136037 2014-08-18 04:02:01 -0700 ASSERTION FAILED: m_keyTimes.size() > 1 in WebCore::SVGAnimationElement::calculatePercentFromKeyPoints 2014-08-18 10:02:34 -0700 1 1 1 Unclassified WebKit SVG 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 116980 1 rhodovan.u-szeged rhodovan.u-szeged commit-queue d-r fmalita gyuyoung.kim pdr schenney sergio zimmermann oldest_to_newest 1029746 0 236754 rhodovan.u-szeged 2014-08-18 04:02:01 -0700 Created attachment 236754 Test case The failing test case: <svg xmlns="http://www.w3.org/2000/svg"> <circle> <animateMotion calcMode="linear" keyPoints="0.8" keyTimes="0" by="0 3"/> </circle> </svg> Backtrace: ASSERTION FAILED: m_keyTimes.size() > 1 ../../Source/WebCore/svg/SVGAnimationElement.cpp(453) : float WebCore::SVGAnimationElement::calculatePercentFromKeyPoints(float) const Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x7fff97537700 (LWP 26767)] 0x00007fffee49016d in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:329 329 *(int *)(uintptr_t)0xbbadbeef = 0; #0 0x00007fffee49016d in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:329 #1 0x00007ffff415ec1d in WebCore::SVGAnimationElement::calculatePercentFromKeyPoints (this=0x855f80, percent=0) at ../../Source/WebCore/svg/SVGAnimationElement.cpp:453 #2 0x00007ffff415fe8e in WebCore::SVGAnimationElement::updateAnimation (this=0x855f80, percent=0, repeatCount=0, resultElement=0x855f80) at ../../Source/WebCore/svg/SVGAnimationElement.cpp:631 #3 0x00007ffff423b807 in WebCore::SVGSMILElement::progress (this=0x855f80, elapsed=..., resultElement=0x855f80, seekToTime=false) at ../../Source/WebCore/svg/animation/SVGSMILElement.cpp:1109 #4 0x00007ffff4230c31 in WebCore::SMILTimeContainer::updateAnimations (this=0x881e80, elapsed=..., seekToTime=false) at ../../Source/WebCore/svg/animation/SMILTimeContainer.cpp:295 #5 0x00007ffff423027e in WebCore::SMILTimeContainer::begin (this=0x881e80) at ../../Source/WebCore/svg/animation/SMILTimeContainer.cpp:139 #6 0x00007ffff416c05f in WebCore::SVGDocumentExtensions::startAnimations (this=0x853110) at ../../Source/WebCore/svg/SVGDocumentExtensions.cpp:100 #7 0x00007ffff3665e17 in WebCore::Document::implicitClose (this=0xafe870) at ../../Source/WebCore/dom/Document.cpp:2461 #8 0x00007ffff3abf457 in WebCore::FrameLoader::checkCallImplicitClose (this=0x7bf098) at ../../Source/WebCore/loader/FrameLoader.cpp:898 #9 0x00007ffff3abf202 in WebCore::FrameLoader::checkCompleted (this=0x7bf098) at ../../Source/WebCore/loader/FrameLoader.cpp:844 #10 0x00007ffff3abef8a in WebCore::FrameLoader::finishedParsing (this=0x7bf098) at ../../Source/WebCore/loader/FrameLoader.cpp:764 #11 0x00007ffff366d625 in WebCore::Document::finishedParsing (this=0xafe870) at ../../Source/WebCore/dom/Document.cpp:4516 #12 0x00007ffff3962bc9 in WebCore::HTMLConstructionSite::finishedParsing (this=0x7ad668) at ../../Source/WebCore/html/parser/HTMLConstructionSite.cpp:395 #13 0x00007ffff399d03d in WebCore::HTMLTreeBuilder::finished (this=0x7ad650) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:2997 #14 0x00007ffff396a764 in WebCore::HTMLDocumentParser::end (this=0x88dc80) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:451 #15 0x00007ffff396a84f in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x88dc80) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:462 #16 0x00007ffff39693bd in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x88dc80) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:165 #17 0x00007ffff396a892 in WebCore::HTMLDocumentParser::attemptToEnd (this=0x88dc80) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:474 #18 0x00007ffff396a949 in WebCore::HTMLDocumentParser::finish (this=0x88dc80) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:502 #19 0x00007ffff3ab20f9 in WebCore::DocumentWriter::end (this=0x8c5df0) at ../../Source/WebCore/loader/DocumentWriter.cpp:250 #20 0x00007ffff3a9f14b in WebCore::DocumentLoader::finishedLoading (this=0x8c5d50, finishTime=0) at ../../Source/WebCore/loader/DocumentLoader.cpp:441 #21 0x00007ffff3a9eeb4 in WebCore::DocumentLoader::notifyFinished (this=0x8c5d50, resource=0x7ba7e0) at ../../Source/WebCore/loader/DocumentLoader.cpp:375 #22 0x00007ffff3b459cb in WebCore::CachedResource::checkNotify (this=0x7ba7e0) at ../../Source/WebCore/loader/cache/CachedResource.cpp:334 #23 0x00007ffff3b45ab2 in WebCore::CachedResource::finishLoading (this=0x7ba7e0) at ../../Source/WebCore/loader/cache/CachedResource.cpp:350 #24 0x00007ffff3b42a51 in WebCore::CachedRawResource::finishLoading (this=0x7ba7e0, data=0x9742e0) at ../../Source/WebCore/loader/cache/CachedRawResource.cpp:101 #25 0x00007ffff3af9576 in WebCore::SubresourceLoader::didFinishLoading (this=0x7bad40, finishTime=0) at ../../Source/WebCore/loader/SubresourceLoader.cpp:310 #26 0x00007ffff3af5a63 in WebCore::ResourceLoader::didFinishLoading (this=0x7bad40, finishTime=0) at ../../Source/WebCore/loader/ResourceLoader.cpp:518 #27 0x00007ffff43b174f in WebCore::readCallback (asyncResult=0x9d21f0, data=0x9d07f0) at ../../Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:1302 #28 0x00007fffec4422ea in async_ready_callback_wrapper (source_object=0xa3bb30, res=0x9d21f0, user_data=0x9d07f0) at ginputstream.c:519 #29 0x00007fffec461ceb in g_task_return_now (task=0x9d21f0) at gtask.c:1108 #30 0x00007fffec461d09 in complete_in_idle_cb (task=0x9d21f0) at gtask.c:1117 #31 0x00007fffeb6b82e6 in g_main_dispatch (context=0x677bb0) at gmain.c:3065 #32 g_main_context_dispatch (context=context@entry=0x677bb0) at gmain.c:3641 #33 0x00007fffeb6b8638 in g_main_context_iterate (context=0x677bb0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3712 #34 0x00007fffeb6b8a3a in g_main_loop_run (loop=0xafe740) at gmain.c:3906 #35 0x00007ffff4a0d57e in WTF::RunLoop::run () at ../../Source/WTF/wtf/gtk/RunLoopGtk.cpp:59 #36 0x00007ffff3191890 in WebKit::ChildProcessMain<WebKit::WebProcess, WebKit::WebProcessMain> (argc=2, argv=0x7fffffffda38) at ../../Source/WebKit2/Shared/unix/ChildProcessMain.h:61 #37 0x00007ffff31916f5 in WebKit::WebProcessMainUnix (argc=2, argv=0x7fffffffda38) at ../../Source/WebKit2/WebProcess/gtk/WebProcessMainGtk.cpp:73 #38 0x000000000040080d in main (argc=2, argv=0x7fffffffda38) at ../../Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp:32 1029747 1 236755 rhodovan.u-szeged 2014-08-18 04:05:29 -0700 Created attachment 236755 Proposed patch 1029788 2 236755 commit-queue 2014-08-18 10:02:29 -0700 Comment on attachment 236755 Proposed patch Clearing flags on attachment: 236755 Committed r172706: <http://trac.webkit.org/changeset/172706> 1029789 3 commit-queue 2014-08-18 10:02:34 -0700 All reviewed patches have been landed. Closing bug. 236754 2014-08-18 04:02:01 -0700 2014-08-18 04:02:01 -0700 Test case crash.html text/html 147 rhodovan.u-szeged PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPgogIDxjaXJjbGU+CiAgICA8 YW5pbWF0ZU1vdGlvbiBjYWxjTW9kZT0iZGlzY3JldGUiIGtleVBvaW50cz0iMC44IiBrZXlUaW1l cz0iMCIgdG89IjMiLz4KICA8L2NpcmNsZT4KPC9zdmc+ 236755 2014-08-18 04:05:29 -0700 2014-08-18 10:02:28 -0700 Proposed patch 0001-keytime-fix.patch text/plain 4430 rhodovan.u-szeged RnJvbSBiM2ZhZDY4OGU4NDFkZGFmNjM3YTM2MDBhZmRjYmYzY2ZiZDM2MTJjIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBSZW5hdGEgSG9kb3ZhbiA8cmhvZG92YW4udS1zemVnZWRAcGFy dG5lci5zYW1zdW5nLmNvbT4KRGF0ZTogTW9uLCAxOCBBdWcgMjAxNCAxMzowMjozMSArMDIwMApT dWJqZWN0OiBbUEFUQ0hdIGtleXRpbWUgZml4CgotLS0KIExheW91dFRlc3RzL0NoYW5nZUxvZyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8IDEwICsrKysrKysrKysKIC4uLi9pbnZh bGlkLWtleXRpbWUtbnVtYmVyLWNyYXNoLWV4cGVjdGVkLnR4dCAgICAgICAgICB8ICAxICsKIC4u Li9zdmcvYW5pbWF0aW9ucy9pbnZhbGlkLWtleXRpbWUtbnVtYmVyLWNyYXNoLmh0bWwgICB8IDE3 ICsrKysrKysrKysrKysrKysrCiBTb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgfCAxOCArKysrKysrKysrKysrKysrKysKIFNvdXJjZS9XZWJDb3Jl L3N2Zy9TVkdBbmltYXRpb25FbGVtZW50LmNwcCAgICAgICAgICAgICB8ICAzICsrKwogNSBmaWxl cyBjaGFuZ2VkLCA0OSBpbnNlcnRpb25zKCspCiBjcmVhdGUgbW9kZSAxMDA2NDQgTGF5b3V0VGVz dHMvc3ZnL2FuaW1hdGlvbnMvaW52YWxpZC1rZXl0aW1lLW51bWJlci1jcmFzaC1leHBlY3RlZC50 eHQKIGNyZWF0ZSBtb2RlIDEwMDY0NCBMYXlvdXRUZXN0cy9zdmcvYW5pbWF0aW9ucy9pbnZhbGlk LWtleXRpbWUtbnVtYmVyLWNyYXNoLmh0bWwKCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9DaGFu Z2VMb2cgYi9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKaW5kZXggM2VhNmVkMi4uZDgyMTZiOSAxMDA2 NDQKLS0tIGEvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCisrKyBiL0xheW91dFRlc3RzL0NoYW5nZUxv ZwpAQCAtMSwzICsxLDEzIEBACisyMDE0LTA4LTE4ICBSZW5hdGEgSG9kb3ZhbiAgPHJob2RvdmFu LnUtc3plZ2VkQHBhcnRuZXIuc2Ftc3VuZy5jb20+CisKKyAgICAgICAgRml4IGtleVRpbWVzIGxp c3QgbGVuZ3RoIG9mIGZyb20vdG8vYnkgYW5pbWF0aW9ucy4KKyAgICAgICAgaHR0cHM6Ly9idWdz LndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTEzNjAzNworCisgICAgICAgIFJldmlld2VkIGJ5 IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgICogc3ZnL2FuaW1hdGlvbnMvaW52YWxpZC1rZXl0 aW1lLW51bWJlci1jcmFzaC1leHBlY3RlZC50eHQ6IEFkZGVkLgorICAgICAgICAqIHN2Zy9hbmlt YXRpb25zL2ludmFsaWQta2V5dGltZS1udW1iZXItY3Jhc2guaHRtbDogQWRkZWQuCisKIDIwMTQt MDgtMTUgIFphbGFuIEJ1anRhcyAgPHphbGFuQGFwcGxlLmNvbT4KIAogICAgICAgICBSRUdSRVNT SU9OOiBQYXJ0cyBvZiB0aGUgcm91dGUvcm91dGUgb3B0aW9ucyB3aW5kb3dzIGFyZSBpbnZpc2li bGUgYXQgbWFwcy5nb29nbGUuY29tCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9zdmcvYW5pbWF0 aW9ucy9pbnZhbGlkLWtleXRpbWUtbnVtYmVyLWNyYXNoLWV4cGVjdGVkLnR4dCBiL0xheW91dFRl c3RzL3N2Zy9hbmltYXRpb25zL2ludmFsaWQta2V5dGltZS1udW1iZXItY3Jhc2gtZXhwZWN0ZWQu dHh0Cm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLmEwOTQwZDIKLS0tIC9kZXYv bnVsbAorKysgYi9MYXlvdXRUZXN0cy9zdmcvYW5pbWF0aW9ucy9pbnZhbGlkLWtleXRpbWUtbnVt YmVyLWNyYXNoLWV4cGVjdGVkLnR4dApAQCAtMCwwICsxIEBACitQQVNTIGlmIFdlYktpdCBkb2Vz IG5vdCBjcmFzaCBpbiBkZWJ1Zy4KZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL3N2Zy9hbmltYXRp b25zL2ludmFsaWQta2V5dGltZS1udW1iZXItY3Jhc2guaHRtbCBiL0xheW91dFRlc3RzL3N2Zy9h bmltYXRpb25zL2ludmFsaWQta2V5dGltZS1udW1iZXItY3Jhc2guaHRtbApuZXcgZmlsZSBtb2Rl IDEwMDY0NAppbmRleCAwMDAwMDAwLi5lOGY5NWY1Ci0tLSAvZGV2L251bGwKKysrIGIvTGF5b3V0 VGVzdHMvc3ZnL2FuaW1hdGlvbnMvaW52YWxpZC1rZXl0aW1lLW51bWJlci1jcmFzaC5odG1sCkBA IC0wLDAgKzEsMTcgQEAKKzwhRE9DVFlQRSBodG1sPgorPHN2ZyB4bWxucz0iaHR0cDovL3d3dy53 My5vcmcvMjAwMC9zdmciPgorICA8Y2lyY2xlPgorICAgIDxhbmltYXRlTW90aW9uIGNhbGNNb2Rl PSJkaXNjcmV0ZSIga2V5UG9pbnRzPSIwLjgiIGtleVRpbWVzPSIwIiB0bz0iMyIvPgorICA8L2Np cmNsZT4KKzwvc3ZnPgorPHA+UEFTUyBpZiBXZWJLaXQgZG9lcyBub3QgY3Jhc2ggaW4gZGVidWcu PC9wPgorPHNjcmlwdD4KK2lmICh3aW5kb3cudGVzdFJ1bm5lcikgeworICAgIHRlc3RSdW5uZXIu d2FpdFVudGlsRG9uZSgpOworICAgIHRlc3RSdW5uZXIuZHVtcEFzVGV4dCgpOworCisgICAgd2lu ZG93Lm9ubG9hZCA9IGZ1bmN0aW9uKCkgeworICAgICAgICB0ZXN0UnVubmVyLm5vdGlmeURvbmUo KTsKKyAgICB9OworfQorPC9zY3JpcHQ+ClwgTm8gbmV3bGluZSBhdCBlbmQgb2YgZmlsZQpkaWZm IC0tZ2l0IGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nIGIvU291cmNlL1dlYkNvcmUvQ2hhbmdl TG9nCmluZGV4IGQ3MmU2MjguLmNlMjNiMjIgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL0No YW5nZUxvZworKysgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKQEAgLTEsMyArMSwyMSBAQAor MjAxNC0wOC0xOCAgUmVuYXRhIEhvZG92YW4gIDxyaG9kb3Zhbi51LXN6ZWdlZEBwYXJ0bmVyLnNh bXN1bmcuY29tPgorCisgICAgICAgIEZpeCBrZXlUaW1lcyBsaXN0IGxlbmd0aCBvZiBmcm9tL3Rv L2J5IGFuaW1hdGlvbnMuCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVn LmNnaT9pZD0xMzYwMzcKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKwor ICAgICAgICBGb3IgZnJvbS90by9ieSBhbmltYXRpb25zLCB0aGUgbGVuZ3RoIG9mIGtleVRpbWVz IGFuZCBrZXlQb2ludHMKKyAgICAgICAgYXR0cmlidXRlIGlmIGFyZSBzcGVjaWZpZWQgbXVzdCBi ZSBlcXVhbCBhbmQgbXVzdCBoYXZlIGF0IGxlYXN0CisgICAgICAgIDIgdmFsdWVzLgorCisgICAg ICAgIFRoaXMgaXMgYmFja3BvcnQgb2YgbXkgZml4IGluIEJsaW5rOiBodHRwczovL2NvZGVyZXZp ZXcuY2hyb21pdW0ub3JnLzQ1MzI0MzAwMy8KKworICAgICAgICBUZXN0OiBzdmcvYW5pbWF0aW9u cy9pbnZhbGlkLWtleXRpbWUtbnVtYmVyLWNyYXNoLmh0bWwKKworICAgICAgICAqIHN2Zy9TVkdB bmltYXRpb25FbGVtZW50LmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OlNWR0FuaW1hdGlvbkVsZW1l bnQ6OnN0YXJ0ZWRBY3RpdmVJbnRlcnZhbCk6CisKIDIwMTQtMDgtMTUgIERlYW4gSmFja3NvbiAg PGRpbm9AYXBwbGUuY29tPgogCiAgICAgICAgIFJFR1JFU1NJT04gKHIxNjQxNzMpOiBTYWZhcmkg QXV0b0ZpbGwgYnV0dG9uIGluIHBvcG92ZXIsIGRlZmF1bHQgYnV0dG9ucyBvbiBpQ2xvdWQgY29u dHJvbCBwYW5lbCBhbmQgU2FmYXJpIFNhZmUgQnJvd3NpbmcgcGFnZXMgZG9uJ3QgaGF2ZSBkZWZh dWx0IGFwcGVhcmFuY2UKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL3N2Zy9TVkdBbmltYXRp b25FbGVtZW50LmNwcCBiL1NvdXJjZS9XZWJDb3JlL3N2Zy9TVkdBbmltYXRpb25FbGVtZW50LmNw cAppbmRleCAyYmE3NjlmLi4zYTFlZDUyIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9zdmcv U1ZHQW5pbWF0aW9uRWxlbWVudC5jcHAKKysrIGIvU291cmNlL1dlYkNvcmUvc3ZnL1NWR0FuaW1h dGlvbkVsZW1lbnQuY3BwCkBAIC01ODQsNiArNTg0LDkgQEAgdm9pZCBTVkdBbmltYXRpb25FbGVt ZW50OjpzdGFydGVkQWN0aXZlSW50ZXJ2YWwoKQogICAgIFN0cmluZyBieSA9IGJ5VmFsdWUoKTsK ICAgICBpZiAoYW5pbWF0aW9uTW9kZSA9PSBOb0FuaW1hdGlvbikKICAgICAgICAgcmV0dXJuOwor ICAgIGlmICgoYW5pbWF0aW9uTW9kZSA9PSBGcm9tVG9BbmltYXRpb24gfHwgYW5pbWF0aW9uTW9k ZSA9PSBGcm9tQnlBbmltYXRpb24gfHwgYW5pbWF0aW9uTW9kZSA9PSBUb0FuaW1hdGlvbiB8fCBh bmltYXRpb25Nb2RlID09IEJ5QW5pbWF0aW9uKQorICAgICAgICAmJiAoZmFzdEhhc0F0dHJpYnV0 ZShTVkdOYW1lczo6a2V5UG9pbnRzQXR0cikgJiYgZmFzdEhhc0F0dHJpYnV0ZShTVkdOYW1lczo6 a2V5VGltZXNBdHRyKSAmJiAobV9rZXlUaW1lcy5zaXplKCkgPCAyIHx8IG1fa2V5VGltZXMuc2l6 ZSgpICE9IG1fa2V5UG9pbnRzLnNpemUoKSkpKQorICAgICAgICByZXR1cm47CiAgICAgaWYgKGFu aW1hdGlvbk1vZGUgPT0gRnJvbVRvQW5pbWF0aW9uKQogICAgICAgICBtX2FuaW1hdGlvblZhbGlk ID0gY2FsY3VsYXRlRnJvbUFuZFRvVmFsdWVzKGZyb20sIHRvKTsKICAgICBlbHNlIGlmIChhbmlt YXRpb25Nb2RlID09IFRvQW5pbWF0aW9uKSB7Ci0tIAoxLjguMy4yCgo=