<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>140516</bug_id>
          
          <creation_ts>2015-01-15 15:15:45 -0800</creation_ts>
          <short_desc>[Win] Assertion in &apos;fast/images/large-size-image-crash.html&apos;</short_desc>
          <delta_ts>2016-09-16 10:11:12 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Layout and Rendering</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>NEW</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Brent Fulgham">bfulgham</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1061657</commentid>
    <comment_count>0</comment_count>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2015-01-15 15:15:45 -0800</bug_when>
    <thetext>A debug assert is firing in the layout test &apos;fast/images/large-size-image-crash.html&apos; with the following stack trace:

 	WTF.dll!WTFCrash() Line 321	C++
&gt;	WebKit.dll!WTF::safeCast&lt;int,unsigned int&gt;(unsigned int value) Line 164	C++
 	WebKit.dll!WebCore::BitmapImage::cacheFrame(unsigned int index, short subsamplingLevel, WebCore::BitmapImage::ImageFrameCaching frameCaching) Line 206	C++
 	WebKit.dll!WebCore::BitmapImage::frameAtIndex(unsigned int index, float presentationScaleHint) Line 410	C++
 	WebKit.dll!WebCore::BitmapImage::draw(WebCore::GraphicsContext * ctxt, const WebCore::FloatRect &amp; destRect, const WebCore::FloatRect &amp; srcRect, WebCore::ColorSpace styleColorSpace, WebCore::CompositeOperator compositeOp, WebCore::BlendMode blendMode, WebCore::ImageOrientationDescription description) Line 222	C++
 	WebKit.dll!WebCore::GraphicsContext::drawImage(WebCore::Image * image, WebCore::ColorSpace colorSpace, const WebCore::FloatRect &amp; destination, const WebCore::FloatRect &amp; source, const WebCore::ImagePaintingOptions &amp; imagePaintingOptions) Line 569	C++
 	WebKit.dll!WebCore::GraphicsContext::drawImage(WebCore::Image * image, WebCore::ColorSpace colorSpace, const WebCore::FloatRect &amp; destination, const WebCore::ImagePaintingOptions &amp; imagePaintingOptions) Line 559	C++
 	WebKit.dll!WebCore::RenderImage::paintIntoRect(WebCore::GraphicsContext * context, const WebCore::FloatRect &amp; rect) Line 570	C++
 	WebKit.dll!WebCore::RenderImage::paintReplaced(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset) Line 483	C++
 	WebKit.dll!WebCore::RenderReplaced::paint(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset) Line 183	C++
 	WebKit.dll!WebCore::RenderImage::paint(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset) Line 499	C++
 	WebKit.dll!WebCore::InlineElementBox::paint(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset, WebCore::LayoutUnit __formal, WebCore::LayoutUnit __formal) Line 89	C++
 	WebKit.dll!WebCore::InlineFlowBox::paint(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset, WebCore::LayoutUnit lineTop, WebCore::LayoutUnit lineBottom) Line 1167	C++
 	WebKit.dll!WebCore::RootInlineBox::paint(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset, WebCore::LayoutUnit lineTop, WebCore::LayoutUnit lineBottom) Line 187	C++
 	WebKit.dll!WebCore::RenderLineBoxList::paint(WebCore::RenderBoxModelObject * renderer, WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset) Line 268	C++
 	WebKit.dll!WebCore::RenderBlockFlow::paintInlineChildren(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset) Line 3414	C++
 	WebKit.dll!WebCore::RenderBlock::paintContents(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset) Line 1458	C++
 	WebKit.dll!WebCore::RenderBlock::paintObject(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset) Line 1607	C++
 	WebKit.dll!WebCore::RenderBlock::paint(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset) Line 1438	C++
 	WebKit.dll!WebCore::RenderBlock::paintChild(WebCore::RenderBox &amp; child, WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset, WebCore::PaintInfo &amp; paintInfoForChild, bool usePrintRect) Line 1510	C++
 	WebKit.dll!WebCore::RenderBlock::paintChildren(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset, WebCore::PaintInfo &amp; paintInfoForChild, bool usePrintRect) Line 1477	C++
 	WebKit.dll!WebCore::RenderBlock::paintContents(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset) Line 1472	C++
 	WebKit.dll!WebCore::RenderBlock::paintObject(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset) Line 1607	C++
 	WebKit.dll!WebCore::RenderBlock::paint(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset) Line 1438	C++
 	WebKit.dll!WebCore::RenderBlock::paintChild(WebCore::RenderBox &amp; child, WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset, WebCore::PaintInfo &amp; paintInfoForChild, bool usePrintRect) Line 1510	C++
 	WebKit.dll!WebCore::RenderBlock::paintChildren(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset, WebCore::PaintInfo &amp; paintInfoForChild, bool usePrintRect) Line 1477	C++
 	WebKit.dll!WebCore::RenderBlock::paintContents(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset) Line 1472	C++
 	WebKit.dll!WebCore::RenderBlock::paintObject(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset) Line 1607	C++
 	WebKit.dll!WebCore::RenderBlock::paint(WebCore::PaintInfo &amp; paintInfo, const WebCore::LayoutPoint &amp; paintOffset) Line 1438	C++
 	WebKit.dll!WebCore::RenderLayer::paintForegroundForFragmentsWithPhase(WebCore::PaintPhase phase, const WTF::Vector&lt;WebCore::LayerFragment,1,WTF::CrashOnOverflow&gt; &amp; layerFragments, WebCore::GraphicsContext * context, const WebCore::RenderLayer::LayerPaintingInfo &amp; localPaintingInfo, unsigned int paintBehavior, WebCore::RenderObject * subtreePaintRootForRenderer) Line 4589	C++
 	WebKit.dll!WebCore::RenderLayer::paintForegroundForFragments(const WTF::Vector&lt;WebCore::LayerFragment,1,WTF::CrashOnOverflow&gt; &amp; layerFragments, WebCore::GraphicsContext * context, WebCore::GraphicsContext * transparencyLayerContext, const WebCore::LayoutRect &amp; transparencyPaintDirtyRect, bool haveTransparency, const WebCore::RenderLayer::LayerPaintingInfo &amp; localPaintingInfo, unsigned int paintBehavior, WebCore::RenderObject * subtreePaintRootForRenderer, bool selectionOnly) Line 4554	C++
 	WebKit.dll!WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext * context, const WebCore::RenderLayer::LayerPaintingInfo &amp; paintingInfo, unsigned int paintFlags) Line 4174	C++
 	WebKit.dll!WebCore::RenderLayer::paintLayerContentsAndReflection(WebCore::GraphicsContext * context, const WebCore::RenderLayer::LayerPaintingInfo &amp; paintingInfo, unsigned int paintFlags) Line 3847	C++
 	WebKit.dll!WebCore::RenderLayer::paintLayer(WebCore::GraphicsContext * context, const WebCore::RenderLayer::LayerPaintingInfo &amp; paintingInfo, unsigned int paintFlags) Line 3829	C++
 	WebKit.dll!WebCore::RenderLayer::paintList(WTF::Vector&lt;WebCore::RenderLayer *,0,WTF::CrashOnOverflow&gt; * list, WebCore::GraphicsContext * context, const WebCore::RenderLayer::LayerPaintingInfo &amp; paintingInfo, unsigned int paintFlags) Line 4271	C++
 	WebKit.dll!WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext * context, const WebCore::RenderLayer::LayerPaintingInfo &amp; paintingInfo, unsigned int paintFlags) Line 4185	C++
 	WebKit.dll!WebCore::RenderLayer::paintLayerContentsAndReflection(WebCore::GraphicsContext * context, const WebCore::RenderLayer::LayerPaintingInfo &amp; paintingInfo, unsigned int paintFlags) Line 3847	C++
 	WebKit.dll!WebCore::RenderLayer::paintLayer(WebCore::GraphicsContext * context, const WebCore::RenderLayer::LayerPaintingInfo &amp; paintingInfo, unsigned int paintFlags) Line 3829	C++
 	WebKit.dll!WebCore::RenderLayer::paint(WebCore::GraphicsContext * context, const WebCore::LayoutRect &amp; damageRect, const WebCore::LayoutSize &amp; subpixelAccumulation, unsigned int paintBehavior, WebCore::RenderObject * subtreePaintRoot, unsigned int paintFlags) Line 3633	C++
 	WebKit.dll!WebCore::FrameView::paintContents(WebCore::GraphicsContext * context, const WebCore::IntRect &amp; dirtyRect) Line 3874	C++
 	WebKit.dll!WebCore::ScrollView::paint(WebCore::GraphicsContext * context, const WebCore::IntRect &amp; rect) Line 1225	C++
 	WebKit.dll!WebView::paintIntoBackingStore(WebCore::FrameView * frameView, HDC__ * bitmapDC, const WebCore::IntRect &amp; dirtyRect, WebView::WindowsToPaint windowsToPaint) Line 1235	C++
 	WebKit.dll!WebView::updateBackingStore(WebCore::FrameView * frameView, HDC__ * dc, bool backingStoreCompletelyDirty, WebView::WindowsToPaint windowsToPaint) Line 1060	C++
 	WebKit.dll!WebView::paint(HDC__ * dc, long options) Line 1170	C++
 	WebKit.dll!WebView::WebViewWndProc(HWND__ * hWnd, unsigned int message, unsigned int wParam, long lParam) Line 2261	C++
 	[External Code]	
 	DumpRenderTree.dll!dump() Line 684	C++
 	DumpRenderTree.dll!FrameLoadDelegate::locationChangeDone(IWebError * __formal, IWebFrame * frame) Line 250	C++
 	DumpRenderTree.dll!FrameLoadDelegate::didFinishLoadForFrame(IWebView * __formal, IWebFrame * frame) Line 258	C++
 	WebKit.dll!WebFrameLoaderClient::dispatchDidFinishLoad() Line 497	C++
 	WebKit.dll!WebCore::FrameLoader::checkLoadCompleteForThisFrame() Line 2286	C++
 	WebKit.dll!WebCore::FrameLoader::checkLoadComplete() Line 2466	C++
 	WebKit.dll!WebCore::FrameLoader::checkCompleted() Line 857	C++
 	WebKit.dll!WebCore::FrameLoader::loadDone() Line 784	C++
 	WebKit.dll!WebCore::CachedResourceLoader::loadDone(WebCore::CachedResource * resource, bool shouldPerformPostLoadActions) Line 834	C++
 	WebKit.dll!WebCore::SubresourceLoader::notifyDone() Line 437	C++
 	WebKit.dll!WebCore::SubresourceLoader::didFinishLoading(double finishTime) Line 363	C++
 	WebKit.dll!WebCore::ResourceLoader::didFinishLoading(WebCore::ResourceHandle * __formal, double finishTime) Line 503	C++
 	WebKit.dll!WebCore::SynchronousResourceHandleCFURLConnectionDelegate::didFinishLoading() Line 181	C++
 	WebKit.dll!WebCore::ResourceHandleCFURLConnectionDelegate::didFinishLoadingCallback(_CFURLConnection * __formal, const void * clientInfo) Line 88	C++
 	CFNetwork.dll!URLConnectionClient::_clientDidFinishLoading(URLConnectionClient::ClientConnectionEventQueue * preQ) Line 1739	C++
 	CFNetwork.dll!URLConnectionClient::ClientConnectionEventQueue::processAllEventsAndConsumePayload(XConnectionEventInfo&lt;enum XClientEvent,XClientEventParams&gt; * e, long count) Line 2256	C++
 	CFNetwork.dll!XConnectionEventQueue&lt;enum XClientEvent,XClientEventParams&gt;::processAllEvents() Line 231	C++
 	CFNetwork.dll!URLConnectionClient::processEvents() Line 362	C++
 	CFNetwork.dll!MultiplexerSource::perform() Line 229	C++
 	CoreFoundation.dll!__CFRunLoopDoSources0(__CFRunLoop * rl, __CFRunLoopMode * rlm, unsigned char stopAfterHandle) Line 41844	C++
 	CoreFoundation.dll!__CFRunLoopRun(__CFRunLoop * rl, __CFRunLoopMode * rlm, double seconds, unsigned char stopAfterHandle, __CFRunLoopMode * previousMode) Line 42281	C++
 	CoreFoundation.dll!CFRunLoopRunSpecific(__CFRunLoop * rl, const __CFString * modeName, double seconds, unsigned char returnAfterSourceHandled) Line 42477	C++
 	CoreFoundation.dll!CFRunLoopRunInMode(const __CFString * modeName, double seconds, unsigned char returnAfterSourceHandled) Line 42511	C++
 	DumpRenderTree.dll!runTest(const std::basic_string&lt;char,std::char_traits&lt;char&gt;,std::allocator&lt;char&gt; &gt; &amp; inputLine) Line 1120	C++
 	DumpRenderTree.dll!main(int argc, const char * * argv) Line 1476	C++
 	DumpRenderTree.dll!dllLauncherEntryPoint(int argc, const char * * argv) Line 1506	C++
 	DumpRenderTree.exe!main(int argc, const char * * argv) Line 239	C++


SafeCast is angry that the value is not in the bounds of the expected type:

value = 3,105,862,920
FromType is unsigned int
ToType is int

Since the Windows bot is a 32-bit build, this failure makes sense.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1230439</commentid>
    <comment_count>1</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2016-09-16 10:11:12 -0700</bug_when>
    <thetext>See also: rdar://problem/27491960</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>