:08:01 PDT
(In reply to comment #65)
> (From update of attachment 91282 [details])
> View in context: https://bugs.webkit.org/attachment.cgi?id=91282&action=review
> 
> > Source/WebKit/mac/WebCoreSupport/WebInspectorClient.mm:-524
> > -
> 
> This code is absolutely used. It keeps the Develop menu items in Safari working when the Inspector window is front. Please add this code back and don't delete something when you don't know what it does.
> 
> Please add it back.

Yeah, sorry about that. Maybe it is the case when a little comment in the WebKit code might come handy.