Bug 323039

When visiting http://www.airliners.net/photo/Russia---Air/Tupolev-Tu-95MS/2293018/L/ with the WebKit viewer, Konqueror crashes.

The crash does not happen with KHTML.

Reproducible: Always

Steps to Reproduce:
1. Open Konqueror
2. Make sure default HTML viewer is set to WebKit
3. Visit http://www.airliners.net/photo/Russia---Air/Tupolev-Tu-95MS/2293018/L/
Actual Results:  
Konqueror crashes with a segmentation fault

Expected Results:  
Konqueror should display the site and not crash.

Backtrack from KCrash handler:


Application: Konqueror (kdeinit4), signal: Segmentation fault
Using host libthread_db library "/lib64/libthread_db.so.1".
[Current thread is 1 (Thread 0x7f468a0b9780 (LWP 8175))]

Thread 3 (Thread 0x7f4669694700 (LWP 8178)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
#1  0x00007f467cd96cdd in WTF::TCMalloc_PageHeap::scavengerThread (this=0x7f467d759200 <WTF::pageheap_memory>) at wtf/FastMalloc.cpp:2495
#2  0x00007f467cd96de9 in WTF::TCMalloc_PageHeap::runScavengerThread (context=<optimized out>) at wtf/FastMalloc.cpp:1618
#3  0x00007f4688964ec6 in start_thread (arg=0x7f4669694700) at pthread_create.c:305
#4  0x00007f468770c86d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 2 (Thread 0x7f4668d93700 (LWP 8179)):
#0  0x00007f4687703bd3 in __GI___poll (fds=<optimized out>, nfds=<optimized out>, timeout=<optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87
#1  0x00007f46846409d6 in g_main_context_poll (n_fds=1, fds=0x7f46640028f0, timeout=-1, context=0x7f46640008c0, priority=<optimized out>) at gmain.c:3440
#2  g_main_context_iterate (dispatch=1, block=<optimized out>, context=0x7f46640008c0, self=<optimized out>) at gmain.c:3141
#3  g_main_context_iterate (context=0x7f46640008c0, block=<optimized out>, dispatch=1, self=<optimized out>) at gmain.c:3083
#4  0x00007f4684640b04 in g_main_context_iteration (context=0x7f46640008c0, may_block=1) at gmain.c:3207
#5  0x00007f4688d251a6 in QEventDispatcherGlib::processEvents (this=0x7f4664002920, flags=...) at kernel/qeventdispatcher_glib.cpp:426
#6  0x00007f4688cf5bcf in QEventLoop::processEvents (this=this@entry=0x7f4668d92e00, flags=...) at kernel/qeventloop.cpp:149
#7  0x00007f4688cf5e58 in QEventLoop::exec (this=0x7f4668d92e00, flags=...) at kernel/qeventloop.cpp:204
#8  0x00007f4688bf8380 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:542
#9  0x00007f4688bfab0c in QThreadPrivate::start (arg=0x48f7830) at thread/qthread_unix.cpp:338
#10 0x00007f4688964ec6 in start_thread (arg=0x7f4668d93700) at pthread_create.c:305
#11 0x00007f468770c86d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115

Thread 1 (Thread 0x7f468a0b9780 (LWP 8175)):
[KCrash Handler]
#6  0x0000000000000000 in ?? ()
#7  0x00007f467c9ad6dc in WebCore::requiresLineBox (it=..., lineInfo=...) at rendering/RenderBlockLineLayout.cpp:1485
#8  0x00007f467c9b1e99 in WebCore::RenderBlock::LineBreaker::skipLeadingWhitespace (this=this@entry=0x7fff7c3b5fc0, resolver=..., lineInfo=..., lastFloatFromPreviousLine=lastFloatFromPreviousLine@entry=0x0, width=...) at rendering/RenderBlockLineLayout.cpp:1528
#9  0x00007f467c9b3eed in WebCore::RenderBlock::LineBreaker::nextLineBreak (this=this@entry=0x7fff7c3b5fc0, resolver=..., lineInfo=..., lineBreakIteratorInfo=..., lastFloatFromPreviousLine=lastFloatFromPreviousLine@entry=0x0) at rendering/RenderBlockLineLayout.cpp:1826
#10 0x00007f467c9b98c5 in WebCore::RenderBlock::layoutRunsAndFloats (this=this@entry=0x7f466ce3f958, fullLayout=fullLayout@entry=false, hasInlineChild=<optimized out>, floats=..., repaintLogicalTop=@0x7fff7c3b62f4: 0, repaintLogicalBottom=@0x7fff7c3b62f8: 0) at rendering/RenderBlockLineLayout.cpp:915
#11 0x00007f467c9bb128 in WebCore::RenderBlock::layoutInlineChildren (this=0x7f466ce3f958, relayoutChildren=false, repaintLogicalTop=@0x7fff7c3b62f4: 0, repaintLogicalBottom=@0x7fff7c3b62f8: 0) at rendering/RenderBlockLineLayout.cpp:1164
#12 0x00007f467c9ab1d6 in WebCore::RenderBlock::layoutBlock (this=0x7f466ce3f958, relayoutChildren=false, pageLogicalHeight=0) at rendering/RenderBlock.cpp:1260
#13 0x00007f467c98f3fd in WebCore::RenderBlock::layout (this=0x7f466ce3f958) at rendering/RenderBlock.cpp:1158
#14 0x00007f467c9a6ff9 in WebCore::RenderBlock::layoutBlockChild (this=this@entry=0x7f466ad28da8, child=0x7f466ce3f958, marginInfo=..., previousFloatLogicalBottom=@0x7fff7c3b6468: 192, maxFloatLogicalBottom=@0x7fff7c3b651c: 189) at rendering/RenderBlock.cpp:2000
#15 0x00007f467c9a791b in WebCore::RenderBlock::layoutBlockChildren (this=this@entry=0x7f466ad28da8, relayoutChildren=relayoutChildren@entry=false, maxFloatLogicalBottom=@0x7fff7c3b651c: 189) at rendering/RenderBlock.cpp:1938
#16 0x00007f467c9aab70 in WebCore::RenderBlock::layoutBlock (this=0x7f466ad28da8, relayoutChildren=false, pageLogicalHeight=0) at rendering/RenderBlock.cpp:1262
#17 0x00007f467c98f3fd in WebCore::RenderBlock::layout (this=0x7f466ad28da8) at rendering/RenderBlock.cpp:1158
#18 0x00007f467c9a6ff9 in WebCore::RenderBlock::layoutBlockChild (this=this@entry=0x7f466ad28890, child=0x7f466ad28da8, marginInfo=..., previousFloatLogicalBottom=@0x7fff7c3b6688: 0, maxFloatLogicalBottom=@0x7fff7c3b673c: 0) at rendering/RenderBlock.cpp:2000
#19 0x00007f467c9a791b in WebCore::RenderBlock::layoutBlockChildren (this=this@entry=0x7f466ad28890, relayoutChildren=relayoutChildren@entry=false, maxFloatLogicalBottom=@0x7fff7c3b673c: 0) at rendering/RenderBlock.cpp:1938
#20 0x00007f467c9aab70 in WebCore::RenderBlock::layoutBlock (this=0x7f466ad28890, relayoutChildren=false, pageLogicalHeight=0) at rendering/RenderBlock.cpp:1262
#21 0x00007f467c98f3fd in WebCore::RenderBlock::layout (this=0x7f466ad28890) at rendering/RenderBlock.cpp:1158
#22 0x00007f467c9a6ff9 in WebCore::RenderBlock::layoutBlockChild (this=this@entry=0x7f466ad28698, child=0x7f466ad28890, marginInfo=..., previousFloatLogicalBottom=@0x7fff7c3b68a8: 0, maxFloatLogicalBottom=@0x7fff7c3b695c: 0) at rendering/RenderBlock.cpp:2000
#23 0x00007f467c9a791b in WebCore::RenderBlock::layoutBlockChildren (this=this@entry=0x7f466ad28698, relayoutChildren=relayoutChildren@entry=false, maxFloatLogicalBottom=@0x7fff7c3b695c: 0) at rendering/RenderBlock.cpp:1938
#24 0x00007f467c9aab70 in WebCore::RenderBlock::layoutBlock (this=0x7f466ad28698, relayoutChildren=false, pageLogicalHeight=0) at rendering/RenderBlock.cpp:1262
#25 0x00007f467c98f3fd in WebCore::RenderBlock::layout (this=0x7f466ad28698) at rendering/RenderBlock.cpp:1158
#26 0x00007f467c9a6ff9 in WebCore::RenderBlock::layoutBlockChild (this=this@entry=0x7f466ad28420, child=0x7f466ad28698, marginInfo=..., previousFloatLogicalBottom=@0x7fff7c3b6ac8: 0, maxFloatLogicalBottom=@0x7fff7c3b6b7c: 0) at rendering/RenderBlock.cpp:2000
#27 0x00007f467c9a791b in WebCore::RenderBlock::layoutBlockChildren (this=this@entry=0x7f466ad28420, relayoutChildren=relayoutChildren@entry=false, maxFloatLogicalBottom=@0x7fff7c3b6b7c: 0) at rendering/RenderBlock.cpp:1938
#28 0x00007f467c9aab70 in WebCore::RenderBlock::layoutBlock (this=0x7f466ad28420, relayoutChildren=false, pageLogicalHeight=0) at rendering/RenderBlock.cpp:1262
#29 0x00007f467c98f3fd in WebCore::RenderBlock::layout (this=0x7f466ad28420) at rendering/RenderBlock.cpp:1158
#30 0x00007f467ca5c298 in WebCore::RenderView::layout (this=0x7f466ad28420) at rendering/RenderView.cpp:130
#31 0x00007f467c8f0797 in WebCore::FrameView::layout (this=this@entry=0x7f4668dcfb80, allowSubtree=allowSubtree@entry=true) at page/FrameView.cpp:964
#32 0x00007f467c8f190f in WebCore::FrameView::updateLayoutAndStyleIfNeededRecursive (this=0x7f4668dcfb80) at page/FrameView.cpp:2491
#33 0x00007f467c4fe2f7 in QWebFramePrivate::renderRelativeCoords (this=0x490d910, context=context@entry=0x7fff7c3b6ec0, layers=..., clip=...) at Api/qwebframe.cpp:357
#34 0x00007f467c4fe722 in QWebFrame::render (this=0x49081a0, painter=<optimized out>, clip=...) at Api/qwebframe.cpp:1233
#35 0x00007f467c516bc9 in QWebView::paintEvent (this=0x2db47f0, ev=0x7fff7c3b7840) at Api/qwebview.cpp:961
#36 0x00007f4687efbb7e in QWidget::event (this=0x2db47f0, event=0x7fff7c3b7840) at kernel/qwidget.cpp:8532
#37 0x00007f467c516ca7 in QWebView::event (this=0x2db47f0, e=0x7fff7c3b7840) at Api/qwebview.cpp:865
#38 0x00007f4687eac2fc in QApplicationPrivate::notify_helper (this=this@entry=0x25f8260, receiver=receiver@entry=0x2db47f0, e=e@entry=0x7fff7c3b7840) at kernel/qapplication.cpp:4562
#39 0x00007f4687eb077a in QApplication::notify (this=0x7fff7c3bd760, receiver=0x2db47f0, e=0x7fff7c3b7840) at kernel/qapplication.cpp:4423
#40 0x00007f4689abfe06 in KApplication::notify (this=0x7fff7c3bd760, receiver=0x2db47f0, event=0x7fff7c3b7840) at /var/tmp/portage/kde-base/kdelibs-4.10.5-r1/work/kdelibs-4.10.5/kdeui/kernel/kapplication.cpp:311
#41 0x00007f4688cf6e7e in QCoreApplication::notifyInternal (this=0x7fff7c3bd760, receiver=0x2db47f0, event=0x7fff7c3b7840) at kernel/qcoreapplication.cpp:946
#42 0x00007f4687ef7744 in sendSpontaneousEvent (event=0x7fff7c3b7840, receiver=0x2db47f0) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:234
#43 QWidgetPrivate::drawWidget (this=0x483a010, pdev=0x2f3cb30, rgn=..., offset=..., flags=68, sharedPainter=0x0, backingStore=0x2cc1dd0) at kernel/qwidget.cpp:5598
#44 0x00007f46880bde9d in QWidgetBackingStore::sync (this=0x2cc1dd0) at painting/qbackingstore.cpp:1365
#45 0x00007f4687eec3e0 in QWidgetPrivate::syncBackingStore (this=this@entry=0x2858200) at kernel/qwidget.cpp:1896
#46 0x00007f4687efc024 in QWidget::event (this=0x281f5b0, event=0x7fff7c3b84b0) at kernel/qwidget.cpp:8679
#47 0x00007f468829d86b in QMainWindow::event (this=0x281f5b0, event=0x7fff7c3b84b0) at widgets/qmainwindow.cpp:1478
#48 0x00007f4689bb00c8 in KXmlGuiWindow::event (this=0x281f5b0, ev=0x7fff7c3b84b0) at /var/tmp/portage/kde-base/kdelibs-4.10.5-r1/work/kdelibs-4.10.5/kdeui/xmlgui/kxmlguiwindow.cpp:126
#49 0x00007f46746fcf9c in KonqMainWindow::event (this=0x281f5b0, e=0x7fff7c3b84b0) at /var/tmp/portage/kde-base/konqueror-4.10.5/work/konqueror-4.10.5/konqueror/src/konqmainwindow.cpp:5761
#50 0x00007f4687eac2fc in QApplicationPrivate::notify_helper (this=this@entry=0x25f8260, receiver=receiver@entry=0x281f5b0, e=e@entry=0x7fff7c3b84b0) at kernel/qapplication.cpp:4562
#51 0x00007f4687eb077a in QApplication::notify (this=0x7fff7c3bd760, receiver=0x281f5b0, e=0x7fff7c3b84b0) at kernel/qapplication.cpp:4423
#52 0x00007f4689abfe06 in KApplication::notify (this=0x7fff7c3bd760, receiver=0x281f5b0, event=0x7fff7c3b84b0) at /var/tmp/portage/kde-base/kdelibs-4.10.5-r1/work/kdelibs-4.10.5/kdeui/kernel/kapplication.cpp:311
#53 0x00007f4688cf6e7e in QCoreApplication::notifyInternal (this=0x7fff7c3bd760, receiver=0x281f5b0, event=0x7fff7c3b84b0) at kernel/qcoreapplication.cpp:946
#54 0x00007f46880b9623 in sendEvent (event=0x7fff7c3b84b0, receiver=0x281f5b0) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:231
#55 sendUpdateRequest (updateImmediately=true, widget=0x281f5b0) at painting/qbackingstore.cpp:534
#56 QWidgetBackingStore::markDirty (this=<optimized out>, rect=..., widget=<optimized out>, updateImmediately=true, invalidateBuffer=<optimized out>) at painting/qbackingstore.cpp:722
#57 0x00007f4687eed659 in repaint (rect=..., this=0x2cc0060) at kernel/qwidget.cpp:10481
#58 QWidget::repaint (this=0x2cc0060, rect=...) at kernel/qwidget.cpp:10459
#59 0x00007f4687eed713 in QWidget::repaint (this=<optimized out>) at kernel/qwidget.cpp:10431
#60 0x00007f4688d0b2af in QMetaObject::activate (sender=0x49326b0, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fff7c3b86c0) at kernel/qobject.cpp:3539
#61 0x00007f467e16ccc1 in KParts::BrowserExtension::loadingProgress (this=<optimized out>, _t1=90) at /var/tmp/portage/kde-base/kdelibs-4.10.5-r1/work/kdelibs-4.10.5_build/kparts/browserextension.moc:341
#62 0x00007f467e1711ab in KParts::BrowserExtension::qt_static_metacall (_o=0x49326b0, _id=2084265696, _a=0x7fff7c3b8bc0, _c=<optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.10.5-r1/work/kdelibs-4.10.5_build/kparts/browserextension.moc:180
#63 0x00007f4688d0b2af in QMetaObject::activate (sender=0x483a2a0, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fff7c3b8bc0) at kernel/qobject.cpp:3539
#64 0x00007f467c508d31 in QWebPage::loadProgress (this=<optimized out>, _t1=90) at .moc/release-shared/moc_qwebpage.cpp:383
#65 0x00007f467c51010b in QWebPage::qt_static_metacall (_o=<optimized out>, _c=<optimized out>, _id=<optimized out>, _a=<optimized out>) at .moc/release-shared/moc_qwebpage.cpp:257
#66 0x00007f4688d0b2af in QMetaObject::activate (sender=0x3c7be00, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fff7c3b8d40) at kernel/qobject.cpp:3539
#67 0x00007f467c53b0ae in WebCore::FrameLoaderClientQt::loadProgress (this=<optimized out>, _t1=90) at .moc/release-shared/moc_FrameLoaderClientQt.cpp:111
#68 0x00007f467c53ad52 in WebCore::FrameLoaderClientQt::dispatchDidStartProvisionalLoad (this=0x3c7be00) at WebCoreSupport/FrameLoaderClientQt.cpp:445
#69 0x00007f467c874d2b in WebCore::FrameLoader::continueLoadAfterWillSubmitForm (this=0x7f466811eb78) at loader/FrameLoader.cpp:2549
#70 0x00007f467c87ebf0 in WebCore::FrameLoader::continueLoadAfterNavigationPolicy (this=0x7f466811eb78, formState=..., shouldContinue=true) at loader/FrameLoader.cpp:3105
#71 0x00007f467c87ec3e in WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy (argument=<optimized out>, request=..., formState=..., shouldContinue=<optimized out>) at loader/FrameLoader.cpp:2978
#72 0x00007f467c893dcd in WebCore::PolicyCallback::call (this=0x7fff7c3b8fc0, shouldContinue=true) at loader/PolicyCallback.cpp:103
#73 0x00007f467c898549 in WebCore::PolicyChecker::continueAfterNavigationPolicy (this=<optimized out>, policy=<optimized out>) at loader/PolicyChecker.cpp:160
#74 0x00007f467c5418a1 in callPolicyFunction (action=WebCore::PolicyUse, function=(void (WebCore::PolicyChecker::*)(WebCore::PolicyChecker * const, WebCore::PolicyAction)) 0x7f467c897d40 <WebCore::PolicyChecker::continueAfterNavigationPolicy(WebCore::PolicyAction)>, this=0x3c7be00) at WebCoreSupport/FrameLoaderClientQt.cpp:245
#75 WebCore::FrameLoaderClientQt::dispatchDecidePolicyForNavigationAction (this=0x3c7be00, function=(void (WebCore::PolicyChecker::*)(WebCore::PolicyChecker * const, WebCore::PolicyAction)) 0x7f467c897d40 <WebCore::PolicyChecker::continueAfterNavigationPolicy(WebCore::PolicyAction)>, action=..., request=...) at WebCoreSupport/FrameLoaderClientQt.cpp:1283
#76 0x00007f467c89969a in WebCore::PolicyChecker::checkNavigationPolicy (this=0x7f466811eb88, request=..., loader=<optimized out>, formState=..., function=0x7f467c87ec20 <WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy(void*, WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool)>, argument=0x7f466811eb78) at loader/PolicyChecker.cpp:88
#77 0x00007f467c87efc9 in WebCore::FrameLoader::loadWithDocumentLoader (this=this@entry=0x7f466811eb78, loader=loader@entry=0x7f46680ed000, type=type@entry=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, prpFormState=...) at loader/FrameLoader.cpp:1586
#78 0x00007f467c87f7b1 in WebCore::FrameLoader::loadWithNavigationAction (this=this@entry=0x7f466811eb78, request=..., action=..., lockHistory=lockHistory@entry=false, type=type@entry=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, formState=...) at loader/FrameLoader.cpp:1492
#79 0x00007f467c880320 in WebCore::FrameLoader::loadURL (this=this@entry=0x7f466811eb78, newURL=..., referrer=..., frameName=..., lockHistory=lockHistory@entry=false, newLoadType=newLoadType@entry=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, event=..., prpFormState=...) at loader/FrameLoader.cpp:1435
#80 0x00007f467c881983 in WebCore::FrameLoader::loadURLIntoChildFrame (this=0x7f4668dae478, url=..., referer=..., childFrame=0x7f466811eb00) at loader/FrameLoader.cpp:1012
#81 0x00007f467c53e4bf in WebCore::FrameLoaderClientQt::createFrame (this=0x490d630, url=..., name=..., ownerElement=<optimized out>, referrer=..., allowsScrolling=false, marginWidth=0, marginHeight=0) at WebCoreSupport/FrameLoaderClientQt.cpp:1329
#82 0x00007f467c8a82e1 in WebCore::SubframeLoader::loadSubframe (this=this@entry=0x7f4668dae610, ownerElement=ownerElement@entry=0x2d0ea00, url=..., name=..., referrer=...) at loader/SubframeLoader.cpp:265
#83 0x00007f467c8a8d5f in WebCore::SubframeLoader::loadOrRedirectSubframe (this=this@entry=0x7f4668dae610, ownerElement=ownerElement@entry=0x2d0ea00, url=..., frameName=..., lockHistory=lockHistory@entry=true, lockBackForwardList=lockBackForwardList@entry=true) at loader/SubframeLoader.cpp:240
#84 0x00007f467c8a9417 in WebCore::SubframeLoader::requestFrame (this=0x7f4668dae610, ownerElement=0x2d0ea00, urlString=..., frameName=..., lockHistory=true, lockBackForwardList=true) at loader/SubframeLoader.cpp:83
#85 0x00007f467c79077a in openURL (lockBackForwardList=true, lockHistory=true, this=0x2d0ea00) at html/HTMLFrameElementBase.cpp:108
#86 WebCore::HTMLFrameElementBase::openURL (this=0x2d0ea00, lockHistory=true, lockBackForwardList=true) at html/HTMLFrameElementBase.cpp:96
#87 0x00007f467c6666cc in WebCore::ContainerNode::parserAddChild (this=0x2d165d0, newChild=...) at dom/ContainerNode.cpp:685
#88 0x00007f467ccd67e8 in WebCore::HTMLConstructionSite::attach<WebCore::Element> (this=this@entry=0x7f466ae61b88, rawParent=0x2d165d0, prpChild=...) at html/parser/HTMLConstructionSite.cpp:99
#89 0x00007f467ccd6925 in WebCore::HTMLConstructionSite::attachToCurrent (this=this@entry=0x7f466ae61b88, child=...) at html/parser/HTMLConstructionSite.cpp:259
#90 0x00007f467ccd6b96 in WebCore::HTMLConstructionSite::insertHTMLElement (this=0x7f466ae61b88, token=...) at html/parser/HTMLConstructionSite.cpp:289
#91 0x00007f467c7f160d in WebCore::HTMLTreeBuilder::processGenericRawTextStartTag (this=this@entry=0x7f466ae61b60, token=...) at html/parser/HTMLTreeBuilder.cpp:2791
#92 0x00007f467c7f9eb8 in WebCore::HTMLTreeBuilder::processStartTagForInBody (this=0x7f466ae61b60, token=...) at html/parser/HTMLTreeBuilder.cpp:954
#93 0x00007f467c7f4d8a in WebCore::HTMLTreeBuilder::processStartTag (this=0x7f466ae61b60, token=...) at html/parser/HTMLTreeBuilder.cpp:1334
#94 0x00007f467c7fa3d9 in WebCore::HTMLTreeBuilder::constructTreeFromAtomicToken (this=this@entry=0x7f466ae61b60, token=...) at html/parser/HTMLTreeBuilder.cpp:460
#95 0x00007f467c7fa4cf in WebCore::HTMLTreeBuilder::constructTreeFromToken (this=0x7f466ae61b60, rawToken=...) at html/parser/HTMLTreeBuilder.cpp:450
#96 0x00007f467c7db298 in WebCore::HTMLDocumentParser::pumpTokenizer (this=0x7f466d06b400, mode=WebCore::HTMLDocumentParser::ForceSynchronous) at html/parser/HTMLDocumentParser.cpp:276
#97 0x00007f467c7dc2f6 in WebCore::HTMLDocumentParser::insert (this=0x7f466d06b400, source=...) at html/parser/HTMLDocumentParser.cpp:324
#98 0x00007f467c681202 in WebCore::Document::write (this=0x7f466ad1b800, text=..., ownerDocument=0x7f466ad1b800) at dom/Document.cpp:2227
#99 0x00007f467c591429 in WebCore::documentWrite (exec=0x7f466d2505b8, document=0x7f466ad1b800, addNewline=addNewline@entry=WebCore::DoNotAddNewline) at bindings/js/JSHTMLDocumentCustom.cpp:156
#100 0x00007f467c5921b5 in WebCore::JSHTMLDocument::write (this=<optimized out>, exec=<optimized out>) at bindings/js/JSHTMLDocumentCustom.cpp:161
#101 0x00007f467c1fe7fb in WebCore::jsHTMLDocumentPrototypeFunctionWrite (exec=<optimized out>) at ../../WebCore/generated/JSHTMLDocument.cpp:445
#102 0x00007f46240001e8 in ?? ()
#103 0x00007f466d250570 in ?? ()
#104 0x00007f46240f310e in ?? ()
#105 0x0000000000000000 in ?? ()