136368 2014-08-29 06:12:37 -0700 ASSERTION FAILED: lineRuns.size() == 1 in WebCore::SimpleLineLayout::createLineRuns 2015-01-29 06:46:07 -0800 1 1 1 Unclassified WebKit Layout and Rendering 528+ (Nightly build) Unspecified Unspecified RESOLVED WORKSFORME P2 Normal --- 116980 1 rhodovan.u-szeged webkit-unassigned kling koivisto oldest_to_newest 1032150 0 237346 rhodovan.u-szeged 2014-08-29 06:12:37 -0700 Created attachment 237346 Test case The test case: <!DOCTYPE html> <body>a</body> <style> style { font-variant:small-caps; display:inline-block; } *{ max-width:10.0%; font-size:0.400px; } </style> Backtrace: ASSERTION FAILED: lineRuns.size() == 1 /home/reni/data/REPOS/webkit/Source/WebCore/rendering/SimpleLineLayout.cpp(357) : WTF::Vector<WebCore::SimpleLineLayout::Run, 4ul> WebCore::SimpleLineLayout::createLineRuns(unsigned int, WebCore::LineWidth&, WebCore::LazyLineBreakIterator&, const WebCore::SimpleLineLayout::Style&, const CharacterType*, unsigned int, const WebCore::RenderText&) [with CharacterType = unsigned char] 1 0x7ffff3ef343b WTFCrash 2 0x7ffff30e5d64 WTF::Vector<WebCore::SimpleLineLayout::Run, 4ul, WTF::CrashOnOverflow> WebCore::SimpleLineLayout::createLineRuns<unsigned char>(unsigned int, WebCore::LineWidth&, WebCore::LazyLineBreakIterator&, WebCore::SimpleLineLayout::Style const&, unsigned char const*, unsigned int, WebCore::RenderText const&) 3 0x7ffff30e4d69 void WebCore::SimpleLineLayout::createTextRuns<unsigned char>(WTF::Vector<WebCore::SimpleLineLayout::Run, 10ul, WTF::CrashOnOverflow>&, unsigned int&, WebCore::RenderBlockFlow&, WebCore::RenderText&) 4 0x7ffff30e3dc4 WebCore::SimpleLineLayout::create(WebCore::RenderBlockFlow&) 5 0x7ffff2f0e68e WebCore::RenderBlockFlow::layoutSimpleLines(WebCore::LayoutUnit&, WebCore::LayoutUnit&) 6 0x7ffff2f00383 WebCore::RenderBlockFlow::layoutInlineChildren(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 7 0x7ffff2eff6aa WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) 8 0x7ffff2ed25af WebCore::RenderBlock::layout() 9 0x7ffff2ea616b WebCore::RenderElement::layoutIfNeeded() 10 0x7ffff2f1f916 WebCore::RenderBlockFlow::layoutLineBoxes(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 11 0x7ffff2f003b4 WebCore::RenderBlockFlow::layoutInlineChildren(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 12 0x7ffff2eff6aa WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) 13 0x7ffff2ed25af WebCore::RenderBlock::layout() 14 0x7ffff2f00790 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 15 0x7ffff2f002b1 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) 16 0x7ffff2eff6ce WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) 17 0x7ffff2ed25af WebCore::RenderBlock::layout() 18 0x7ffff2f00790 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 19 0x7ffff2f002b1 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) 20 0x7ffff2eff6ce WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) 21 0x7ffff2ed25af WebCore::RenderBlock::layout() 22 0x7ffff30bd207 WebCore::RenderView::layoutContent(WebCore::LayoutState const&) 23 0x7ffff30bd8d7 WebCore::RenderView::layout() 24 0x7ffff2cfd2e5 WebCore::FrameView::layout(bool) 25 0x7ffff27e806b WebCore::Document::implicitClose() 26 0x7ffff2bc4749 WebCore::FrameLoader::checkCallImplicitClose() 27 0x7ffff2bc44b1 WebCore::FrameLoader::checkCompleted() 28 0x7ffff2bc421a WebCore::FrameLoader::finishedParsing() 29 0x7ffff27f0aed WebCore::Document::finishedParsing() 30 0x7ffff39011b9 WebCore::HTMLConstructionSite::finishedParsing() 31 0x7ffff2adf389 WebCore::HTMLTreeBuilder::finished() Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x7fff91255700 (LWP 5751)] 0x00007ffff3ef3440 in WTFCrash () at /home/reni/data/REPOS/webkit/Source/WTF/wtf/Assertions.cpp:329 329 *(int *)(uintptr_t)0xbbadbeef = 0; #0 0x00007ffff3ef3440 in WTFCrash () at /home/reni/data/REPOS/webkit/Source/WTF/wtf/Assertions.cpp:329 #1 0x00007ffff30e5d64 in WebCore::SimpleLineLayout::createLineRuns<unsigned char> (lineStart=7, lineWidth=..., lineBreakIterator=..., style=..., text=0x707474 "\nstyle {\n font-variant:small-caps;\n display:inline-block;\n}\n*{\n max-width:10.0%;\n font-size:0.400px;\n}\n", textLength=115, textRenderer=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/SimpleLineLayout.cpp:357 #2 0x00007ffff30e4d69 in WebCore::SimpleLineLayout::createTextRuns<unsigned char> (runs=..., lineCount=@0x7fffffffb954: 1, flow=..., textRenderer=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/SimpleLineLayout.cpp:421 #3 0x00007ffff30e3dc4 in WebCore::SimpleLineLayout::create (flow=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/SimpleLineLayout.cpp:448 #4 0x00007ffff2f0e68e in WebCore::RenderBlockFlow::layoutSimpleLines (this=0x7c8560, repaintLogicalTop=..., repaintLogicalBottom=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:3435 #5 0x00007ffff2f00383 in WebCore::RenderBlockFlow::layoutInlineChildren (this=0x7c8560, relayoutChildren=true, repaintLogicalTop=..., repaintLogicalBottom=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:647 #6 0x00007ffff2eff6aa in WebCore::RenderBlockFlow::layoutBlock (this=0x7c8560, relayoutChildren=true, pageLogicalHeight=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:483 #7 0x00007ffff2ed25af in WebCore::RenderBlock::layout (this=0x7c8560) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlock.cpp:1019 #8 0x00007ffff2ea616b in WebCore::RenderElement::layoutIfNeeded (this=0x7c8560) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderElement.h:102 #9 0x00007ffff2f1f916 in WebCore::RenderBlockFlow::layoutLineBoxes (this=0x711a90, relayoutChildren=true, repaintLogicalTop=..., repaintLogicalBottom=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockLineLayout.cpp:1446 #10 0x00007ffff2f003b4 in WebCore::RenderBlockFlow::layoutInlineChildren (this=0x711a90, relayoutChildren=true, repaintLogicalTop=..., repaintLogicalBottom=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:652 #11 0x00007ffff2eff6aa in WebCore::RenderBlockFlow::layoutBlock (this=0x711a90, relayoutChildren=true, pageLogicalHeight=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:483 #12 0x00007ffff2ed25af in WebCore::RenderBlock::layout (this=0x711a90) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlock.cpp:1019 #13 0x00007ffff2f00790 in WebCore::RenderBlockFlow::layoutBlockChild (this=0x70e230, child=..., marginInfo=..., previousFloatLogicalBottom=..., maxFloatLogicalBottom=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:711 #14 0x00007ffff2f002b1 in WebCore::RenderBlockFlow::layoutBlockChildren (this=0x70e230, relayoutChildren=true, maxFloatLogicalBottom=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:632 #15 0x00007ffff2eff6ce in WebCore::RenderBlockFlow::layoutBlock (this=0x70e230, relayoutChildren=true, pageLogicalHeight=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:485 #16 0x00007ffff2ed25af in WebCore::RenderBlock::layout (this=0x70e230) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlock.cpp:1019 #17 0x00007ffff2f00790 in WebCore::RenderBlockFlow::layoutBlockChild (this=0x6fc630, child=..., marginInfo=..., previousFloatLogicalBottom=..., maxFloatLogicalBottom=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:711 #18 0x00007ffff2f002b1 in WebCore::RenderBlockFlow::layoutBlockChildren (this=0x6fc630, relayoutChildren=true, maxFloatLogicalBottom=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:632 #19 0x00007ffff2eff6ce in WebCore::RenderBlockFlow::layoutBlock (this=0x6fc630, relayoutChildren=true, pageLogicalHeight=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlockFlow.cpp:485 #20 0x00007ffff2ed25af in WebCore::RenderBlock::layout (this=0x6fc630) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderBlock.cpp:1019 #21 0x00007ffff30bd207 in WebCore::RenderView::layoutContent (this=0x6fc630, state=...) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderView.cpp:232 #22 0x00007ffff30bd8d7 in WebCore::RenderView::layout (this=0x6fc630) at /home/reni/data/REPOS/webkit/Source/WebCore/rendering/RenderView.cpp:357 #23 0x00007ffff2cfd2e5 in WebCore::FrameView::layout (this=0x734c80, allowSubtree=true) at /home/reni/data/REPOS/webkit/Source/WebCore/page/FrameView.cpp:1301 #24 0x00007ffff27e806b in WebCore::Document::implicitClose (this=0x70f260) at /home/reni/data/REPOS/webkit/Source/WebCore/dom/Document.cpp:2440 #25 0x00007ffff2bc4749 in WebCore::FrameLoader::checkCallImplicitClose (this=0x6cfd98) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/FrameLoader.cpp:898 #26 0x00007ffff2bc44b1 in WebCore::FrameLoader::checkCompleted (this=0x6cfd98) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/FrameLoader.cpp:844 #27 0x00007ffff2bc421a in WebCore::FrameLoader::finishedParsing (this=0x6cfd98) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/FrameLoader.cpp:764 #28 0x00007ffff27f0aed in WebCore::Document::finishedParsing (this=0x70f260) at /home/reni/data/REPOS/webkit/Source/WebCore/dom/Document.cpp:4523 #29 0x00007ffff39011b9 in WebCore::HTMLConstructionSite::finishedParsing (this=0x781218) at /home/reni/data/REPOS/webkit/Source/WebCore/html/parser/HTMLConstructionSite.cpp:395 #30 0x00007ffff2adf389 in WebCore::HTMLTreeBuilder::finished (this=0x781200) at /home/reni/data/REPOS/webkit/Source/WebCore/html/parser/HTMLTreeBuilder.cpp:2997 #31 0x00007ffff2ab1028 in WebCore::HTMLDocumentParser::end (this=0x70ea30) at /home/reni/data/REPOS/webkit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:451 #32 0x00007ffff2ab1113 in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x70ea30) at /home/reni/data/REPOS/webkit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:462 #33 0x00007ffff2aafac9 in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x70ea30) at /home/reni/data/REPOS/webkit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:165 #34 0x00007ffff2ab1156 in WebCore::HTMLDocumentParser::attemptToEnd (this=0x70ea30) at /home/reni/data/REPOS/webkit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:474 #35 0x00007ffff2ab120d in WebCore::HTMLDocumentParser::finish (this=0x70ea30) at /home/reni/data/REPOS/webkit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:502 #36 0x00007ffff2bb5911 in WebCore::DocumentWriter::end (this=0x783d40) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/DocumentWriter.cpp:250 #37 0x00007ffff2ba0ea7 in WebCore::DocumentLoader::finishedLoading (this=0x783ca0, finishTime=0) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/DocumentLoader.cpp:441 #38 0x00007ffff2ba0c10 in WebCore::DocumentLoader::notifyFinished (this=0x783ca0, resource=0x79ebc0) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/DocumentLoader.cpp:375 #39 0x00007ffff2c54952 in WebCore::CachedResource::checkNotify (this=0x79ebc0) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/cache/CachedResource.cpp:333 #40 0x00007ffff2c54a5c in WebCore::CachedResource::finishLoading (this=0x79ebc0) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/cache/CachedResource.cpp:349 #41 0x00007ffff2c5138a in WebCore::CachedRawResource::finishLoading (this=0x79ebc0, data=0x6c2e40) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/cache/CachedRawResource.cpp:101 #42 0x00007ffff2c0452c in WebCore::SubresourceLoader::didFinishLoading (this=0x79f120, finishTime=0) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/SubresourceLoader.cpp:306 #43 0x00007ffff2c001bb in WebCore::ResourceLoader::didFinishLoading (this=0x79f120, finishTime=0) at /home/reni/data/REPOS/webkit/Source/WebCore/loader/ResourceLoader.cpp:512 #44 0x00007ffff339390d in WebCore::readCallback (asyncResult=0x7a31f0, data=0x79f7a0) at /home/reni/data/REPOS/webkit/Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:1302 #45 0x00007fffeb3c1816 in async_ready_callback_wrapper (source_object=0x6c4db0, res=0x7a31f0, user_data=user_data@entry=0x79f7a0) at ginputstream.c:523 #46 0x00007fffeb3e7115 in g_task_return_now (task=0x7a31f0) at gtask.c:1077 #47 0x00007fffeb3e7139 in complete_in_idle_cb (task=0x7a31f0) at gtask.c:1086 #48 0x00007fffeae23a7d in g_main_dispatch (context=0x6bc360) at gmain.c:3064 #49 g_main_context_dispatch (context=context@entry=0x6bc360) at gmain.c:3663 #50 0x00007fffec6875e0 in _ecore_glib_select__locked (ecore_timeout=<optimized out>, efds=<optimized out>, wfds=0x7fffffffd5d0, rfds=0x7fffffffd550, ecore_fds=10, ctx=<optimized out>) at lib/ecore/ecore_glib.c:172 #51 _ecore_glib_select (ecore_fds=10, rfds=0x7fffffffd550, wfds=0x7fffffffd5d0, efds=<optimized out>, ecore_timeout=<optimized out>) at lib/ecore/ecore_glib.c:204 #52 0x00007fffec689ff4 in _ecore_main_select (timeout=<optimized out>) at lib/ecore/ecore_main.c:1579 #53 0x00007fffec68a995 in _ecore_main_loop_iterate_internal (once_only=once_only@entry=0) at lib/ecore/ecore_main.c:2005 #54 0x00007fffec68aa57 in ecore_main_loop_begin () at lib/ecore/ecore_main.c:1042 #55 0x00007ffff3f38db5 in WTF::RunLoop::run () at /home/reni/data/REPOS/webkit/Source/WTF/wtf/efl/RunLoopEfl.cpp:51 #56 0x00007ffff207062a in WebKit::ChildProcessMain<WebKit::WebProcess, WebKit::WebProcessMain> (argc=2, argv=0x7fffffffda78) at /home/reni/data/REPOS/webkit/Source/WebKit2/Shared/unix/ChildProcessMain.h:61 #57 0x00007ffff2070408 in WebKit::WebProcessMainUnix (argc=2, argv=0x7fffffffda78) at /home/reni/data/REPOS/webkit/Source/WebKit2/WebProcess/efl/WebProcessMainEfl.cpp:124 #58 0x000000000040084d in main (argc=2, argv=0x7fffffffda78) at /home/reni/data/REPOS/webkit/Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp:32 1065222 1 rhodovan.u-szeged 2015-01-29 06:46:07 -0800 I can't repro this anymore. 237346 2014-08-29 06:12:37 -0700 2014-08-29 06:12:37 -0700 Test case crash.html text/html 161 rhodovan.u-szeged PCFET0NUWVBFIGh0bWw+Cjxib2R5PmE8L2JvZHk+CjxzdHlsZT4Kc3R5bGUgewogICAgZm9udC12 YXJpYW50OnNtYWxsLWNhcHM7CiAgICBkaXNwbGF5OmlubGluZS1ibG9jazsKfQoqewogICAgbWF4 LXdpZHRoOjEwLjAlOwogICAgZm9udC1zaXplOjAuNDAwcHg7Cn0KPC9zdHlsZT4=