172514 2017-05-23 11:32:57 -0700 ASSERTION FAILED: !renderer() in WebCore::Text::~Text 2019-09-14 01:52:57 -0700 1 1 1 Unclassified WebKit New Bugs WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=172503 InRadar P2 Normal --- 1 ryanhaddad webkit-unassigned cdumez commit-queue ecobos koivisto simon.fraser webkit-bug-importer zalan oldest_to_newest 1311955 0 ryanhaddad 2017-05-23 11:32:57 -0700 This assertion failure is seen with LayoutTest imported/w3c/web-platform-tests/innerText/getter.html https://build.webkit.org/results/Apple%20El%20Capitan%20Debug%20WK2%20(Tests)/r217275%20(1295)/results.html ASSERTION FAILED: !renderer() /Volumes/Data/slave/elcapitan-debug/build/Source/WebCore/dom/Text.cpp(57) : virtual WebCore::Text::~Text() 1 0x113da9380 WTFCrash 2 0x1091f2f2d WebCore::Text::~Text() 3 0x1091f2f65 WebCore::Text::~Text() 4 0x1091f2f89 WebCore::Text::~Text() 5 0x1069d38a8 WebCore::removeDetachedChildrenInContainer(WebCore::ContainerNode&) 6 0x1069c07fe WebCore::ContainerNode::removeDetachedChildren() 7 0x1069c11d0 WebCore::ContainerNode::~ContainerNode() 8 0x106f3029f WebCore::Element::~Element() 9 0x1090012c7 WebCore::StyledElement::~StyledElement() 10 0x1067c9d75 WebCore::HTMLElement::~HTMLElement() 11 0x1067c9d55 WebCore::HTMLDivElement::~HTMLDivElement() 12 0x10734c255 WebCore::HTMLDivElement::~HTMLDivElement() 13 0x10734c279 WebCore::HTMLDivElement::~HTMLDivElement() 14 0x10875e5bd WebCore::Node::removedLastRef() 15 0x10663b25e WebCore::Node::deref() 16 0x108756f05 WebCore::Node::derefEventTarget() 17 0x106deedc9 WebCore::EventTarget::deref() 18 0x106ec2ccd WTF::Ref<WebCore::EventTarget>::~Ref() 19 0x106eb5115 WTF::Ref<WebCore::EventTarget>::~Ref() 20 0x107b1078c WebCore::JSDOMWrapper<WebCore::EventTarget>::~JSDOMWrapper() 21 0x107b10765 WebCore::JSEventTarget::~JSEventTarget() 22 0x107b100a5 WebCore::JSEventTarget::~JSEventTarget() 23 0x107b0e47d WebCore::JSEventTarget::destroy(JSC::JSCell*) 24 0x11373ea6a JSC::(anonymous namespace)::DestroyFunc::operator()(JSC::VM&, JSC::JSCell*) const 25 0x11374070b JSC::FreeList JSC::MarkedBlock::Handle::specializedSweep<false, (JSC::MarkedBlock::Handle::EmptyMode)0, (JSC::MarkedBlock::Handle::SweepMode)0, (JSC::MarkedBlock::Handle::SweepDestructionMode)0, (JSC::MarkedBlock::Handle::ScribbleMode)0, (JSC::MarkedBlock::Handle::NewlyAllocatedMode)0, (JSC::MarkedBlock::Handle::MarksMode)0, JSC::(anonymous namespace)::DestroyFunc>(JSC::MarkedBlock::Handle::EmptyMode, JSC::MarkedBlock::Handle::SweepMode, JSC::MarkedBlock::Handle::SweepDestructionMode, JSC::MarkedBlock::Handle::ScribbleMode, JSC::MarkedBlock::Handle::NewlyAllocatedMode, JSC::MarkedBlock::Handle::MarksMode, JSC::(anonymous namespace)::DestroyFunc const&)::'lambda'(unsigned long)::operator()(unsigned long) const 26 0x11373f0df JSC::FreeList JSC::MarkedBlock::Handle::specializedSweep<false, (JSC::MarkedBlock::Handle::EmptyMode)0, (JSC::MarkedBlock::Handle::SweepMode)0, (JSC::MarkedBlock::Handle::SweepDestructionMode)0, (JSC::MarkedBlock::Handle::ScribbleMode)0, (JSC::MarkedBlock::Handle::NewlyAllocatedMode)0, (JSC::MarkedBlock::Handle::MarksMode)0, JSC::(anonymous namespace)::DestroyFunc>(JSC::MarkedBlock::Handle::EmptyMode, JSC::MarkedBlock::Handle::SweepMode, JSC::MarkedBlock::Handle::SweepDestructionMode, JSC::MarkedBlock::Handle::ScribbleMode, JSC::MarkedBlock::Handle::NewlyAllocatedMode, JSC::MarkedBlock::Handle::MarksMode, JSC::(anonymous namespace)::DestroyFunc const&) 27 0x11373e9ef JSC::FreeList JSC::MarkedBlock::Handle::finishSweepKnowingSubspace<JSC::(anonymous namespace)::DestroyFunc>(JSC::MarkedBlock::Handle::SweepMode, JSC::(anonymous namespace)::DestroyFunc const&) 28 0x11373e86d JSC::JSDestructibleObjectSubspace::finishSweep(JSC::MarkedBlock::Handle&, JSC::MarkedBlock::Handle::SweepMode) 29 0x11390310f JSC::MarkedBlock::Handle::sweep(JSC::MarkedBlock::Handle::SweepMode) 30 0x1138fe1c5 JSC::MarkedAllocator::tryAllocateIn(JSC::MarkedBlock::Handle*) 31 0x1138fe035 JSC::MarkedAllocator::tryAllocateWithoutCollecting() 1311957 1 ryanhaddad 2017-05-23 11:33:48 -0700 This is related to https://trac.webkit.org/changeset/217273 1311959 2 ryanhaddad 2017-05-23 11:37:04 -0700 Skipped test in https://trac.webkit.org/changeset/217285/webkit 1313834 3 ryanhaddad 2017-05-30 13:28:22 -0700 This test was unskipped with http://trac.webkit.org/changeset/217477, but it is still a flaky crash. 1313842 4 webkit-bug-importer 2017-05-30 13:35:08 -0700 <rdar://problem/32470509> 1313846 5 ryanhaddad 2017-05-30 13:38:28 -0700 Skipped test again in https://trac.webkit.org/changeset/217569/webkit 1570847 6 378788 koivisto 2019-09-14 00:26:35 -0700 Created attachment 378788 patch 1570848 7 378788 commit-queue 2019-09-14 01:52:56 -0700 Comment on attachment 378788 patch Clearing flags on attachment: 378788 Committed r249871: <https://trac.webkit.org/changeset/249871> 1570849 8 commit-queue 2019-09-14 01:52:57 -0700 All reviewed patches have been landed. Closing bug. 378788 2019-09-14 00:26:35 -0700 2019-09-14 01:52:56 -0700 patch innertext-getter-unskip.patch text/plain 1307 koivisto ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxv ZwppbmRleCBhN2I1YTE1OTliNy4uYTRhZDAyMGVlYzkgMTAwNjQ0Ci0tLSBhL0xheW91dFRlc3Rz L0NoYW5nZUxvZworKysgYi9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKQEAgLTEsMyArMSwxNSBAQAor MjAxOS0wOS0xNCAgQW50dGkgS29pdmlzdG8gIDxhbnR0aUBhcHBsZS5jb20+CisKKyAgICAgICAg QVNTRVJUSU9OIEZBSUxFRDogIXJlbmRlcmVyKCkgaW4gIFdlYkNvcmU6OlRleHQ6On5UZXh0Cisg ICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xNzI1MTQKKyAg ICAgICAgPHJkYXI6Ly9wcm9ibGVtLzMyNDcwNTA5PgorCisgICAgICAgIFVucmV2aWV3ZWQsIHRo aXMgYXNzZXJ0IHNob3VsZCBiZSBmaXhlZCBub3cuCisKKyAgICAgICAgKiBUZXN0RXhwZWN0YXRp b25zOgorCisgICAgICAgIFVuc2tpcHBpbmcgaW1wb3J0ZWQvdzNjL3dlYi1wbGF0Zm9ybS10ZXN0 cy9pbm5lclRleHQvZ2V0dGVyLmh0bWwgb24gZGVidWcKKwogMjAxOS0wOS0wOCAgU2FhbSBCYXJh dGkgIDxzYmFyYXRpQGFwcGxlLmNvbT4KIAogICAgICAgICBbV0hMU0xdIEFkZCBiYWNrIGEgdmVy c2lvbiBvZiB0aGUgcHJvcGVydHkgcmVzb2x2ZXIKZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL1Rl c3RFeHBlY3RhdGlvbnMgYi9MYXlvdXRUZXN0cy9UZXN0RXhwZWN0YXRpb25zCmluZGV4IDlmMTQz NGMwYjAxLi4xOGVhYTlmMTU3NCAxMDA2NDQKLS0tIGEvTGF5b3V0VGVzdHMvVGVzdEV4cGVjdGF0 aW9ucworKysgYi9MYXlvdXRUZXN0cy9UZXN0RXhwZWN0YXRpb25zCkBAIC0yNDAxLDggKzI0MDEs NiBAQCB3ZWJraXQub3JnL2IvMTcyMzc4IGltcG9ydGVkL2JsaW5rL3ByaW50aW5nL3ByaW50LWRv Y3VtZW50LXdpdGhvdXQtZG9jdW1lbnRFbGVtZQogCiB3ZWJraXQub3JnL2IvMTcyNjA5IGZldGNo L2Nsb3Npbmctd2hpbGUtZmV0Y2hpbmctYmxvYi5odG1sIFsgU2tpcCBdCiAKLXdlYmtpdC5vcmcv Yi8xNzI1MTQgWyBEZWJ1ZyBdIGltcG9ydGVkL3czYy93ZWItcGxhdGZvcm0tdGVzdHMvaW5uZXJU ZXh0L2dldHRlci5odG1sIFsgU2tpcCBdCi0KIHdlYmtpdC5vcmcvYi8xNzUyOTEgaW1wb3J0ZWQv dzNjL3dlYi1wbGF0Zm9ybS10ZXN0cy9jc3MvY3NzLXVpL291dGxpbmUtMDE4Lmh0bWwgWyBTa2lw IF0KIAogd2Via2l0Lm9yZy9iLzE3NTI4NyBpbXBvcnRlZC93M2Mvd2ViLXBsYXRmb3JtLXRlc3Rz L2Nzcy9jc3MtdWkvYm94LXNpemluZy0wMTQuaHRtbCBbIEltYWdlT25seUZhaWx1cmUgXQo=