127778 2014-01-28 07:42:50 -0800 ASSERTION FAILED: style().outlineSize() <= view().maximalOutlineSize() in WebCore::RenderBox::clippedOverflowRectForRepaint 2016-08-03 14:04:10 -0700 1 1 1 Unclassified WebKit Layout and Rendering 528+ (Nightly build) PC Linux RESOLVED WORKSFORME P2 Normal --- 116980 1 mhodovan.u-szeged webkit-unassigned andersca bfulgham hyatt kling rhodovan.u-szeged oldest_to_newest 972910 0 mhodovan.u-szeged 2014-01-28 07:42:50 -0800 The failing test case: <style> html{ outline-style:auto; outline-width:inherit; outline-offset:1cm; } </style> The error message: ASSERTION FAILED: style().outlineSize() <= view().maximalOutlineSize() /WebKit/Source/WebCore/rendering/RenderBox.cpp(2058) : virtual WebCore::LayoutRect WebCore::RenderBox::clippedOverflowRectForRepaint(const WebCore::RenderLayerModelObject*) const Program received signal SIGSEGV, Segmentation fault. The backtrace: #1 0x00007ffff11e895c in WebCore::RenderBox::clippedOverflowRectForRepaint (this=0x834bc0, repaintContainer=0x0) at /home/martin/Data/WebKit/Source/WebCore/rendering/RenderBox.cpp:2058 #2 0x00007ffff127a712 in WebCore::RenderLayer::computeRepaintRects (this=0x834ef0, repaintContainer=0x0, geometryMap=0x7fffffffb8f0) at /home/martin/Data/WebKit/Source/WebCore/rendering/RenderLayer.cpp:715 #3 0x00007ffff1279a4f in WebCore::RenderLayer::updateLayerPositions (this=0x834ef0, geometryMap=0x7fffffffb8f0, flags=13) at /home/martin/Data/WebKit/Source/WebCore/rendering/RenderLayer.cpp:434 #4 0x00007ffff1279d61 in WebCore::RenderLayer::updateLayerPositions (this=0x93b140, geometryMap=0x7fffffffb8f0, flags=13) at /home/martin/Data/WebKit/Source/WebCore/rendering/RenderLayer.cpp:486 #5 0x00007ffff1279815 in WebCore::RenderLayer::updateLayerPositionsAfterLayout (this=0x93b140, rootLayer=0x93b140, flags=13) at /home/martin/Data/WebKit/Source/WebCore/rendering/RenderLayer.cpp:390 #6 0x00007ffff0edb96b in WebCore::FrameView::layout (this=0x787230, allowSubtree=true) at /home/martin/Data/WebKit/Source/WebCore/page/FrameView.cpp:1328 #7 0x00007ffff0ede9c4 in WebCore::FrameView::visibleContentsResized (this=0x787230) at /home/martin/Data/WebKit/Source/WebCore/page/FrameView.cpp:2193 #8 0x00007ffff0f8844a in WebCore::ScrollView::updateScrollbars (this=0x787230, desiredOffset=...) at /home/martin/Data/WebKit/Source/WebCore/platform/ScrollView.cpp:618 #9 0x00007ffff0f86e55 in WebCore::ScrollView::setContentsSize (this=0x787230, newSize=...) at /home/martin/Data/WebKit/Source/WebCore/platform/ScrollView.cpp:343 #10 0x00007ffff0ed95c1 in WebCore::FrameView::setContentsSize (this=0x787230, size=...) at /home/martin/Data/WebKit/Source/WebCore/page/FrameView.cpp:547 #11 0x00007ffff0ed9803 in WebCore::FrameView::adjustViewSize (this=0x787230) at /home/martin/Data/WebKit/Source/WebCore/page/FrameView.cpp:577 #12 0x00007ffff0edb8ca in WebCore::FrameView::layout (this=0x787230, allowSubtree=true) at /home/martin/Data/WebKit/Source/WebCore/page/FrameView.cpp:1318 #13 0x00007ffff0938afe in WebCore::Document::implicitClose (this=0x9038f0) at /home/martin/Data/WebKit/Source/WebCore/dom/Document.cpp:2455 #14 0x00007ffff0db3e09 in WebCore::FrameLoader::checkCallImplicitClose (this=0x925698) at /home/martin/Data/WebKit/Source/WebCore/loader/FrameLoader.cpp:892 #15 0x00007ffff0db3baa in WebCore::FrameLoader::checkCompleted (this=0x925698) at /home/martin/Data/WebKit/Source/WebCore/loader/FrameLoader.cpp:838 #16 0x00007ffff0db390f in WebCore::FrameLoader::finishedParsing (this=0x925698) at /home/martin/Data/WebKit/Source/WebCore/loader/FrameLoader.cpp:762 #17 0x00007ffff093ffa9 in WebCore::Document::finishedParsing (this=0x9038f0) at /home/martin/Data/WebKit/Source/WebCore/dom/Document.cpp:4449 #18 0x00007ffff0c36c9d in WebCore::HTMLConstructionSite::finishedParsing (this=0x8dba38) at /home/martin/Data/WebKit/Source/WebCore/html/parser/HTMLConstructionSite.cpp:337 #19 0x00007ffff0c701de in WebCore::HTMLTreeBuilder::finished (this=0x8dba20) at /home/martin/Data/WebKit/Source/WebCore/html/parser/HTMLTreeBuilder.cpp:3046 #20 0x00007ffff0c3df68 in WebCore::HTMLDocumentParser::end (this=0x8a48d0) at /home/martin/Data/WebKit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:439 #21 0x00007ffff0c3e051 in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x8a48d0) at /home/martin/Data/WebKit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:450 #22 0x00007ffff0c3cc99 in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x8a48d0) at /home/martin/Data/WebKit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:165 #23 0x00007ffff0c3e096 in WebCore::HTMLDocumentParser::attemptToEnd (this=0x8a48d0) at /home/martin/Data/WebKit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:462 #24 0x00007ffff0c3e14f in WebCore::HTMLDocumentParser::finish (this=0x8a48d0) at /home/martin/Data/WebKit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:490 #25 0x00007ffff0da5935 in WebCore::DocumentWriter::end (this=0x83d420) at /home/martin/Data/WebKit/Source/WebCore/loader/DocumentWriter.cpp:248 #26 0x00007ffff0d90f1f in WebCore::DocumentLoader::finishedLoading (this=0x83d380, finishTime=0) at /home/martin/Data/WebKit/Source/WebCore/loader/DocumentLoader.cpp:440 #27 0x00007ffff0d90c88 in WebCore::DocumentLoader::notifyFinished (this=0x83d380, resource=0x80d230) at /home/martin/Data/WebKit/Source/WebCore/loader/DocumentLoader.cpp:374 #28 0x00007ffff0e371d4 in WebCore::CachedResource::checkNotify (this=0x80d230) at /home/martin/Data/WebKit/Source/WebCore/loader/cache/CachedResource.cpp:332 #29 0x00007ffff0e372b2 in WebCore::CachedResource::finishLoading (this=0x80d230) at /home/martin/Data/WebKit/Source/WebCore/loader/cache/CachedResource.cpp:348 #30 0x00007ffff0e33c62 in WebCore::CachedRawResource::finishLoading (this=0x80d230, data=0x724ae0) at /home/martin/Data/WebKit/Source/WebCore/loader/cache/CachedRawResource.cpp:94 #31 0x00007ffff0defacd in WebCore::SubresourceLoader::didFinishLoading (this=0x80d760, finishTime=0) at /home/martin/Data/WebKit/Source/WebCore/loader/SubresourceLoader.cpp:309 #32 0x00007ffff0debd85 in WebCore::ResourceLoader::didFinishLoading (this=0x80d760, finishTime=0) at /home/martin/Data/WebKit/Source/WebCore/loader/ResourceLoader.cpp:517 #33 0x00007ffff1b689ad in WebCore::readCallback (asyncResult=0x810200, data=0x83f310) at /home/martin/Data/WebKit/Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:1325 #34 0x00007fffe7908b49 in async_ready_callback_wrapper (source_object=0x876aa0, res=0x810200, user_data=0x83f310) at ginputstream.c:530 #35 0x00007fffe792ac9b in g_task_return_now (task=0x810200) at gtask.c:1105 #36 0x00007fffe792acb9 in complete_in_idle_cb (task=0x810200) at gtask.c:1114 #37 0x00007fffed0e5f15 in g_main_dispatch (context=0x80fc80) at gmain.c:3054 #38 g_main_context_dispatch (context=context@entry=0x80fc80) at gmain.c:3630 #39 0x00007ffff7576d0b in _ecore_glib_select__locked (ecore_timeout=0x7fff00000001, efds=<optimized out>, wfds=0x7fffffffc9c0, rfds=0x7fffffffc940, ecore_fds=10, ctx=<optimized out>) at ecore_glib.c:171 #40 _ecore_glib_select (ecore_fds=10, rfds=0x7fffffffc940, wfds=0x7fffffffc9c0, efds=<optimized out>, ecore_timeout=0x7fff00000001) at ecore_glib.c:205 #41 0x00007ffff7570e97 in _ecore_main_select (timeout=<optimized out>) at ecore_main.c:1466 #42 0x00007ffff7571a45 in _ecore_main_loop_iterate_internal (once_only=once_only@entry=0) at ecore_main.c:1894 #43 0x00007ffff7571d57 in ecore_main_loop_begin () at ecore_main.c:956 #44 0x00000000004068e7 in main (argc=2, argv=0x7fffffffde48) at /home/martin/Data/WebKit/Tools/EWebLauncher/main.c:1008 972911 1 222444 mhodovan.u-szeged 2014-01-28 07:44:04 -0800 Created attachment 222444 Test case 1217167 2 bfulgham 2016-08-03 14:04:10 -0700 This issue no longer occurs under GuardMalloc or ASAN as of r204037. If you believe there is still a bug, please reopen this issue with a revised test case. 222444 2014-01-28 07:44:04 -0800 2014-01-28 07:44:04 -0800 Test case test.html text/html 96 mhodovan.u-szeged PHN0eWxlPgoJaHRtbHsKCQlvdXRsaW5lLXN0eWxlOmF1dG87CgkJb3V0bGluZS13aWR0aDppbmhl cml0OwoJCW91dGxpbmUtb2Zmc2V0OjFjbTsKCX0gCjwvc3R5bGU+