Hunch Kod

This is the ticket for the “mysterious” crash I reported on IRC.

I managed to make the binary you sent me crash in the same way.
I added a full backtrace to the gist:
https://gist.github.com/773812

Fastest way to reproduce:
Build & run.
Drag folder onto Kod.
Shift-cmd-W.
Drag folder onto Kod.
Shift-cmd-W.

Video version: http://cl.ly/3b3a2S081y0R0G2P163E

If instead of shift-cmd-w I do just cmd-w, I get this:

closeDocument: 33010880 file://localhost/Users/ago/Sviluppo/kod/src/basictypes.h
2011-01-11 02:46:09.046 Kod[92017:a0f] D [src/CTBrowser.mm:405] [ChromiumTabs] TODO createHistoricalTab <KDocument@0x101f7b4c0 'basictypes.h'>
2011-01-11 02:46:09.047 Kod[92017:a0f] D [src/CTBrowserWindowController.mm:157] [ChromiumTabs] dealloc window controller
2011-01-11 02:46:09.047 Kod[92017:a0f] D [src/CTBrowser.mm:44] [ChromiumTabs] deallocing browser <KBrowser: 0x13fe4e660>
Program received signal:  “EXC_BAD_ACCESS”.
sharedlibrary apply-load-rules all

#0  0x0000000100756b85 in CTTabStripModel::DetachTabContentsAt (this=0x13fe0f6b0, index=0) at CTTabStripModel.mm:284
#1  0x0000000100756d7d in CTTabStripModel::TabContentsWasDestroyed (this=0x13fe0f6b0, contents=0x101f7b4c0) at CTTabStripModel.mm:853
#2  0x0000000100751f47 in -[CTTabContents destroy:] (self=0x101f7b4c0, _cmd=0x1007883d8, sender=0x13fe0f6b0) at CTTabContents.mm:73
#3  0x0000000100752fb8 in CTTabStripModel::InternalCloseTab (this=0x13fe0f6b0, contents=0x101f7b4c0, index=0, create_historical_tabs=true) at CTTabStripModel.mm:996
#4  0x00000001007544c4 in CTTabStripModel::InternalCloseTabs (this=0x13fe0f6b0, indices=@0x7fff5fbfef70, close_types=3) at CTTabStripModel.mm:975
#5  0x00000001007559fb in CTTabStripModel::CloseTabContentsAt (this=0x13fe0f6b0, index=0, close_types=3) at CTTabStripModel.mm:378
#6  0x0000000100771ba4 in -[CTBrowser closeTab] (self=0x13fe4e660, _cmd=0x1003b0cea) at CTBrowser.mm:238
#7  0x000000010000d307 in -[KBrowser closeTab] (self=0x13fe4e660, _cmd=0x1003b0cea) at KBrowser.mm:57
#8  0x00000001007717d3 in -[CTBrowser executeCommand:withDisposition:] (self=0x13fe4e660, _cmd=0x10078b807, cmd=34015, disposition=CTWindowOpenDispositionCurrentTab) at CTBrowser.mm:306
#9  0x00000001007716a5 in -[CTBrowser executeCommand:] (self=0x13fe4e660, _cmd=0x10078af14, cmd=34015) at CTBrowser.mm:332
#10 0x000000010076f5e1 in -[CTBrowserWindowController commandDispatch:] (self=0x13fe38680, _cmd=0x10078978e, sender=0x102b0c870) at CTBrowserWindowController.mm:295
#11 0x00007fff80fa2e9a in -[NSApplication sendAction:to:from:] ()
#12 0x00007fff80fc741e in -[NSMenuItem _corePerformAction] ()
#13 0x00007fff80fc7188 in -[NSCarbonMenuImpl performActionWithHighlightingForItemAtIndex:] ()
#14 0x00007fff80face09 in -[NSMenu performKeyEquivalent:] ()
#15 0x00007fff80fabbb1 in -[NSApplication _handleKeyEquivalent:] ()
#16 0x00007fff80e7c645 in -[NSApplication sendEvent:] ()
#17 0x00007fff80e134da in -[NSApplication run] ()
#18 0x00007fff80e0c1a8 in NSApplicationMain ()
#19 0x0000000100008620 in main (argc=1, argv=0x7fff5fbff810) at main.m:5
Current language:  auto; currently objective-c++
Warning: the current language does not match this frame.

Using the mouse (both on the semaphore and on the x) yelds crashes.

#0  0x00007fff8011b11c in objc_msgSend ()
#1  0x000000010076c00b in -[CTBrowserWindowController tabClosingWithContents:atIndex:] (self=0x1040dd7f0, _cmd=0x10078a988, contents=0x1040d69f0, index=0) at CTBrowserWindowController.mm:983
#2  0x000000010076b066 in CTTabStripModelObserverBridge::TabClosingAt (this=0x10409ea60, contents=0x1040d69f0, index=0) at CTTabStripModelObserverBridge.mm:49
#3  0x0000000100752ef3 in CTTabStripModel::InternalCloseTab (this=0x104075790, contents=0x1040d69f0, index=0, create_historical_tabs=true) at CTTabStripModel.mm:984
#4  0x00000001007544c4 in CTTabStripModel::InternalCloseTabs (this=0x104075790, indices=@0x7fff5fbfeb38, close_types=2) at CTTabStripModel.mm:975
#5  0x0000000100755b98 in CTTabStripModel::CloseAllTabs (this=0x104075790) at CTTabStripModel.mm:372
#6  0x00000001007721b9 in -[CTBrowser windowDidBeginToClose] (self=0x1040ac220, _cmd=0x10078b984) at CTBrowser.mm:147
#7  0x000000010076c8d7 in -[CTBrowserWindowController windowShouldClose:] (self=0x1040dd7f0, _cmd=0x7fff81563c6a, sender=0x104080e40) at CTBrowserWindowController.mm:771
#8  0x00007fff8108ace5 in -[NSWindow _document:shouldClose:contextInfo:] ()
#9  0x00000001000130bc in -[KDocument canCloseDocumentWithDelegate:shouldCloseSelector:contextInfo:] (self=0x1040d69f0, _cmd=0x7fff815515dc, delegate=0x104080e40, shouldCloseSelector=0x7fff8157b26e, contextInfo=0x0) at KDocument.mm:857
#10 0x00007fff8108ab44 in -[NSWindow _close:] ()
#11 0x00007fff80fa2e9a in -[NSApplication sendAction:to:from:] ()
#12 0x00007fff80fa2df9 in -[NSControl sendAction:to:] ()
#13 0x00007fff8102e76b in -[NSCell trackMouse:inRect:ofView:untilMouseUp:] ()
#14 0x00007fff8105f2aa in -[NSButtonCell trackMouse:inRect:ofView:untilMouseUp:] ()
#15 0x00007fff8102d215 in -[NSControl mouseDown:] ()
#16 0x00007fff8108aaaa in -[_NSThemeWidget mouseDown:] ()
#17 0x00007fff80e7a192 in forwardMethod ()
#18 0x00007fff80f4734f in -[NSWindow sendEvent:] ()
#19 0x0000000100780c27 in -[CTBrowserWindow sendEvent:] (self=0x104080e40, _cmd=0x7fff81542a10, event=0x104080bd0) at CTBrowserWindow.mm:305
#20 0x00007fff80e7ca86 in -[NSApplication sendEvent:] ()
#21 0x00007fff80e134da in -[NSApplication run] ()
#22 0x00007fff80e0c1a8 in NSApplicationMain ()
#23 0x0000000100008800 in main (argc=1, argv=0x7fff5fbff810) at main.m:5

#0  0x00007fff8011b11c in objc_msgSend ()
#1  0x000000010001ddf0 in -[KBrowserWindowController updateToolbarWithContents:shouldRestoreState:] (self=0x101f27920, _cmd=0x1003b38c0, contents=0x0, shouldRestore=0 '\0') at KBrowserWindowController.mm:346
#2  0x000000010076c00b in -[CTBrowserWindowController tabClosingWithContents:atIndex:] (self=0x101f27920, _cmd=0x10078a988, contents=0x13ff62080, index=0) at CTBrowserWindowController.mm:983
#3  0x000000010076b066 in CTTabStripModelObserverBridge::TabClosingAt (this=0x101f7bb40, contents=0x13ff62080, index=0) at CTTabStripModelObserverBridge.mm:49
#4  0x0000000100752ef3 in CTTabStripModel::InternalCloseTab (this=0x101f8cb90, contents=0x13ff62080, index=0, create_historical_tabs=true) at CTTabStripModel.mm:984
#5  0x00000001007544c4 in CTTabStripModel::InternalCloseTabs (this=0x101f8cb90, indices=@0x7fff5fbfe878, close_types=2) at CTTabStripModel.mm:975
#6  0x0000000100755b98 in CTTabStripModel::CloseAllTabs (this=0x101f8cb90) at CTTabStripModel.mm:372
#7  0x00000001007721b9 in -[CTBrowser windowDidBeginToClose] (self=0x101f08640, _cmd=0x10078b984) at CTBrowser.mm:147
#8  0x000000010076c8d7 in -[CTBrowserWindowController windowShouldClose:] (self=0x101f27920, _cmd=0x7fff81563c6a, sender=0x101fb0470) at CTBrowserWindowController.mm:771
#9  0x00007fff8108ace5 in -[NSWindow _document:shouldClose:contextInfo:] ()
#10 0x00000001000130bc in -[KDocument canCloseDocumentWithDelegate:shouldCloseSelector:contextInfo:] (self=0x13ff62080, _cmd=0x7fff815515dc, delegate=0x101fb0470, shouldCloseSelector=0x7fff8157b26e, contextInfo=0x0) at KDocument.mm:857
#11 0x00007fff8108ab44 in -[NSWindow _close:] ()
#12 0x00007fff80fa2e9a in -[NSApplication sendAction:to:from:] ()
#13 0x00007fff80fa2df9 in -[NSControl sendAction:to:] ()
#14 0x00007fff81081c78 in -[NSButtonCell performClick:] ()
#15 0x00000001007668fe in -[CTTabStripController closeTab:] (self=0x101fb8700, _cmd=0x100784d8c, sender=0x13ff846a0) at CTTabStripController.mm:632
#16 0x000000010073da12 in -[CTTabController closeTab:] (self=0x102e535a0, _cmd=0x100784d8c, sender=0x13ff1c070) at CTTabController.mm:113
#17 0x00007fff80fa2e9a in -[NSApplication sendAction:to:from:] ()
#18 0x00007fff80fa2df9 in -[NSControl sendAction:to:] ()
#19 0x00007fff8102e76b in -[NSCell trackMouse:inRect:ofView:untilMouseUp:] ()
#20 0x00007fff8105f2aa in -[NSButtonCell trackMouse:inRect:ofView:untilMouseUp:] ()
#21 0x00007fff8102d215 in -[NSControl mouseDown:] ()
#22 0x000000010073b450 in -[HoverButton mouseDown:] (self=0x13ff1c070, _cmd=0x7fff8154ccb0, theEvent=0x13ff408b0) at hover_button.mm:48
#23 0x00007fff80f4734f in -[NSWindow sendEvent:] ()
#24 0x0000000100780c27 in -[CTBrowserWindow sendEvent:] (self=0x101fb0470, _cmd=0x7fff81542a10, event=0x13ff408b0) at CTBrowserWindow.mm:305
#25 0x00007fff80e7ca86 in -[NSApplication sendEvent:] ()
#26 0x00007fff80e134da in -[NSApplication run] ()
#27 0x00007fff80e0c1a8 in NSApplicationMain ()
#28 0x0000000100008800 in main (argc=1, argv=0x7fff5fbff810) at main.m:5

Opening (and then closing) a single file works always. It will crash on closing a window.