<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>146646</bug_id>
          
          <creation_ts>2015-07-06 10:55:56 -0700</creation_ts>
          <short_desc>Crash: LayoutState root&apos;s container is nullptr when the layout root is detached.</short_desc>
          <delta_ts>2015-07-06 12:38:38 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Layout and Rendering</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="alan">zalan</reporter>
          <assigned_to name="alan">zalan</assigned_to>
          <cc>commit-queue</cc>
    
    <cc>ddkilzer</cc>
    
    <cc>esprehn+autocc</cc>
    
    <cc>glenn</cc>
    
    <cc>kondapallykalyan</cc>
    
    <cc>simon.fraser</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1107141</commentid>
    <comment_count>0</comment_count>
    <who name="alan">zalan</who>
    <bug_when>2015-07-06 10:55:56 -0700</bug_when>
    <thetext>0   WebCore                       	0x0000000196cb5f74 WebCore::RenderObject::localToAbsolute(WebCore::FloatPoint const&amp;, unsigned int, bool*) const + 64 (RenderObject.cpp:1587)
1   WebCore                       	0x0000000196b0b0d0 WebCore::LayoutState::LayoutState(WebCore::RenderObject&amp;) + 96 (LayoutState.cpp:140)
2   WebCore                       	0x0000000196b0b0d0 WebCore::LayoutState::LayoutState(WebCore::RenderObject&amp;) + 96 (LayoutState.cpp:140)
3   WebCore                       	0x0000000196d1a074 WebCore::RenderView::pushLayoutState(WebCore::RenderObject&amp;) + 40 (StdLibExtras.h:337)
4   WebCore                       	0x00000001961b181c WebCore::FrameView::layout(bool) + 716 (FrameView.cpp:1307)
5   WebCore                       	0x00000001962550e8 WebCore::RenderFrameBase::layoutWithFlattening(bool, bool) + 204 (RenderFrameBase.cpp:63)
6   WebCore                       	0x000000019624a324 WebCore::RenderIFrame::layout() + 76 (RenderIFrame.cpp:105)
7   WebCore                       	0x0000000196c16828 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&amp;, WebCore::RenderBlockFlow::MarginInfo&amp;, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) + 932 (RenderBlockFlow.cpp:709)
8   WebCore                       	0x0000000196c1553c WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&amp;) + 556 (RenderBlockFlow.cpp:632)
9   WebCore                       	0x0000000196c14518 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 800 (RenderBlockFlow.cpp:485)
10  WebCore                       	0x0000000196152b98 WebCore::RenderBlock::layout() + 68 (RenderBlock.cpp:926)
11  WebCore                       	0x0000000196c28fcc WebCore::RenderBlockFlow::layoutLineBoxes(bool, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) + 948 (RenderElement.h:134)
12  WebCore                       	0x0000000196c145a0 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 936 (RenderBlockFlow.cpp:651)
13  WebCore                       	0x0000000196152b98 WebCore::RenderBlock::layout() + 68 (RenderBlock.cpp:926)
14  WebCore                       	0x0000000196c16828 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&amp;, WebCore::RenderBlockFlow::MarginInfo&amp;, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) + 932 (RenderBlockFlow.cpp:709)
15  WebCore                       	0x0000000196c1553c WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&amp;) + 556 (RenderBlockFlow.cpp:632)
16  WebCore                       	0x0000000196c14518 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 800 (RenderBlockFlow.cpp:485)
17  WebCore                       	0x0000000196152b98 WebCore::RenderBlock::layout() + 68 (RenderBlock.cpp:926)
18  WebCore                       	0x0000000196c16828 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&amp;, WebCore::RenderBlockFlow::MarginInfo&amp;, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) + 932 (RenderBlockFlow.cpp:709)
19  WebCore                       	0x0000000196c1553c WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&amp;) + 556 (RenderBlockFlow.cpp:632)
20  WebCore                       	0x0000000196c14518 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 800 (RenderBlockFlow.cpp:485)
21  WebCore                       	0x0000000196152b98 WebCore::RenderBlock::layout() + 68 (RenderBlock.cpp:926)
22  WebCore                       	0x0000000196c16828 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&amp;, WebCore::RenderBlockFlow::MarginInfo&amp;, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) + 932 (RenderBlockFlow.cpp:709)
23  WebCore                       	0x0000000196c1553c WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&amp;) + 556 (RenderBlockFlow.cpp:632)
24  WebCore                       	0x0000000196c14518 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 800 (RenderBlockFlow.cpp:485)
25  WebCore                       	0x0000000196152b98 WebCore::RenderBlock::layout() + 68 (RenderBlock.cpp:926)
26  WebCore                       	0x0000000196c16828 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&amp;, WebCore::RenderBlockFlow::MarginInfo&amp;, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) + 932 (RenderBlockFlow.cpp:709)
27  WebCore                       	0x0000000196c1553c WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&amp;) + 556 (RenderBlockFlow.cpp:632)
28  WebCore                       	0x0000000196c14518 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 800 (RenderBlockFlow.cpp:485)
29  WebCore                       	0x0000000196152b98 WebCore::RenderBlock::layout() + 68 (RenderBlock.cpp:926)
30  WebCore                       	0x0000000196c16828 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&amp;, WebCore::RenderBlockFlow::MarginInfo&amp;, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) + 932 (RenderBlockFlow.cpp:709)
31  WebCore                       	0x0000000196c1553c WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&amp;) + 556 (RenderBlockFlow.cpp:632)
32  WebCore                       	0x0000000196c14518 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 800 (RenderBlockFlow.cpp:485)
33  WebCore                       	0x0000000196152b98 WebCore::RenderBlock::layout() + 68 (RenderBlock.cpp:926)
34  WebCore                       	0x0000000196c16228 WebCore::RenderBlockFlow::insertFloatingObject(WebCore::RenderBox&amp;) + 280 (RenderElement.h:134)
35  WebCore                       	0x0000000196b17b24 WebCore::LineBreaker::skipLeadingWhitespace(WebCore::BidiResolver&lt;WebCore::InlineIterator, WebCore::BidiRun&gt;&amp;, WebCore::LineInfo&amp;, WebCore::FloatingObject*, WebCore::LineWidth&amp;) + 448 (LineBreaker.cpp:69)
36  WebCore                       	0x0000000196b17ce8 WebCore::LineBreaker::nextLineBreak(WebCore::BidiResolver&lt;WebCore::InlineIterator, WebCore::BidiRun&gt;&amp;, WebCore::LineInfo&amp;, WebCore::RenderTextInfo&amp;, WebCore::FloatingObject*, unsigned int, WTF::Vector&lt;WebCore::WordMeasurement, 64ul, WTF::CrashOnOverflow, 16ul&gt;&amp;) + 204 (LineBreaker.cpp:90)
37  WebCore                       	0x0000000196c26f58 WebCore::RenderBlockFlow::layoutRunsAndFloatsInRange(WebCore::LineLayoutState&amp;, WebCore::BidiResolver&lt;WebCore::InlineIterator, WebCore::BidiRun&gt;&amp;, WebCore::InlineIterator const&amp;, WebCore::BidiStatus const&amp;, unsigned int) + 572 (RenderBlockLineLayout.cpp:1248)
38  WebCore                       	0x0000000196c25b94 WebCore::RenderBlockFlow::layoutRunsAndFloats(WebCore::LineLayoutState&amp;, bool) + 800 (RenderBlockLineLayout.cpp:1202)
39  WebCore                       	0x0000000196c29414 WebCore::RenderBlockFlow::layoutLineBoxes(bool, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) + 2044 (RenderBlockLineLayout.cpp:1612)
40  WebCore                       	0x0000000196c145a0 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 936 (RenderBlockFlow.cpp:651)
41  WebCore                       	0x0000000196152b98 WebCore::RenderBlock::layout() + 68 (RenderBlock.cpp:926)
42  WebCore                       	0x0000000196c16828 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&amp;, WebCore::RenderBlockFlow::MarginInfo&amp;, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) + 932 (RenderBlockFlow.cpp:709)
43  WebCore                       	0x0000000196c1553c WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&amp;) + 556 (RenderBlockFlow.cpp:632)
44  WebCore                       	0x0000000196c14518 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 800 (RenderBlockFlow.cpp:485)
45  WebCore                       	0x0000000196152b98 WebCore::RenderBlock::layout() + 68 (RenderBlock.cpp:926)
46  WebCore                       	0x0000000196c16828 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&amp;, WebCore::RenderBlockFlow::MarginInfo&amp;, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) + 932 (RenderBlockFlow.cpp:709)
47  WebCore                       	0x0000000196c1553c WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&amp;) + 556 (RenderBlockFlow.cpp:632)
48  WebCore                       	0x0000000196c14518 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 800 (RenderBlockFlow.cpp:485)
49  WebCore                       	0x0000000196152b98 WebCore::RenderBlock::layout() + 68 (RenderBlock.cpp:926)
50  WebCore                       	0x0000000196c16828 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&amp;, WebCore::RenderBlockFlow::MarginInfo&amp;, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) + 932 (RenderBlockFlow.cpp:709)
51  WebCore                       	0x0000000196c1553c WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&amp;) + 556 (RenderBlockFlow.cpp:632)
52  WebCore                       	0x0000000196c14518 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 800 (RenderBlockFlow.cpp:485)
53  WebCore                       	0x0000000196152b98 WebCore::RenderBlock::layout() + 68 (RenderBlock.cpp:926)
54  WebCore                       	0x0000000196c16828 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&amp;, WebCore::RenderBlockFlow::MarginInfo&amp;, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) + 932 (RenderBlockFlow.cpp:709)
55  WebCore                       	0x0000000196c1553c WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&amp;) + 556 (RenderBlockFlow.cpp:632)
56  WebCore                       	0x0000000196c14518 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 800 (RenderBlockFlow.cpp:485)
57  WebCore                       	0x0000000196152b98 WebCore::RenderBlock::layout() + 68 (RenderBlock.cpp:926)
58  WebCore                       	0x00000001961b3ad8 WebCore::RenderView::layout() + 924 (RenderView.cpp:232)
59  WebCore                       	0x00000001961b20bc WebCore::FrameView::layout(bool) + 2924 (FrameView.cpp:1319)
60  WebCore                       	0x00000001964a15f8 WebCore::Document::updateLayoutIfDimensionsOutOfDate(WebCore::Element&amp;, WebCore::DimensionsCheck) + 1360 (Document.cpp:1997)
61  WebCore                       	0x000000019621ba38 WebCore::Element::offsetWidth() + 36 (Element.cpp:747)
62  WebCore                       	0x00000001968570a4 WebCore::jsElementOffsetWidth(JSC::ExecState*, JSC::JSObject*, long long, JSC::PropertyName) + 44 (JSElement.cpp:856)
63  JavaScriptCore                	0x00000001858214bc llint_slow_path_get_by_id + 2072 (PropertySlot.h:256)
64  JavaScriptCore                	0x0000000185c3696c llint_entry + 9884
65  JavaScriptCore                	0x0000000185c39e38 llint_entry + 23400
66  JavaScriptCore                	0x0000000185c39e9c llint_entry + 23500
67  JavaScriptCore                	0x0000000185c39e9c llint_entry + 23500
68  ???                           	0x000000017d55b9bc 0 + 6397737404
69  ???                           	0x000000017cb32218 0 + 6387081752
70  JavaScriptCore                	0x0000000185c340b4 vmEntryToJavaScript + 308
71  JavaScriptCore                	0x0000000185b6b63c JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) + 188 (JITCode.cpp:77)
72  JavaScriptCore                	0x000000018582d1b4 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;) + 396 (Interpreter.cpp:962)
73  JavaScriptCore                	0x0000000185934f40 JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;, JSC::JSValue*) + 76 (CallData.cpp:39)
74  WebCore                       	0x00000001962a4ab0 WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext*, WebCore::Event*) + 860 (JSMainThreadExecState.h:56)
75  WebCore                       	0x0000000196562b54 WebCore::EventTarget::fireEventListeners(WebCore::Event*, WebCore::EventTargetData*, WTF::Vector&lt;WebCore::RegisteredEventListener, 1ul, WTF::CrashOnOverflow, 16ul&gt;&amp;) + 748 (EventTarget.cpp:256)
76  WebCore                       	0x00000001961a83bc WebCore::EventTarget::fireEventListeners(WebCore::Event*) + 324 (EventTarget.cpp:208)
77  WebCore                       	0x00000001961c6350 WebCore::DOMWindow::dispatchEvent(WTF::PassRefPtr&lt;WebCore::Event&gt;, WTF::PassRefPtr&lt;WebCore::EventTarget&gt;) + 292 (DOMWindow.cpp:1901)
78  WebCore                       	0x00000001961caf7c WebCore::FrameLoader::stopLoading(WebCore::UnloadEventPolicy) + 656 (FrameLoader.cpp:451)
79  WebCore                       	0x00000001965d0618 WebCore::FrameLoader::detachFromParent() + 128 (FrameLoader.cpp:535)
80  WebCore                       	0x00000001961a1ba8 WebCore::FrameLoader::detachChildren() + 192 (FrameLoader.cpp:2396)
81  WebCore                       	0x00000001961a1a4c WebCore::FrameLoader::setDocumentLoader(WebCore::DocumentLoader*) + 44 (FrameLoader.cpp:1658)
82  WebCore                       	0x00000001965cfd64 WebCore::FrameLoader::transitionToCommitted(WebCore::CachedPage*) + 236 (FrameLoader.cpp:1883)
83  WebCore                       	0x00000001961a0f74 WebCore::FrameLoader::commitProvisionalLoad() + 444 (FrameLoader.cpp:1770)
84  WebCore                       	0x00000001961ca6c8 WebCore::DocumentLoader::commitLoad(char const*, int) + 104 (DocumentLoader.cpp:356)
85  WebCore                       	0x00000001961be780 WebCore::CachedRawResource::didAddClient(WebCore::CachedResourceClient*) + 792 (CachedRawResource.cpp:146)
86  WebCore                       	0x000000019613354c WebCore::ThreadTimers::sharedTimerFiredInternal() + 144 (ThreadTimers.cpp:132)
87  WebCore                       	0x000000019613348c WebCore::timerFired(__CFRunLoopTimer*, void*) + 32 (SharedTimerCF.cpp:82)
88  CoreFoundation                	0x0000000184194720 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 24 (CFRunLoop.c:1632)
89  CoreFoundation                	0x00000001841943c4 __CFRunLoopDoTimer + 880 (CFRunLoop.c:2171)
90  CoreFoundation                	0x0000000184191aac __CFRunLoopRun + 1516 (CFRunLoop.c:2310)
91  CoreFoundation                	0x00000001840bd0bc CFRunLoopRunSpecific + 380 (CFRunLoop.c:2818)
92  Foundation                    	0x0000000185058e8c -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 304 (NSRunLoop.m:366)
93  Foundation                    	0x00000001850ae724 -[NSRunLoop(NSRunLoop) run] + 84 (NSRunLoop.m:388)
94  libxpc.dylib                  	0x0000000199c4d298 _xpc_objc_main + 656 (main.m:176)
95  libxpc.dylib                  	0x0000000199c4efa8 xpc_main + 196 (init.c:1424)
96  com.apple.WebKit.WebContent   	0x0000000100017920 main + 52 (XPCServiceMain.mm:89)
97  libdyld.dylib                 	0x0000000199a329e4 start + 0 (start_glue.s:78)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1107144</commentid>
    <comment_count>1</comment_count>
    <who name="alan">zalan</who>
    <bug_when>2015-07-06 10:56:43 -0700</bug_when>
    <thetext>rdar://problem/21371544</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1107150</commentid>
    <comment_count>2</comment_count>
      <attachid>256223</attachid>
    <who name="alan">zalan</who>
    <bug_when>2015-07-06 11:03:33 -0700</bug_when>
    <thetext>Created attachment 256223
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1107188</commentid>
    <comment_count>3</comment_count>
      <attachid>256223</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2015-07-06 12:38:34 -0700</bug_when>
    <thetext>Comment on attachment 256223
Patch

Clearing flags on attachment: 256223

Committed r186366: &lt;http://trac.webkit.org/changeset/186366&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1107189</commentid>
    <comment_count>4</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2015-07-06 12:38:38 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>256223</attachid>
            <date>2015-07-06 11:03:33 -0700</date>
            <delta_ts>2015-07-06 12:38:34 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-146646-20150706110237.patch</filename>
            <type>text/plain</type>
            <size>4225</size>
            <attacher name="alan">zalan</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTg2MzU0CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
      

    </bug>

</bugzilla>