167756 2017-02-02 14:23:36 -0800 Nullptr crash under styleForFirstLetter 2017-02-09 08:33:51 -0800 1 1 1 Unclassified WebKit Layout and Rendering WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 koivisto webkit-unassigned bfulgham commit-queue esprehn+autocc glenn kondapallykalyan simon.fraser zalan oldest_to_newest 1272639 0 koivisto 2017-02-02 14:23:36 -0800 Thread 0 name: Dispatch queue: com.apple.main-thread Thread 0 Crashed ↩: 0 WebCore 0x1fb5bd26 WebCore::RenderStyle::clone(WebCore::RenderStyle const&) + 0 (Ref.h:142) 1 WebCore 0x1fabdcda WebCore::styleForFirstLetter(WebCore::RenderElement const&, WebCore::RenderObject const&) + 86 (RenderBlock.cpp:3020) 2 WebCore 0x1fabe1ac WebCore::RenderBlock::createFirstLetterRenderer(WebCore::RenderElement*, WebCore::RenderText*) + 24 (RenderBlock.cpp:3144) 3 WebCore 0x1fabe678 WebCore::RenderBlock::updateFirstLetter(WebCore::RenderBlock::RenderTreeMutationIsAllowed) + 96 (RenderBlock.cpp:3296) 4 WebCore 0x1f173ef8 WebCore::RenderBlock::layout() + 30 (RenderBlock.cpp:1056) 5 WebCore 0x1fac6fde WebCore::RenderBlockFlow::insertFloatingObject(WebCore::RenderBox&) + 356 (RenderElement.h:129) 6 WebCore 0x1f9d97f6 WebCore::LineBreaker::skipLeadingWhitespace(WebCore::BidiResolverWithIsolate<WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun>&, WebCore::LineInfo&, WebCore::FloatingObject*, WebCore::LineWidth&) + 326 (LineBreaker.cpp:69) 7 WebCore 0x1f9d9974 WebCore::LineBreaker::nextLineBreak(WebCore::BidiResolverWithIsolate<WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun>&, WebCore::LineInfo&, WebCore::LineLayoutState&, WebCore::RenderTextInfo&, WebCore::FloatingObject*, unsigned int, WTF::Vector<WebCore::WordMeasurement, 64ul, WTF::CrashOnOverflow, 16ul>&) + 174 (LineBreaker.cpp:90) 8 WebCore 0x1fad1fda WebCore::RenderBlockFlow::layoutRunsAndFloatsInRange(WebCore::LineLayoutState&, WebCore::BidiResolverWithIsolate<WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun>&, WebCore::InlineIterator const&, WebCore::BidiStatus const&, unsigned int) + 634 (RenderBlockLineLayout.cpp:1371) 9 WebCore 0x1fad1092 WebCore::RenderBlockFlow::layoutRunsAndFloats(WebCore::LineLayoutState&, bool) + 680 (RenderBlockLineLayout.cpp:1324) 10 WebCore 0x1fad3fd6 WebCore::RenderBlockFlow::layoutLineBoxes(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&) + 1298 (RenderBlockLineLayout.cpp:1750) 11 WebCore 0x1fac5e34 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 880 (RenderBlockFlow.cpp:686) 12 WebCore 0x1f173f06 WebCore::RenderBlock::layout() + 44 (RenderBlock.cpp:1060) 1272645 1 300450 koivisto 2017-02-02 14:38:20 -0800 Created attachment 300450 possible patch 1272646 2 koivisto 2017-02-02 14:38:46 -0800 rdar://problem/30029354 1272647 3 300451 koivisto 2017-02-02 14:39:44 -0800 Created attachment 300451 possible patch 1274864 4 300451 commit-queue 2017-02-09 08:33:46 -0800 Comment on attachment 300451 possible patch Clearing flags on attachment: 300451 Committed r211957: <http://trac.webkit.org/changeset/211957> 1274865 5 commit-queue 2017-02-09 08:33:51 -0800 All reviewed patches have been landed. Closing bug. 300450 2017-02-02 14:38:20 -0800 2017-02-02 14:39:44 -0800 possible patch first-letter-nullptr.patch application/octet-stream 1958 koivisto SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDIxMTU5NCkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE3IEBACisyMDE3LTAyLTAyICBBbnR0aSBL b2l2aXN0byAgPGFudHRpQGFwcGxlLmNvbT4KKworICAgICAgICBOdWxscHRyIGNyYXNoIHVuZGVy IHN0eWxlRm9yRmlyc3RMZXR0ZXIKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hv d19idWcuY2dpP2lkPTE2Nzc1NgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEp LgorCisgICAgICAgIERvbid0IGtub3cgaG93IHdlIGdldCBoZXJlLiBQYXBlciBvdmVyIHRoZSBj cmFzaC4KKworICAgICAgICAqIHJlbmRlcmluZy9SZW5kZXJCbG9jay5jcHA6CisgICAgICAgIChX ZWJDb3JlOjpzdHlsZUZvckZpcnN0TGV0dGVyKToKKworICAgICAgICAgICAgVXNlIHBhcmVudCBm aXJzdCBsaW5lIHN0eWxlIGlmIHdlIGNvbXB1dGUgbnVsbCBzdHlsZSBmb3IgdGhlIGZpcnN0IGxl dHRlciByZW5kZXJlci4KKwogMjAxNy0wMi0wMiAgSm9zZXBoIFBlY29yYXJvICA8cGVjb3Jhcm9A YXBwbGUuY29tPgogCiAgICAgICAgIFN1cHBvcnQgUGVyZm9ybWFuY2UgQVBJIChwZXJmb3JtYW5j ZS5ub3coKSwgVXNlclRpbWluZykgaW4gV29ya2VycwpJbmRleDogU291cmNlL1dlYkNvcmUvcmVu ZGVyaW5nL1JlbmRlckJsb2NrLmNwcAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2ViQ29yZS9yZW5k ZXJpbmcvUmVuZGVyQmxvY2suY3BwCShyZXZpc2lvbiAyMTE1NjMpCisrKyBTb3VyY2UvV2ViQ29y ZS9yZW5kZXJpbmcvUmVuZGVyQmxvY2suY3BwCSh3b3JraW5nIGNvcHkpCkBAIC0zMDE2LDcgKzMw MTYsMTAgQEAgUmVuZGVyQmxvY2sqIFJlbmRlckJsb2NrOjpmaXJzdExpbmVCbG9jawogCiBzdGF0 aWMgUmVuZGVyU3R5bGUgc3R5bGVGb3JGaXJzdExldHRlcihjb25zdCBSZW5kZXJFbGVtZW50JiBm aXJzdExldHRlckJsb2NrLCBjb25zdCBSZW5kZXJPYmplY3QmIGZpcnN0TGV0dGVyQ29udGFpbmVy KQogewotICAgIGF1dG8gZmlyc3RMZXR0ZXJTdHlsZSA9IFJlbmRlclN0eWxlOjpjbG9uZSgqZmly c3RMZXR0ZXJCbG9jay5nZXRDYWNoZWRQc2V1ZG9TdHlsZShGSVJTVF9MRVRURVIsICZmaXJzdExl dHRlckNvbnRhaW5lci5maXJzdExpbmVTdHlsZSgpKSk7CisgICAgYXV0byogY29udGFpbmVyRmly c3RMZXR0ZXJTdHlsZSA9IGZpcnN0TGV0dGVyQmxvY2suZ2V0Q2FjaGVkUHNldWRvU3R5bGUoRklS U1RfTEVUVEVSLCAmZmlyc3RMZXR0ZXJDb250YWluZXIuZmlyc3RMaW5lU3R5bGUoKSk7CisgICAg Ly8gRklYTUU6IFRoZXJlIGFwcGVhcnMgdG8gYmUgc29tZSBwYXRoIHdoZXJlIHdlIGhhdmUgYSBm aXJzdCBsZXR0ZXIgcmVuZGVyZXIgd2l0aG91dCBmaXJzdCBsZXR0ZXIgc3R5bGUuCisgICAgQVNT RVJUKGNvbnRhaW5lckZpcnN0TGV0dGVyU3R5bGUpOworICAgIGF1dG8gZmlyc3RMZXR0ZXJTdHls ZSA9IFJlbmRlclN0eWxlOjpjbG9uZShjb250YWluZXJGaXJzdExldHRlclN0eWxlID8gKmNvbnRh aW5lckZpcnN0TGV0dGVyU3R5bGUgOiBmaXJzdExldHRlckNvbnRhaW5lci5maXJzdExpbmVTdHls ZSgpKTsKIAogICAgIC8vIElmIHdlIGhhdmUgYW4gaW5pdGlhbCBsZXR0ZXIgZHJvcCB0aGF0IGlz ID49IDEsIHRoZW4gd2UgbmVlZCB0byBmb3JjZSBmbG9hdGluZyB0byBiZSBvbi4KICAgICBpZiAo Zmlyc3RMZXR0ZXJTdHlsZS5pbml0aWFsTGV0dGVyRHJvcCgpID49IDEgJiYgIWZpcnN0TGV0dGVy U3R5bGUuaXNGbG9hdGluZygpKQo= 300451 2017-02-02 14:39:44 -0800 2017-02-09 08:33:46 -0800 possible patch first-letter-nullptr-2.patch text/plain 1991 koivisto SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDIxMTU5NCkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE4IEBACisyMDE3LTAyLTAyICBBbnR0aSBL b2l2aXN0byAgPGFudHRpQGFwcGxlLmNvbT4KKworICAgICAgICBOdWxscHRyIGNyYXNoIHVuZGVy IHN0eWxlRm9yRmlyc3RMZXR0ZXIKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hv d19idWcuY2dpP2lkPTE2Nzc1NgorICAgICAgICByZGFyOi8vcHJvYmxlbS8zMDAyOTM1NAorCisg ICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIERvbid0IGtub3cg aG93IHdlIGdldCBoZXJlLiBQYXBlciBvdmVyIHRoZSBjcmFzaC4KKworICAgICAgICAqIHJlbmRl cmluZy9SZW5kZXJCbG9jay5jcHA6CisgICAgICAgIChXZWJDb3JlOjpzdHlsZUZvckZpcnN0TGV0 dGVyKToKKworICAgICAgICAgICAgVXNlIHBhcmVudCBmaXJzdCBsaW5lIHN0eWxlIGlmIHdlIGNv bXB1dGUgbnVsbCBzdHlsZSBmb3IgdGhlIGZpcnN0IGxldHRlciByZW5kZXJlci4KKwogMjAxNy0w Mi0wMiAgSm9zZXBoIFBlY29yYXJvICA8cGVjb3Jhcm9AYXBwbGUuY29tPgogCiAgICAgICAgIFN1 cHBvcnQgUGVyZm9ybWFuY2UgQVBJIChwZXJmb3JtYW5jZS5ub3coKSwgVXNlclRpbWluZykgaW4g V29ya2VycwpJbmRleDogU291cmNlL1dlYkNvcmUvcmVuZGVyaW5nL1JlbmRlckJsb2NrLmNwcAo9 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09Ci0tLSBTb3VyY2UvV2ViQ29yZS9yZW5kZXJpbmcvUmVuZGVyQmxvY2suY3BwCShy ZXZpc2lvbiAyMTE1NjMpCisrKyBTb3VyY2UvV2ViQ29yZS9yZW5kZXJpbmcvUmVuZGVyQmxvY2su Y3BwCSh3b3JraW5nIGNvcHkpCkBAIC0zMDE2LDcgKzMwMTYsMTAgQEAgUmVuZGVyQmxvY2sqIFJl bmRlckJsb2NrOjpmaXJzdExpbmVCbG9jawogCiBzdGF0aWMgUmVuZGVyU3R5bGUgc3R5bGVGb3JG aXJzdExldHRlcihjb25zdCBSZW5kZXJFbGVtZW50JiBmaXJzdExldHRlckJsb2NrLCBjb25zdCBS ZW5kZXJPYmplY3QmIGZpcnN0TGV0dGVyQ29udGFpbmVyKQogewotICAgIGF1dG8gZmlyc3RMZXR0 ZXJTdHlsZSA9IFJlbmRlclN0eWxlOjpjbG9uZSgqZmlyc3RMZXR0ZXJCbG9jay5nZXRDYWNoZWRQ c2V1ZG9TdHlsZShGSVJTVF9MRVRURVIsICZmaXJzdExldHRlckNvbnRhaW5lci5maXJzdExpbmVT dHlsZSgpKSk7CisgICAgYXV0byogY29udGFpbmVyRmlyc3RMZXR0ZXJTdHlsZSA9IGZpcnN0TGV0 dGVyQmxvY2suZ2V0Q2FjaGVkUHNldWRvU3R5bGUoRklSU1RfTEVUVEVSLCAmZmlyc3RMZXR0ZXJD b250YWluZXIuZmlyc3RMaW5lU3R5bGUoKSk7CisgICAgLy8gRklYTUU6IFRoZXJlIGFwcGVhcnMg dG8gYmUgc29tZSBwYXRoIHdoZXJlIHdlIGhhdmUgYSBmaXJzdCBsZXR0ZXIgcmVuZGVyZXIgd2l0 aG91dCBmaXJzdCBsZXR0ZXIgc3R5bGUuCisgICAgQVNTRVJUKGNvbnRhaW5lckZpcnN0TGV0dGVy U3R5bGUpOworICAgIGF1dG8gZmlyc3RMZXR0ZXJTdHlsZSA9IFJlbmRlclN0eWxlOjpjbG9uZShj b250YWluZXJGaXJzdExldHRlclN0eWxlID8gKmNvbnRhaW5lckZpcnN0TGV0dGVyU3R5bGUgOiBm aXJzdExldHRlckNvbnRhaW5lci5maXJzdExpbmVTdHlsZSgpKTsKIAogICAgIC8vIElmIHdlIGhh dmUgYW4gaW5pdGlhbCBsZXR0ZXIgZHJvcCB0aGF0IGlzID49IDEsIHRoZW4gd2UgbmVlZCB0byBm b3JjZSBmbG9hdGluZyB0byBiZSBvbi4KICAgICBpZiAoZmlyc3RMZXR0ZXJTdHlsZS5pbml0aWFs TGV0dGVyRHJvcCgpID49IDEgJiYgIWZpcnN0TGV0dGVyU3R5bGUuaXNGbG9hdGluZygpKQo=