Event report

Id:          WebCore::CSSStyleDeclaration::diff ReadAV@NULL (2b02a76b8ac89beb9292332299f74c09)
Description: Attempt to read from NULL pointer in WebCore::CSSStyleDeclaration::diff
Stack:
WebCore::CSSStyleDeclaration::diff
WebCore::getPropertiesNotInComputedStyle
WebCore::StyleChange::init
WebCore::ApplyStyleCommand::applyBlockStyle
WebCore::ApplyStyleCommand::doApply
WebCore::EditCommand::apply
WebCore::applyCommand
WebCore::Editor::applyParagraphStyle
WebCore::executeApplyParagraphStyle
WebCore::executeJustifyCenter
WebCore::Editor::Command::execute
WebCore::Document::execCommand
WebCore::DocumentInternal::execCommandCallback
v8::internal::Builtin_HandleApiCall
v8::internal::Invoke
v8::internal::Execution::Call
v8::Script::Run
WebCore::V8Proxy::runScript
WebCore::V8Proxy::evaluate
WebCore::ScriptController::evaluate
WebCore::ScriptController::executeScript
WebCore::ScriptController::executeScript
WebCore::ScriptController::executeIfJavaScriptURL
WebCore::FrameLoader::changeLocation
WebCore::RedirectScheduler::timerFired
WTF::ThreadSpecific<...>::operator WebCore::ThreadGlobalData *
WebCore::Timer<...>::fired
WebCore::ThreadTimers::sharedTimerFiredInternal
WTF::ThreadSpecific<...>::operator WebCore::ThreadGlobalData *
MessageLoop::RunTask
MessageLoop::DoWork
base::MessagePumpDefault::Run
MessageLoop::RunInternal
MessageLoop::Run
RendererMain

Event details

Processes
   0    id: d74 create  name: chrome.exe
. 1 id: 9b0 child name: chrome.exe
Current process:
0n2480 D:\Issue555\chrome.exe
Session: 0 User: VM3-XP32SP3-NJ\SkyLined Command Line: "D:\Issue555\chrome.exe" --type=renderer --no-sandbox --js-flags=--expose-gc --lang=en-US --force-fieldtest=DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/SocketLateBinding/_enable_late_binding/ --user-data-dir=C:\DOCUME~1\SKYLIN~1.AMD\LOCALS~1\Temp\chrome-user-data-dir --channel=3444.01045C00.967574632
Threads
. 12  Id: 9b0.b7c Suspend: 1 Teb: 7ffde000 Unfrozen "Main Thread"
13 Id: 9b0.ad8 Suspend: 1 Teb: 7ffdd000 Unfrozen
14 Id: 9b0.cd4 Suspend: 1 Teb: 7ffdc000 Unfrozen "Chrome_ChildIOThread"
15 Id: 9b0.abc Suspend: 1 Teb: 7ffdb000 Unfrozen
ExceptionAddress023f0524 (chrome_1c30000!WebCore::CSSStyleDeclaration::diff+0x00000044)
ExceptionCodec0000005 (Access violation)
ExceptionFlags00000000
NumberParameters2
Parameter[0]00000000
Parameter[1]00000000
Attempt to read from address 00000000

Debugger output prior to event

Stack details

frame 00 - WebCore::CSSStyleDeclaration::diff

Source: d:\chrome\src\third_party\webkit\webcore\css\cssstyledeclaration.cpp, line: 137

prv local

class WebCore::CSSStyleDeclaration * this (size: 4, address: 0x0, @ecx)

class WTF::Vector<int,0> propertiesToRemove (size: c, address: 0x12ef44, @ebp-0x0c)

class WebCore::CSSMutableStyleDeclarationConstIterator end (size: 8, address: 0x12ef3c, @ebp-0x14)

prv param

class WebCore::CSSMutableStyleDeclaration * style (size: 4, address: 0x12ef54, 0x6e83de0, @ebp+0x04)

Disassembly @ 00 0012ef4c 023b9ef3 chrome_1c30000!WebCore::CSSStyleDeclaration::diff+0x44

frame 01 - WebCore::getPropertiesNotInComputedStyle

Source: d:\chrome\src\third_party\webkit\webcore\editing\applystylecommand.cpp, line: 378

prv param

class WebCore::CSSStyleDeclaration * style (size: 4, address: 0x12ef68, 0x12ef9c, @ebp+0x08)

class WebCore::CSSComputedStyleDeclaration * computedStyle (size: 4, address: 0x0, 0x12ef6c, @ebp+0x0c)

Disassembly @ 01 0012ef60 023bbf83 chrome_1c30000!WebCore::getPropertiesNotInComputedStyle+0x53

frame 02 - WebCore::StyleChange::init

Source: d:\chrome\src\third_party\webkit\webcore\editing\applystylecommand.cpp, line: 111

prv local

class WebCore::StyleChange * this (size: 4, address: 0x0, @ecx)

class WTF::RefPtr<WebCore::CSSMutableStyleDeclaration> mutableStyle (size: 4, address: 0x12ef9c, @ebp+0x08)

prv param

class WTF::PassRefPtr<WebCore::CSSStyleDeclaration> style (size: 4, address: 0x12ef98, @ebp+0x04)

class WebCore::Position * position (size: 4, address: 0x12ef9c, 0x6e83de0, @ebp+0x08)

Disassembly @ 02 0012ef90 023bc73a chrome_1c30000!WebCore::StyleChange::init+0x83

frame 03 - WebCore::ApplyStyleCommand::applyBlockStyle

frame 04 - WebCore::ApplyStyleCommand::doApply

frame 05 - WebCore::EditCommand::apply

frame 06 - WebCore::applyCommand

frame 07 - WebCore::Editor::applyParagraphStyle

frame 08 - WebCore::executeApplyParagraphStyle

frame 09 - WebCore::executeJustifyCenter

frame 0a - WebCore::Editor::Command::execute

frame 0b - WebCore::Document::execCommand

frame 0c - WebCore::DocumentInternal::execCommandCallback

frame 0d - v8::internal::Builtin_HandleApiCall

frame 0e - v8::internal::Invoke

frame 0f - v8::internal::Execution::Call

frame 10 - v8::Script::Run

frame 11 - WebCore::V8Proxy::runScript

frame 12 - WebCore::V8Proxy::evaluate

frame 13 - WebCore::ScriptController::evaluate

frame 14 - WebCore::ScriptController::executeScript

frame 15 - WebCore::ScriptController::executeScript

frame 16 - WebCore::ScriptController::executeIfJavaScriptURL

frame 17 - WebCore::FrameLoader::changeLocation

frame 18 - WebCore::RedirectScheduler::timerFired

frame 19 - WTF::ThreadSpecific<...>::operator WebCore::ThreadGlobalData *

frame 1a - WebCore::Timer<...>::fired

frame 1b - WebCore::ThreadTimers::sharedTimerFiredInternal

frame 1c - WTF::ThreadSpecific<...>::operator WebCore::ThreadGlobalData *

frame 1d - MessageLoop::RunTask

frame 1e - MessageLoop::DoWork

frame 1f - base::MessagePumpDefault::Run

frame 20 - MessageLoop::RunInternal

frame 21 - MessageLoop::Run

frame 22 - RendererMain

frame 23 - ChromeMain

frame 24 - MainDllLoader::Launch

frame 25 - wWinMain