<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>136939</bug_id>
          
          <creation_ts>2014-09-19 01:12:49 -0700</creation_ts>
          <short_desc>(CVE-2014-4469 component) ASSERTION FAILED: !gridWasPopulated() in WebCore::RenderGrid::placeItemsOnGrid</short_desc>
          <delta_ts>2015-12-08 14:00:25 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Layout and Rendering</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>60731</blocked>
    
    <blocked>116980</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Renata Hodovan">rhodovan.u-szeged</reporter>
          <assigned_to name="Manuel Rego Casasnovas">rego</assigned_to>
          <cc>bfulgham</cc>
    
    <cc>commit-queue</cc>
    
    <cc>esprehn+autocc</cc>
    
    <cc>glenn</cc>
    
    <cc>jfernandez</cc>
    
    <cc>kondapallykalyan</cc>
    
    <cc>rego</cc>
    
    <cc>svillar</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1036078</commentid>
    <comment_count>0</comment_count>
      <attachid>238353</attachid>
    <who name="Renata Hodovan">rhodovan.u-szeged</who>
    <bug_when>2014-09-19 01:12:49 -0700</bug_when>
    <thetext>Created attachment 238353
Test case

The following test produces the assertion failure:

&lt;!DOCTYPE html&gt;
&lt;style&gt;
*  {
    display:-webkit-grid;
    -webkit-columns: 5;
}
&lt;/style&gt;
&lt;details open&gt;
&lt;button&gt;
    &lt;sup&gt;
        &lt;input placeholder=&quot;aaaa&quot;/&gt;
    &lt;/sup&gt;
&lt;/button&gt;


Its backtrace:

ASSERTION FAILED: !gridWasPopulated()
../../Source/WebCore/rendering/RenderGrid.cpp(694) : void WebCore::RenderGrid::placeItemsOnGrid()

0x00007fffedbf3127 in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:329
329	    *(int *)(uintptr_t)0xbbadbeef = 0;
gdb$ bt
#0  0x00007fffedbf3127 in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:329
#1  0x00007ffff3a07294 in WebCore::RenderGrid::placeItemsOnGrid (this=0xa40b30) at ../../Source/WebCore/rendering/RenderGrid.cpp:694
#2  0x00007ffff3a0487a in WebCore::RenderGrid::computeIntrinsicLogicalWidths (this=0xa40b30, minLogicalWidth=..., maxLogicalWidth=...) at ../../Source/WebCore/rendering/RenderGrid.cpp:244
#3  0x00007ffff3a04a62 in WebCore::RenderGrid::computePreferredLogicalWidths (this=0xa40b30) at ../../Source/WebCore/rendering/RenderGrid.cpp:274
#4  0x00007ffff397f300 in WebCore::RenderBox::minPreferredLogicalWidth (this=0xa40b30) at ../../Source/WebCore/rendering/RenderBox.cpp:996
#5  0x00007ffff392ca7f in WebCore::RenderBlock::computeBlockPreferredLogicalWidths (this=0xa1ca70, minLogicalWidth=..., maxLogicalWidth=...) at ../../Source/WebCore/rendering/RenderBlock.cpp:2851
#6  0x00007ffff394c9ef in WebCore::RenderBlockFlow::computeIntrinsicLogicalWidths (this=0xa1ca70, minLogicalWidth=..., maxLogicalWidth=...) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:359
#7  0x00007ffff392c2f5 in WebCore::RenderBlock::computePreferredLogicalWidths (this=0xa1ca70) at ../../Source/WebCore/rendering/RenderBlock.cpp:2777
#8  0x00007ffff397f300 in WebCore::RenderBox::minPreferredLogicalWidth (this=0xa1ca70) at ../../Source/WebCore/rendering/RenderBox.cpp:996
#9  0x00007ffff39d9d0a in WebCore::RenderFlexibleBox::computeIntrinsicLogicalWidths (this=0xa1f0b0, minLogicalWidth=..., maxLogicalWidth=...) at ../../Source/WebCore/rendering/RenderFlexibleBox.cpp:105
#10 0x00007ffff39da041 in WebCore::RenderFlexibleBox::computePreferredLogicalWidths (this=0xa1f0b0) at ../../Source/WebCore/rendering/RenderFlexibleBox.cpp:144
#11 0x00007ffff397f386 in WebCore::RenderBox::maxPreferredLogicalWidth (this=0xa1f0b0) at ../../Source/WebCore/rendering/RenderBox.cpp:1008
#12 0x00007ffff39865c5 in WebCore::RenderBox::computeLogicalWidthInRegionUsing (this=0xa1f0b0, widthType=WebCore::MainOrPreferredSize, logicalWidth=..., availableLogicalWidth=..., cb=0x8d6810, region=0x7c69d0) at ../../Source/WebCore/rendering/RenderBox.cpp:2412
#13 0x00007ffff3985cee in WebCore::RenderBox::computeLogicalWidthInRegion (this=0xa1f0b0, computedValues=..., region=0x7c69d0) at ../../Source/WebCore/rendering/RenderBox.cpp:2321
#14 0x00007ffff398724e in WebCore::RenderBox::renderBoxRegionInfo (this=0xa1f0b0, region=0x7c69d0, cacheFlag=WebCore::RenderBox::CacheRenderBoxRegionInfo) at ../../Source/WebCore/rendering/RenderBox.cpp:2556
#15 0x00007ffff3987293 in WebCore::RenderBox::renderBoxRegionInfo (this=0xa1ca70, region=0x7c69d0, cacheFlag=WebCore::RenderBox::CacheRenderBoxRegionInfo) at ../../Source/WebCore/rendering/RenderBox.cpp:2561
#16 0x00007ffff398388c in WebCore::RenderBox::containingBlockLogicalWidthForContentInRegion (this=0xa40b30, region=0x7c69d0) at ../../Source/WebCore/rendering/RenderBox.cpp:1855
#17 0x00007ffff3985a26 in WebCore::RenderBox::computeLogicalWidthInRegion (this=0xa40b30, computedValues=..., region=0x7c69d0) at ../../Source/WebCore/rendering/RenderBox.cpp:2302
#18 0x00007ffff398724e in WebCore::RenderBox::renderBoxRegionInfo (this=0xa40b30, region=0x7c69d0, cacheFlag=WebCore::RenderBox::CacheRenderBoxRegionInfo) at ../../Source/WebCore/rendering/RenderBox.cpp:2556
#19 0x00007ffff398388c in WebCore::RenderBox::containingBlockLogicalWidthForContentInRegion (this=0x8e1d50, region=0x7c69d0) at ../../Source/WebCore/rendering/RenderBox.cpp:1855
#20 0x00007ffff3985a26 in WebCore::RenderBox::computeLogicalWidthInRegion (this=0x8e1d50, computedValues=..., region=0x7c69d0) at ../../Source/WebCore/rendering/RenderBox.cpp:2302
#21 0x00007ffff398724e in WebCore::RenderBox::renderBoxRegionInfo (this=0x8e1d50, region=0x7c69d0, cacheFlag=WebCore::RenderBox::CacheRenderBoxRegionInfo) at ../../Source/WebCore/rendering/RenderBox.cpp:2556
#22 0x00007ffff397b721 in WebCore::RenderBox::borderBoxRectInRegion (this=0xb00a20, region=0x7c69d0, cacheFlag=WebCore::RenderBox::CacheRenderBoxRegionInfo) at ../../Source/WebCore/rendering/RenderBox.cpp:213
#23 0x00007ffff3abda13 in WebCore::RenderRegion::ensureOverflowForBox (this=0x7c69d0, box=0xb00a20, overflow=..., forceCreation=0x0) at ../../Source/WebCore/rendering/RenderRegion.cpp:445
#24 0x00007ffff3abdfef in WebCore::RenderRegion::addVisualOverflowForBox (this=0x7c69d0, box=0xb00a20, rect=...) at ../../Source/WebCore/rendering/RenderRegion.cpp:509
#25 0x00007ffff39e99eb in WebCore::RenderFlowThread::addRegionsOverflowFromChild (this=0xb00a20, box=0xb00a20, child=0xa42030, delta=...) at ../../Source/WebCore/rendering/RenderFlowThread.cpp:1449
#26 0x00007ffff3990cdc in WebCore::RenderBox::addOverflowFromChild (this=0xb00a20, child=0xa42030, delta=...) at ../../Source/WebCore/rendering/RenderBox.cpp:4338
#27 0x00007ffff3933891 in WebCore::RenderBox::addOverflowFromChild (this=0xb00a20, child=0xa42030) at ../../Source/WebCore/rendering/RenderBox.h:208
#28 0x00007ffff3923086 in WebCore::RenderBlock::addOverflowFromBlockChildren (this=0xb00a20) at ../../Source/WebCore/rendering/RenderBlock.cpp:1147
#29 0x00007ffff3922c59 in WebCore::RenderBlock::addOverflowFromChildren (this=0xb00a20) at ../../Source/WebCore/rendering/RenderBlock.cpp:1088
#30 0x00007ffff3922d29 in WebCore::RenderBlock::computeOverflow (this=0xb00a20, oldClientAfterEdge=...) at ../../Source/WebCore/rendering/RenderBlock.cpp:1102
#31 0x00007ffff3954d8b in WebCore::RenderBlockFlow::computeOverflow (this=0xb00a20, oldClientAfterEdge=..., recomputeFloats=0x0) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:2081
#32 0x00007ffff394daa5 in WebCore::RenderBlockFlow::layoutBlock (this=0xb00a20, relayoutChildren=0x1, pageLogicalHeight=...) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:528
#33 0x00007ffff392285f in WebCore::RenderBlock::layout (this=0xb00a20) at ../../Source/WebCore/rendering/RenderBlock.cpp:1019
#34 0x00007ffff39e3a84 in WebCore::RenderFlowThread::layout (this=0xb00a20) at ../../Source/WebCore/rendering/RenderFlowThread.cpp:201
#35 0x00007ffff3a8e6ae in WebCore::RenderMultiColumnFlowThread::layout (this=0xb00a20) at ../../Source/WebCore/rendering/RenderMultiColumnFlowThread.cpp:135
#36 0x00007ffff394e6b0 in WebCore::RenderBlockFlow::layoutBlockChild (this=0x8e1d50, child=..., marginInfo=..., previousFloatLogicalBottom=..., maxFloatLogicalBottom=...) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:712
#37 0x00007ffff394e1d1 in WebCore::RenderBlockFlow::layoutBlockChildren (this=0x8e1d50, relayoutChildren=0x1, maxFloatLogicalBottom=...) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:633
#38 0x00007ffff394d5ee in WebCore::RenderBlockFlow::layoutBlock (this=0x8e1d50, relayoutChildren=0x1, pageLogicalHeight=...) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:486
#39 0x00007ffff3b085c1 in WebCore::RenderTextControlSingleLine::layout (this=0x8e1d50) at ../../Source/WebCore/rendering/RenderTextControlSingleLine.cpp:140
#40 0x00007ffff38ed18f in WebCore::RenderElement::layoutIfNeeded (this=0x8e1d50) at ../../Source/WebCore/rendering/RenderElement.h:102
#41 0x00007ffff3a05e97 in WebCore::RenderGrid::logicalContentHeightForChild (this=0xa40b30, child=..., columnTracks=...) at ../../Source/WebCore/rendering/RenderGrid.cpp:498
#42 0x00007ffff3a05f92 in WebCore::RenderGrid::minContentForChild (this=0xa40b30, child=..., direction=WebCore::ForRows, columnTracks=...) at ../../Source/WebCore/rendering/RenderGrid.cpp:515
#43 0x00007ffff3a068d5 in WebCore::RenderGrid::resolveContentBasedTrackSizingFunctionsForItems (this=0xa40b30, direction=WebCore::ForRows, sizingData=..., gridItemWithSpan=..., filterFunction=(bool (WebCore::GridTrackSize::*)(const WebCore::GridTrackSize * const)) 0x7ffff3a09f26 &lt;WebCore::GridTrackSize::hasMinOrMaxContentMinTrackBreadth() const&gt;, sizingFunction=(WebCore::LayoutUnit (WebCore::RenderGrid::*)(WebCore::RenderGrid * const, WebCore::RenderBox &amp;, WebCore::GridTrackSizingDirection, WTF::Vector&lt;WebCore::GridTrack, 0ul, WTF::CrashOnOverflow&gt; &amp;)) 0x7ffff3a05ed8 &lt;WebCore::RenderGrid::minContentForChild(WebCore::RenderBox&amp;, WebCore::GridTrackSizingDirection, WTF::Vector&lt;WebCore::GridTrack, 0ul, WTF::CrashOnOverflow&gt;&amp;)&gt;, trackGetter=(WebCore::LayoutUnit (WebCore::GridTrack::*)(const WebCore::GridTrack * const)) 0x7ffff3a0a3c6 &lt;WebCore::GridTrack::usedBreadth() const&gt;, trackGrowthFunction=(void (WebCore::GridTrack::*)(WebCore::GridTrack * const, WebCore::LayoutUnit)) 0x7ffff3a0a366 &lt;WebCore::GridTrack::growUsedBreadth(WebCore::LayoutUnit)&gt;) at ../../Source/WebCore/rendering/RenderGrid.cpp:605
#44 0x00007ffff3a06322 in WebCore::RenderGrid::resolveContentBasedTrackSizingFunctions (this=0xa40b30, direction=WebCore::ForRows, sizingData=...) at ../../Source/WebCore/rendering/RenderGrid.cpp:574
#45 0x00007ffff3a04d8c in WebCore::RenderGrid::computeUsedBreadthOfGridTracks (this=0xa40b30, direction=WebCore::ForRows, sizingData=..., availableLogicalSpace=...) at ../../Source/WebCore/rendering/RenderGrid.cpp:320
#46 0x00007ffff3a04b31 in WebCore::RenderGrid::computeUsedBreadthOfGridTracks (this=0xa40b30, direction=WebCore::ForRows, sizingData=...) at ../../Source/WebCore/rendering/RenderGrid.cpp:286
#47 0x00007ffff3a086f7 in WebCore::RenderGrid::layoutGridItems (this=0xa40b30) at ../../Source/WebCore/rendering/RenderGrid.cpp:883
#48 0x00007ffff3a046f0 in WebCore::RenderGrid::layoutBlock (this=0xa40b30, relayoutChildren=0x0) at ../../Source/WebCore/rendering/RenderGrid.cpp:218
#49 0x00007ffff392285f in WebCore::RenderBlock::layout (this=0xa40b30) at ../../Source/WebCore/rendering/RenderBlock.cpp:1019
#50 0x00007ffff394e6b0 in WebCore::RenderBlockFlow::layoutBlockChild (this=0xa1ca70, child=..., marginInfo=..., previousFloatLogicalBottom=..., maxFloatLogicalBottom=...) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:712
#51 0x00007ffff394e1d1 in WebCore::RenderBlockFlow::layoutBlockChildren (this=0xa1ca70, relayoutChildren=0x1, maxFloatLogicalBottom=...) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:633
#52 0x00007ffff394d5ee in WebCore::RenderBlockFlow::layoutBlock (this=0xa1ca70, relayoutChildren=0x1, pageLogicalHeight=...) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:486
#53 0x00007ffff392285f in WebCore::RenderBlock::layout (this=0xa1ca70) at ../../Source/WebCore/rendering/RenderBlock.cpp:1019
#54 0x00007ffff38ed18f in WebCore::RenderElement::layoutIfNeeded (this=0xa1ca70) at ../../Source/WebCore/rendering/RenderElement.h:102
#55 0x00007ffff39debea in WebCore::RenderFlexibleBox::layoutAndPlaceChildren (this=0xa1f0b0, crossAxisOffset=..., children=..., childSizes=..., availableFreeSpace=..., relayoutChildren=0x1, lineContexts=...) at ../../Source/WebCore/rendering/RenderFlexibleBox.cpp:1102
#56 0x00007ffff39dca2f in WebCore::RenderFlexibleBox::layoutFlexItems (this=0xa1f0b0, relayoutChildren=0x1, lineContexts=...) at ../../Source/WebCore/rendering/RenderFlexibleBox.cpp:705
#57 0x00007ffff39dad65 in WebCore::RenderFlexibleBox::layoutBlock (this=0xa1f0b0, relayoutChildren=0x1) at ../../Source/WebCore/rendering/RenderFlexibleBox.cpp:283
#58 0x00007ffff392285f in WebCore::RenderBlock::layout (this=0xa1f0b0) at ../../Source/WebCore/rendering/RenderBlock.cpp:1019
#59 0x00007ffff394e6b0 in WebCore::RenderBlockFlow::layoutBlockChild (this=0x8d6810, child=..., marginInfo=..., previousFloatLogicalBottom=..., maxFloatLogicalBottom=...) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:712
#60 0x00007ffff394e1d1 in WebCore::RenderBlockFlow::layoutBlockChildren (this=0x8d6810, relayoutChildren=0x0, maxFloatLogicalBottom=...) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:633
#61 0x00007ffff394d5ee in WebCore::RenderBlockFlow::layoutBlock (this=0x8d6810, relayoutChildren=0x0, pageLogicalHeight=...) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:486
#62 0x00007ffff392285f in WebCore::RenderBlock::layout (this=0x8d6810) at ../../Source/WebCore/rendering/RenderBlock.cpp:1019
#63 0x00007ffff39e3a84 in WebCore::RenderFlowThread::layout (this=0x8d6810) at ../../Source/WebCore/rendering/RenderFlowThread.cpp:201
#64 0x00007ffff3a8e6ae in WebCore::RenderMultiColumnFlowThread::layout (this=0x8d6810) at ../../Source/WebCore/rendering/RenderMultiColumnFlowThread.cpp:135
#65 0x00007ffff395cfb6 in WebCore::RenderBlockFlow::layoutSpecialExcludedChild (this=0x951f70, relayoutChildren=0x1) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:3682
#66 0x00007ffff394e09a in WebCore::RenderBlockFlow::layoutBlockChildren (this=0x951f70, relayoutChildren=0x1, maxFloatLogicalBottom=...) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:605
#67 0x00007ffff394d5ee in WebCore::RenderBlockFlow::layoutBlock (this=0x951f70, relayoutChildren=0x1, pageLogicalHeight=...) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:486
#68 0x00007ffff392285f in WebCore::RenderBlock::layout (this=0x951f70) at ../../Source/WebCore/rendering/RenderBlock.cpp:1019
#69 0x00007ffff38ed18f in WebCore::RenderElement::layoutIfNeeded (this=0x951f70) at ../../Source/WebCore/rendering/RenderElement.h:102
#70 0x00007ffff3a05e97 in WebCore::RenderGrid::logicalContentHeightForChild (this=0xa4dc00, child=..., columnTracks=...) at ../../Source/WebCore/rendering/RenderGrid.cpp:498
#71 0x00007ffff3a05f92 in WebCore::RenderGrid::minContentForChild (this=0xa4dc00, child=..., direction=WebCore::ForRows, columnTracks=...) at ../../Source/WebCore/rendering/RenderGrid.cpp:515
#72 0x00007ffff3a068d5 in WebCore::RenderGrid::resolveContentBasedTrackSizingFunctionsForItems (this=0xa4dc00, direction=WebCore::ForRows, sizingData=..., gridItemWithSpan=..., filterFunction=(bool (WebCore::GridTrackSize::*)(const WebCore::GridTrackSize * const)) 0x7ffff3a09f26 &lt;WebCore::GridTrackSize::hasMinOrMaxContentMinTrackBreadth() const&gt;, sizingFunction=(WebCore::LayoutUnit (WebCore::RenderGrid::*)(WebCore::RenderGrid * const, WebCore::RenderBox &amp;, WebCore::GridTrackSizingDirection, WTF::Vector&lt;WebCore::GridTrack, 0ul, WTF::CrashOnOverflow&gt; &amp;)) 0x7ffff3a05ed8 &lt;WebCore::RenderGrid::minContentForChild(WebCore::RenderBox&amp;, WebCore::GridTrackSizingDirection, WTF::Vector&lt;WebCore::GridTrack, 0ul, WTF::CrashOnOverflow&gt;&amp;)&gt;, trackGetter=(WebCore::LayoutUnit (WebCore::GridTrack::*)(const WebCore::GridTrack * const)) 0x7ffff3a0a3c6 &lt;WebCore::GridTrack::usedBreadth() const&gt;, trackGrowthFunction=(void (WebCore::GridTrack::*)(WebCore::GridTrack * const, WebCore::LayoutUnit)) 0x7ffff3a0a366 &lt;WebCore::GridTrack::growUsedBreadth(WebCore::LayoutUnit)&gt;) at ../../Source/WebCore/rendering/RenderGrid.cpp:605
#73 0x00007ffff3a06322 in WebCore::RenderGrid::resolveContentBasedTrackSizingFunctions (this=0xa4dc00, direction=WebCore::ForRows, sizingData=...) at ../../Source/WebCore/rendering/RenderGrid.cpp:574
#74 0x00007ffff3a04d8c in WebCore::RenderGrid::computeUsedBreadthOfGridTracks (this=0xa4dc00, direction=WebCore::ForRows, sizingData=..., availableLogicalSpace=...) at ../../Source/WebCore/rendering/RenderGrid.cpp:320
#75 0x00007ffff3a04b31 in WebCore::RenderGrid::computeUsedBreadthOfGridTracks (this=0xa4dc00, direction=WebCore::ForRows, sizingData=...) at ../../Source/WebCore/rendering/RenderGrid.cpp:286
#76 0x00007ffff3a086f7 in WebCore::RenderGrid::layoutGridItems (this=0xa4dc00) at ../../Source/WebCore/rendering/RenderGrid.cpp:883
#77 0x00007ffff3a046f0 in WebCore::RenderGrid::layoutBlock (this=0xa4dc00, relayoutChildren=0x0) at ../../Source/WebCore/rendering/RenderGrid.cpp:218
#78 0x00007ffff392285f in WebCore::RenderBlock::layout (this=0xa4dc00) at ../../Source/WebCore/rendering/RenderBlock.cpp:1019
#79 0x00007ffff38ed18f in WebCore::RenderElement::layoutIfNeeded (this=0xa4dc00) at ../../Source/WebCore/rendering/RenderElement.h:102
#80 0x00007ffff3a05e97 in WebCore::RenderGrid::logicalContentHeightForChild (this=0x860f50, child=..., columnTracks=...) at ../../Source/WebCore/rendering/RenderGrid.cpp:498
#81 0x00007ffff3a05f92 in WebCore::RenderGrid::minContentForChild (this=0x860f50, child=..., direction=WebCore::ForRows, columnTracks=...) at ../../Source/WebCore/rendering/RenderGrid.cpp:515
#82 0x00007ffff3a068d5 in WebCore::RenderGrid::resolveContentBasedTrackSizingFunctionsForItems (this=0x860f50, direction=WebCore::ForRows, sizingData=..., gridItemWithSpan=..., filterFunction=(bool (WebCore::GridTrackSize::*)(const WebCore::GridTrackSize * const)) 0x7ffff3a09f26 &lt;WebCore::GridTrackSize::hasMinOrMaxContentMinTrackBreadth() const&gt;, sizingFunction=(WebCore::LayoutUnit (WebCore::RenderGrid::*)(WebCore::RenderGrid * const, WebCore::RenderBox &amp;, WebCore::GridTrackSizingDirection, WTF::Vector&lt;WebCore::GridTrack, 0ul, WTF::CrashOnOverflow&gt; &amp;)) 0x7ffff3a05ed8 &lt;WebCore::RenderGrid::minContentForChild(WebCore::RenderBox&amp;, WebCore::GridTrackSizingDirection, WTF::Vector&lt;WebCore::GridTrack, 0ul, WTF::CrashOnOverflow&gt;&amp;)&gt;, trackGetter=(WebCore::LayoutUnit (WebCore::GridTrack::*)(const WebCore::GridTrack * const)) 0x7ffff3a0a3c6 &lt;WebCore::GridTrack::usedBreadth() const&gt;, trackGrowthFunction=(void (WebCore::GridTrack::*)(WebCore::GridTrack * const, WebCore::LayoutUnit)) 0x7ffff3a0a366 &lt;WebCore::GridTrack::growUsedBreadth(WebCore::LayoutUnit)&gt;) at ../../Source/WebCore/rendering/RenderGrid.cpp:605
#83 0x00007ffff3a06322 in WebCore::RenderGrid::resolveContentBasedTrackSizingFunctions (this=0x860f50, direction=WebCore::ForRows, sizingData=...) at ../../Source/WebCore/rendering/RenderGrid.cpp:574
#84 0x00007ffff3a04d8c in WebCore::RenderGrid::computeUsedBreadthOfGridTracks (this=0x860f50, direction=WebCore::ForRows, sizingData=..., availableLogicalSpace=...) at ../../Source/WebCore/rendering/RenderGrid.cpp:320
#85 0x00007ffff3a04b31 in WebCore::RenderGrid::computeUsedBreadthOfGridTracks (this=0x860f50, direction=WebCore::ForRows, sizingData=...) at ../../Source/WebCore/rendering/RenderGrid.cpp:286
#86 0x00007ffff3a086f7 in WebCore::RenderGrid::layoutGridItems (this=0x860f50) at ../../Source/WebCore/rendering/RenderGrid.cpp:883
#87 0x00007ffff3a046f0 in WebCore::RenderGrid::layoutBlock (this=0x860f50, relayoutChildren=0x0) at ../../Source/WebCore/rendering/RenderGrid.cpp:218
#88 0x00007ffff392285f in WebCore::RenderBlock::layout (this=0x860f50) at ../../Source/WebCore/rendering/RenderBlock.cpp:1019
#89 0x00007ffff394e6b0 in WebCore::RenderBlockFlow::layoutBlockChild (this=0x8ab010, child=..., marginInfo=..., previousFloatLogicalBottom=..., maxFloatLogicalBottom=...) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:712
#90 0x00007ffff394e1d1 in WebCore::RenderBlockFlow::layoutBlockChildren (this=0x8ab010, relayoutChildren=0x1, maxFloatLogicalBottom=...) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:633
#91 0x00007ffff394d5ee in WebCore::RenderBlockFlow::layoutBlock (this=0x8ab010, relayoutChildren=0x1, pageLogicalHeight=...) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:486
#92 0x00007ffff392285f in WebCore::RenderBlock::layout (this=0x8ab010) at ../../Source/WebCore/rendering/RenderBlock.cpp:1019
#93 0x00007ffff3b1aaa9 in WebCore::RenderView::layoutContent (this=0x8ab010, state=...) at ../../Source/WebCore/rendering/RenderView.cpp:230
#94 0x00007ffff3b1b179 in WebCore::RenderView::layout (this=0x8ab010) at ../../Source/WebCore/rendering/RenderView.cpp:355
#95 0x00007ffff369240f in WebCore::FrameView::layout (this=0x85abd0, allowSubtree=0x1) at ../../Source/WebCore/page/FrameView.cpp:1301
#96 0x00007ffff30613d5 in WebCore::Document::implicitClose (this=0xa45940) at ../../Source/WebCore/dom/Document.cpp:2441
#97 0x00007ffff3540b63 in WebCore::FrameLoader::checkCallImplicitClose (this=0x88c838) at ../../Source/WebCore/loader/FrameLoader.cpp:898
#98 0x00007ffff35408cb in WebCore::FrameLoader::checkCompleted (this=0x88c838) at ../../Source/WebCore/loader/FrameLoader.cpp:844
#99 0x00007ffff3540634 in WebCore::FrameLoader::finishedParsing (this=0x88c838) at ../../Source/WebCore/loader/FrameLoader.cpp:764
#100 0x00007ffff3069e57 in WebCore::Document::finishedParsing (this=0xa45940) at ../../Source/WebCore/dom/Document.cpp:4524
#101 0x00007ffff33bd667 in WebCore::HTMLConstructionSite::finishedParsing (this=0x81dc78) at ../../Source/WebCore/html/parser/HTMLConstructionSite.cpp:395
#102 0x00007ffff33fb1dd in WebCore::HTMLTreeBuilder::finished (this=0x81dc60) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:2997
#103 0x00007ffff33c60d0 in WebCore::HTMLDocumentParser::end (this=0x85b520) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:439
#104 0x00007ffff33c61bb in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x85b520) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:450
#105 0x00007ffff33c4c69 in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x85b520) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:165
#106 0x00007ffff33c61fe in WebCore::HTMLDocumentParser::attemptToEnd (this=0x85b520) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:462
#107 0x00007ffff33c62b5 in WebCore::HTMLDocumentParser::finish (this=0x85b520) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:490
#108 0x00007ffff35322d1 in WebCore::DocumentWriter::end (this=0x949c20) at ../../Source/WebCore/loader/DocumentWriter.cpp:246
#109 0x00007ffff351d9ad in WebCore::DocumentLoader::finishedLoading (this=0x949b80, finishTime=0) at ../../Source/WebCore/loader/DocumentLoader.cpp:441
#110 0x00007ffff351d716 in WebCore::DocumentLoader::notifyFinished (this=0x949b80, resource=0x8a7910) at ../../Source/WebCore/loader/DocumentLoader.cpp:375
#111 0x00007ffff35d47c4 in WebCore::CachedResource::checkNotify (this=0x8a7910) at ../../Source/WebCore/loader/cache/CachedResource.cpp:347
#112 0x00007ffff35d48ce in WebCore::CachedResource::finishLoading (this=0x8a7910) at ../../Source/WebCore/loader/cache/CachedResource.cpp:363
#113 0x00007ffff35d11f4 in WebCore::CachedRawResource::finishLoading (this=0x8a7910, data=0xa43e60) at ../../Source/WebCore/loader/cache/CachedRawResource.cpp:101
#114 0x00007ffff3580a50 in WebCore::SubresourceLoader::didFinishLoading (this=0x8a7e80, finishTime=0) at ../../Source/WebCore/loader/SubresourceLoader.cpp:309
#115 0x00007ffff357c73b in WebCore::ResourceLoader::didFinishLoading (this=0x8a7e80, finishTime=0) at ../../Source/WebCore/loader/ResourceLoader.cpp:512
#116 0x00007ffff3eecb0f in WebCore::readCallback (asyncResult=0x81d1a0, data=0x8a4aa0) at ../../Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:1302
#117 0x00007fffebac72ea in async_ready_callback_wrapper (source_object=0xa3bb30, res=0x81d1a0, user_data=0x8a4aa0) at ginputstream.c:519
#118 0x00007fffebae6ceb in g_task_return_now (task=0x81d1a0) at gtask.c:1108
#119 0x00007fffebae6d09 in complete_in_idle_cb (task=0x81d1a0) at gtask.c:1117
#120 0x00007fffead3d2e6 in g_main_dispatch (context=0x677bb0) at gmain.c:3065
#121 g_main_context_dispatch (context=context@entry=0x677bb0) at gmain.c:3641
#122 0x00007fffead3d638 in g_main_context_iterate (context=0x677bb0, block=block@entry=0x1, dispatch=dispatch@entry=0x1, self=&lt;optimized out&gt;) at gmain.c:3712
#123 0x00007fffead3da3a in g_main_loop_run (loop=0xafe450) at gmain.c:3906
#124 0x00007ffff45e062e in WTF::RunLoop::run () at ../../Source/WTF/wtf/gtk/RunLoopGtk.cpp:59
#125 0x00007ffff2b1c1e2 in WebKit::ChildProcessMain&lt;WebKit::WebProcess, WebKit::WebProcessMain&gt; (argc=0x2, argv=0x7fffffffd9b8) at ../../Source/WebKit2/Shared/unix/ChildProcessMain.h:61
#126 0x00007ffff2b1c047 in WebKit::WebProcessMainUnix (argc=0x2, argv=0x7fffffffd9b8) at ../../Source/WebKit2/WebProcess/gtk/WebProcessMainGtk.cpp:73
#127 0x000000000040080d in main (argc=0x2, argv=0x7fffffffd9b8) at ../../Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp:32</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1042108</commentid>
    <comment_count>1</comment_count>
      <attachid>239944</attachid>
    <who name="Manuel Rego Casasnovas">rego</who>
    <bug_when>2014-10-16 05:39:02 -0700</bug_when>
    <thetext>Created attachment 239944
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1042167</commentid>
    <comment_count>2</comment_count>
      <attachid>239960</attachid>
    <who name="Manuel Rego Casasnovas">rego</who>
    <bug_when>2014-10-16 13:31:24 -0700</bug_when>
    <thetext>Created attachment 239960
Patch

New patch, as I was just testing in debug and didn&apos;t realize that the gridWasPopulated() was only available in debug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1042361</commentid>
    <comment_count>3</comment_count>
      <attachid>239960</attachid>
    <who name="Sergio Villar Senin">svillar</who>
    <bug_when>2014-10-17 04:25:09 -0700</bug_when>
    <thetext>Comment on attachment 239960
Patch

The fix looks good, but I&apos;m concerned about the test case. It&apos;d be nice if you could come up with something that wouldn&apos;t require &lt;details&gt;, &lt;sup&gt; and the like...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1042790</commentid>
    <comment_count>4</comment_count>
      <attachid>240112</attachid>
    <who name="Manuel Rego Casasnovas">rego</who>
    <bug_when>2014-10-20 05:18:01 -0700</bug_when>
    <thetext>Created attachment 240112
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1042793</commentid>
    <comment_count>5</comment_count>
    <who name="Manuel Rego Casasnovas">rego</who>
    <bug_when>2014-10-20 05:25:16 -0700</bug_when>
    <thetext>(In reply to comment #3)
&gt; Comment on attachment 239960 [details]
&gt; Patch
&gt; 
&gt; The fix looks good, but I&apos;m concerned about the test case. It&apos;d be nice if
&gt; you could come up with something that wouldn&apos;t require &lt;details&gt;, &lt;sup&gt; and
&gt; the like...

Reduced the test case as much as possible, but I still need some special tags like details, button or input to reproduce it.

It seems that inputs elements merged with multi-column have some problems (as reported in bug #137878).</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1042845</commentid>
    <comment_count>6</comment_count>
      <attachid>240112</attachid>
    <who name="Darin Adler">darin</who>
    <bug_when>2014-10-20 09:55:27 -0700</bug_when>
    <thetext>Comment on attachment 240112
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=240112&amp;action=review

&gt; Source/WebCore/rendering/RenderGrid.cpp:245
&gt; +    bool wasPopulated = gridWasPopulated();

Is this a good enough check? The check in gridWasPopulated seems a bit ad hoc, fine for an assertion but maybe not precise enough to properly detect the case we are in here?

&gt; Source/WebCore/rendering/RenderGrid.cpp:247
&gt; +        const_cast&lt;RenderGrid*&gt;(this)-&gt;placeItemsOnGrid();

This const_cast is peculiar. We should consider fixing this by using mutable.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1043152</commentid>
    <comment_count>7</comment_count>
    <who name="Manuel Rego Casasnovas">rego</who>
    <bug_when>2014-10-21 04:34:18 -0700</bug_when>
    <thetext>(In reply to comment #6)
&gt; Comment on attachment 240112 [details]
&gt; Patch
&gt; 
&gt; View in context:
&gt; https://bugs.webkit.org/attachment.cgi?id=240112&amp;action=review
&gt; 
&gt; &gt; Source/WebCore/rendering/RenderGrid.cpp:245
&gt; &gt; +    bool wasPopulated = gridWasPopulated();
&gt; 
&gt; Is this a good enough check? The check in gridWasPopulated seems a bit ad
&gt; hoc, fine for an assertion but maybe not precise enough to properly detect
&gt; the case we are in here?

I think the check is right, as we need to be sure that both rows and columns have been populated.

&gt; &gt; Source/WebCore/rendering/RenderGrid.cpp:247
&gt; &gt; +        const_cast&lt;RenderGrid*&gt;(this)-&gt;placeItemsOnGrid();
&gt; 
&gt; This const_cast is peculiar. We should consider fixing this by using mutable.

The const_cast was introduced due to this comment:
https://bugs.webkit.org/show_bug.cgi?id=109881#c4

It seems that if we want to use &quot;mutable&quot; we should mark placeItemsOnGrid(), computeUsedBreadthOfGridTracks() and clearGrid() as const. And it seems quite that these methods are marked as const.

Anyway this could be done in a later patch if you think it&apos;s worth changing.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1043157</commentid>
    <comment_count>8</comment_count>
      <attachid>240112</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2014-10-21 05:11:33 -0700</bug_when>
    <thetext>Comment on attachment 240112
Patch

Clearing flags on attachment: 240112

Committed r174946: &lt;http://trac.webkit.org/changeset/174946&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1043158</commentid>
    <comment_count>9</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2014-10-21 05:11:38 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1147469</commentid>
    <comment_count>10</comment_count>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2015-12-08 14:00:25 -0800</bug_when>
    <thetext>Part of the fix for CVE-2014-4469.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>238353</attachid>
            <date>2014-09-19 01:12:49 -0700</date>
            <delta_ts>2014-09-19 01:12:49 -0700</delta_ts>
            <desc>Test case</desc>
            <filename>crash.html</filename>
            <type>text/html</type>
            <size>181</size>
            <attacher name="Renata Hodovan">rhodovan.u-szeged</attacher>
            
              <data encoding="base64">PCFET0NUWVBFIGh0bWw+CjxzdHlsZT4KKiAgewogICAgZGlzcGxheTotd2Via2l0LWdyaWQ7CiAg
ICAtd2Via2l0LWNvbHVtbnM6IDU7Cn0KPC9zdHlsZT4KPGRldGFpbHMgb3Blbj4KPGJ1dHRvbj4K
ICAgIDxzdXA+CiAgICAgICAgPGlucHV0IHBsYWNlaG9sZGVyPSJhYWFhIi8+CiAgICA8L3N1cD4K
PC9idXR0b24+Cg==
</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>239944</attachid>
            <date>2014-10-16 05:39:02 -0700</date>
            <delta_ts>2014-10-16 13:31:15 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-136939-20141016143906.patch</filename>
            <type>text/plain</type>
            <size>4510</size>
            <attacher name="Manuel Rego Casasnovas">rego</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTc0NjgxCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>239960</attachid>
            <date>2014-10-16 13:31:24 -0700</date>
            <delta_ts>2014-10-20 05:17:53 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-136939-20141016223128.patch</filename>
            <type>text/plain</type>
            <size>5300</size>
            <attacher name="Manuel Rego Casasnovas">rego</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTc0NjgxCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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=
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>240112</attachid>
            <date>2014-10-20 05:18:01 -0700</date>
            <delta_ts>2014-10-21 05:11:33 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-136939-20141020141806.patch</filename>
            <type>text/plain</type>
            <size>5390</size>
            <attacher name="Manuel Rego Casasnovas">rego</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTc0NjgxCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
      

    </bug>

</bugzilla>