173401 2017-06-14 23:41:51 -0700 [Win] Crash in accessibility layout test. 2017-06-15 10:01:31 -0700 1 1 1 Unclassified WebKit Tools / Tests WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 pvollan pvollan achristensen bfulgham commit-queue lforschler oldest_to_newest 1319475 0 pvollan 2017-06-14 23:41:51 -0700 STACK_TEXT: WARNING: Frame IP not in any known module. Following frames may be wrong. 0040c200 647c441c 08fc7cf0 647b61bd 059a4cd8 0x7005c763 0040c208 647b61bd 059a4cd8 0040c23c 640f5ffa DumpRenderTreeLib!AccessibilityUIElement::~AccessibilityUIElement+0xc 0040c214 640f5ffa 058bb100 0040c254 058bb100 DumpRenderTreeLib!finalize+0x1d 0040c228 644e9d5d 058bb100 00000000 00000310 JavaScriptCore!JSC::JSCallbackObject<JSC::JSDestructibleObject>::~JSCallbackObject<JSC::JSDestructibleObject>+0x4a 0040c23c 644e9669 00000310 0051bab0 00000000 JavaScriptCore!<lambda_07778e20c17479c9d2c845ad43d19255>::operator()+0x2d 0040c2b4 644e9e13 058759d0 00000001 00000001 JavaScriptCore!JSC::MarkedBlock::Handle::specializedSweep<1,1,1,1,0,1,1,JSC::`anonymous namespace'::DestroyFunc>+0x149 0040c2d8 644e94e2 00000000 0051bab0 05771408 JavaScriptCore!<lambda_bd36abf116e3ed85297e973ffafd78a3>::operator()+0x53 0040c330 644e93d3 058759d0 0040c343 057737c8 JavaScriptCore!JSC::MarkedBlock::Handle::finishSweepKnowingSubspace<JSC::`anonymous namespace'::DestroyFunc>+0xe2 0040c344 6432bc0a 0051bab0 058759d0 058759d0 JavaScriptCore!JSC::JSDestructibleObjectSubspace::finishSweep+0x13 0040c3a0 6432b302 058759d0 00000001 00000000 JavaScriptCore!JSC::MarkedBlock::Handle::sweep+0xea 0040c3b4 6432b251 0051bab0 058759d0 05771410 JavaScriptCore!JSC::MarkedAllocator::tryAllocateIn+0x12 0040c3d4 6432b0ec 05771408 00000000 058cb8a0 JavaScriptCore!JSC::MarkedAllocator::tryAllocateWithoutCollecting+0xb1 0040c3e8 6432af6d 00000000 00000001 0040c408 JavaScriptCore!JSC::MarkedAllocator::allocateSlowCaseImpl+0x14c 0040c3f8 6433561a 00000000 05771408 0040c41c JavaScriptCore!JSC::MarkedAllocator::allocateSlowCase+0xd 0040c408 644fc3a5 00000018 05771408 058cb8a0 JavaScriptCore!JSC::Subspace::allocate+0x4a 0040c41c 644f19ec 05771408 05793f20 05771408 JavaScriptCore!JSC::FunctionPrototype::create+0x15 0040d27c 644ee453 05771408 05771408 058cb8a0 JavaScriptCore!JSC::JSGlobalObject::init+0x8c 0040d294 63456513 00000000 058b80a0 058cb8a0 JavaScriptCore!JSC::JSGlobalObject::finishCreation+0x53 0040d2e4 6391fda4 05771408 058b80a0 058cb8a0 WebKit!WebCore::JSDOMWindowBase::finishCreation+0x23 0040d300 6345820a 05771408 058b80a0 0a9271a0 WebKit!WebCore::JSDOMWindow::finishCreation+0x14 0040d338 63459d5c 0040d358 0a9271a0 05758ee8 WebKit!WebCore::JSDOMWindowProxy::setWindow+0x16a 0040d378 6324bf6c 091808c8 00000000 08f75924 WebKit!WebCore::ScriptController::setDOMWindowForWindowProxy+0xdc 0040d390 6365aa3e 0a9271a0 00000000 00000001 WebKit!WebCore::FrameLoader::clear+0x19c 0040d410 6312a834 0040d42c 00000000 00000000 WebKit!WebCore::DocumentWriter::begin+0x17e 0040d46c 6312be48 00000000 00000000 64075350 WebKit!WebCore::DocumentLoader::commitData+0x44 0040d56c 6312c974 08f758d0 08f76030 6bca25a9 WebKit!WebCore::DocumentLoader::finishedLoading+0x118 0040d7d8 63129bf1 05758ee8 08f758d0 00000000 WebKit!WebCore::DocumentLoader::maybeLoadEmpty+0x3a4 0040dd3c 632508f1 056c1d40 08f75d40 08f758d0 WebKit!WebCore::DocumentLoader::startLoadingMainResource+0x141 0040dd60 632545d9 08f75d40 00000000 00000001 WebKit!WebCore::FrameLoader::continueLoadAfterNavigationPolicy+0x291 0040dd78 636baa59 08f75d40 00000000 00000001 WebKit!WTF::Function<void __cdecl(WebCore::ResourceRequest const &,WebCore::FormState *,bool)>::CallableWrapper<<lambda_95aa8f0030eed8483eb052c9ec4a0293> >::call+0x19 0040df60 63251b5b 08f75d40 00000000 08f758d0 WebKit!WebCore::PolicyChecker::checkNavigationPolicy+0x249 0040e14c 63251c5b 08f758d0 00000000 00000000 WebKit!WebCore::FrameLoader::loadWithDocumentLoader+0x35b 0040e170 6324a5dd 08f758d0 05758e98 08e68388 WebKit!WebCore::FrameLoader::load+0xeb 0040e840 63027158 0040e854 08e68388 63cf5d48 WebKit!WebCore::FrameLoader::load+0x1ed 0040ee24 647cdf67 057656b8 08e68388 00000001 WebKit!WebFrame::loadRequest+0x88 0040ef44 647c9c61 0040ef5c 010d6df0 00512328 DumpRenderTreeLib!runTest+0x797 0040f7c8 647c9e2e 00000002 00512328 0040faa0 DumpRenderTreeLib!main+0x491 0040f7d8 010c16c9 00000002 00512328 010d6dec DumpRenderTreeLib!dllLauncherEntryPoint+0xe 0040faa0 010c32ba 00000002 00512328 00518640 DumpRenderTree!main+0x469 0040faec 7619336a 7efde000 0040fb38 77b59902 DumpRenderTree!__scrt_common_main_seh+0xff 0040faf8 77b59902 7efde000 ec72fbff 00000000 KERNEL32!BaseThreadInitThunk+0x12 0040fb38 77b598d5 010c3337 7efde000 00000000 ntdll_77b20000!RtlInitializeExceptionChain+0x63 0040fb50 00000000 010c3337 7efde000 00000000 ntdll_77b20000!RtlInitializeExceptionChain+0x36 1319476 1 312956 pvollan 2017-06-14 23:49:06 -0700 Created attachment 312956 Patch 1319600 2 312956 bfulgham 2017-06-15 09:44:48 -0700 Comment on attachment 312956 Patch Weird that this was every done this way. I wonder if there was a Retain() somewhere we removed at some point. 1319606 3 312956 pvollan 2017-06-15 09:58:41 -0700 Comment on attachment 312956 Patch Thanks for reviewing! 1319607 4 312956 commit-queue 2017-06-15 10:01:30 -0700 Comment on attachment 312956 Patch Clearing flags on attachment: 312956 Committed r218337: <http://trac.webkit.org/changeset/218337> 1319608 5 commit-queue 2017-06-15 10:01:31 -0700 All reviewed patches have been landed. Closing bug. 312956 2017-06-14 23:49:06 -0700 2017-06-15 10:01:30 -0700 Patch bug-173401-20170614234906.patch text/plain 1513 pvollan SW5kZXg6IFRvb2xzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBUb29scy9DaGFuZ2VMb2cJKHJl dmlzaW9uIDIxODMxNykKKysrIFRvb2xzL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwz ICsxLDE4IEBACisyMDE3LTA2LTE0ICBQZXIgQXJuZSBWb2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNv bT4KKworICAgICAgICBbV2luXSBDcmFzaCBpbiBhY2Nlc3NpYmlsaXR5IGxheW91dCB0ZXN0Lgor ICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTczNDAxCisK KyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgV2Ugc2hvdWxk IG5vdCBtYW51YWxseSByZWxlYXNlIHRoZSBwdW5rVmFsIElVbmtub3duIG1lbWJlciBpbiBhIF92 YXJpYW50X3Qgb2JqZWN0LCBzaW5jZSB0aGUgcHVua1ZhbAorICAgICAgICBtZW1iZXIgd2lsbCBi ZSBhdXRvbWF0aWNhbGx5IHJlbGVhc2VkIHdoZW4gdGhlIF92YXJpYW50X3Qgb2JqZWN0IGdvZXMg b3V0IG9mIHNjb3BlIGlmIHRoZSB2dCBtZW1iZXIKKyAgICAgICAgZG9lcyBub3QgZXF1YWwgVlRf VU5LTk9XTiB8IFZUX0JZUkVGLgorICAgICAgICBTZWUgaHR0cHM6Ly9tc2RuLm1pY3Jvc29mdC5j b20vZW4tdXMvbGlicmFyeS93aW5kb3dzL2Rlc2t0b3AvbXMyMjExNjUodj12cy44NSkuYXNweC4g CisKKyAgICAgICAgKiBEdW1wUmVuZGVyVHJlZS93aW4vQWNjZXNzaWJpbGl0eVVJRWxlbWVudFdp bi5jcHA6CisgICAgICAgIChBY2Nlc3NpYmlsaXR5VUlFbGVtZW50Ojp0aXRsZVVJRWxlbWVudCk6 CisKIDIwMTctMDYtMTQgIFRvbWFzIFBvcGVsYSAgPHRwb3BlbGFAcmVkaGF0LmNvbT4KIAogICAg ICAgICBbR1RLXSBpbnRlZ2VyIGV4cHJlc3Npb24gZXhwZWN0ZWQgaWYgcnVubmluZyBUb29scy9n dGsvaW5zdGFsbC1kZXBlbmRlbmNpZXMKSW5kZXg6IFRvb2xzL0R1bXBSZW5kZXJUcmVlL3dpbi9B Y2Nlc3NpYmlsaXR5VUlFbGVtZW50V2luLmNwcAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBUb29scy9EdW1wUmVu ZGVyVHJlZS93aW4vQWNjZXNzaWJpbGl0eVVJRWxlbWVudFdpbi5jcHAJKHJldmlzaW9uIDIxODI1 NykKKysrIFRvb2xzL0R1bXBSZW5kZXJUcmVlL3dpbi9BY2Nlc3NpYmlsaXR5VUlFbGVtZW50V2lu LmNwcAkod29ya2luZyBjb3B5KQpAQCAtMjAwLDggKzIwMCw2IEBAIEFjY2Vzc2liaWxpdHlVSUVs ZW1lbnQgQWNjZXNzaWJpbGl0eVVJRWwKICAgICAgICAgcmV0dXJuIG51bGxwdHI7CiAKICAgICBD T01QdHI8SUFjY2Vzc2libGU+IHRpdGxlRWxlbWVudChRdWVyeSwgdmFsdWUucHVua1ZhbCk7Ci0g ICAgaWYgKHZhbHVlLnB1bmtWYWwpCi0gICAgICAgIHZhbHVlLnB1bmtWYWwtPlJlbGVhc2UoKTsK IAogICAgIHJldHVybiB0aXRsZUVsZW1lbnQ7CiB9Cg==