<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>139481</bug_id>
          
          <creation_ts>2014-12-10 07:33:39 -0800</creation_ts>
          <short_desc>ASSERTION FAILED: m_isValid == valid() in WebCore::HTMLFormControlElement::isValidFormControlElement</short_desc>
          <delta_ts>2016-03-23 02:28:05 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Forms</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>116980</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Renata Hodovan">rhodovan.u-szeged</reporter>
          <assigned_to name="Darin Adler">darin</assigned_to>
          <cc>andersca</cc>
    
    <cc>annulen</cc>
    
    <cc>bfulgham</cc>
    
    <cc>cgarcia</cc>
    
    <cc>commit-queue</cc>
    
    <cc>darin</cc>
    
    <cc>dbates</cc>
    
    <cc>mcatanzaro</cc>
    
    <cc>ossy</cc>
    
    <cc>peter</cc>
    
    <cc>webkit.org</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1054139</commentid>
    <comment_count>0</comment_count>
      <attachid>243017</attachid>
    <who name="Renata Hodovan">rhodovan.u-szeged</who>
    <bug_when>2014-12-10 07:33:39 -0800</bug_when>
    <thetext>Created attachment 243017
Test case

Load this test with debug WebKit:

&lt;!DOCTYPE html&gt;
&lt;datalist&gt;
    &lt;a&gt;
        &lt;form&gt;
            &lt;select required=&quot;&quot;&gt;&lt;/select&gt;
    &lt;/a&gt;
&lt;/datalist&gt;

Note: the closing tag of &lt;form&gt; is missing.


Backtrace:

ASSERTION FAILED: m_isValid == valid()
../../Source/WebCore/html/HTMLFormControlElement.cpp(463) : bool WebCore::HTMLFormControlElement::isValidFormControlElement() const

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fff98927700 (LWP 5586)]
0x00007fffedbca36f in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:321
321	    *(int *)(uintptr_t)0xbbadbeef = 0;
#0  0x00007fffedbca36f in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:321
#1  0x00007ffff32bf940 in WebCore::HTMLFormControlElement::isValidFormControlElement (this=0x474a70) at ../../Source/WebCore/html/HTMLFormControlElement.cpp:463
#2  0x00007ffff32be0c0 in WebCore::HTMLFormControlElement::insertedInto (this=0x474a70, insertionPoint=...) at ../../Source/WebCore/html/HTMLFormControlElement.cpp:252
#3  0x00007ffff32c0f21 in WebCore::HTMLFormControlElementWithState::insertedInto (this=0x474a70, insertionPoint=...) at ../../Source/WebCore/html/HTMLFormControlElementWithState.cpp:50
#4  0x00007ffff3327dba in WebCore::HTMLSelectElement::insertedInto (this=0x474a70, insertionPoint=...) at ../../Source/WebCore/html/HTMLSelectElement.cpp:1590
#5  0x00007ffff3046abd in WebCore::ChildNodeInsertionNotifier::notifyNodeInsertedIntoTree (this=0x7fffffffcdc0, node=...) at ../../Source/WebCore/dom/ContainerNodeAlgorithms.h:211
#6  0x00007ffff3046c02 in WebCore::ChildNodeInsertionNotifier::notify (this=0x7fffffffcdc0, node=...) at ../../Source/WebCore/dom/ContainerNodeAlgorithms.h:230
#7  0x00007ffff30444fc in WebCore::ContainerNode::parserAppendChild (this=0x471a40, newChild=...) at ../../Source/WebCore/dom/ContainerNode.cpp:755
#8  0x00007ffff3041946 in WebCore::ContainerNode::takeAllChildrenFrom (this=0x471a40, oldParent=0x712dd0) at ../../Source/WebCore/dom/ContainerNode.cpp:128
#9  0x00007ffff33c4af1 in WebCore::executeTakeAllChildrenTask (task=...) at ../../Source/WebCore/html/parser/HTMLConstructionSite.cpp:134
#10 0x00007ffff33c4b5c in WebCore::executeTask (task=...) at ../../Source/WebCore/html/parser/HTMLConstructionSite.cpp:153
#11 0x00007ffff33c4e8f in WebCore::HTMLConstructionSite::executeQueuedTasks (this=0x8175c8) at ../../Source/WebCore/html/parser/HTMLConstructionSite.cpp:193
#12 0x00007ffff33f6604 in WebCore::HTMLTreeBuilder::constructTree (this=0x8175b0, token=0x7fffffffd050) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:366
#13 0x00007ffff33ce663 in WebCore::HTMLDocumentParser::constructTreeFromHTMLToken (this=0x816f70, rawToken=...) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:352
#14 0x00007ffff33ce299 in WebCore::HTMLDocumentParser::pumpTokenizer (this=0x816f70, mode=WebCore::HTMLDocumentParser::AllowYield) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:309
#15 0x00007ffff33cda31 in WebCore::HTMLDocumentParser::pumpTokenizerIfPossible (this=0x816f70, mode=WebCore::HTMLDocumentParser::AllowYield) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:189
#16 0x00007ffff33cebf9 in WebCore::HTMLDocumentParser::append (this=0x816f70, inputSource=...) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:428
#17 0x00007ffff305ac81 in WebCore::DecodedDataDocumentParser::flush (this=0x816f70, writer=...) at ../../Source/WebCore/dom/DecodedDataDocumentParser.cpp:60
#18 0x00007ffff3538b45 in WebCore::DocumentWriter::end (this=0x7d28e0) at ../../Source/WebCore/loader/DocumentWriter.cpp:243
#19 0x00007ffff35248db in WebCore::DocumentLoader::finishedLoading (this=0x7d2840, finishTime=0) at ../../Source/WebCore/loader/DocumentLoader.cpp:440
#20 0x00007ffff3524644 in WebCore::DocumentLoader::notifyFinished (this=0x7d2840, resource=0x8af2f0) at ../../Source/WebCore/loader/DocumentLoader.cpp:374
#21 0x00007ffff35d5370 in WebCore::CachedResource::checkNotify (this=0x8af2f0) at ../../Source/WebCore/loader/cache/CachedResource.cpp:293
#22 0x00007ffff35d546e in WebCore::CachedResource::finishLoading (this=0x8af2f0) at ../../Source/WebCore/loader/cache/CachedResource.cpp:309
#23 0x00007ffff35d1b63 in WebCore::CachedRawResource::finishLoading (this=0x8af2f0, data=0x8b2350) at ../../Source/WebCore/loader/cache/CachedRawResource.cpp:104
#24 0x00007ffff358594c in WebCore::SubresourceLoader::didFinishLoading (this=0x8af9c0, finishTime=0) at ../../Source/WebCore/loader/SubresourceLoader.cpp:306
#25 0x00007ffff35816e1 in WebCore::ResourceLoader::didFinishLoading (this=0x8af9c0, finishTime=0) at ../../Source/WebCore/loader/ResourceLoader.cpp:508
#26 0x00007ffff3f303e1 in WebCore::readCallback (asyncResult=0x8161d0, data=0x8b0040) at ../../Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:1300
#27 0x00007fffeb7ab7d6 in async_ready_callback_wrapper (source_object=0x7c66d0, res=0x8161d0, user_data=user_data@entry=0x8b0040) at ginputstream.c:523
#28 0x00007fffeb7d10d5 in g_task_return_now (task=0x8161d0) at gtask.c:1077
#29 0x00007fffeb7d10f9 in complete_in_idle_cb (task=0x8161d0) at gtask.c:1086
#30 0x00007fffeaa10a1d in g_main_dispatch (context=0x4780a0) at gmain.c:3064
#31 g_main_context_dispatch (context=context@entry=0x4780a0) at gmain.c:3663
#32 0x00007fffeaa10d88 in g_main_context_iterate (context=0x4780a0, block=block@entry=1, dispatch=dispatch@entry=1, self=&lt;optimized out&gt;) at gmain.c:3734
#33 0x00007fffeaa1104a in g_main_loop_run (loop=0x8eb8a0) at gmain.c:3928
#34 0x00007ffff45df9dc in WTF::RunLoop::run () at ../../Source/WTF/wtf/gtk/RunLoopGtk.cpp:59
#35 0x00007ffff2b44f82 in WebKit::ChildProcessMain&lt;WebKit::WebProcess, WebKit::WebProcessMain&gt; (argc=2, argv=0x7fffffffd978) at ../../Source/WebKit2/Shared/unix/ChildProcessMain.h:61
#36 0x00007ffff2b44de7 in WebKit::WebProcessMainUnix (argc=2, argv=0x7fffffffd978) at ../../Source/WebKit2/WebProcess/gtk/WebProcessMainGtk.cpp:73
#37 0x0000000000400891 in main (argc=2, argv=0x7fffffffd978) at ../../Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp:44</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1054169</commentid>
    <comment_count>1</comment_count>
    <who name="Darin Adler">darin</who>
    <bug_when>2014-12-10 09:06:40 -0800</bug_when>
    <thetext>The way this should have worked is that parsing the node should have called parseAttribute for requiredAttr, which should have called requiredAttributeChanged, which called updateValidity, which set m_isValid to the result of valid(). Since that time, nothing should have made m_isValid get out of sync with the result of valid().</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1103733</commentid>
    <comment_count>2</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2015-06-21 08:50:35 -0700</bug_when>
    <thetext>I hit this 100% in my debug build of master, loading https://github.com/WebKit/webkit</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1174958</commentid>
    <comment_count>3</comment_count>
    <who name="Konstantin Tokarev">annulen</who>
    <bug_when>2016-03-15 05:16:35 -0700</bug_when>
    <thetext>This bug reproduces for me on github.com right now</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1175494</commentid>
    <comment_count>4</comment_count>
    <who name="Darin Adler">darin</who>
    <bug_when>2016-03-16 14:10:59 -0700</bug_when>
    <thetext>I might have a chance to fix this some time soon. It’s not clear from the assertion failure alone whether this is a super-critical problem or not. One of the most helpful things someone could do would be to create a test case demonstrating the failure that can be used as a regression test once we fix it.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1175511</commentid>
    <comment_count>5</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2016-03-16 14:54:53 -0700</bug_when>
    <thetext>(In reply to comment #4)
&gt; I might have a chance to fix this some time soon. It’s not clear from the
&gt; assertion failure alone whether this is a super-critical problem or not. One
&gt; of the most helpful things someone could do would be to create a test case
&gt; demonstrating the failure that can be used as a regression test once we fix
&gt; it.

The testcase from Fuzzinator in comment #0 works for me (crashes my web process) in trunk.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1175524</commentid>
    <comment_count>6</comment_count>
    <who name="Darin Adler">darin</who>
    <bug_when>2016-03-16 15:09:26 -0700</bug_when>
    <thetext>Oops, overlooked that.

To be clear, by “crashes” you mean hits an assertion in a debug build.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1175546</commentid>
    <comment_count>7</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2016-03-16 16:25:09 -0700</bug_when>
    <thetext>(In reply to comment #6)
&gt; Oops, overlooked that.
&gt; 
&gt; To be clear, by “crashes” you mean hits an assertion in a debug build.

Exactly, I should be more clear.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1176187</commentid>
    <comment_count>8</comment_count>
      <attachid>274422</attachid>
    <who name="Darin Adler">darin</who>
    <bug_when>2016-03-18 09:34:26 -0700</bug_when>
    <thetext>Created attachment 274422
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1176339</commentid>
    <comment_count>9</comment_count>
      <attachid>274422</attachid>
    <who name="Daniel Bates">dbates</who>
    <bug_when>2016-03-18 15:53:33 -0700</bug_when>
    <thetext>Comment on attachment 274422
Patch

This looks sane to me.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1176372</commentid>
    <comment_count>10</comment_count>
      <attachid>274422</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2016-03-18 16:45:06 -0700</bug_when>
    <thetext>Comment on attachment 274422
Patch

Clearing flags on attachment: 274422

Committed r198451: &lt;http://trac.webkit.org/changeset/198451&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1176373</commentid>
    <comment_count>11</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2016-03-18 16:45:10 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1176607</commentid>
    <comment_count>12</comment_count>
    <who name="Konstantin Tokarev">annulen</who>
    <bug_when>2016-03-20 12:52:02 -0700</bug_when>
    <thetext>I&apos;m still getting assert on github.com, maybe it deserves bug entry though:

#0  WTFCrash () at ../../../Source/WTF/wtf/Assertions.cpp:322
#1  0x00007ffff40bc84d in WebCore::HTMLFormControlElement::isValidFormControlElement (this=0x7fff94f7ea50)
    at ../../../Source/WebCore/html/HTMLFormControlElement.cpp:495
#2  0x00007ffff4060659 in WebCore::HTMLFormControlElement::checkValidity (this=0x7fff94f7ea50, 
    unhandledInvalidControls=0x0) at ../../../Source/WebCore/html/HTMLFormControlElement.cpp:480
#3  0x00007ffff50d9302 in WebCore::jsHTMLInputElementPrototypeFunctionCheckValidity (state=0x7fffffffb0d0)
    at DerivedSources/WebCore/JSHTMLInputElement.cpp:1866</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1176620</commentid>
    <comment_count>13</comment_count>
    <who name="Darin Adler">darin</who>
    <bug_when>2016-03-20 14:57:26 -0700</bug_when>
    <thetext>Yes it seems this reduction and the bug I fixed is not the same bug seen on github then. Please do make a new bug report. I am not personally a github user and made no attempt to test it. The same issue will exist with that bug as with this: will need to make reduced test cases.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1176745</commentid>
    <comment_count>14</comment_count>
    <who name="Renata Hodovan">rhodovan.u-szeged</who>
    <bug_when>2016-03-21 08:53:28 -0700</bug_when>
    <thetext>(In reply to comment #13)
&gt; Yes it seems this reduction and the bug I fixed is not the same bug seen on
&gt; github then. Please do make a new bug report. I am not personally a github
&gt; user and made no attempt to test it. The same issue will exist with that bug
&gt; as with this: will need to make reduced test cases.

Another repro is available at https://bugs.webkit.org/show_bug.cgi?id=155720 (though it&apos;s not the reduction of the github issue yet).</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1176747</commentid>
    <comment_count>15</comment_count>
    <who name="Konstantin Tokarev">annulen</who>
    <bug_when>2016-03-21 08:55:57 -0700</bug_when>
    <thetext>It would be better if your fuzzer could find test case with HTMLFormControlElement::checkValidity() :)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1176964</commentid>
    <comment_count>16</comment_count>
    <who name="Renata Hodovan">rhodovan.u-szeged</who>
    <bug_when>2016-03-22 07:07:36 -0700</bug_when>
    <thetext>(In reply to comment #15)
&gt; It would be better if your fuzzer could find test case with
&gt; HTMLFormControlElement::checkValidity() :)

Unfortunately this is not the way how fuzzers work (at least not mine :) ), however I was able to reduce the github.com issue with an automatic test case minimizer. The test is available here: https://bugs.webkit.org/show_bug.cgi?id=155748</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1176965</commentid>
    <comment_count>17</comment_count>
    <who name="Konstantin Tokarev">annulen</who>
    <bug_when>2016-03-22 07:13:15 -0700</bug_when>
    <thetext>&gt;Unfortunately this is not the way how fuzzers work

It was a joke actually, but seriously, it should be possible to modify condition which classifies generated test cases from &quot;crash browser&quot; to &quot;crash browser &amp;&amp; output contains checkValidity&quot;

&gt;however I was able to reduce the github.com issue with an automatic test case minimizer

Great, thank you very much! Out of curiosity, what minimizer are you using?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1177322</commentid>
    <comment_count>18</comment_count>
    <who name="Renata Hodovan">rhodovan.u-szeged</who>
    <bug_when>2016-03-23 02:28:05 -0700</bug_when>
    <thetext>(In reply to comment #17)
&gt; &gt;Unfortunately this is not the way how fuzzers work
&gt; 
&gt; It was a joke actually, but seriously, it should be possible to modify
&gt; condition which classifies generated test cases from &quot;crash browser&quot; to
&gt; &quot;crash browser &amp;&amp; output contains checkValidity&quot;

Aaah, I see. I can classify them this way. I thought that you meant to generate test cases that makes the browser crash in a given function :)

&gt; &gt;however I was able to reduce the github.com issue with an automatic test case minimizer
&gt; 
&gt; Great, thank you very much! Out of curiosity, what minimizer are you using?

I use various private tools as part of my fuzzer framework (but I plan to release at least some of them sometime soon).</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>243017</attachid>
            <date>2014-12-10 07:33:39 -0800</date>
            <delta_ts>2014-12-10 07:33:39 -0800</delta_ts>
            <desc>Test case</desc>
            <filename>crash.html</filename>
            <type>text/html</type>
            <size>112</size>
            <attacher name="Renata Hodovan">rhodovan.u-szeged</attacher>
            
              <data encoding="base64">PCFET0NUWVBFIGh0bWw+CjxkYXRhbGlzdD4KICAgIDxhPgogICAgICAgIDxmb3JtPgogICAgICAg
ICAgICA8c2VsZWN0IHJlcXVpcmVkPSIiPjwvc2VsZWN0PgogICAgPC9hPgo8L2RhdGFsaXN0Pg==
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>274422</attachid>
            <date>2016-03-18 09:34:26 -0700</date>
            <delta_ts>2016-03-18 16:45:06 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-139481-20160318093425.patch</filename>
            <type>text/plain</type>
            <size>4129</size>
            <attacher name="Darin Adler">darin</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTk4MzkzCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
      

    </bug>

</bugzilla>