Bug 166944

#6  DOM::ElementImpl::getAttributeImpl (this=0x0, id=96, nsAware=false, 
    qName=0x0)
    at /home/maksim/kde41/src/kdelibs/khtml/xml/dom_elementimpl.cpp:389
#7  0xb2a0945b in DOM::ElementImpl::getAttribute (this=0x0, id=96, 
    nsAware=<value optimized out>, qName=@0xbfb25538)
    at /home/maksim/kde41/src/kdelibs/khtml/xml/dom_elementimpl.cpp:407
#8  0xb2baa7b4 in KJS::HTMLDocument::getValueProperty (this=0xb0c13020, 
    exec=0xbfb25a80, token=24)
    at /home/maksim/kde41/src/kdelibs/khtml/ecma/kjs_html.cpp:398
#9  0xb2bbbd45 in KJS::staticValueGetter<KJS::HTMLDocument> (exec=0xbfb25a80, 
    slot=@0xbfb25610) at /home/maksim/kde41/src/kdelibs/kjs/lookup.h:147
#10 0xb268fba2 in KJS::PropertySlot::getValue (this=0xbfb25610, 
    exec=0xbfb25a80, originalObject=0xb0c13020, propertyName=@0x8871c34)
    at /home/maksim/kde41/src/kdelibs/kjs/property_slot.h:46
#11 0xb268e4e8 in KJS::JSObject::get (this=0xb0c13020, exec=0xbfb25a80, 
    propertyName=@0x8871c34)
    at /home/maksim/kde41/src/kdelibs/kjs/object.cpp:166
#12 0xb26a92c7 in KJS::Machine::runBlock (exec=0xbfb25a80, 
    codeBlock=@0x89409e4, parentExec=0xbfb26064) at codes.def:680
#13 0xb268a349 in KJS::FunctionImp::callAsFunction (this=0xb0c1a620, 
    exec=0xbfb26064, thisObj=0xb0c1ab00, args=@0xbfb25f88)
    at /home/maksim/kde41/src/kdelibs/kjs/function.cpp:143
#14 0xb268eb8d in KJS::JSObject::call (this=0xb0c1a620, exec=0xbfb26064, 
    thisObj=0xb0c1ab00, args=@0xbfb25f88)
    at /home/maksim/kde41/src/kdelibs/kjs/object.cpp:99
#15 0xb2689f6a in KJS::FunctionImp::construct (this=0xb0c1a620, 
    exec=0xbfb26064, args=@0xbfb25f88)
    at /home/maksim/kde41/src/kdelibs/kjs/function.cpp:300
#16 0xb26ad4c5 in KJS::Machine::runBlock (exec=0xbfb26064, 
    codeBlock=@0x88a4ddc, parentExec=0x0) at codes.def:1227
#17 0xb26527ef in KJS::FunctionBodyNode::execute (this=0x88a4d88, 
    exec=0xbfb26064) at /home/maksim/kde41/src/kdelibs/kjs/nodes.cpp:927
#18 0xb26916ce in KJS::Interpreter::evaluate (this=0x8809460, 
    sourceURL=@0xbfb26224, startingLineNumber=1, code=0x88a3008, 
    codeLength=3003, thisV=0xb0c20040)
    at /home/maksim/kde41/src/kdelibs/kjs/interpreter.cpp:557
#19 0xb269176e in KJS::Interpreter::evaluate (this=0x8809460, 
    sourceURL=@0xbfb26224, startingLineNumber=1, code=@0xbfb26228, 
    thisV=0xb0c20040)
    at /home/maksim/kde41/src/kdelibs/kjs/interpreter.cpp:499
#20 0xb2bd5beb in KJS::KJSProxyImpl::evaluate (this=0x88221c8, filename=
      {static null = {<No data fields>}, static shared_null = {ref = {_q_value = 18920}, alloc = 0, size = 0, data = 0xb727795a, clean = 0, simpletext = 0, righttoleft = 0, asciiCache = 0, capacity = 0, reserved = 0, array = {0}}, static shared_empty = {ref = {_q_value = 209}, alloc = 0, size = 0, data = 0xb727796e, clean = 0, simpletext = 0, righttoleft = 0, asciiCache = 0, capacity = 0, reserved = 0, array = {0}}, d = 0xbfb262b8, static codecForCStrings = 0x0}, 
    baseLine=1, str=@0xbfb26410, n=@0xbfb2630c, completion=0xbfb26298)
    at /home/maksim/kde41/src/kdelibs/khtml/ecma/kjs_proxy.cpp:157
#21 0xb29a203b in KHTMLPart::executeScript (this=0x8747e68, 
    filename=@0xbfb26328, baseLine=1, n=@0xbfb2630c, script=@0xbfb26410)
    at /home/maksim/kde41/src/kdelibs/khtml/khtml_part.cpp:1207
#22 0xb2a37f94 in khtml::HTMLTokenizer::scriptExecution (this=0x87c4510, 
    str=@0xbfb26410, scriptURL=@0xbfb26414, baseLine=0)
    at /home/maksim/kde41/src/kdelibs/khtml/html/htmltokenizer.cpp:475
#23 0xb2a381c2 in khtml::HTMLTokenizer::notifyFinished (this=0x87c4510)
    at /home/maksim/kde41/src/kdelibs/khtml/html/htmltokenizer.cpp:2097
#24 0xb2b56260 in khtml::CachedScript::checkNotify (this=0x8709c80)
    at /home/maksim/kde41/src/kdelibs/khtml/misc/loader.cpp:388

SVN commit 834328 by orlovich:

Don't assume the body exists here; it doesn't have to in early inline scripts.
Fixes crash on https://metanet.ucm.es 
CCBUG:166944


 M  +5 -5      kjs_html.cpp  


WebSVN link: http://websvn.kde.org/?view=rev&revision=834328

SVN commit 834337 by orlovich:

Merged revision 834328:
Don't assume the body exists here; it doesn't have to in early inline scripts.
Fixes crash on https://metanet.ucm.es 
CCBUG:166944

 M  +5 -5      kjs_html.cpp  


WebSVN link: http://websvn.kde.org/?view=rev&revision=834337

SVN commit 834344 by orlovich:

Regression test for #166944
BUG:166944


 A             baseline/dom/body-props.crash.html-dom  
 AM            baseline/dom/body-props.crash.html-dump.png  
 A             baseline/dom/body-props.crash.html-render  
 A             tests/dom/body-props.crash.html  


WebSVN link: http://websvn.kde.org/?view=rev&revision=834344