<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>136365</bug_id>
          
          <creation_ts>2014-08-29 04:54:09 -0700</creation_ts>
          <short_desc>ASSERTION FAILED: count &gt;= 1 in WebCore::RenderMultiColumnSet::columnCount</short_desc>
          <delta_ts>2016-12-07 15:22:01 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Layout and Rendering</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>116980</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Renata Hodovan">rhodovan.u-szeged</reporter>
          <assigned_to name="alan">zalan</assigned_to>
          <cc>bfulgham</cc>
    
    <cc>commit-queue</cc>
    
    <cc>hyatt</cc>
    
    <cc>mstensho</cc>
    
    <cc>simon.fraser</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>zalan</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1032144</commentid>
    <comment_count>0</comment_count>
      <attachid>237343</attachid>
    <who name="Renata Hodovan">rhodovan.u-szeged</who>
    <bug_when>2014-08-29 04:54:09 -0700</bug_when>
    <thetext>Created attachment 237343
Test case

The failing test case:

&lt;!DOCTYPE html&gt;
&lt;CITE&gt;
    &lt;object&gt;&lt;/object&gt;
&lt;/CITE&gt;
&lt;style&gt;
* {
    padding-right: 3%;
    -webkit-column-count: 2;
    padding-top: 17902000vh;
}
&lt;/style&gt;


Backtrace:

ASSERTION FAILED: count &gt;= 1
/home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderMultiColumnSet.cpp(443) : unsigned int WebCore::RenderMultiColumnSet::columnCount() const
1   0x7ffff3ef343b WTFCrash
2   0x7ffff3037e76 WebCore::RenderMultiColumnSet::columnCount() const
3   0x7ffff303a580 WebCore::RenderMultiColumnSet::addOverflowFromChildren()
4   0x7ffff2ed2a79 WebCore::RenderBlock::computeOverflow(WebCore::LayoutUnit, bool)
5   0x7ffff2f06e6b WebCore::RenderBlockFlow::computeOverflow(WebCore::LayoutUnit, bool)
6   0x7ffff2effb85 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
7   0x7ffff2ed25af WebCore::RenderBlock::layout()
8   0x7ffff3037b17 WebCore::RenderMultiColumnSet::layout()
9   0x7ffff2f00790 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&amp;, WebCore::RenderBlockFlow::MarginInfo&amp;, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;)
10  0x7ffff2f002b1 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&amp;)
11  0x7ffff2eff6ce WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
12  0x7ffff2f0e46b WebCore::RenderBlockFlow::relayoutForPagination(WebCore::LayoutStateMaintainer&amp;)
13  0x7ffff2eff816 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
14  0x7ffff2ed25af WebCore::RenderBlock::layout()
15  0x7ffff2f00790 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&amp;, WebCore::RenderBlockFlow::MarginInfo&amp;, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;)
16  0x7ffff2f002b1 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&amp;)
17  0x7ffff2eff6ce WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
18  0x7ffff2ed25af WebCore::RenderBlock::layout()
19  0x7ffff2f8d874 WebCore::RenderFlowThread::layout()
20  0x7ffff303113c WebCore::RenderMultiColumnFlowThread::layout()
21  0x7ffff2f0eb86 WebCore::RenderBlockFlow::layoutSpecialExcludedChild(bool)
22  0x7ffff2f0017a WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&amp;)
23  0x7ffff2eff6ce WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
24  0x7ffff2ed25af WebCore::RenderBlock::layout()
25  0x7ffff2f00790 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&amp;, WebCore::RenderBlockFlow::MarginInfo&amp;, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;)
26  0x7ffff2f002b1 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&amp;)
27  0x7ffff2eff6ce WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
28  0x7ffff2ed25af WebCore::RenderBlock::layout()
29  0x7ffff30bd207 WebCore::RenderView::layoutContent(WebCore::LayoutState const&amp;)
30  0x7ffff30bd8d7 WebCore::RenderView::layout()
31  0x7ffff2cfd2e5 WebCore::FrameView::layout(bool)

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fff91255700 (LWP 17731)]
0x00007ffff3ef3440 in WTFCrash () at /home/reni/data/REPOS/webkit/Source/WTF/wtf/Assertions.cpp:329
329     *(int *)(uintptr_t)0xbbadbeef = 0;
#0  0x00007ffff3ef3440 in WTFCrash () at /home/reni/data/REPOS/webkit/Source/WTF/wtf/Assertions.cpp:329
#1  0x00007ffff3037e76 in WebCore::RenderMultiColumnSet::columnCount (this=0x7ff210) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderMultiColumnSet.cpp:443
#2  0x00007ffff303a580 in WebCore::RenderMultiColumnSet::addOverflowFromChildren (this=0x7ff210) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderMultiColumnSet.cpp:868
#3  0x00007ffff2ed2a79 in WebCore::RenderBlock::computeOverflow (this=0x7ff210, oldClientAfterEdge=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlock.cpp:1102
#4  0x00007ffff2f06e6b in WebCore::RenderBlockFlow::computeOverflow (this=0x7ff210, oldClientAfterEdge=..., recomputeFloats=false) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:2080
#5  0x00007ffff2effb85 in WebCore::RenderBlockFlow::layoutBlock (this=0x7ff210, relayoutChildren=true, pageLogicalHeight=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:527
#6  0x00007ffff2ed25af in WebCore::RenderBlock::layout (this=0x7ff210) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlock.cpp:1019
#7  0x00007ffff3037b17 in WebCore::RenderMultiColumnSet::layout (this=0x7ff210) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderMultiColumnSet.cpp:388
#8  0x00007ffff2f00790 in WebCore::RenderBlockFlow::layoutBlockChild (this=0x7118d0, child=..., marginInfo=..., previousFloatLogicalBottom=..., maxFloatLogicalBottom=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:711
#9  0x00007ffff2f002b1 in WebCore::RenderBlockFlow::layoutBlockChildren (this=0x7118d0, relayoutChildren=true, maxFloatLogicalBottom=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:632
#10 0x00007ffff2eff6ce in WebCore::RenderBlockFlow::layoutBlock (this=0x7118d0, relayoutChildren=true, pageLogicalHeight=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:485
#11 0x00007ffff2f0e46b in WebCore::RenderBlockFlow::relayoutForPagination (this=0x7118d0, statePusher=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:3390
#12 0x00007ffff2eff816 in WebCore::RenderBlockFlow::layoutBlock (this=0x7118d0, relayoutChildren=true, pageLogicalHeight=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:492
#13 0x00007ffff2ed25af in WebCore::RenderBlock::layout (this=0x7118d0) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlock.cpp:1019
#14 0x00007ffff2f00790 in WebCore::RenderBlockFlow::layoutBlockChild (this=0x7b03a0, child=..., marginInfo=..., previousFloatLogicalBottom=..., maxFloatLogicalBottom=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:711
#15 0x00007ffff2f002b1 in WebCore::RenderBlockFlow::layoutBlockChildren (this=0x7b03a0, relayoutChildren=false, maxFloatLogicalBottom=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:632
#16 0x00007ffff2eff6ce in WebCore::RenderBlockFlow::layoutBlock (this=0x7b03a0, relayoutChildren=false, pageLogicalHeight=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:485
#17 0x00007ffff2ed25af in WebCore::RenderBlock::layout (this=0x7b03a0) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlock.cpp:1019
#18 0x00007ffff2f8d874 in WebCore::RenderFlowThread::layout (this=0x7b03a0) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderFlowThread.cpp:201
#19 0x00007ffff303113c in WebCore::RenderMultiColumnFlowThread::layout (this=0x7b03a0) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderMultiColumnFlowThread.cpp:135
#20 0x00007ffff2f0eb86 in WebCore::RenderBlockFlow::layoutSpecialExcludedChild (this=0x6e2bd0, relayoutChildren=true) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:3627
#21 0x00007ffff2f0017a in WebCore::RenderBlockFlow::layoutBlockChildren (this=0x6e2bd0, relayoutChildren=true, maxFloatLogicalBottom=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:604
#22 0x00007ffff2eff6ce in WebCore::RenderBlockFlow::layoutBlock (this=0x6e2bd0, relayoutChildren=true, pageLogicalHeight=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:485
#23 0x00007ffff2ed25af in WebCore::RenderBlock::layout (this=0x6e2bd0) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlock.cpp:1019
#24 0x00007ffff2f00790 in WebCore::RenderBlockFlow::layoutBlockChild (this=0x73b3a0, child=..., marginInfo=..., previousFloatLogicalBottom=..., maxFloatLogicalBottom=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:711
#25 0x00007ffff2f002b1 in WebCore::RenderBlockFlow::layoutBlockChildren (this=0x73b3a0, relayoutChildren=true, maxFloatLogicalBottom=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:632
#26 0x00007ffff2eff6ce in WebCore::RenderBlockFlow::layoutBlock (this=0x73b3a0, relayoutChildren=true, pageLogicalHeight=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:485
#27 0x00007ffff2ed25af in WebCore::RenderBlock::layout (this=0x73b3a0) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlock.cpp:1019
#28 0x00007ffff30bd207 in WebCore::RenderView::layoutContent (this=0x73b3a0, state=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderView.cpp:232
#29 0x00007ffff30bd8d7 in WebCore::RenderView::layout (this=0x73b3a0) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderView.cpp:357
#30 0x00007ffff2cfd2e5 in WebCore::FrameView::layout (this=0x6e0a80, allowSubtree=true) at /home/reni/data/REPOS/webkit/Source/WebCore/page/FrameView.cpp:1301
#31 0x00007ffff27e806b in WebCore::Document::implicitClose (this=0x70f290) at /home/reni/data/REPOS/webkit/Source/WebCore/dom/Document.cpp:2440
#32 0x00007ffff2bc4749 in WebCore::FrameLoader::checkCallImplicitClose (this=0x6cfdf8) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/FrameLoader.cpp:898
#33 0x00007ffff2bc44b1 in WebCore::FrameLoader::checkCompleted (this=0x6cfdf8) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/FrameLoader.cpp:844
#34 0x00007ffff2bc421a in WebCore::FrameLoader::finishedParsing (this=0x6cfdf8) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/FrameLoader.cpp:764
#35 0x00007ffff27f0aed in WebCore::Document::finishedParsing (this=0x70f290) at /home/reni/data/REPOS/webkit/Source/WebCore/dom/Document.cpp:4523
#36 0x00007ffff39011b9 in WebCore::HTMLConstructionSite::finishedParsing (this=0x781398) at /home/reni/data/REPOS/webkit/Source/WebCore/html/parser/HTMLConstructionSite.cpp:395
#37 0x00007ffff2adf389 in WebCore::HTMLTreeBuilder::finished (this=0x781380) at /home/reni/data/REPOS/webkit/Source/WebCore/html/parser/HTMLTreeBuilder.cpp:2997
#38 0x00007ffff2ab1028 in WebCore::HTMLDocumentParser::end (this=0x6b9500) at /home/reni/data/REPOS/webkit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:451
#39 0x00007ffff2ab1113 in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x6b9500) at /home/reni/data/REPOS/webkit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:462
#40 0x00007ffff2aafac9 in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x6b9500) at /home/reni/data/REPOS/webkit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:165
#41 0x00007ffff2ab1156 in WebCore::HTMLDocumentParser::attemptToEnd (this=0x6b9500) at /home/reni/data/REPOS/webkit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:474
#42 0x00007ffff2ab120d in WebCore::HTMLDocumentParser::finish (this=0x6b9500) at /home/reni/data/REPOS/webkit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:502
#43 0x00007ffff2bb5911 in WebCore::DocumentWriter::end (this=0x783e60) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/DocumentWriter.cpp:250
#44 0x00007ffff2ba0ea7 in WebCore::DocumentLoader::finishedLoading (this=0x783dc0, finishTime=0) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/DocumentLoader.cpp:441
#45 0x00007ffff2ba0c10 in WebCore::DocumentLoader::notifyFinished (this=0x783dc0, resource=0x79eb80) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/DocumentLoader.cpp:375
#46 0x00007ffff2c54952 in WebCore::CachedResource::checkNotify (this=0x79eb80) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/cache/CachedResource.cpp:333
#47 0x00007ffff2c54a5c in WebCore::CachedResource::finishLoading (this=0x79eb80) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/cache/CachedResource.cpp:349
#48 0x00007ffff2c5138a in WebCore::CachedRawResource::finishLoading (this=0x79eb80, data=0x6c2e10) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/cache/CachedRawResource.cpp:101
#49 0x00007ffff2c0452c in WebCore::SubresourceLoader::didFinishLoading (this=0x79f0e0, finishTime=0) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/SubresourceLoader.cpp:306
#50 0x00007ffff2c001bb in WebCore::ResourceLoader::didFinishLoading (this=0x79f0e0, finishTime=0) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/ResourceLoader.cpp:512
#51 0x00007ffff339390d in WebCore::readCallback (asyncResult=0x7a29f0, data=0x79f710) at /home/reni/data/REPOS/webkit/Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:1302
#52 0x00007fffeb3c1816 in async_ready_callback_wrapper (source_object=0x6c4db0, res=0x7a29f0, user_data=user_data@entry=0x79f710) at ginputstream.c:523
#53 0x00007fffeb3e7115 in g_task_return_now (task=0x7a29f0) at gtask.c:1077
#54 0x00007fffeb3e7139 in complete_in_idle_cb (task=0x7a29f0) at gtask.c:1086
#55 0x00007fffeae23a7d in g_main_dispatch (context=0x6bc390) at gmain.c:3064
#56 g_main_context_dispatch (context=context@entry=0x6bc390) at gmain.c:3663
#57 0x00007fffec6875e0 in _ecore_glib_select__locked (ecore_timeout=&lt;optimized out&gt;, efds=&lt;optimized out&gt;, wfds=0x7fffffffd5d0, rfds=0x7fffffffd550, ecore_fds=10, ctx=&lt;optimized out&gt;) at lib/ecore/ecore_glib.c:172
#58 _ecore_glib_select (ecore_fds=10, rfds=0x7fffffffd550, wfds=0x7fffffffd5d0, efds=&lt;optimized out&gt;, ecore_timeout=&lt;optimized out&gt;) at lib/ecore/ecore_glib.c:204
#59 0x00007fffec689ff4 in _ecore_main_select (timeout=&lt;optimized out&gt;) at lib/ecore/ecore_main.c:1579
#60 0x00007fffec68a995 in _ecore_main_loop_iterate_internal (once_only=once_only@entry=0) at lib/ecore/ecore_main.c:2005
#61 0x00007fffec68aa57 in ecore_main_loop_begin () at lib/ecore/ecore_main.c:1042
#62 0x00007ffff3f38db5 in WTF::RunLoop::run () at /home/reni/data/REPOS/webkit/Source/WTF/wtf/efl/RunLoopEfl.cpp:51
#63 0x00007ffff207062a in WebKit::ChildProcessMain&lt;WebKit::WebProcess, WebKit::WebProcessMain&gt; (argc=2, argv=0x7fffffffda78) at /home/reni/data/REPOS/webkit/Source/WebKit2/Shared/unix/ChildProcessMain.h:61
#64 0x00007ffff2070408 in WebKit::WebProcessMainUnix (argc=2, argv=0x7fffffffda78) at /home/reni/data/REPOS/webkit/Source/WebKit2/WebProcess/efl/WebProcessMainEfl.cpp:124
#65 0x000000000040084d in main (argc=2, argv=0x7fffffffda78) at /home/reni/data/REPOS/webkit/Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp:32</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1065220</commentid>
    <comment_count>1</comment_count>
    <who name="Renata Hodovan">rhodovan.u-szeged</who>
    <bug_when>2015-01-29 06:37:32 -0800</bug_when>
    <thetext>I can&apos;t repro this anymore.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1068059</commentid>
    <comment_count>2</comment_count>
      <attachid>246325</attachid>
    <who name="Renata Hodovan">rhodovan.u-szeged</who>
    <bug_when>2015-02-10 07:55:45 -0800</bug_when>
    <thetext>Created attachment 246325
Repro 2

Reopening the bug since the new test case still produces the failure.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1068060</commentid>
    <comment_count>3</comment_count>
    <who name="Renata Hodovan">rhodovan.u-szeged</who>
    <bug_when>2015-02-10 07:56:55 -0800</bug_when>
    <thetext>Reopening...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1217232</commentid>
    <comment_count>4</comment_count>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2016-08-03 14:58:46 -0700</bug_when>
    <thetext>This reproduces in r204037.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1217234</commentid>
    <comment_count>5</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2016-08-03 15:03:40 -0700</bug_when>
    <thetext>&lt;rdar://problem/27686727&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1257367</commentid>
    <comment_count>6</comment_count>
      <attachid>296421</attachid>
    <who name="alan">zalan</who>
    <bug_when>2016-12-07 14:14:58 -0800</bug_when>
    <thetext>Created attachment 296421
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1257397</commentid>
    <comment_count>7</comment_count>
      <attachid>296421</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2016-12-07 15:21:56 -0800</bug_when>
    <thetext>Comment on attachment 296421
Patch

Clearing flags on attachment: 296421

Committed r209487: &lt;http://trac.webkit.org/changeset/209487&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1257398</commentid>
    <comment_count>8</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2016-12-07 15:22:01 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="0"
              isprivate="0"
          >
            <attachid>237343</attachid>
            <date>2014-08-29 04:54:09 -0700</date>
            <delta_ts>2015-02-10 07:55:45 -0800</delta_ts>
            <desc>Test case</desc>
            <filename>crash.html</filename>
            <type>text/html</type>
            <size>150</size>
            <attacher name="Renata Hodovan">rhodovan.u-szeged</attacher>
            
              <data encoding="base64">PCFET0NUWVBFIGh0bWw+CjxDSVRFPgogICAgPG9iamVjdD48L29iamVjdD4KPC9DSVRFPgo8c3R5
bGU+CiogewogIHBhZGRpbmctcmlnaHQ6IDMlOwogIC13ZWJraXQtY29sdW1uLWNvdW50OiAyOwog
IHBhZGRpbmctdG9wOiAxNzkwMjAwMHZoOwp9Cjwvc3R5bGU+
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>246325</attachid>
            <date>2015-02-10 07:55:45 -0800</date>
            <delta_ts>2015-02-10 07:55:45 -0800</delta_ts>
            <desc>Repro 2</desc>
            <filename>crash2.html</filename>
            <type>text/html</type>
            <size>68</size>
            <attacher name="Renata Hodovan">rhodovan.u-szeged</attacher>
            
              <data encoding="base64">PHN0eWxlPgoqIHsKICAgIGNvbHVtbi1jb3VudDogMjsKICAgIHpvb206IDgwMTc7Cn0KPC9zdHls
ZT4KPGJ1dHRvbj4=
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>296421</attachid>
            <date>2016-12-07 14:14:58 -0800</date>
            <delta_ts>2016-12-07 15:21:56 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-136365-20161207141418.patch</filename>
            <type>text/plain</type>
            <size>3572</size>
            <attacher name="alan">zalan</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjA5NDI4CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
      

    </bug>

</bugzilla>