132117 2014-04-24 01:55:15 -0700 [CSS Regions] In some situations, flowing the body into a flow thread causes an assertion failure 2022-07-12 17:21:53 -0700 1 1 1 Unclassified WebKit CSS 528+ (Nightly build) Unspecified Unspecified RESOLVED WONTFIX AdobeTracked P2 Normal --- 57312 1 stavila webkit-unassigned bfulgham oldest_to_newest 1003586 0 stavila 2014-04-24 01:55:15 -0700 See attached test-case. OUTPUT: ASSERTION FAILED: m_invalidRegionList.contains(renderNamedFlowFragment) /Adobe/WebKit/Source/WebCore/rendering/RenderNamedFlowThread.cpp(257) : virtual void WebCore::RenderNamedFlowThread::removeRegionFromThread(WebCore::RenderRegion *) 1 0x108459d50 WTFCrash 2 0x10b49a625 WebCore::RenderNamedFlowThread::removeRegionFromThread(WebCore::RenderRegion*) 3 0x10b4bcf6f WebCore::RenderRegion::detachRegion() 4 0x10b496073 WebCore::RenderNamedFlowFragment::detachRegion() 5 0x10b4bd467 WebCore::RenderRegion::willBeRemovedFromTree() 6 0x10b3839d8 WebCore::RenderElement::removeChildInternal(WebCore::RenderObject&, WebCore::RenderElement::NotifyChildrenType) 7 0x10b3837b2 WebCore::RenderElement::removeChild(WebCore::RenderObject&) 8 0x10b2b6b93 WebCore::RenderBlock::removeChild(WebCore::RenderObject&) 9 0x10b306c1d WebCore::RenderBlockFlow::removeChild(WebCore::RenderObject&) 10 0x10b4aacf6 WebCore::RenderObject::removeFromParent() 11 0x10b4b40e6 WebCore::RenderObject::willBeDestroyed() 12 0x10b385570 WebCore::RenderElement::willBeDestroyed() 13 0x10b45e016 WebCore::RenderLayerModelObject::willBeDestroyed() 14 0x10b34d1f6 WebCore::RenderBoxModelObject::willBeDestroyed() 15 0x10b326d7a WebCore::RenderBox::willBeDestroyed() 16 0x10b2efafc WebCore::RenderBlockFlow::willBeDestroyed() 17 0x10b4b452d WebCore::RenderObject::destroy() 18 0x10b2efb4f WebCore::RenderBlockFlow::setRenderNamedFlowFragment(WebCore::RenderNamedFlowFragment*) 19 0x10b2ef95e WebCore::RenderBlockFlow::willBeDestroyed() 20 0x10b4b452d WebCore::RenderObject::destroy() 21 0x10b4b4502 WebCore::RenderObject::destroyAndCleanupAnonymousWrappers() 22 0x10b847f05 WebCore::Style::detachRenderTree(WebCore::Element&, WebCore::Style::DetachType) 23 0x10b849f7a WebCore::Style::detachChildren(WebCore::ContainerNode&, WebCore::Style::DetachType) 24 0x10b847ed9 WebCore::Style::detachRenderTree(WebCore::Element&, WebCore::Style::DetachType) 25 0x10b84a176 WebCore::Style::resolveLocal(WebCore::Element&, WebCore::ContainerNode&, WebCore::Style::RenderTreePosition&, WebCore::Style::Change) 26 0x10b847b0b WebCore::Style::resolveTree(WebCore::Element&, WebCore::ContainerNode&, WebCore::Style::RenderTreePosition&, WebCore::Style::Change) 27 0x10b847d49 WebCore::Style::resolveTree(WebCore::Element&, WebCore::ContainerNode&, WebCore::Style::RenderTreePosition&, WebCore::Style::Change) 28 0x10b8479b8 WebCore::Style::resolveTree(WebCore::Document&, WebCore::Style::Change) 29 0x10a160c86 WebCore::Document::recalcStyle(WebCore::Style::Change) 30 0x10a15d20f WebCore::Document::updateStyleIfNeeded() 31 0x10a16cf02 WebCore::Document::finishedParsing() 1003589 1 230064 stavila 2014-04-24 01:56:51 -0700 Created attachment 230064 Test-case 1882848 2 bfulgham 2022-07-12 17:21:53 -0700 CSS Regions were removed in Bug 174978. 230064 2014-04-24 01:56:51 -0700 2014-04-24 01:56:51 -0700 Test-case crash.html text/html 1521 stavila PCFkb2N0eXBlIGh0bWw+CjxodG1sPgogICAgPGhlYWQ+CiAgICAgICAgPHNjcmlwdCBzcmM9Ii4u Ly4uLy4uL3Jlc291cmNlcy9qcy10ZXN0LXByZS5qcyI+PC9zY3JpcHQ+CiAgICA8L2hlYWQ+Cgog ICAgPHN0eWxlPgoKICAgICAgICAjcmVnaW9uIHsKICAgICAgICAgICAgLXdlYmtpdC1mbG93LWZy b206IGZsb3c7CiAgICAgICAgfQoKICAgIDwvc3R5bGU+CgogICAgPGJvZHk+CiAgICAgICAgPGRp diBpZD0icmVnaW9uIi8+CiAgICAgICAgCiAgICAgICAgPHNjcmlwdD4KICAgICAgICAgICAgZGVz Y3JpcHRpb24oIlRlc3Qgb2Zmc2V0UGFyZW50IGZvciBib2R5IGluIGEgbmFtZWQgZmxvdy4iKQoK ICAgICAgICAgICAgZG9jdW1lbnQuYm9keS5zdHlsZS53ZWJraXRGbG93SW50byA9ICJmbG93IjsK ICAgICAgICAgICAgCiAgICAgICAgICAgIHZhciBhcnRpY2xlID0gZG9jdW1lbnQuY3JlYXRlRWxl bWVudCgiZGl2Iik7CiAgICAgICAgICAgIGRvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYXJ0aWNs ZSk7CiAgICAgICAgICAgIHNob3VsZEJlKCJhcnRpY2xlLm9mZnNldFBhcmVudCIsICJkb2N1bWVu dC5ib2R5Iik7CgogICAgICAgICAgICB2YXIgY2hhcHRlciA9IGRvY3VtZW50LmNyZWF0ZUVsZW1l bnQoImRpdiIpOwogICAgICAgICAgICBhcnRpY2xlLmFwcGVuZENoaWxkKGNoYXB0ZXIpOwogICAg ICAgICAgICBzaG91bGRCZSgiY2hhcHRlci5vZmZzZXRQYXJlbnQiLCAiZG9jdW1lbnQuYm9keSIp OwoKICAgICAgICAgICAgYXJ0aWNsZS5zdHlsZS5wb3NpdGlvbiA9ICJyZWxhdGl2ZSI7CiAgICAg ICAgICAgIHNob3VsZEJlKCJjaGFwdGVyLm9mZnNldFBhcmVudCIsICJhcnRpY2xlIik7CgogICAg ICAgICAgICB2YXIgdGFibGUgPSBkb2N1bWVudC5jcmVhdGVFbGVtZW50KCJ0YWJsZSIpOwogICAg ICAgICAgICBkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKHRhYmxlKTsKCiAgICAgICAgICAgIHZh ciB0ZCA9IGRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoInRkIik7CiAgICAgICAgICAgIHRhYmxlLmFw cGVuZENoaWxkKHRkKTsKCiAgICAgICAgICAgIHZhciB0ZENoaWxkID0gZG9jdW1lbnQuY3JlYXRl RWxlbWVudCgiZGl2Iik7CiAgICAgICAgICAgIHRkLmFwcGVuZENoaWxkKHRkQ2hpbGQpOwogICAg ICAgICAgICBzaG91bGRCZSgidGRDaGlsZC5vZmZzZXRQYXJlbnQiLCAidGQiKTsKCiAgICAgICAg ICAgIHRkQ2hpbGQuc3R5bGUud2Via2l0Rmxvd0ludG8gPSAiZmxvdyI7CiAgICAgICAgICAgIHNo b3VsZEJlKCJ0ZENoaWxkLm9mZnNldFBhcmVudCIsICJkb2N1bWVudC5ib2R5Iik7CgogICAgICAg ICAgICBzaG91bGRCZU51bGwoImRvY3VtZW50LmJvZHkub2Zmc2V0UGFyZW50Iik7CgogICAgICAg ICAgICBkb2N1bWVudC5ib2R5LnN0eWxlLndlYmtpdEZsb3dJbnRvID0gbnVsbDsKICAgICAgICA8 L3NjcmlwdD4KICAgICAgICA8c2NyaXB0IHNyYz0iLi4vLi4vLi4vcmVzb3VyY2VzL2pzLXRlc3Qt cG9zdC5qcyI+PC9zY3JpcHQ+CiAgICA8L2JvZHk+CjwvaHRtbD4K