<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>140275</bug_id>
          
          <creation_ts>2015-01-08 16:34:35 -0800</creation_ts>
          <short_desc>Calling clearSelection on a detached RenderObject leads to segfault.</short_desc>
          <delta_ts>2015-01-09 18:12:14 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Layout and Rendering</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="alan">zalan</reporter>
          <assigned_to name="alan">zalan</assigned_to>
          <cc>ap</cc>
    
    <cc>commit-queue</cc>
    
    <cc>esprehn+autocc</cc>
    
    <cc>glenn</cc>
    
    <cc>kondapallykalyan</cc>
    
    <cc>simon.fraser</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1060009</commentid>
    <comment_count>0</comment_count>
      <attachid>244310</attachid>
    <who name="alan">zalan</who>
    <bug_when>2015-01-08 16:34:35 -0800</bug_when>
    <thetext>Created attachment 244310
Test reduction.

We attempt to compute the selection rect on an already detached subtree.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1060010</commentid>
    <comment_count>1</comment_count>
    <who name="alan">zalan</who>
    <bug_when>2015-01-08 16:35:06 -0800</bug_when>
    <thetext>rdar://problem/19397991</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1060271</commentid>
    <comment_count>2</comment_count>
    <who name="alan">zalan</who>
    <bug_when>2015-01-09 14:25:30 -0800</bug_when>
    <thetext>* thread #1: tid = 0x1ada2a7, 0x000000010e79c801 WebCore`WebCore::RenderBox::containingBlockLogicalHeightForContent(this=0x000000011bf79480, heightType=IncludeMarginBorderPadding) const + 81 at RenderBox.cpp:1853, queue = &apos;com.apple.main-thread&apos;, stop reason = EXC_BAD_ACCESS (code=1, address=0x0)
  * frame #0: 0x000000010e79c801 WebCore`WebCore::RenderBox::containingBlockLogicalHeightForContent(this=0x000000011bf79480, heightType=IncludeMarginBorderPadding) const + 81 at RenderBox.cpp:1853
    frame #1: 0x000000010e7a5a19 WebCore`WebCore::RenderBox::availableLogicalHeightUsing(this=0x000000011bf79480, h=0x000000011bff20a0, heightType=IncludeMarginBorderPadding) const + 1113 at RenderBox.cpp:3045
    frame #2: 0x000000010e7a5599 WebCore`WebCore::RenderBox::availableLogicalHeight(this=0x000000011bf79480, heightType=IncludeMarginBorderPadding) const + 57 at RenderBox.cpp:3010
    frame #3: 0x000000010e7cd389 WebCore`WebCore::RenderBox::availableHeight(this=0x000000011bf79480) const + 73 at RenderBox.h:455
    frame #4: 0x000000010e7b8a6e WebCore`WebCore::RenderBoxModelObject::relativePositionOffset(this=0x000000011bf79180) const + 766 at RenderBoxModelObject.cpp:303
    frame #5: 0x000000010e7ba125 WebCore`WebCore::RenderBoxModelObject::offsetForInFlowPosition(this=0x000000011bf79180) const + 53 at RenderBoxModelObject.cpp:483
    frame #6: 0x000000010e79d928 WebCore`WebCore::RenderBox::offsetFromContainer(this=0x000000011bf79180, renderer=0x000000011bf79480, (null)=0x00007fff577af008, offsetDependsOnPoint=0x0000000000000000) const + 184 at RenderBox.cpp:2023
    frame #7: 0x000000010e79d0db WebCore`WebCore::RenderBox::mapLocalToContainer(this=0x000000011bf79180, repaintContainer=0x0000000000000000, transformState=0x00007fff577af520, mode=2, wasFixed=0x0000000000000000) const + 667 at RenderBox.cpp:1940
    frame #8: 0x000000010e79d35e WebCore`WebCore::RenderBox::mapLocalToContainer(this=0x000000011bfbcbb8, repaintContainer=0x0000000000000000, transformState=0x00007fff577af520, mode=2, wasFixed=0x0000000000000000) const + 1310 at RenderBox.cpp:1963
    frame #9: 0x000000010e79d35e WebCore`WebCore::RenderBox::mapLocalToContainer(this=0x000000011bed7780, repaintContainer=0x0000000000000000, transformState=0x00007fff577af520, mode=2, wasFixed=0x0000000000000000) const + 1310 at RenderBox.cpp:1963
    frame #10: 0x000000010e92d7e7 WebCore`WebCore::RenderObject::mapLocalToContainer(this=0x000000011bedbc00, repaintContainer=0x0000000000000000, transformState=0x00007fff577af520, mode=2, wasFixed=0x0000000000000000) const + 535 at RenderObject.cpp:1602
    frame #11: 0x000000010e92de58 WebCore`WebCore::RenderObject::localToContainerQuad(this=0x000000011bedbc00, localQuad=0x00007fff577af690, repaintContainer=0x0000000000000000, mode=0, wasFixed=0x0000000000000000) const + 280 at RenderObject.cpp:1673
    frame #12: 0x000000010ea14c3b WebCore`WebCore::RenderText::collectSelectionRectsForLineBoxes(this=0x000000011bedbc00, repaintContainer=0x0000000000000000, clipToVisibleContent=true, rects=0x000000011bed8948) + 795 at RenderText.cpp:1323
    frame #13: 0x000000010ea14dff WebCore`WebCore::RenderText::collectSelectionRectsForLineBoxes(this=0x000000011bedbc00, repaintContainer=0x0000000000000000, clipToVisibleContent=true, rects=0x000000011bed8948) + 47 at RenderText.cpp:1337
    frame #14: 0x000000010e94d801 WebCore`WebCore::RenderSelectionInfo::RenderSelectionInfo(this=0x000000011bed8930, renderer=0x000000011bedbc00, clipToVisibleContent=true) + 177 at RenderSelectionInfo.cpp:50
    frame #15: 0x000000010e94d8ac WebCore`WebCore::RenderSelectionInfo::RenderSelectionInfo(this=0x000000011bed8930, renderer=0x000000011bedbc00, clipToVisibleContent=true) + 44 at RenderSelectionInfo.cpp:54
    frame #16: 0x000000010ea515de WebCore`std::_Unique_if&lt;WebCore::RenderSelectionInfo&gt;::_Single_object std::make_unique&lt;WebCore::RenderSelectionInfo, WebCore::RenderObject&amp;, bool&gt;(args=0x000000011bedbc00, args=0x00007fff577afa8f) + 110 at StdLibExtras.h:337
    frame #17: 0x000000010ea4ce81 WebCore`WebCore::RenderView::clearSubtreeSelection(this=0x000000011b7a9000, root=0x000000011b7a90c0, blockRepaintMode=RepaintNewMinusOld, oldSelectionData=0x00007febb34a6d60) const + 481 at RenderView.cpp:963
    frame #18: 0x000000010ea4c5fd WebCore`WebCore::RenderView::updateSelectionForSubtrees(this=0x000000011b7a9000, renderSubtreesMap=0x00007fff577affc8, blockRepaintMode=RepaintNewMinusOld) + 285 at RenderView.cpp:927
    frame #19: 0x000000010ea4c3a2 WebCore`WebCore::RenderView::setSelection(this=0x000000011b7a9000, start=0x0000000000000000, startPos=-1, end=0x0000000000000000, endPos=-1, blockRepaintMode=RepaintNewMinusOld) + 578 at RenderView.cpp:873
    frame #20: 0x000000010ea4e724 WebCore`WebCore::RenderView::clearSelection(this=0x000000011b7a9000) + 84 at RenderView.cpp:1097
    frame #21: 0x000000010d95e4c4 WebCore`WebCore::FrameSelection::setNeedsSelectionUpdate(this=0x000000011b7fe140) + 68 at FrameSelection.cpp:360
    frame #22: 0x000000010e7ee7df WebCore`WebCore::RenderElement::removeChildInternal(this=0x000000011bed7f00, oldChild=0x000000011bf79480, notifyChildren=DontNotifyChildren) + 495 at RenderElement.cpp:623
    frame #23: 0x000000010e7ccb03 WebCore`WebCore::RenderBoxModelObject::moveChildTo(this=0x000000011bed7f00, toBoxModelObject=0x000000011bf79840, child=0x000000011bf79480, beforeChild=0x0000000000000000, fullRemoveInsert=false) + 467 at RenderBoxModelObject.cpp:2709
    frame #24: 0x000000010e7ccd15 WebCore`WebCore::RenderBoxModelObject::moveChildrenTo(this=0x000000011bed7f00, toBoxModelObject=0x000000011bf79840, startChild=0x000000011bf79480, endChild=0x0000000000000000, beforeChild=0x0000000000000000, fullRemoveInsert=false) + 485 at RenderBoxModelObject.cpp:2745
    frame #25: 0x000000010e73b28d WebCore`WebCore::RenderBoxModelObject::moveAllChildrenTo(this=0x000000011bed7f00, toBoxModelObject=0x000000011bf79840, beforeChild=0x0000000000000000, fullRemoveInsert=false) + 93 at RenderBoxModelObject.h:299
    frame #26: 0x000000010e726cde WebCore`WebCore::RenderBlock::collapseAnonymousBoxChild(parent=0x000000011bf79840, child=0x000000011bed7f00) + 270 at RenderBlock.cpp:694
    frame #27: 0x000000010e7271a6 WebCore`WebCore::RenderBlock::removeChild(this=0x000000011bf79840, oldChild=0x000000011bed7e40) + 1190 at RenderBlock.cpp:767
    frame #28: 0x000000010e770cdd WebCore`WebCore::RenderBlockFlow::removeChild(this=0x000000011bf79840, oldChild=0x000000011bed7e40) + 125 at RenderBlockFlow.cpp:3729
    frame #29: 0x000000010e9251c6 WebCore`WebCore::RenderObject::removeFromParent(this=0x000000011bed7e40) + 70 at RenderObject.cpp:188
    frame #30: 0x000000010e92e406 WebCore`WebCore::RenderObject::willBeDestroyed(this=0x000000011bed7e40) + 102 at RenderObject.cpp:1863
    frame #31: 0x000000010e7f061f WebCore`WebCore::RenderElement::willBeDestroyed(this=0x000000011bed7e40) + 95 at RenderElement.cpp:1067
    frame #32: 0x000000010e7b8198 WebCore`WebCore::RenderBoxModelObject::willBeDestroyed(this=0x000000011bed7e40) + 184 at RenderBoxModelObject.cpp:204
    frame #33: 0x000000010e75772e WebCore`WebCore::RenderBlockFlow::willBeDestroyed(this=0x000000011bed7e40) + 414 at RenderBlockFlow.cpp:175
    frame #34: 0x000000010e92e982 WebCore`WebCore::RenderObject::destroy(this=0x000000011bed7e40) + 66 at RenderObject.cpp:1990
    frame #35: 0x000000010e92e932 WebCore`WebCore::RenderObject::destroyAndCleanupAnonymousWrappers(this=0x000000011bed7e40) + 274 at RenderObject.cpp:1976
    frame #36: 0x000000010ed63d05 WebCore`WebCore::Style::detachRenderTree(current=0x000000011befbf70, detachType=NormalDetach) + 197 at StyleResolveTree.cpp:700
    frame #37: 0x000000010ed63c3a WebCore`WebCore::Style::detachRenderTree(element=0x000000011befbf70) + 26 at StyleResolveTree.cpp:1000
    frame #38: 0x000000010d34478e WebCore`WebCore::destroyRenderTreeIfNeeded(child=0x000000011befbf70) + 94 at ContainerNode.cpp:100
    frame #39: 0x000000010d346a76 WebCore`WebCore::ContainerNode::removeBetween(this=0x000000011befbc98, previousChild=0x000000011befbea0, nextChild=0x0000000000000000, oldChild=0x000000011befbf70) + 134 at ContainerNode.cpp:586
    frame #40: 0x000000010d346471 WebCore`WebCore::ContainerNode::removeChild(this=0x000000011befbc98, oldChild=0x000000011befbf70, ec=0x00007fff577b0784) + 593 at ContainerNode.cpp:559
    frame #41: 0x000000010e615b78 WebCore`WebCore::Node::removeChild(this=0x000000011befbc98, oldChild=0x000000011befbf70, ec=0x00007fff577b0784) + 88 at Node.cpp:447
    frame #42: 0x000000010e170a74 WebCore`WebCore::JSNode::removeChild(this=0x000000011d59f5d0, exec=0x00007fff577b0800) + 84 at JSNodeCustom.cpp:156
    frame #43: 0x000000010e16cfaf WebCore`WebCore::jsNodePrototypeFunctionRemoveChild(exec=0x00007fff577b0800) + 383 at JSNode.cpp:671
    frame #44: 0x00002ccf37601034
    frame #45: 0x000000010b8a9e1b JavaScriptCore`llint_entry + 25439
    frame #46: 0x000000010b8a3879 JavaScriptCore`vmEntryToJavaScript + 361
    frame #47: 0x000000010b72cf5a JavaScriptCore`JSC::JITCode::execute(this=0x000000011beece10, vm=0x000000011a0261c0, protoCallFrame=0x00007fff577b0a70) + 266 at JITCode.cpp:77
    frame #48: 0x000000010b7114e4 JavaScriptCore`JSC::Interpreter::executeCall(this=0x000000011bff1270, callFrame=0x000000011d58eeb0, function=0x000000011d5b50f0, callType=CallTypeJS, callData=0x00007fff577b0e88, thisValue=JSValue at 0x00007fff577b0b50, args=0x00007fff577b0dc0) + 1508 at Interpreter.cpp:978
    frame #49: 0x000000010b21867e JavaScriptCore`JSC::call(exec=0x000000011d58eeb0, functionObject=JSValue at 0x00007fff577b0c30, callType=CallTypeJS, callData=0x00007fff577b0e88, thisValue=JSValue at 0x00007fff577b0c28, args=0x00007fff577b0dc0) + 190 at CallData.cpp:39
    frame #50: 0x000000010b2186e3 JavaScriptCore`JSC::call(exec=0x000000011d58eeb0, functionObject=JSValue at 0x00007fff577b0cb0, callType=CallTypeJS, callData=0x00007fff577b0e88, thisValue=JSValue at 0x00007fff577b0ca8, args=0x00007fff577b0dc0, exception=0x00007fff577b0de0) + 83 at CallData.cpp:44
    frame #51: 0x000000010de705db WebCore`WebCore::JSMainThreadExecState::call(exec=0x000000011d58eeb0, functionObject=JSValue at 0x00007fff577b0d30, callType=CallTypeJS, callData=0x00007fff577b0e88, thisValue=JSValue at 0x00007fff577b0d28, args=0x00007fff577b0dc0, exception=0x00007fff577b0de0) + 107 at JSMainThreadExecState.h:56
    frame #52: 0x000000010eadd6e4 WebCore`WebCore::ScheduledAction::executeFunctionInContext(this=0x000000011beeeac8, globalObject=0x000000011d58ee70, thisValue=JSValue at 0x00007fff577b0eb8, context=0x000000011a0160e0) + 532 at ScheduledAction.cpp:104
    frame #53: 0x000000010eadd2e4 WebCore`WebCore::ScheduledAction::execute(this=0x000000011beeeac8, document=0x000000011a016040) + 276 at ScheduledAction.cpp:125
    frame #54: 0x000000010eadd1a3 WebCore`WebCore::ScheduledAction::execute(this=0x000000011beeeac8, context=0x000000011a0160e0) + 67 at ScheduledAction.cpp:78
    frame #55: 0x000000010d6e4710 WebCore`WebCore::DOMTimer::fired(this=0x000000011bf5c9d8) + 896 at DOMTimer.cpp:396
    frame #56: 0x000000010ef6818c WebCore`WebCore::ThreadTimers::sharedTimerFiredInternal(this=0x000000011bfffa28) + 396 at ThreadTimers.cpp:132
    frame #57: 0x000000010ef67e49 WebCore`WebCore::ThreadTimers::sharedTimerFired() + 25 at ThreadTimers.cpp:107
    frame #58: 0x000000010ec145ef WebCore`WebCore::timerFired((null)=0x00007febb34a9cc0, (null)=0x0000000000000000) + 31 at SharedTimerMac.mm:124
    frame #59: 0x00007fff8db4bb64 CoreFoundation`__CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20
    frame #60: 0x00007fff8db4b7f3 CoreFoundation`__CFRunLoopDoTimer + 1059
    frame #61: 0x00007fff8dbbedbd CoreFoundation`__CFRunLoopDoTimers + 301
    frame #62: 0x00007fff8db08288 CoreFoundation`__CFRunLoopRun + 2024
    frame #63: 0x00007fff8db07858 CoreFoundation`CFRunLoopRunSpecific + 296
    frame #64: 0x00007fff83f21b8f HIToolbox`RunCurrentEventLoopInMode + 235
    frame #65: 0x00007fff83f2190a HIToolbox`ReceiveNextEventCommon + 431
    frame #66: 0x00007fff83f2174b HIToolbox`_BlockUntilNextEventMatchingListInModeWithFilter + 71
    frame #67: 0x00007fff8f09477d AppKit`_DPSNextEvent + 964
    frame #68: 0x00007fff8f093f30 AppKit`-[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 194
    frame #69: 0x00007fff8f087d83 AppKit`-[NSApplication run] + 594
    frame #70: 0x00007fff8f073184 AppKit`NSApplicationMain + 1832
    frame #71: 0x0000000108450272 MiniBrowser`main(argc=1, argv=0x00007fff577b3988) + 34 at main.m:30
    frame #72: 0x00007fff88dac5c9 libdyld.dylib`start + 1
    frame #73: 0x00007fff88dac5c9 libdyld.dylib`start + 1</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1060311</commentid>
    <comment_count>3</comment_count>
      <attachid>244380</attachid>
    <who name="alan">zalan</who>
    <bug_when>2015-01-09 15:56:42 -0800</bug_when>
    <thetext>Created attachment 244380
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1060367</commentid>
    <comment_count>4</comment_count>
      <attachid>244380</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2015-01-09 18:12:01 -0800</bug_when>
    <thetext>Comment on attachment 244380
Patch

Clearing flags on attachment: 244380

Committed r178231: &lt;http://trac.webkit.org/changeset/178231&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1060368</commentid>
    <comment_count>5</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2015-01-09 18:12:14 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>244310</attachid>
            <date>2015-01-08 16:34:35 -0800</date>
            <delta_ts>2015-01-08 16:34:35 -0800</delta_ts>
            <desc>Test reduction.</desc>
            <filename>clearselection.html</filename>
            <type>text/html</type>
            <size>828</size>
            <attacher name="alan">zalan</attacher>
            
              <data encoding="base64">PCFET0NUWVBFIGh0bWw+CjxodG1sPgo8aGVhZD4KPHN0eWxlPgogIC5vdXRlciB7CiAgICBwb3Np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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>244380</attachid>
            <date>2015-01-09 15:56:42 -0800</date>
            <delta_ts>2015-01-09 18:12:01 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-140275-20150109155646.patch</filename>
            <type>text/plain</type>
            <size>6151</size>
            <attacher name="alan">zalan</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTc4MTk4CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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==
</data>

          </attachment>
      

    </bug>

</bugzilla>