167787 2017-02-03 02:50:19 -0800 WebContent crash when pasting into input fields at com.apple.WebCore: WebCore::ResourceRequestBase::url const + 9 2017-02-03 03:14:10 -0800 1 1 1 Unclassified WebKit CSS WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 koivisto webkit-unassigned commit-queue dino dstockwell simon.fraser oldest_to_newest 1272854 0 koivisto 2017-02-03 02:50:19 -0800 Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Subtype: KERN_INVALID_ADDRESS at 0x00000000000000ed Thread 0 name: Dispatch queue: com.apple.main-thread Thread 0 Crashed ↩: 0 WebCore 0x000000018dba2aa4 WebCore::ResourceRequestBase::url() const + 16 (ResourceRequestBase.cpp:609) 1 WebCore 0x000000018de795e0 WebCore::CSSImageValue::CSSImageValue(WebCore::CachedImage&) + 60 (CachedResource.h:116) 2 WebCore 0x000000018de795e0 WebCore::CSSImageValue::CSSImageValue(WebCore::CachedImage&) + 60 (CachedResource.h:116) 3 WebCore 0x000000018de96f04 WebCore::blendFunc(WebCore::AnimationBase const*, WebCore::StyleImage*, WebCore::StyleImage*, double) + 908 (CSSImageValue.h:38) 4 WebCore 0x000000018de96b14 WebCore::FillLayerRefCountedPropertyWrapper<WebCore::StyleImage>::blend(WebCore::AnimationBase const*, WebCore::FillLayer*, WebCore::FillLayer const*, WebCore::FillLayer const*, double) const + 140 (CSSPropertyAnimation.cpp:1022) 5 WebCore 0x000000018de966e4 WebCore::FillLayersPropertyWrapper::blend(WebCore::AnimationBase const*, WebCore::RenderStyle*, WebCore::RenderStyle const*, WebCore::RenderStyle const*, double) const + 176 (CSSPropertyAnimation.cpp:1111) 6 WebCore 0x000000018dcbd948 WebCore::CSSPropertyAnimation::blendProperties(WebCore::AnimationBase const*, WebCore::CSSPropertyID, WebCore::RenderStyle*, WebCore::RenderStyle const*, WebCore::RenderStyle const*, double) + 188 (CSSPropertyAnimation.cpp:1579) 7 WebCore 0x000000018e1b21f4 WebCore::ImplicitAnimation::animate(WebCore::CompositeAnimation*, WebCore::RenderElement*, WebCore::RenderStyle const*, WebCore::RenderStyle const*, std::__1::unique_ptr<WebCore::RenderStyle, std::__1::default_delete<WebCore::RenderStyle> >&, bool&) + 216 (ImplicitAnimation.cpp:82) 8 WebCore 0x000000018ddd9f24 WebCore::CompositeAnimation::animate(WebCore::RenderElement&, WebCore::RenderStyle const*, WebCore::RenderStyle const&, std::__1::unique_ptr<WebCore::RenderStyle, std::__1::default_delete<WebCore::RenderStyle> >&) + 228 (CompositeAnimation.cpp:303) 9 WebCore 0x000000018dd134c8 WebCore::AnimationController::updateAnimations(WebCore::RenderElement&, WebCore::RenderStyle const&, std::__1::unique_ptr<WebCore::RenderStyle, std::__1::default_delete<WebCore::RenderStyle> >&) + 196 (AnimationController.cpp:618) 10 WebCore 0x000000018ea586a4 WebCore::Style::TreeResolver::createAnimatedElementUpdate(std::__1::unique_ptr<WebCore::RenderStyle, std::__1::default_delete<WebCore::RenderStyle> >, WebCore::Element&, WebCore::Style::Change) + 132 (StyleTreeResolver.cpp:273) 11 WebCore 0x000000018ea58400 WebCore::Style::TreeResolver::resolveElement(WebCore::Element&) + 232 (StyleTreeResolver.cpp:203) 12 WebCore 0x000000018ea5910c WebCore::Style::TreeResolver::resolveComposedTree() + 1300 (StyleTreeResolver.cpp:423) 13 WebCore 0x000000018ea5970c WebCore::Style::TreeResolver::resolve(WebCore::Style::Change) + 520 (StyleTreeResolver.cpp:479) 14 WebCore 0x000000018df23130 WebCore::Document::recalcStyle(WebCore::Style::Change) + 484 (Document.cpp:1826) 1272855 1 koivisto 2017-02-03 02:50:51 -0800 rdar://problem/29168795 1272856 2 300515 koivisto 2017-02-03 02:54:21 -0800 Created attachment 300515 patch 1272859 3 koivisto 2017-02-03 03:14:10 -0800 Committed r211625: <http://trac.webkit.org/changeset/211625> 300515 2017-02-03 02:54:21 -0800 2017-02-03 03:12:56 -0800 patch blend-image-nullptr.patch text/plain 1436 koivisto SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDIxMTYyNCkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDE3LTAyLTAzICBBbnR0aSBL b2l2aXN0byAgPGFudHRpQGFwcGxlLmNvbT4KKworICAgICAgICBXZWJDb250ZW50IGNyYXNoIHdo ZW4gcGFzdGluZyBpbnRvIGlucHV0IGZpZWxkcyBhdCBjb20uYXBwbGUuV2ViQ29yZTogV2ViQ29y ZTo6UmVzb3VyY2VSZXF1ZXN0QmFzZTo6dXJsIGNvbnN0ICsgOQorICAgICAgICBodHRwczovL2J1 Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTY3Nzg3CisKKyAgICAgICAgUmV2aWV3ZWQg YnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgTm8gdGVzdCwgZG9uJ3Qga25vdyBob3cgdG8g Z2V0IGhlcmUuCisKKyAgICAgICAgKiBwYWdlL2FuaW1hdGlvbi9DU1NQcm9wZXJ0eUFuaW1hdGlv bi5jcHA6CisgICAgICAgIChXZWJDb3JlOjpjcm9zc2ZhZGVCbGVuZCk6IE51bGwgY2hlY2suCisK IDIwMTctMDItMDMgIEFsYmVydG8gR2FyY2lhICA8YmVydG9AaWdhbGlhLmNvbT4KIAogICAgICAg ICBKU0RPTVdpbmRvd0Jhc2UuY3BwIGRvZXNuJ3QgYnVpbGQgaWYgdGhlIEpJVCBpcyBkaXNhYmxl ZApJbmRleDogU291cmNlL1dlYkNvcmUvcGFnZS9hbmltYXRpb24vQ1NTUHJvcGVydHlBbmltYXRp b24uY3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJDb3JlL3BhZ2UvYW5pbWF0aW9uL0NTU1By b3BlcnR5QW5pbWF0aW9uLmNwcAkocmV2aXNpb24gMjExNTYzKQorKysgU291cmNlL1dlYkNvcmUv cGFnZS9hbmltYXRpb24vQ1NTUHJvcGVydHlBbmltYXRpb24uY3BwCSh3b3JraW5nIGNvcHkpCkBA IC0yODYsNiArMjg2LDggQEAgc3RhdGljIGlubGluZSBSZWZQdHI8U3R5bGVJbWFnZT4gY3Jvc3Nm YQogICAgICAgICByZXR1cm4gZnJvbVN0eWxlSW1hZ2U7CiAgICAgaWYgKHByb2dyZXNzID09IDEp CiAgICAgICAgIHJldHVybiB0b1N0eWxlSW1hZ2U7CisgICAgaWYgKCFmcm9tU3R5bGVJbWFnZS0+ Y2FjaGVkSW1hZ2UoKSB8fCAhdG9TdHlsZUltYWdlLT5jYWNoZWRJbWFnZSgpKQorICAgICAgICBy ZXR1cm4gdG9TdHlsZUltYWdlOwogCiAgICAgYXV0byBmcm9tSW1hZ2VWYWx1ZSA9IENTU0ltYWdl VmFsdWU6OmNyZWF0ZSgqZnJvbVN0eWxlSW1hZ2UtPmNhY2hlZEltYWdlKCkpOwogICAgIGF1dG8g dG9JbWFnZVZhbHVlID0gQ1NTSW1hZ2VWYWx1ZTo6Y3JlYXRlKCp0b1N0eWxlSW1hZ2UtPmNhY2hl ZEltYWdlKCkpOwo=