129948 2014-03-07 17:45:43 -0800 Crash in RenderBlock::addChildIgnoringAnonymousColumnBlocks when region-based multicol enabled 2014-03-21 11:13:55 -0700 1 1 1 Unclassified WebKit Layout and Rendering 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 jeffrey+webkit hyatt commit-queue esprehn+autocc glenn hyatt kondapallykalyan mstensho oldest_to_newest 988454 0 226192 jeffrey+webkit 2014-03-07 17:45:43 -0800 Created attachment 226192 Repro The attached repro will cause WebKit to crash in WebCore::RenderBlock::addChildIgnoringAnonymousColumnBlocks(WebCore::RenderObject*, WebCore::RenderObject*) when run in DumpRenderTree, and only when it enables the region-based multicol code path. <rdar://problem/16074072> 993215 1 227460 hyatt 2014-03-21 11:10:11 -0700 Created attachment 227460 Patch 993220 2 hyatt 2014-03-21 11:13:55 -0700 Fix landed in r166078. 226192 2014-03-07 17:45:43 -0800 2014-03-07 17:45:43 -0800 Repro multicol-li-crash.html text/html 145 jeffrey+webkit PHNjcmlwdD4KaWYgKHdpbmRvdy5pbnRlcm5hbHMpCiAgICBpbnRlcm5hbHMuc2V0dGluZ3Muc2V0 UmVnaW9uQmFzZWRDb2x1bW5zRW5hYmxlZCh0cnVlKTsKPC9zY3JpcHQ+CjxsaSBzdHlsZT0ib3Zl cmZsb3c6IC13ZWJraXQtcGFnZWQteDsiPjwvbGk+Cg== 227460 2014-03-21 11:10:11 -0700 2014-03-21 11:11:53 -0700 Patch patch.txt text/plain 3821 hyatt SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDE2NjA3NykKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDI2IEBACisyMDE0LTAzLTIxICBEYXZpZCBI eWF0dCAgPGh5YXR0QGFwcGxlLmNvbT4KKworICAgICAgICBDcmFzaCBpbiBSZW5kZXJCbG9jazo6 YWRkQ2hpbGRJZ25vcmluZ0Fub255bW91c0NvbHVtbkJsb2Nrcy4KKyAgICAgICAgaHR0cHM6Ly9i dWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTEyOTk0OAorCisgICAgICAgIFJldmlld2Vk IGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIFdoZW4gdGhlIG1hcmtlciB3YXMgcGxhY2Vk IGZvciBtdWx0aS1jb2x1bW4gbGlzdCBpdGVtcywgaXQgd2FzIGJlaW5nIGluc2VydGVkCisgICAg ICAgIGludG8gdGhlIGxpc3QgaXRlbSBpdHNlbGYuIEV2ZW4gdGhvdWdoIHRoZSBhZGQgY29kZSBp biBSZW5kZXJCbG9jayBkaWQgdGhlIHJpZ2h0CisgICAgICAgIHRoaW5nIGFuZCBwdXQgdGhlIG1h cmtlciBpbnNpZGUgdGhlIG11bHRpLWNvbHVtbiBmbG93IHRocmVhZCwgdGhlIGxpc3QgaXRlbSBj b2RlCisgICAgICAgIHBhc3NlZCBpbiBhIGJlZm9yZUNoaWxkIHRoYXQgd2FzIGNvbXB1dGVkIHVz aW5nIHRoZSBpbmNvcnJlY3QgcGFyZW50LiBUaGlzIHJlc3VsdGVkCisgICAgICAgIGluIHRoZSBm bG93IHRocmVhZCBiZWluZyB1c2VkIGJvdGggYXMgdGhlIHBhcmVudCBvZiB0aGUgbWFya2VyIGFu ZCB0aGUgc2libGluZyBvZgorICAgICAgICB0aGUgbWFya2VyLgorICAgICAgICAKKyAgICAgICAg VGhlIGZpeCBpcyB0byBhZGQgc29tZSBjb2RlIHRvIFJlbmRlckxpc3RJdGVtIHRvIG1ha2Ugc3Vy ZSBpdCB1c2VzIHRoZSBtdWx0aS1jb2x1bW4KKyAgICAgICAgZmxvdyB0aHJlYWQgaWYgaXQgZXhp c3RzIGJvdGggYXMgdGhlIHBhcmVudCBvZiB0aGUgbWFya2VyIGFuZCBhcyB0aGUgYmFzaXMgZm9y IHRoZQorICAgICAgICBjb21wdXRhdGlvbiBvZiB0aGUgc2libGluZyB0aGF0IHRoZSBtYXJrZXIg c2hvdWxkIGJlIHBsYWNlZCBpbiBmcm9udCBvZi4KKworICAgICAgICBBZGRlZCBmYXN0L211bHRp Y29sL211bHRpY29sLWxpLWNyYXNoLmh0bWwKKworICAgICAgICAqIHJlbmRlcmluZy9SZW5kZXJM aXN0SXRlbS5jcHA6CisgICAgICAgIChXZWJDb3JlOjpSZW5kZXJMaXN0SXRlbTo6aW5zZXJ0T3JN b3ZlTWFya2VyUmVuZGVyZXJJZk5lZWRlZCk6CisKIDIwMTQtMDMtMjAgIEFuZHJlYXMgS2xpbmcg IDxha2xpbmdAYXBwbGUuY29tPgogCiAgICAgICAgIFN0b3AgcHVsbGluZyBpbiBKU0NJbmxpbmVz LmggYWxsIG92ZXIgdGhlIHBsYWNlLgpJbmRleDogU291cmNlL1dlYkNvcmUvcmVuZGVyaW5nL1Jl bmRlckxpc3RJdGVtLmNwcAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2ViQ29yZS9yZW5kZXJpbmcv UmVuZGVyTGlzdEl0ZW0uY3BwCShyZXZpc2lvbiAxNjYwNjQpCisrKyBTb3VyY2UvV2ViQ29yZS9y ZW5kZXJpbmcvUmVuZGVyTGlzdEl0ZW0uY3BwCSh3b3JraW5nIGNvcHkpCkBAIC0zMCw2ICszMCw3 IEBACiAjaW5jbHVkZSAiSW5saW5lRWxlbWVudEJveC5oIgogI2luY2x1ZGUgIlBzZXVkb0VsZW1l bnQuaCIKICNpbmNsdWRlICJSZW5kZXJMaXN0TWFya2VyLmgiCisjaW5jbHVkZSAiUmVuZGVyTXVs dGlDb2x1bW5GbG93VGhyZWFkLmgiCiAjaW5jbHVkZSAiUmVuZGVyVmlldy5oIgogI2luY2x1ZGUg IlN0eWxlSW5oZXJpdGVkRGF0YS5oIgogI2luY2x1ZGUgPHd0Zi9TdGFja1N0YXRzLmg+CkBAIC0y NzksNyArMjgwLDEwIEBAIHZvaWQgUmVuZGVyTGlzdEl0ZW06Omluc2VydE9yTW92ZU1hcmtlclIK ICAgICAgICAgLy8gaW4gdGhpcyBjYXNlLgogICAgICAgICBpZiAoY3VycmVudFBhcmVudCAmJiBj dXJyZW50UGFyZW50LT5pc0Fub255bW91c0Jsb2NrKCkpCiAgICAgICAgICAgICByZXR1cm47Ci0g ICAgICAgIG5ld1BhcmVudCA9IHRoaXM7CisgICAgICAgIGlmIChtdWx0aUNvbHVtbkZsb3dUaHJl YWQoKSkKKyAgICAgICAgICAgIG5ld1BhcmVudCA9IG11bHRpQ29sdW1uRmxvd1RocmVhZCgpOwor ICAgICAgICBlbHNlCisgICAgICAgICAgICBuZXdQYXJlbnQgPSB0aGlzOwogICAgIH0KIAogICAg IGlmIChuZXdQYXJlbnQgIT0gY3VycmVudFBhcmVudCkgewpJbmRleDogTGF5b3V0VGVzdHMvQ2hh bmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL0NoYW5nZUxvZwkocmV2aXNpb24gMTY2 MDc3KQorKysgTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBAIC0xLDMgKzEs MTMgQEAKKzIwMTQtMDMtMjEgIERhdmlkIEh5YXR0ICA8aHlhdHRAYXBwbGUuY29tPgorCisgICAg ICAgIENyYXNoIGluIFJlbmRlckJsb2NrOjphZGRDaGlsZElnbm9yaW5nQW5vbnltb3VzQ29sdW1u QmxvY2tzLgorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9 MTI5OTQ4CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAg KiBmYXN0L211bHRpY29sL211bHRpY29sLWxpLWNyYXNoLWV4cGVjdGVkLnR4dDogQWRkZWQuCisg ICAgICAgICogZmFzdC9tdWx0aWNvbC9tdWx0aWNvbC1saS1jcmFzaC5odG1sOiBBZGRlZC4KKwog MjAxNC0wMy0yMSAgU2VyZ2lvIFZpbGxhciBTZW5pbiAgPHN2aWxsYXJAaWdhbGlhLmNvbT4KIAog ICAgICAgICBVbnJldmlld2VkLiBSZWJhc2VsaW5lIGV4cGVjdGF0aW9ucyBhZnRlciByMTY1NjUx LgpJbmRleDogTGF5b3V0VGVzdHMvZmFzdC9tdWx0aWNvbC9tdWx0aWNvbC1saS1jcmFzaC1leHBl Y3RlZC50eHQKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMvZmFzdC9tdWx0aWNvbC9tdWx0aWNv bC1saS1jcmFzaC1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9mYXN0 L211bHRpY29sL211bHRpY29sLWxpLWNyYXNoLWV4cGVjdGVkLnR4dAkod29ya2luZyBjb3B5KQpA QCAtMCwwICsxLDIgQEAKK1RoaXMgdGVzdCBwYXNzZXMgaWYgaXQgZG9lc24ndCBjcmFzaC4KKwpJ bmRleDogTGF5b3V0VGVzdHMvZmFzdC9tdWx0aWNvbC9tdWx0aWNvbC1saS1jcmFzaC5odG1sCj09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT0KLS0tIExheW91dFRlc3RzL2Zhc3QvbXVsdGljb2wvbXVsdGljb2wtbGktY3Jhc2gu aHRtbAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL2Zhc3QvbXVsdGljb2wvbXVsdGljb2wt bGktY3Jhc2guaHRtbAkod29ya2luZyBjb3B5KQpAQCAtMCwwICsxLDggQEAKKzxzY3JpcHQ+Citp ZiAod2luZG93LmludGVybmFscykKKyAgICBpbnRlcm5hbHMuc2V0dGluZ3Muc2V0UmVnaW9uQmFz ZWRDb2x1bW5zRW5hYmxlZCh0cnVlKTsKK2lmICh3aW5kb3cudGVzdFJ1bm5lcikKKyAgICB0ZXN0 UnVubmVyLmR1bXBBc1RleHQoKQorPC9zY3JpcHQ+CitUaGlzIHRlc3QgcGFzc2VzIGlmIGl0IGRv ZXNuJ3QgY3Jhc2guCis8bGkgc3R5bGU9Im92ZXJmbG93OiAtd2Via2l0LXBhZ2VkLXg7Ij48L2xp Pgo=