Bug 17323 – Crash in RenderObject::lineHeight on launch with r30154 nightly on 64-bit Vista

• Status: RESOLVED
• Resolution: INVALID
• Component: Platform

[Mikael Olofsson]

Problem signature:
  Problem Event Name:	APPCRASH
  Application Name:	Safari.exe
  Application Version:	3.523.15.0
  Application Timestamp:	476b223f
  Fault Module Name:	WebKit.dll
  Fault Module Version:	3.525.0.0
  Fault Module Timestamp:	47b0d853
  Exception Code:	c0000005
  Exception Offset:	000ada01
  OS Version:	6.0.6000.2.0.0.256.1
  Locale ID:	1053
  Additional Information 1:	8d13
  Additional Information 2:	cdca9b1d21d12b77d84f02df48e34311
  Additional Information 3:	8d13
  Additional Information 4:	cdca9b1d21d12b77d84f02df48e34311

[Alexey Proskuryakov]

<rdar://problem/5737307>

[Adam Roben (:aroben)]

Could you please attach a crashlog? Instructions can be found at http://webkit.org/quality/crashlogs.html

[Alexey Proskuryakov]

We could not reproduce this issue yet, so we cannot proceed to fixing it without a crash log.

[Mikael Olofsson]

can't get windows vista ultimate 64 to generate a crash log.
Followed the steps in : http://webkit.org/quality/crashlogs.html

But I don't get a new crash log for safari.
Now safari just quits without any notification.

[Mikael Olofsson]

Created attachment 19103 [details]
WER7CDC.tmp.version.txt

[Mikael Olofsson]

Created attachment 19104 [details]
WER7CDD.tmp.appcompat.txt

[Mikael Olofsson]

Created attachment 19105

[Mikael Olofsson]

Found the right path to it. Sorry for the delay.

I hope I can use safara on my pc also soon ;)

Love my MBP.

[Adam Roben (:aroben)]

Thank you for the crash dump. It looks like you were running a nightly build when the crash happened. Can you tell us which nightly you downloaded?

[Mikael Olofsson]

I used WebKit-r30154.
But the beta from apple.com also crashes and WebKit-r30219.

[Adam Roben (:aroben)]

Here's the backtrace:

>	WebKit.dll!WebCore::RenderObject::lineHeight(bool firstLine=true, bool __formal=false)  Line 2718 + 0x15 bytes	C++
 	WebKit.dll!WebCore::RenderFlow::lineHeight(bool firstLine=true, bool isRootLineBox=true)  Line 321 + 0xb bytes	C++
 	WebKit.dll!WebCore::RenderBlock::lineHeight(bool b=true, bool isRootLineBox=true)  Line 3955 + 0xb bytes	C++
 	WebKit.dll!WebCore::InlineFlowBox::computeLogicalBoxHeights(int & maxPositionTop=0, int & maxPositionBottom=0, int & maxAscent=0, int & maxDescent=0, bool strictMode=false)  Line 426 + 0x1a bytes	C++
 	WebKit.dll!WebCore::InlineFlowBox::verticallyAlignBoxes(int & heightOfBlock=)  Line 374	C++
 	WebKit.dll!WebCore::RenderBlock::computeVerticalPositionsForLine(WebCore::RootInlineBox * lineBox=0x00000000)  Line 753	C++
 	WebKit.dll!WebCore::RenderBlock::layoutInlineChildren(bool relayoutChildren=, int & repaintTop=, int & repaintBottom=)  Line 995	C++
 	WebKit.dll!WebCore::RenderBlock::layoutBlock(bool relayoutChildren=true)  Line 583	C++
 	WebKit.dll!WebCore::RenderBlock::layout()  Line 495	C++
 	WebKit.dll!WebCore::RenderBlock::layoutBlockChildren(bool relayoutChildren=true, int & maxFloatBottom=0)  Line 1234	C++
 	WebKit.dll!WebCore::RenderBlock::layoutBlock(bool relayoutChildren=)  Line 587	C++
 	WebKit.dll!WebCore::RenderBlock::layout()  Line 495	C++
 	WebKit.dll!WebCore::RenderBlock::layoutBlockChildren(bool relayoutChildren=true, int & maxFloatBottom=0)  Line 1234	C++
 	WebKit.dll!WebCore::RenderBlock::layoutBlock(bool relayoutChildren=)  Line 587	C++
 	WebKit.dll!WebCore::RenderBlock::layout()  Line 495	C++
 	WebKit.dll!WebCore::RenderView::layout()  Line 114	C++
 	WebKit.dll!WebCore::FrameView::layout(bool allowSubtree=true)  Line 472	C++
 	WebKit.dll!WebCore::Document::implicitClose()  Line 1505	C++
 	WebKit.dll!WebCore::FrameLoader::checkCompleted()  Line 1266	C++
 	WebKit.dll!WebCore::FrameLoader::finishedParsing()  Line 1214	C++
 	WebKit.dll!WebCore::Document::finishedParsing()  Line 3533	C++
 	WebKit.dll!WebCore::HTMLParser::finished()  Line 1435	C++
 	WebKit.dll!WebCore::HTMLTokenizer::end()  Line 1571	C++
 	ole32.dll!CRetailMalloc_GetSize()  + 0x20 bytes	
 	oleaut32.dll!APP_DATA::FreeCachedMem()  + 0x24 bytes	
 	7ee94de8()	
 	WebKit.dll!WebCore::TimerBase::isActive()  Line 196 + 0x26 bytes	C++
 	WebKit.dll!WebCore::HTMLTokenizer::finish()  Line 1609	C++
 	WebKit.dll!WebCore::FrameLoader::write(const char * str=0x00000000, int len=1571456, bool flush=true)  Line 1001 + 0x9 bytes	C++
 	WebKit.dll!WebCore::FrameLoader::endIfNotLoadingMainResource()  Line 1036	C++
 	WebKit.dll!WebCore::FrameLoader::finishedLoading()  Line 2795	C++
 	WebKit.dll!WebCore::MainResourceLoader::didFinishLoading()  Line 311	C++
 	WebKit.dll!WebCore::MainResourceLoader::continueAfterContentPolicy(WebCore::PolicyAction contentPolicy=PolicyUse, const WebCore::ResourceResponse & r={...})  Line 245	C++
 	WebKit.dll!WebCore::MainResourceLoader::continueAfterContentPolicy(WebCore::PolicyAction policy=PolicyUse)  Line 260	C++
 	WebKit.dll!WebCore::MainResourceLoader::didReceiveResponse(const WebCore::ResourceResponse & r={...})  Line 287	C++
 	WebKit.dll!WebCore::MainResourceLoader::handleDataLoadNow(WebCore::Timer<WebCore::MainResourceLoader> * __formal=)  Line 343	C++
 	ntdll.dll!@RtlpAllocateHeap@20()  + 0x180 bytes	

[Adam Roben (:aroben)]

This is a known issue (<rdar://5614144>), but it's not a WebKit bug, so I'm going to close this as RESOLVED/INVALID

(In reply to comment #10)
> I used WebKit-r30154.
> But the beta from apple.com also crashes and WebKit-r30219.

Could you please file another bug report either here or at <http://bugreport.apple.com/> about this second crash? Please include the versions of Safari and WebKit you were running at the time, and a crash dump file. Thanks!