<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>104725</bug_id>
          
          <creation_ts>2012-12-11 15:00:29 -0800</creation_ts>
          <short_desc>Crash in EventHandler::selectCursor() on Mac bots running fast/events/mouse-cursor-image-set.html</short_desc>
          <delta_ts>2012-12-12 15:00:07 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>CSS</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Beth Dakin">bdakin</reporter>
          <assigned_to name="Beth Dakin">bdakin</assigned_to>
          <cc>bdakin</cc>
    
    <cc>cmarcelo</cc>
    
    <cc>macpherson</cc>
    
    <cc>menard</cc>
    
    <cc>ojan.autocc</cc>
    
    <cc>rbyers</cc>
    
    <cc>webkit.review.bot</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>788831</commentid>
    <comment_count>0</comment_count>
    <who name="Beth Dakin">bdakin</who>
    <bug_when>2012-12-11 15:00:29 -0800</bug_when>
    <thetext>https://bugs.webkit.org/show_bug.cgi?id=99493 enabled image-set for the CSS cursor property. Most of the change is guarded behind #if ENABLE(MOUSE_CURSOR_SCALE).

On the Mac port, we have image-set enabled, so we still parse the image-set in the CSSParser for cursors. But MOUSE_CURSOR_SCALE is not yet enabled, see https://bugs.webkit.org/show_bug.cgi?id=102579

Because we parse the image-set anyway, we see this crash:

 ASSERT(scale == 1);
Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore             	0x000000010faa8eb6 WebCore::EventHandler::selectCursor(WebCore::MouseEventWithHitTestResults const&amp;, WebCore::Scrollbar*) + 1526 (EventHandler.cpp:1481)
1   com.apple.WebCore             	0x000000010faab46c WebCore::EventHandler::handleMouseMoveEvent(WebCore::PlatformMouseEvent const&amp;, WebCore::HitTestResult*, bool) + 1772 (EventHandler.cpp:1912)
2   com.apple.WebCore             	0x000000010faaabd6 WebCore::EventHandler::mouseMoved(WebCore::PlatformMouseEvent const&amp;) + 134 (EventHandler.cpp:1795)
3   com.apple.WebKit2             	0x000000010d37e44c WebKit::handleMouseEvent(WebKit::WebMouseEvent const&amp;, WebKit::WebPage*, bool) + 396 (WebPage.cpp:1526)
4   com.apple.WebKit2             	0x000000010d37e5aa WebKit::WebPage::mouseEventSyncForTesting(WebKit::WebMouseEvent const&amp;, bool&amp;) + 234 (WebPage.cpp:1576)
etc.

I think that the right way to fix this is to avoid parsing the image-set for cursors until it&apos;s fully supported on Mac.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>788844</commentid>
    <comment_count>1</comment_count>
      <attachid>178889</attachid>
    <who name="Beth Dakin">bdakin</who>
    <bug_when>2012-12-11 15:11:26 -0800</bug_when>
    <thetext>Created attachment 178889
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>788849</commentid>
    <comment_count>2</comment_count>
    <who name="Beth Dakin">bdakin</who>
    <bug_when>2012-12-11 15:17:45 -0800</bug_when>
    <thetext>Thanks, Tim! 

http://trac.webkit.org/changeset/137367</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>789917</commentid>
    <comment_count>3</comment_count>
    <who name="Rick Byers">rbyers</who>
    <bug_when>2012-12-12 14:25:24 -0800</bug_when>
    <thetext>Shoot, sorry about that!  Doing exactly what you&apos;ve done was always my intention (and how I was thinking I had written it) - sorry I missed that.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>789952</commentid>
    <comment_count>4</comment_count>
    <who name="Beth Dakin">bdakin</who>
    <bug_when>2012-12-12 15:00:07 -0800</bug_when>
    <thetext>(In reply to comment #3)
&gt; Shoot, sorry about that!  Doing exactly what you&apos;ve done was always my intention (and how I was thinking I had written it) - sorry I missed that.

No worries! It happens.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>178889</attachid>
            <date>2012-12-11 15:11:26 -0800</date>
            <delta_ts>2012-12-11 15:13:35 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>for-review.txt</filename>
            <type>text/plain</type>
            <size>1996</size>
            <attacher name="Beth Dakin">bdakin</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="195560"
          type_id="1"
          status="+"
          setter="thorton"
    />
          </attachment>
      

    </bug>

</bugzilla>