<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>156509</bug_id>
          
          <creation_ts>2016-04-12 11:40:20 -0700</creation_ts>
          <short_desc>Regression(r199360): assertion hit in Element::fastGetAttribute()</short_desc>
          <delta_ts>2016-04-12 11:44:52 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>DOM</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>156474</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Chris Dumez">cdumez</reporter>
          <assigned_to name="Chris Dumez">cdumez</assigned_to>
          <cc>commit-queue</cc>
    
    <cc>darin</cc>
    
    <cc>esprehn+autocc</cc>
    
    <cc>gyuyoung.kim</cc>
    
    <cc>jiewen_tan</cc>
    
    <cc>kling</cc>
    
    <cc>koivisto</cc>
    
    <cc>rniwa</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1183144</commentid>
    <comment_count>0</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2016-04-12 11:40:20 -0700</bug_when>
    <thetext>Regression(r199360): assertion hit in Element::fastGetAttribute():
Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore      	0x000000010bc32da7 WTFCrash + 39
1   com.apple.WebCore             	0x00000001109a86d1 WebCore::Element::fastGetAttribute(WebCore::QualifiedName const&amp;) const + 81 (Element.h:652)
2   com.apple.WebCore             	0x00000001111829ae WebCore::DOMTokenList::tokens() + 46 (DOMTokenList.cpp:231)
3   com.apple.WebCore             	0x00000001109c6805 WebCore::DOMTokenList::tokens() const + 21 (DOMTokenList.h:70)
4   com.apple.WebCore             	0x00000001109c0f35 WebCore::DOMTokenList::length() const + 21 (DOMTokenList.h:87)
5   com.apple.WebCore             	0x0000000111ad9719 WebCore::jsDOMTokenListLength(JSC::ExecState*, long long, JSC::PropertyName) + 153 (JSDOMTokenList.cpp:183)
6   com.apple.JavaScriptCore      	0x000000010ba012a5 JSC::PropertySlot::customGetter(JSC::ExecState*, JSC::PropertyName) const + 149
7   com.apple.JavaScriptCore      	0x000000010adaa374 JSC::PropertySlot::getValue(JSC::ExecState*, JSC::PropertyName) const + 132
8   com.apple.JavaScriptCore      	0x000000010adaed0b JSC::JSValue::get(JSC::ExecState*, JSC::PropertyName, JSC::PropertySlot&amp;) const + 91
9   com.apple.JavaScriptCore      	0x000000010b84bb03 llint_slow_path_get_by_id + 243
10  com.apple.JavaScriptCore      	0x000000010b858a38 llint_entry + 12020</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1183147</commentid>
    <comment_count>1</comment_count>
      <attachid>276252</attachid>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2016-04-12 11:42:28 -0700</bug_when>
    <thetext>Created attachment 276252
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1183149</commentid>
    <comment_count>2</comment_count>
      <attachid>276252</attachid>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2016-04-12 11:44:46 -0700</bug_when>
    <thetext>Comment on attachment 276252
Patch

Clearing flags on attachment: 276252

Committed r199378: &lt;http://trac.webkit.org/changeset/199378&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1183150</commentid>
    <comment_count>3</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2016-04-12 11:44:52 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>276252</attachid>
            <date>2016-04-12 11:42:28 -0700</date>
            <delta_ts>2016-04-12 11:44:46 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-156509-20160412114237.patch</filename>
            <type>text/plain</type>
            <size>2099</size>
            <attacher name="Chris Dumez">cdumez</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTk5MzYwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D
aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggMTllYjRlZGNhZjAxN2Fk
NjdlODZmZDczZGQzYTk4MjZhMGEyNWQwMS4uODUwYzk4YTdlZjdkMWE5NzM2YjExMmUxNzcxOWIy
YmY1NTIzZjRiNCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv
dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSw1ICsxLDIyIEBACiAyMDE2LTA0LTEyICBDaHJp
cyBEdW1leiAgPGNkdW1lekBhcHBsZS5jb20+CiAKKyAgICAgICAgUmVncmVzc2lvbihyMTk5MzYw
KTogYXNzZXJ0aW9uIGhpdCBpbiBFbGVtZW50OjpmYXN0R2V0QXR0cmlidXRlKCkKKyAgICAgICAg
aHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE1NjUwOQorCisgICAgICAg
IFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIFN0b3AgdXNpbmcgZmFzdEdl
dEF0dHJpYnV0ZSgpIC8gc2V0QXR0cmlidXRlV2l0aG91dFN5bmNocm9uaXphdGlvbigpCisgICAg
ICAgIGdpdmVuIHRoYXQgRE9NVG9rZW5MaXN0IGlzIHVzZWQgZm9yIHRoZSBjbGFzcyBhdHRyaWJ1
dGUgYW5kIHdlIG5lZWQKKyAgICAgICAgdG8gc3luY2hyb25pemUgaW4gdGhpcyBjYXNlLgorCisg
ICAgICAgIE5vIG5ldyB0ZXN0cywgYWxyZWFkeSBjb3ZlcmVkIGJ5IGV4aXN0aW5nIHRlc3RzLgor
CisgICAgICAgICogaHRtbC9ET01Ub2tlbkxpc3QuY3BwOgorICAgICAgICAoV2ViQ29yZTo6RE9N
VG9rZW5MaXN0Ojp1cGRhdGVBc3NvY2lhdGVkQXR0cmlidXRlRnJvbVRva2Vucyk6CisgICAgICAg
IChXZWJDb3JlOjpET01Ub2tlbkxpc3Q6OnRva2Vucyk6CisKKzIwMTYtMDQtMTIgIENocmlzIER1
bWV6ICA8Y2R1bWV6QGFwcGxlLmNvbT4KKwogICAgICAgICBMYXppbHkgdXBkYXRlIHRva2VucyBp
biBET01Ub2tlbkxpc3Qgd2hlbiB0aGUgYXNzb2NpYXRlZCBhdHRyaWJ1dGUgdmFsdWUgY2hhbmdl
cwogICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTU2NDc0
CiAKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL2h0bWwvRE9NVG9rZW5MaXN0LmNwcCBiL1Nv
dXJjZS9XZWJDb3JlL2h0bWwvRE9NVG9rZW5MaXN0LmNwcAppbmRleCA4NTY3YWYyZmE5NjU5NDM1
ZWM4NmMxMTgwMjY5ZTkzZmVhZjYyODMwLi41YjcyNzMzY2E3YjM1ZGU1ZWU2ZWFkOTRlZjJkNDg0
MGNhOWM1Yjg2IDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9odG1sL0RPTVRva2VuTGlzdC5j
cHAKKysrIGIvU291cmNlL1dlYkNvcmUvaHRtbC9ET01Ub2tlbkxpc3QuY3BwCkBAIC0yMjEsMTQg
KzIyMSwxNCBAQCB2b2lkIERPTVRva2VuTGlzdDo6dXBkYXRlQXNzb2NpYXRlZEF0dHJpYnV0ZUZy
b21Ub2tlbnMoKQogICAgIG1fY2FjaGVkVmFsdWUgPSBudWxsQXRvbTsKIAogICAgIFRlbXBvcmFy
eUNoYW5nZTxib29sPiBpbkF0dHJpYnV0ZVVwZGF0ZShtX2luVXBkYXRlQXNzb2NpYXRlZEF0dHJp
YnV0ZUZyb21Ub2tlbnMsIHRydWUpOwotICAgIG1fZWxlbWVudC5zZXRBdHRyaWJ1dGVXaXRob3V0
U3luY2hyb25pemF0aW9uKG1fYXR0cmlidXRlTmFtZSwgdmFsdWUoKSk7CisgICAgbV9lbGVtZW50
LnNldEF0dHJpYnV0ZShtX2F0dHJpYnV0ZU5hbWUsIHZhbHVlKCkpOwogICAgIEFTU0VSVF9XSVRI
X01FU1NBR0UobV9jYWNoZWRWYWx1ZSwgIkNhbGxpbmcgdmFsdWUoKSBzaG91bGQgaGF2ZSBjYWNo
ZWQgaXRzIHJlc3VsdHMiKTsKIH0KIAogVmVjdG9yPEF0b21pY1N0cmluZz4mIERPTVRva2VuTGlz
dDo6dG9rZW5zKCkKIHsKICAgICBpZiAobV90b2tlbnNOZWVkVXBkYXRpbmcpCi0gICAgICAgIHVw
ZGF0ZVRva2Vuc0Zyb21BdHRyaWJ1dGVWYWx1ZShtX2VsZW1lbnQuZmFzdEdldEF0dHJpYnV0ZSht
X2F0dHJpYnV0ZU5hbWUpKTsKKyAgICAgICAgdXBkYXRlVG9rZW5zRnJvbUF0dHJpYnV0ZVZhbHVl
KG1fZWxlbWVudC5nZXRBdHRyaWJ1dGUobV9hdHRyaWJ1dGVOYW1lKSk7CiAgICAgQVNTRVJUKCFt
X3Rva2Vuc05lZWRVcGRhdGluZyk7CiAgICAgcmV0dXJuIG1fdG9rZW5zOwogfQo=
</data>

          </attachment>
      

    </bug>

</bugzilla>