106203 2013-01-06 18:31:21 -0800 [Shadow DOM]: crash in WebCore::ElementShadow::setValidityUndetermined 2013-01-06 22:11:50 -0800 1 1 1 Unclassified WebKit DOM 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 tasak tasak ojan.autocc webcomponents-bugzilla webkit.review.bot oldest_to_newest 801130 0 tasak 2013-01-06 18:31:21 -0800 Detailed report: https://cluster-fuzz.appspot.com/testcase?key=151773592 Fuzzer: Webcomponents_fuzzer Crash Type: UNKNOWN Crash Address: 0x000000000028 Crash State: - crash stack - WebCore::ElementShadow::setValidityUndetermined WebCore::InsertionPoint::insertedInto WebCore::ChildNodeInsertionNotifier::notifyNodeInsertedIntoTree Regressed: https://cluster-fuzz.appspot.com/revisions?range=172434:172624 Minimized Testcase (14.93 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96qsWtbBREqcvnVZLzeb1hqnpJdPv11ntaNeWQvD55iVBhetKZnBKcu-vVDLfWrjeDJJ6ECsJdX722HqN6PTtrSXfe5ku2petIQc_u47mLS6YEg6q7QXY2eJ8E8OL5LciBp1HKK2fXwrQqQ_o4rOPwApEFzxRnjj83ER5Sux8IO0DYIa3I 801138 1 181469 tasak 2013-01-06 20:09:06 -0800 Created attachment 181469 Patch 801167 2 181469 webkit.review.bot 2013-01-06 22:11:47 -0800 Comment on attachment 181469 Patch Clearing flags on attachment: 181469 Committed r138923: <http://trac.webkit.org/changeset/138923> 801168 3 webkit.review.bot 2013-01-06 22:11:50 -0800 All reviewed patches have been landed. Closing bug. 181469 2013-01-06 20:09:06 -0800 2013-01-06 22:11:47 -0800 Patch bug-106203-20130107130610.patch text/plain 3624 tasak U3VidmVyc2lvbiBSZXZpc2lvbjogMTM4OTE5CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggNzRlYzNjMDlhZDYyNGZi ZWE3ZWIyMGEyMjQ1NDlmOTc0YWJmMDNiNi4uY2RhMTAwMDY1N2JmYTk5NTY5NTc4MzMwNjliNDRk MmIwYTZhZWUwNCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDI0IEBACisyMDEzLTAxLTA2ICBUYWth c2hpIFNha2Ftb3RvICA8dGFzYWtAZ29vZ2xlLmNvbT4KKworICAgICAgICBbU2hhZG93IERPTV06 IGNyYXNoIGluIFdlYkNvcmU6OkVsZW1lbnRTaGFkb3c6OnNldFZhbGlkaXR5VW5kZXRlcm1pbmVk CisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xMDYyMDMK KworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBJbnNlcnRp b25Qb2ludCBzaG91bGQgY2hlY2sgd2hldGhlciBFbGVtZW50U2hhZG93IGlzIGF2YWlsYWJsZSBv ciBub3QKKyAgICAgICAgYmVmb3JlIGludm9raW5nIGl0cyBtZXRob2RzLgorCisgICAgICAgIE5v IG5ldyB0ZXN0cy4gV2ViY29tcG9uZW50c19mdXp6ZXIgcmVwb3J0ZWQgdGhpcyBidWcuIFdvdWxk IGxpa2UgdG8KKyAgICAgICAgdXNlIHRoZSBmdXp6ZXIgdG8gY2hlY2sgdGhpcyBpc3N1ZS4KKwor ICAgICAgICAqIGh0bWwvc2hhZG93L0luc2VydGlvblBvaW50LmNwcDoKKyAgICAgICAgKFdlYkNv cmU6Okluc2VydGlvblBvaW50OjpnZXREaXN0cmlidXRlZE5vZGVzKToKKyAgICAgICAgKFdlYkNv cmU6Okluc2VydGlvblBvaW50OjpjaGlsZHJlbkNoYW5nZWQpOgorICAgICAgICAoV2ViQ29yZTo6 SW5zZXJ0aW9uUG9pbnQ6Omluc2VydGVkSW50byk6CisgICAgICAgIEFkZGVkIGlmcyB0byBjaGVj ayB3aGV0aGVyIEVsZW1lbnRTaGFkb3cgaXMgYXZhaWxhYmxlIG9yIG5vdCBiZWZvcmUKKyAgICAg ICAgaW52b2tpbmcgRWxlbWVudFNoYWRvdydzIG1ldGhvZHMsIGkuZS4gc2V0VmFsaWRpdHlVbmRl dGVybWluZWQsCisgICAgICAgIGludmFsaWRhdGVEaXN0cmlidXRpb24sIGFuZCBlbnN1cmVEaXN0 cmlidXRpb25Eb2N1bWVudC4KKwogMjAxMy0wMS0wNiAgU2ViYXN0aWFuIERyw7ZnZSAgPHNlYmFz dGlhbi5kcm9lZ2VAY29sbGFib3JhLmNvLnVrPgogCiAgICAgICAgIEJ1Z8KgMTA2MTc3IC0gW0dT dHJlYW1lcl0gRG9uJ3QgY2FsbCBnc3RfdmlkZW9faW5mb19mcm9tX2NhcHMoKSB3aXRoIG5vbi1m aXhlZCBjYXBzCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9odG1sL3NoYWRvdy9JbnNlcnRp b25Qb2ludC5jcHAgYi9Tb3VyY2UvV2ViQ29yZS9odG1sL3NoYWRvdy9JbnNlcnRpb25Qb2ludC5j cHAKaW5kZXggZmQ4M2Y3NzA0ZWNlM2ZlMGM3ZGI3YjdmYTU5OGYwODUxZmU5Y2YzZS4uMTlhOGM5 MTU3YzJiM2E0OGE3MzU2ZTAzNGRiZjc2NGE3NmM5NzlhOSAxMDA2NDQKLS0tIGEvU291cmNlL1dl YkNvcmUvaHRtbC9zaGFkb3cvSW5zZXJ0aW9uUG9pbnQuY3BwCisrKyBiL1NvdXJjZS9XZWJDb3Jl L2h0bWwvc2hhZG93L0luc2VydGlvblBvaW50LmNwcApAQCAtOTksOCArOTksMTAgQEAgYm9vbCBJ bnNlcnRpb25Qb2ludDo6aXNBY3RpdmUoKSBjb25zdAogCiBQYXNzUmVmUHRyPE5vZGVMaXN0PiBJ bnNlcnRpb25Qb2ludDo6Z2V0RGlzdHJpYnV0ZWROb2RlcygpIGNvbnN0CiB7Ci0gICAgaWYgKHRy ZWVTY29wZSgpLT5yb290Tm9kZSgpLT5pc1NoYWRvd1Jvb3QoKSkKLSAgICAgICAgdG9TaGFkb3dS b290KHRyZWVTY29wZSgpLT5yb290Tm9kZSgpKS0+b3duZXIoKS0+ZW5zdXJlRGlzdHJpYnV0aW9u RnJvbURvY3VtZW50KCk7CisgICAgQ29udGFpbmVyTm9kZSogcm9vdE5vZGUgPSB0cmVlU2NvcGUo KS0+cm9vdE5vZGUoKTsKKyAgICBpZiAocm9vdE5vZGUtPmlzU2hhZG93Um9vdCgpKQorICAgICAg ICBpZiAoRWxlbWVudFNoYWRvdyogcm9vdE93bmVyID0gdG9TaGFkb3dSb290KHJvb3ROb2RlKS0+ b3duZXIoKSkKKyAgICAgICAgICAgIHJvb3RPd25lci0+ZW5zdXJlRGlzdHJpYnV0aW9uRnJvbURv Y3VtZW50KCk7CiAKICAgICBWZWN0b3I8UmVmUHRyPE5vZGU+ID4gbm9kZXM7CiAKQEAgLTExOSw3 ICsxMjEsOCBAQCB2b2lkIEluc2VydGlvblBvaW50OjpjaGlsZHJlbkNoYW5nZWQoYm9vbCBjaGFu Z2VkQnlQYXJzZXIsIE5vZGUqIGJlZm9yZUNoYW5nZSwgTgogewogICAgIEhUTUxFbGVtZW50Ojpj aGlsZHJlbkNoYW5nZWQoY2hhbmdlZEJ5UGFyc2VyLCBiZWZvcmVDaGFuZ2UsIGFmdGVyQ2hhbmdl LCBjaGlsZENvdW50RGVsdGEpOwogICAgIGlmIChTaGFkb3dSb290KiByb290ID0gY29udGFpbmlu Z1NoYWRvd1Jvb3QoKSkKLSAgICAgICAgcm9vdC0+b3duZXIoKS0+aW52YWxpZGF0ZURpc3RyaWJ1 dGlvbigpOworICAgICAgICBpZiAoRWxlbWVudFNoYWRvdyogcm9vdE93bmVyID0gcm9vdC0+b3du ZXIoKSkKKyAgICAgICAgICAgIHJvb3RPd25lci0+aW52YWxpZGF0ZURpc3RyaWJ1dGlvbigpOwog fQogCiBOb2RlOjpJbnNlcnRpb25Ob3RpZmljYXRpb25SZXF1ZXN0IEluc2VydGlvblBvaW50Ojpp bnNlcnRlZEludG8oQ29udGFpbmVyTm9kZSogaW5zZXJ0aW9uUG9pbnQpCkBAIC0xMjcsMTUgKzEz MCwxNiBAQCBOb2RlOjpJbnNlcnRpb25Ob3RpZmljYXRpb25SZXF1ZXN0IEluc2VydGlvblBvaW50 OjppbnNlcnRlZEludG8oQ29udGFpbmVyTm9kZSogaQogICAgIEhUTUxFbGVtZW50OjppbnNlcnRl ZEludG8oaW5zZXJ0aW9uUG9pbnQpOwogCiAgICAgaWYgKFNoYWRvd1Jvb3QqIHJvb3QgPSBjb250 YWluaW5nU2hhZG93Um9vdCgpKSB7Ci0gICAgICAgIHJvb3QtPm93bmVyKCktPnNldFZhbGlkaXR5 VW5kZXRlcm1pbmVkKCk7Ci0gICAgICAgIHJvb3QtPm93bmVyKCktPmludmFsaWRhdGVEaXN0cmli dXRpb24oKTsKLSAgICAgICAgaWYgKGlzQWN0aXZlKCkgJiYgIW1fcmVnaXN0ZXJlZFdpdGhTaGFk b3dSb290ICYmIGluc2VydGlvblBvaW50LT50cmVlU2NvcGUoKS0+cm9vdE5vZGUoKSA9PSByb290 KSB7Ci0gICAgICAgICAgICBtX3JlZ2lzdGVyZWRXaXRoU2hhZG93Um9vdCA9IHRydWU7Ci0gICAg ICAgICAgICByb290LT5yZWdpc3Rlckluc2VydGlvblBvaW50KHRoaXMpOworICAgICAgICBpZiAo RWxlbWVudFNoYWRvdyogcm9vdE93bmVyID0gcm9vdC0+b3duZXIoKSkgeworICAgICAgICAgICAg cm9vdE93bmVyLT5zZXRWYWxpZGl0eVVuZGV0ZXJtaW5lZCgpOworICAgICAgICAgICAgcm9vdE93 bmVyLT5pbnZhbGlkYXRlRGlzdHJpYnV0aW9uKCk7CisgICAgICAgICAgICBpZiAoaXNBY3RpdmUo KSAmJiAhbV9yZWdpc3RlcmVkV2l0aFNoYWRvd1Jvb3QgJiYgaW5zZXJ0aW9uUG9pbnQtPnRyZWVT Y29wZSgpLT5yb290Tm9kZSgpID09IHJvb3QpIHsKKyAgICAgICAgICAgICAgICBtX3JlZ2lzdGVy ZWRXaXRoU2hhZG93Um9vdCA9IHRydWU7CisgICAgICAgICAgICAgICAgcm9vdC0+cmVnaXN0ZXJJ bnNlcnRpb25Qb2ludCh0aGlzKTsKKyAgICAgICAgICAgIH0KICAgICAgICAgfQogICAgIH0KIAot CiAgICAgcmV0dXJuIEluc2VydGlvbkRvbmU7CiB9CiAK