149291 2015-09-17 14:33:49 -0700 Null dereference loading Blink layout test editing/execCommand/indent-nested-blockquotes-crash.html 2022-11-15 09:34:37 -0800 1 1 1 Unclassified WebKit HTML Editing WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED BlinkMergeCandidate, HasReduction, InRadar P2 Normal --- 1 jhoneycutt jiewen_tan ahmad.saleem792 commit-queue jiewen_tan rniwa webkit-bug-importer oldest_to_newest 1126854 0 jhoneycutt 2015-09-17 14:33:49 -0700 Null dereference loading Blink layout test editing/execCommand/indent-nested-blockquotes-crash.html. Stack trace: Crashed Thread: 0 Dispatch queue: com.apple.main-thread Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000048 Exception Note: EXC_CORPSE_NOTIFY VM Regions Near 0x48: --> __TEXT 000000010b1d4000-000000010b1d6000 [ 8K] r-x/rwx SM=COW /Users/USER/*/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.Development.xpc/Contents/MacOS/com.apple.WebKit.WebContent.Development Application Specific Information: CRASHING TEST: temp-tests/editing/execCommand/indent-nested-blockquotes-crash.html Global Trace Buffer (reverse chronological seconds): 18446743998.232010 CFNetwork 0x00007fff88d43b97 Explicitly setting CF cookie storage singleton 18446743998.232620 CFNetwork 0x00007fff88d8f211 Explicitly setting cookie storage singleton Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.WebCore 0x0000000113002b73 WebCore::CompositeEditCommand::insertNodeAfter(WTF::PassRefPtr<WebCore::Node>, WTF::PassRefPtr<WebCore::Node>) + 19 (CompositeEditCommand.cpp:357) 1 com.apple.WebCore 0x0000000113009547 WebCore::CompositeEditCommand::cloneParagraphUnderNewElement(WebCore::Position const&, WebCore::Position const&, WebCore::Node*, WebCore::Element*) + 1543 (StdLibExtras.h:367) 2 com.apple.WebCore 0x0000000113009e2d WebCore::CompositeEditCommand::moveParagraphWithClones(WebCore::VisiblePosition const&, WebCore::VisiblePosition const&, WebCore::Element*, WebCore::Node*) + 621 (CompositeEditCommand.cpp:1176) 3 com.apple.WebCore 0x0000000113465755 WebCore::IndentOutdentCommand::indentIntoBlockquote(WebCore::Position const&, WebCore::Position const&, WTF::RefPtr<WebCore::Element>&) + 901 (StdLibExtras.h:366) 4 com.apple.WebCore 0x0000000112f4b605 WebCore::ApplyBlockElementCommand::formatSelection(WebCore::VisiblePosition const&, WebCore::VisiblePosition const&) + 4677 (ApplyBlockElementCommand.cpp:145) 5 com.apple.WebCore 0x0000000112f4a04d WebCore::ApplyBlockElementCommand::doApply() + 1037 (Ref.h:123) 6 com.apple.WebCore 0x0000000113002216 WebCore::CompositeEditCommand::apply() + 102 (ScopedEventQueue.h:71) 7 com.apple.WebCore 0x0000000113235c4b WebCore::executeIndent(WebCore::Frame&, WebCore::Event*, WebCore::EditorCommandSource, WTF::String const&) + 59 (StdLibExtras.h:366) 8 com.apple.WebCore 0x0000000113234876 WebCore::Editor::Command::execute(WTF::String const&, WebCore::Event*) const + 182 (EditorCommand.cpp:1704) 9 com.apple.WebCore 0x000000011316dc36 WebCore::Document::execCommand(WTF::String const&, bool, WTF::String const&) + 214 (Document.cpp:4666) 10 com.apple.WebCore 0x0000000113584074 WebCore::jsDocumentPrototypeFunctionExecCommand(JSC::ExecState*) + 420 (JSCJSValue.h:499) 11 ??? 0x0000339671001028 0 + 56721233940520 12 com.apple.JavaScriptCore 0x00000001128e076f llint_entry + 22696 13 com.apple.JavaScriptCore 0x00000001128dace4 vmEntryToJavaScript + 299 14 com.apple.JavaScriptCore 0x000000011279b2d9 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) + 169 (JITCode.cpp:82) 15 com.apple.JavaScriptCore 0x0000000112781d12 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 450 (Interpreter.cpp:1008) 16 com.apple.JavaScriptCore 0x000000011244d8b7 JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) + 71 (MarkedBlock.h:241) 17 com.apple.WebCore 0x0000000113608fa4 WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext*, WebCore::Event*) + 996 (JSMainThreadExecState.h:56) 18 com.apple.WebCore 0x000000011326f4db WebCore::EventTarget::fireEventListeners(WebCore::Event*, WebCore::EventTargetData*, WTF::Vector<WebCore::RegisteredEventListener, 1ul, WTF::CrashOnOverflow, 16ul>&) + 635 (InspectorInstrumentation.h:285) 19 com.apple.WebCore 0x000000011326f1a0 WebCore::EventTarget::fireEventListeners(WebCore::Event*) + 224 (EventTarget.cpp:208) 20 com.apple.WebCore 0x00000001131fbbf4 WebCore::DOMWindow::dispatchEvent(WTF::PassRefPtr<WebCore::Event>, WTF::PassRefPtr<WebCore::EventTarget>) + 260 (DOMWindow.cpp:1900) 21 com.apple.WebCore 0x000000011320130b WebCore::DOMWindow::dispatchLoadEvent() + 347 (StdLibExtras.h:366) 22 com.apple.WebCore 0x0000000113164294 WebCore::Document::implicitClose() + 324 (Document.cpp:4077) 23 com.apple.WebCore 0x00000001132f1003 WebCore::FrameLoader::checkCompleted() + 275 (FrameLoader.cpp:839) 24 com.apple.WebCore 0x00000001132ef95b WebCore::FrameLoader::finishedParsing() + 123 (FrameLoader.cpp:760) 25 com.apple.WebCore 0x000000011316f281 WebCore::Document::finishedParsing() + 417 (Frame.h:377) 26 com.apple.WebCore 0x000000011339be05 WebCore::HTMLDocumentParser::prepareToStopParsing() + 165 (RefCounted.h:99) 27 com.apple.WebCore 0x000000011319f69a WebCore::DocumentWriter::end() + 58 (StdLibExtras.h:366) 28 com.apple.WebCore 0x00000001131879ec WebCore::DocumentLoader::finishedLoading(double) + 268 (ResourceErrorBase.h:42) 29 com.apple.WebCore 0x0000000112fb8179 WebCore::CachedResource::checkNotify() + 153 (CachedResourceClientWalker.h:51) 30 com.apple.WebCore 0x0000000112fb4433 WebCore::CachedRawResource::finishLoading(WebCore::SharedBuffer*) + 227 (CachedRawResource.cpp:104) 31 com.apple.WebCore 0x0000000113d2f501 WebCore::SubresourceLoader::didFinishLoading(double) + 1153 (ResourceLoader.h:154) 32 com.apple.WebKit 0x000000011187598d WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&, IPC::MessageDecoder&) + 561 (HandleMessage.h:16) 33 com.apple.WebKit 0x000000011164f1f1 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::MessageDecoder, std::__1::default_delete<IPC::MessageDecoder> >) + 127 (memory:2636) 34 com.apple.WebKit 0x0000000111651b4a IPC::Connection::dispatchOneMessage() + 126 (memory:2656) 35 com.apple.JavaScriptCore 0x0000000112a93985 WTF::RunLoop::performWork() + 437 (functional:1742) 36 com.apple.JavaScriptCore 0x0000000112a93d32 WTF::RunLoop::performWork(void*) + 34 (RunLoopCF.cpp:39) 37 com.apple.CoreFoundation 0x00007fff949e2c01 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17 38 com.apple.CoreFoundation 0x00007fff949d4b1c __CFRunLoopDoSources0 + 556 39 com.apple.CoreFoundation 0x00007fff949d403f __CFRunLoopRun + 927 40 com.apple.CoreFoundation 0x00007fff949d3a38 CFRunLoopRunSpecific + 296 41 com.apple.HIToolbox 0x00007fff88e673bd RunCurrentEventLoopInMode + 235 42 com.apple.HIToolbox 0x00007fff88e67153 ReceiveNextEventCommon + 432 43 com.apple.HIToolbox 0x00007fff88e66f93 _BlockUntilNextEventMatchingListInModeWithFilter + 71 44 com.apple.AppKit 0x00007fff870b81e7 _DPSNextEvent + 1076 45 com.apple.AppKit 0x00007fff8748490d -[NSApplication _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 454 46 com.apple.AppKit 0x00007fff870ae0b8 -[NSApplication run] + 682 47 com.apple.AppKit 0x00007fff87030396 NSApplicationMain + 1176 48 libxpc.dylib 0x00007fff8c70ff70 _xpc_objc_main + 793 49 libxpc.dylib 0x00007fff8c7116bf xpc_main + 494 50 com.apple.WebKit.WebContent.Development 0x000000010b1d5424 main + 409 (XPCServiceMain.Development.mm:187) 51 libdyld.dylib 0x00007fff93aa15ad start + 1 1126855 1 webkit-bug-importer 2015-09-17 14:34:16 -0700 <rdar://problem/22746473> 1135084 2 263645 jiewen_tan 2015-10-20 18:04:06 -0700 Created attachment 263645 Patch 1136645 3 263645 commit-queue 2015-10-26 15:01:50 -0700 Comment on attachment 263645 Patch Clearing flags on attachment: 263645 Committed r191603: <http://trac.webkit.org/changeset/191603> 1136646 4 commit-queue 2015-10-26 15:01:56 -0700 All reviewed patches have been landed. Closing bug. 1912645 5 ahmad.saleem792 2022-11-15 09:34:37 -0800 *** Bug 247950 has been marked as a duplicate of this bug. *** 263645 2015-10-20 18:04:06 -0700 2015-10-26 15:01:50 -0700 Patch bug-149291-20151020180323.patch text/plain 3809 jiewen_tan U3VidmVyc2lvbiBSZXZpc2lvbjogMTkxMzI0CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggZGFiMjJhNjc4Yjc4ODVm NTAyYmFkY2ZiNjU1MTUyOTY0ODIxNjFlNi4uZTNjYmZlMzAwZjE3MWY4MDk2NDk5YTA2NjI0NGQ2 NGQyYTc1MzM3MCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE5IEBACisyMDE1LTEwLTIwICBKaWV3 ZW4gVGFuICA8amlld2VuX3RhbkBhcHBsZS5jb20+CisKKyAgICAgICAgTnVsbCBkZXJlZmVyZW5j ZSBsb2FkaW5nIEJsaW5rIGxheW91dCB0ZXN0IGVkaXRpbmcvZXhlY0NvbW1hbmQvaW5kZW50LW5l c3RlZC1ibG9ja3F1b3Rlcy1jcmFzaC5odG1sCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQu b3JnL3Nob3dfYnVnLmNnaT9pZD0xNDkyOTEKKyAgICAgICAgPHJkYXI6Ly9wcm9ibGVtLzIyNzQ2 NDczPgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIFRo aXMgaXMgYSBtZXJnZSBvZiBCbGluayByMTcyOTY3OgorICAgICAgICBodHRwczovL2NvZGVyZXZp ZXcuY2hyb21pdW0ub3JnLzI1MTcyMzAwMworCisgICAgICAgIFRlc3Q6IGVkaXRpbmcvZXhlY0Nv bW1hbmQvaW5kZW50LW5lc3RlZC1ibG9ja3F1b3Rlcy1jcmFzaC5odG1sCisKKyAgICAgICAgKiBl ZGl0aW5nL0NvbXBvc2l0ZUVkaXRDb21tYW5kLmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OkNvbXBv c2l0ZUVkaXRDb21tYW5kOjppbnNlcnROb2RlQWZ0ZXIpOgorCiAyMDE1LTEwLTE5ICBNeWxlcyBD LiBNYXhmaWVsZCAgPG1tYXhmaWVsZEBhcHBsZS5jb20+CiAKICAgICAgICAgSG9zdCBHcmFwaGlj c0NvbnRleHQncyBDVE0gaW5zaWRlIEdyYXBoaWNzQ29udGV4dFN0YXRlCmRpZmYgLS1naXQgYS9T b3VyY2UvV2ViQ29yZS9lZGl0aW5nL0NvbXBvc2l0ZUVkaXRDb21tYW5kLmNwcCBiL1NvdXJjZS9X ZWJDb3JlL2VkaXRpbmcvQ29tcG9zaXRlRWRpdENvbW1hbmQuY3BwCmluZGV4IDVkOWQzNmZmNTBm NWRjZjY3ZDA4ZDBlNGE2MjUzNjM2ZTkxYjUwNjIuLjM0NWM1MmVkYWEzN2EwYTMxOGUwNWIyODk4 M2Y1ODNlYjBhOTk0ODQgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL2VkaXRpbmcvQ29tcG9z aXRlRWRpdENvbW1hbmQuY3BwCisrKyBiL1NvdXJjZS9XZWJDb3JlL2VkaXRpbmcvQ29tcG9zaXRl RWRpdENvbW1hbmQuY3BwCkBAIC0zNTIsNyArMzUyLDkgQEAgdm9pZCBDb21wb3NpdGVFZGl0Q29t bWFuZDo6aW5zZXJ0Tm9kZUFmdGVyKFBhc3NSZWZQdHI8Tm9kZT4gaW5zZXJ0Q2hpbGQsIFBhc3NS ZWYKICAgICBBU1NFUlQoaW5zZXJ0Q2hpbGQpOwogICAgIEFTU0VSVChyZWZDaGlsZCk7CiAgICAg Q29udGFpbmVyTm9kZSogcGFyZW50ID0gcmVmQ2hpbGQtPnBhcmVudE5vZGUoKTsKLSAgICBBU1NF UlQocGFyZW50KTsKKyAgICBpZiAoIXBhcmVudCkKKyAgICAgICAgcmV0dXJuOworCiAgICAgQVNT RVJUKCFwYXJlbnQtPmlzU2hhZG93Um9vdCgpKTsKICAgICBpZiAocGFyZW50LT5sYXN0Q2hpbGQo KSA9PSByZWZDaGlsZCkKICAgICAgICAgYXBwZW5kTm9kZShpbnNlcnRDaGlsZCwgcGFyZW50KTsK ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxv ZwppbmRleCBlNWY0NWU4YjI0MTIxNDA2ZDdjMGY1MTE5MTY5MTIwYjU0ODY2MGYwLi5iOWMyMDYy ZDI5NjU2OWNlOTAzNjFkNTk3ZDA1MzE3M2MwNTFhMTdmIDEwMDY0NAotLS0gYS9MYXlvdXRUZXN0 cy9DaGFuZ2VMb2cKKysrIGIvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTQgQEAK KzIwMTUtMTAtMjAgIEppZXdlbiBUYW4gIDxqaWV3ZW5fdGFuQGFwcGxlLmNvbT4KKworICAgICAg ICBOdWxsIGRlcmVmZXJlbmNlIGxvYWRpbmcgQmxpbmsgbGF5b3V0IHRlc3QgZWRpdGluZy9leGVj Q29tbWFuZC9pbmRlbnQtbmVzdGVkLWJsb2NrcXVvdGVzLWNyYXNoLmh0bWwKKyAgICAgICAgaHR0 cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE0OTI5MQorICAgICAgICA8cmRh cjovL3Byb2JsZW0vMjI3NDY0NzM+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BT ISkuCisKKyAgICAgICAgKiBlZGl0aW5nL2V4ZWNDb21tYW5kL2luZGVudC1uZXN0ZWQtYmxvY2tx dW90ZXMtY3Jhc2gtZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBlZGl0aW5nL2V4ZWND b21tYW5kL2luZGVudC1uZXN0ZWQtYmxvY2txdW90ZXMtY3Jhc2guaHRtbDogQWRkZWQuCisKIDIw MTUtMTAtMTkgIFRpbSBIb3J0b24gIDx0aW1vdGh5X2hvcnRvbkBhcHBsZS5jb20+CiAKICAgICAg ICAgRG9uJ3QgZHVtcCBHZXN0dXJlRXZlbnQgY29uc3RydWN0b3IgYXR0cmlidXRlcyBmb3Igbm93 CmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9lZGl0aW5nL2V4ZWNDb21tYW5kL2luZGVudC1uZXN0 ZWQtYmxvY2txdW90ZXMtY3Jhc2gtZXhwZWN0ZWQudHh0IGIvTGF5b3V0VGVzdHMvZWRpdGluZy9l eGVjQ29tbWFuZC9pbmRlbnQtbmVzdGVkLWJsb2NrcXVvdGVzLWNyYXNoLWV4cGVjdGVkLnR4dApu ZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwLi4yNDg5MmNmNDUxNDg0YjE2Y2RlMjhjNjU5NGZhZDYzMTM5YTc3ZDdjCi0tLSAv ZGV2L251bGwKKysrIGIvTGF5b3V0VGVzdHMvZWRpdGluZy9leGVjQ29tbWFuZC9pbmRlbnQtbmVz dGVkLWJsb2NrcXVvdGVzLWNyYXNoLWV4cGVjdGVkLnR4dApAQCAtMCwwICsxIEBACitQYXNzIGlm IG5vdCBjcmFzaC4KZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL2VkaXRpbmcvZXhlY0NvbW1hbmQv aW5kZW50LW5lc3RlZC1ibG9ja3F1b3Rlcy1jcmFzaC5odG1sIGIvTGF5b3V0VGVzdHMvZWRpdGlu Zy9leGVjQ29tbWFuZC9pbmRlbnQtbmVzdGVkLWJsb2NrcXVvdGVzLWNyYXNoLmh0bWwKbmV3IGZp bGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMC4uMzNmMGViNTQ0YTEwZjNmMzBlZjU3NDY2MDk2OTU1ZDgzMDNmNWY3ZgotLS0gL2Rldi9u dWxsCisrKyBiL0xheW91dFRlc3RzL2VkaXRpbmcvZXhlY0NvbW1hbmQvaW5kZW50LW5lc3RlZC1i bG9ja3F1b3Rlcy1jcmFzaC5odG1sCkBAIC0wLDAgKzEsMjIgQEAKKzwhRE9DVFlQRSBodG1sPgor PGh0bWw+Cis8aGVhZD4KKzxzdHlsZT4KKyogeyBkaXNwbGF5OiAtd2Via2l0LWlubGluZS1ib3g7 IH0KKy5DTEFTUzExIHsgZmxvYXQ6IHJpZ2h0OyB9Cis8L3N0eWxlPgorPHNjcmlwdD4KK2lmICh3 aW5kb3cudGVzdFJ1bm5lcikKKyAgICB0ZXN0UnVubmVyLmR1bXBBc1RleHQoKTsKKword2luZG93 Lm9ubG9hZCA9IGZ1bmN0aW9uICgpIHsKKyAgICBkb2N1bWVudC5kZXNpZ25Nb2RlID0gJ29uJzsK KyAgICBkb2N1bWVudC5leGVjQ29tbWFuZCgnU2VsZWN0QWxsJywgZmFsc2UpCisgICAgZG9jdW1l bnQuZXhlY0NvbW1hbmQoJ0luZGVudCcsIGZhbHNlLCBmYWxzZSk7CisgICAgZG9jdW1lbnQuZXhl Y0NvbW1hbmQoJ0luZGVudCcsIGZhbHNlLCBmYWxzZSk7CisgICAgZG9jdW1lbnQuZG9jdW1lbnRF bGVtZW50LmlubmVySFRNTCA9ICdQYXNzIGlmIG5vdCBjcmFzaC4nOworfTsKKzwvc2NyaXB0Pgor PC9oZWFkPgorPGJvZHk+YWFhPGRpdiBjbGFzcz0iQ0xBU1MxMSI+PC9kaXY+PGRpdj5iYmI8L2Rp dj48L2JvZHk+Cis8L2h0bWw+ClwgTm8gbmV3bGluZSBhdCBlbmQgb2YgZmlsZQo=