<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>150253</bug_id>
          
          <creation_ts>2015-10-16 13:49:25 -0700</creation_ts>
          <short_desc>WTFCrash loading Mozilla layout test mozilla/layout/mathml/crashtests/443089-1.xhtml</short_desc>
          <delta_ts>2016-03-15 02:15:45 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>MathML</component>
          <version>WebKit Local Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>HasReduction, InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>155487</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Jon Honeycutt">jhoneycutt</reporter>
          <assigned_to name="Frédéric Wang Nélar">fred.wang</assigned_to>
          <cc>commit-queue</cc>
    
    <cc>dbarton</cc>
    
    <cc>fred.wang</cc>
    
    <cc>mrobinson</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>zalan</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1134025</commentid>
    <comment_count>0</comment_count>
      <attachid>263322</attachid>
    <who name="Jon Honeycutt">jhoneycutt</who>
    <bug_when>2015-10-16 13:49:25 -0700</bug_when>
    <thetext>Created attachment 263322
crashing test

WTFCrash loading Mozilla layout test mozilla/layout/mathml/crashtests/443089-1.xhtml.

Stack trace:

Crashed Thread:        0  Dispatch queue: com.apple.main-thread

Exception Type:        EXC_BAD_ACCESS (SIGABRT)
Exception Codes:       KERN_INVALID_ADDRESS at 0x00000000bbadbeef

VM Regions Near 0xbbadbeef:
--&gt; 
    __TEXT                 0000000106eae000-0000000106f48000 [  616K] r-x/rwx SM=COW  /Users/USER/*

Application Specific Information:
CRASHING TEST: mozilla/layout/mathml/crashtests/443089-1.xhtml
================================================================
==34156==ERROR: AddressSanitizer: SEGV on unknown address 0x0000bbadbeef (pc 0x00010805a870 bp 0x7fff58d4e4c0 sp 0x7fff58d4e4b0 T0)
    #0 0x10805a86f in WTFCrash Assertions.cpp:321
    #1 0x10e4b919c in WTF::VectorBufferBase&lt;WebCore::RenderTableSection::RowStruct&gt;::allocateBuffer(unsigned long) Vector.h:266
    #2 0x10e4b90c3 in WTF::Vector&lt;WebCore::RenderTableSection::RowStruct, 0ul, WTF::CrashOnOverflow, 16ul&gt;::reserveCapacity(unsigned long) Vector.h:1094
    #3 0x10e4b66c4 in WTF::Vector&lt;WebCore::RenderTableSection::RowStruct, 0ul, WTF::CrashOnOverflow, 16ul&gt;::grow(unsigned long) Vector.h:1035
    #4 0x10e4aad72 in WebCore::RenderTableSection::ensureRows(unsigned int) RenderTableSection.cpp:188
    #5 0x10e4ab1c6 in WebCore::RenderTableSection::addCell(WebCore::RenderTableCell*, WebCore::RenderTableRow*) RenderTableSection.cpp:220
    #6 0x10e4a967b in WebCore::RenderTableRow::addChild(WebCore::RenderObject*, WebCore::RenderObject*) RenderTableRow.cpp:150
    #7 0x10e245f92 in WebCore::RenderElement::addChild(WebCore::RenderObject*, WebCore::RenderObject*) RenderElement.cpp:517
    #8 0x10e142e7e in WebCore::RenderBlock::addChildIgnoringContinuation(WebCore::RenderObject*, WebCore::RenderObject*) RenderBlock.cpp:492
    #9 0x10e8a51b4 in WebCore::Style::createRendererIfNeeded(WebCore::Element&amp;, WebCore::RenderStyle&amp;, WebCore::RenderTreePosition&amp;, WTF::PassRefPtr&lt;WebCore::RenderStyle&gt;) StyleResolveTree.cpp:220
    #10 0x10e8a4076 in WebCore::Style::attachRenderTree(WebCore::Element&amp;, WebCore::RenderStyle&amp;, WebCore::RenderTreePosition&amp;, WTF::PassRefPtr&lt;WebCore::RenderStyle&gt;) StyleResolveTree.cpp:517
    #11 0x10e8a57e0 in WebCore::Style::attachChildren(WebCore::ContainerNode&amp;, WebCore::RenderStyle&amp;, WebCore::RenderTreePosition&amp;) StyleResolveTree.cpp:356
    #12 0x10e8a4187 in WebCore::Style::attachRenderTree(WebCore::Element&amp;, WebCore::RenderStyle&amp;, WebCore::RenderTreePosition&amp;, WTF::PassRefPtr&lt;WebCore::RenderStyle&gt;) StyleResolveTree.cpp:534
    #13 0x10e8a57e0 in WebCore::Style::attachChildren(WebCore::ContainerNode&amp;, WebCore::RenderStyle&amp;, WebCore::RenderTreePosition&amp;) StyleResolveTree.cpp:356
    #14 0x10e8a4187 in WebCore::Style::attachRenderTree(WebCore::Element&amp;, WebCore::RenderStyle&amp;, WebCore::RenderTreePosition&amp;, WTF::PassRefPtr&lt;WebCore::RenderStyle&gt;) StyleResolveTree.cpp:534
    #15 0x10e8a30c0 in WebCore::Style::resolveLocal(WebCore::Element&amp;, WebCore::RenderStyle&amp;, WebCore::RenderTreePosition&amp;, WebCore::Style::Change) StyleResolveTree.cpp:685
    #16 0x10e8a1c97 in WebCore::Style::resolveTree(WebCore::Element&amp;, WebCore::RenderStyle&amp;, WebCore::RenderTreePosition&amp;, WebCore::Style::Change) StyleResolveTree.cpp:911
    #17 0x10e8a1a5b in WebCore::Style::resolveTree(WebCore::Document&amp;, WebCore::Style::Change) StyleResolveTree.cpp:971
    #18 0x10cc6dc97 in WebCore::Document::recalcStyle(WebCore::Style::Change) Document.cpp:1841
    #19 0x10cc688d9 in WebCore::Document::styleResolverChanged(WebCore::StyleResolverUpdateFlag) Document.cpp:3624
    #20 0x10ece0b1e in WebCore::XMLDocumentParser::end() XMLDocumentParser.cpp:195
    #21 0x10cd1295c in WebCore::DocumentWriter::end() DocumentWriter.cpp:247
    #22 0x10ccdab67 in WebCore::DocumentLoader::finishedLoading(double) DocumentLoader.cpp:437
    #23 0x10c839ca7 in WebCore::CachedResource::checkNotify() CachedResource.cpp:297
    #24 0x10c834ff9 in WebCore::CachedRawResource::finishLoading(WebCore::SharedBuffer*) CachedRawResource.cpp:103
    #25 0x10e8c2588 in WebCore::SubresourceLoader::didFinishLoading(double) SubresourceLoader.cpp:372
    #26 0x7fff8c4a3850 in __65-[NSURLConnectionInternal _withConnectionAndDelegate:onlyActive:]_block_invoke (/System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork+0x2e850)
    #27 0x7fff8c4a3765 in -[NSURLConnectionInternal _withConnectionAndDelegate:onlyActive:] (/System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork+0x2e765)
    #28 0x7fff8c4a366a in -[NSURLConnectionInternal _withActiveConnectionAndDelegate:] (/System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork+0x2e66a)
    #29 0x7fff8c4a8491 in ___ZN27URLConnectionClient_Classic26_delegate_didFinishLoadingEU13block_pointerFvvE_block_invoke (/System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork+0x33491)
    #30 0x7fff8c63c976 in ___ZN27URLConnectionClient_Classic18_withDelegateAsyncEPKcU13block_pointerFvP16_CFURLConnectionPK33CFURLConnectionClientCurrent_VMaxE_block_invoke_2 (/System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork+0x1c7976)
    #31 0x7fff9a99c3c2 in _dispatch_client_callout (/usr/lib/system/libdispatch.dylib+0x23c2)
    #32 0x7fff9a9aa0bd in _dispatch_block_invoke (/usr/lib/system/libdispatch.dylib+0x100bd)
    #33 0x7fff8c4a3527 in RunloopBlockContext::_invoke_block(void const*, void*) (/System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork+0x2e527)
    #34 0x7fff96f5ce63 in CFArrayApplyFunction (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation+0x4ce63)
    #35 0x7fff8c4a3420 in RunloopBlockContext::perform() (/System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork+0x2e420)
    #36 0x7fff8c4a32c1 in MultiplexerSource::perform() (/System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork+0x2e2c1)
    #37 0x7fff8c4a30e3 in MultiplexerSource::_perform(void*) (/System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork+0x2e0e3)
    #38 0x7fff96fba8b0 in __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation+0xaa8b0)
    #39 0x7fff96f9a0ab in __CFRunLoopDoSources0 (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation+0x8a0ab)
    #40 0x7fff96f995ce in __CFRunLoopRun (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation+0x895ce)
    #41 0x7fff96f98fc7 in CFRunLoopRunSpecific (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation+0x88fc7)
    #42 0x106ed098d in runTest(std::__1::basic_string&lt;char, std::__1::char_traits&lt;char&gt;, std::__1::allocator&lt;char&gt; &gt; const&amp;) DumpRenderTree.mm:2030
    #43 0x106ecff39 in runTestingServerLoop() DumpRenderTree.mm:1180
    #44 0x106ecf267 in dumpRenderTree(int, char const**) DumpRenderTree.mm:1288
    #45 0x106ed12b1 in DumpRenderTreeMain(int, char const**) DumpRenderTree.mm:1418
    #46 0x7fff931e95ac in start (/usr/lib/system/libdyld.dylib+0x35ac)
    #47 0x1  (&lt;unknown module&gt;)
 
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV Assertions.cpp:321 WTFCrash
 
abort() called</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1134032</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2015-10-16 13:56:35 -0700</bug_when>
    <thetext>&lt;rdar://problem/23149774&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1174366</commentid>
    <comment_count>2</comment_count>
      <attachid>273946</attachid>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2016-03-14 02:44:08 -0700</bug_when>
    <thetext>Created attachment 273946
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1174464</commentid>
    <comment_count>3</comment_count>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2016-03-14 08:19:05 -0700</bug_when>
    <thetext>Committed r198129: &lt;http://trac.webkit.org/changeset/198129&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1174505</commentid>
    <comment_count>4</comment_count>
      <attachid>273946</attachid>
    <who name="Darin Adler">darin</who>
    <bug_when>2016-03-14 09:57:09 -0700</bug_when>
    <thetext>Comment on attachment 273946
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=273946&amp;action=review

&gt; Source/WebCore/mathml/MathMLElement.cpp:210
&gt; +    static const unsigned maxRowspan = 8190; // This constant comes from HTMLTableCellElement.

Can we put this in HTMLTableCellElement.h or some other header so we don’t have two copies that keep getting out of sync?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1174506</commentid>
    <comment_count>5</comment_count>
      <attachid>273946</attachid>
    <who name="Darin Adler">darin</who>
    <bug_when>2016-03-14 09:57:40 -0700</bug_when>
    <thetext>Comment on attachment 273946
Patch

I think we should seek a way to share code rather than maintaining two sets of identical functions.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1174508</commentid>
    <comment_count>6</comment_count>
    <who name="Frédéric Wang Nélar">fred.wang</who>
    <bug_when>2016-03-14 10:01:02 -0700</bug_when>
    <thetext>(In reply to comment #5)
&gt; Comment on attachment 273946 [details]
&gt; Patch
&gt; 
&gt; I think we should seek a way to share code rather than maintaining two sets
&gt; of identical functions.s

I agree with that. I think the idea would be to create a MathMLTableCellElement class that inherits from HTMLTableCellElement. However, I didn&apos;t know if that would have had other consequences and just wanted to fix the WTFCrash for now.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>263322</attachid>
            <date>2015-10-16 13:49:25 -0700</date>
            <delta_ts>2015-10-16 13:49:25 -0700</delta_ts>
            <desc>crashing test</desc>
            <filename>443089-1.xhtml</filename>
            <type>application/xhtml+xml</type>
            <size>162</size>
            <attacher name="Jon Honeycutt">jhoneycutt</attacher>
            
              <data encoding="base64">PGh0bWwgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGh0bWwiPgo8aGVhZD4KPC9oZWFk
Pgo8Ym9keT4KPG10ZCB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMTk5OC9NYXRoL01hdGhNTCIg
aWQ9Im10ZCIgcm93c3Bhbj0iMTA3Mzc0MTgyNSIvPgo8L2JvZHk+CjwvaHRtbD4K
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>273946</attachid>
            <date>2016-03-14 02:44:08 -0700</date>
            <delta_ts>2016-03-14 08:05:15 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-150253-20160314104355.patch</filename>
            <type>text/plain</type>
            <size>5084</size>
            <attacher name="Frédéric Wang Nélar">fred.wang</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTk4MDk2CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>
<flag name="review"
          id="298463"
          type_id="1"
          status="+"
          setter="mrobinson"
    />
          </attachment>
      

    </bug>

</bugzilla>