<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>183385</bug_id>
          
          <creation_ts>2018-03-06 15:11:07 -0800</creation_ts>
          <short_desc>Invalid innerTextRenderer in RenderTextControlSingleLine::styleDidChange()</short_desc>
          <delta_ts>2018-03-07 19:51:39 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>DOM</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="alan">zalan</reporter>
          <assigned_to name="alan">zalan</assigned_to>
          <cc>cdumez</cc>
    
    <cc>commit-queue</cc>
    
    <cc>koivisto</cc>
    
    <cc>rniwa</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1404178</commentid>
    <comment_count>0</comment_count>
    <who name="alan">zalan</who>
    <bug_when>2018-03-06 15:11:07 -0800</bug_when>
    <thetext>frame #1: 0x0000000113a1fc24 WebCore`WebCore::RenderTextControlSingleLine::styleDidChange(this=0x0000000126000120, diff=StyleDifferenceLayout, oldStyle=0x00007ffee8a2dad8) at RenderTextControlSingleLine.cpp:233
    frame #2: 0x000000011382768b WebCore`WebCore::RenderElement::setStyle(this=0x0000000126000120, style=0x00007ffee8a2dca8, minimalStyleDifference=StyleDifferenceEqual) at RenderElement.cpp:420
    frame #3: 0x0000000113c0e1d3 WebCore`WebCore::RenderTreeUpdater::updateRendererStyle(this=0x00007ffee8a30c80, renderer=0x0000000126000120, newStyle=0x00007ffee8a2dca8, minimalStyleDifference=StyleDifferenceEqual) at RenderTreeUpdater.cpp:300
    frame #4: 0x0000000113c0dd20 WebCore`WebCore::RenderTreeUpdater::updateElementRenderer(this=0x00007ffee8a30c80, element=0x0000000123fe2e80, update=0x0000000123f6c9b8) at RenderTreeUpdater.cpp:357
    frame #5: 0x0000000113c0d14e WebCore`WebCore::RenderTreeUpdater::updateRenderTree(this=0x00007ffee8a30c80, root=0x0000000123feba90) at RenderTreeUpdater.cpp:198
    frame #6: 0x0000000113c0ca09 WebCore`WebCore::RenderTreeUpdater::commit(this=0x00007ffee8a30c80, styleUpdate=unique_ptr&lt;const WebCore::Style::Update, std::__1::default_delete&lt;const WebCore::Style::Update&gt; &gt; @ 0x00007ffee8a30c78) at RenderTreeUpdater.cpp:130
    frame #7: 0x000000011284599c WebCore`WebCore::Document::resolveStyle(this=0x0000000123f65000, type=Normal) at Document.cpp:1867
    frame #8: 0x0000000112847149 WebCore`WebCore::Document::updateStyleIfNeeded(this=0x0000000123f65000) at Document.cpp:1971
    frame #9: 0x0000000112847c00 WebCore`WebCore::Document::updateLayoutIfDimensionsOutOfDate(this=0x0000000123f65000, element=0x0000000123feba90, dimensionsCheck=HeightDimensionsCheck) at Document.cpp:2072
    frame #10: 0x00000001128e9390 WebCore`WebCore::Element::offsetHeight(this=0x0000000123feba90) at Element.cpp:842
    frame #11: 0x000000011138e15d WebCore`WebCore::jsHTMLElementOffsetHeightGetter(state=0x00007ffee8a31ce0, thisObject=0x0000000124804030, throwScope=0x00007ffee8a317c8) at JSHTMLElement.cpp:976
    frame #12: 0x000000011134bdd0 WebCore`long long WebCore::IDLAttribute&lt;WebCore::JSHTMLElement&gt;::get&lt;&amp;(state=0x00007ffee8a31ce0, thisValue=4907352112, attributeName=&quot;offsetHeight&quot;)), (WebCore::CastedThisErrorBehavior)3&gt;(JSC::ExecState&amp;, long long, char const*) at JSDOMAttribute.h:69
    frame #13: 0x000000011134bcdb WebCore`WebCore::jsHTMLElementOffsetHeight(state=0x00007ffee8a31ce0, thisValue=4907352112, (null)=PropertyName @ 0x00007ffee8a31838) at JSHTMLElement.cpp:982
    frame #14: 0x000000011f9942bd JavaScriptCore`JSC::PropertySlot::customGetter(this=0x00007ffee8a31b80, exec=0x00007ffee8a31ce0, propertyName=PropertyName @ 0x00007ffee8a31930) const at PropertySlot.cpp:50
    frame #15: 0x000000011e8109c2 JavaScriptCore`JSC::PropertySlot::getValue(this=0x00007ffee8a31b80, exec=0x00007ffee8a31ce0, propertyName=PropertyName @ 0x00007ffee8a31980) const at PropertySlot.h:408
    frame #16: 0x000000011effbf1f JavaScriptCore`JSC::JSValue::get(this=0x00007ffee8a31bd0, exec=0x00007ffee8a31ce0, propertyName=PropertyName @ 0x00007ffee8a31a50, slot=0x00007ffee8a31b80) const at JSCJSValueInlines.h:812
    frame #17: 0x000000011f5cf9a4 JavaScriptCore`::llint_slow_path_get_by_id(exec=0x00007ffee8a31ce0, pc=0x0000000123fc7910) at LLIntSlowPaths.cpp:660
    frame #18: 0x000000011e7dcb0d JavaScriptCore`llint_entry at LowLevelInterpreter64.asm:58
    frame #19: 0x000000011e7d9402 JavaScriptCore`vmEntryToJavaScript at LowLevelInterpreter64.asm:257
    frame #20: 0x000000011f565b8e JavaScriptCore`JSC::JITCode::execute(this=0x0000000125fefaa0, vm=0x0000000124500000, protoCallFrame=0x00007ffee8a31eb8) at JITCode.cpp:81
    frame #21: 0x000000011f50b6b5 JavaScriptCore`JSC::Interpreter::executeCall(this=0x0000000123ffc338, callFrame=0x00000001248dc058, function=0x0000000124834000, callType=JS, callData=0x00007ffee8a32500, thisValue=JSValue @ 0x00007ffee8a31fe0, args=0x00007ffee8a323d0) at Interpreter.cpp:1028
    frame #22: 0x000000011f7745ea JavaScriptCore`JSC::call(exec=0x00000001248dc058, functionObject=JSValue @ 0x00007ffee8a32060, callType=JS, callData=0x00007ffee8a32500, thisValue=JSValue @ 0x00007ffee8a32058, args=0x00007ffee8a323d0) at CallData.cpp:41
    frame #23: 0x000000011f7746c9 JavaScriptCore`JSC::call(exec=0x00000001248dc058, functionObject=JSValue @ 0x00007ffee8a32150, callType=JS, callData=0x00007ffee8a32500, thisValue=JSValue @ 0x00007ffee8a32148, args=0x00007ffee8a323d0, returnedException=0x00007ffee8a323f8) at CallData.cpp:48
    frame #24: 0x000000011f77496d JavaScriptCore`JSC::profiledCall(exec=0x00000001248dc058, reason=Other, functionObject=JSValue @ 0x00007ffee8a321e0, callType=JS, callData=0x00007ffee8a32500, thisValue=JSValue @ 0x00007ffee8a321d8, args=0x00007ffee8a323d0, returnedException=0x00007ffee8a323f8) at CallData.cpp:67
    frame #25: 0x00000001123689bb WebCore`WebCore::JSMainThreadExecState::profiledCall(exec=0x00000001248dc058, reason=Other, functionObject=JSValue @ 0x00007ffee8a32270, callType=JS, callData=0x00007ffee8a32500, thisValue=JSValue @ 0x00007ffee8a32268, args=0x00007ffee8a323d0, returnedException=0x00007ffee8a323f8) at JSMainThreadExecState.h:72
    frame #26: 0x00000001123a69c2 WebCore`WebCore::JSEventListener::handleEvent(this=0x0000000123fb3d90, scriptExecutionContext=0x0000000123f65000, event=0x0000000125ff0800) at JSEventListener.cpp:169
    frame #27: 0x0000000112915792 WebCore`WebCore::EventTarget::fireEventListeners(this=0x0000000123fe2e80, event=0x0000000125ff0800, listeners={ size = 1, capacity = 0 }) at EventTarget.cpp:290
    frame #28: 0x000000011290cc6a WebCore`WebCore::EventTarget::fireEventListeners(this=0x0000000123fe2e80, event=0x0000000125ff0800) at EventTarget.cpp:232
    frame #29: 0x0000000112970524 WebCore`WebCore::Node::handleLocalEvents(this=0x0000000123fe2e80, event=0x0000000125ff0800) at Node.cpp:2317
    frame #30: 0x000000011290cafd WebCore`WebCore::EventContext::handleLocalEvents(this=0x0000000123f0bfe0, event=0x0000000125ff0800) const at EventContext.cpp:54
    frame #31: 0x000000011290d836 WebCore`WebCore::dispatchEventInDOM(event=0x0000000125ff0800, path=0x00007ffee8a328f0) at EventDispatcher.cpp:91
    frame #32: 0x000000011290d361 WebCore`WebCore::EventDispatcher::dispatchEvent(node=0x0000000123fe2e80, event=0x0000000125ff0800) at EventDispatcher.cpp:159
    frame #33: 0x000000011297057d WebCore`WebCore::Node::dispatchEvent(this=0x0000000123fe2e80, event=0x0000000125ff0800) at Node.cpp:2327
    frame #34: 0x000000011299ecb4 WebCore`WebCore::ScopedEventQueue::dispatchEvent(this=0x00000001154e21b0, event=0x0000000125ff0800) const at ScopedEventQueue.cpp:57
    frame #35: 0x000000011299ec5f WebCore`WebCore::ScopedEventQueue::enqueueEvent(this=0x00000001154e21b0, event=0x00007ffee8a32ae0) at ScopedEventQueue.cpp:52
    frame #36: 0x000000011290d029 WebCore`WebCore::EventDispatcher::dispatchScopedEvent(node=0x0000000123fe2e80, event=0x0000000125ff0800) at EventDispatcher.cpp:52
    frame #37: 0x000000011297054d WebCore`WebCore::Node::dispatchScopedEvent(this=0x0000000123fe2e80, event=0x0000000125ff0800) at Node.cpp:2322
    frame #38: 0x00000001129706d5 WebCore`WebCore::Node::dispatchSubtreeModifiedEvent(this=0x0000000123fe2e80) at Node.cpp:2343
    frame #39: 0x00000001128f32a8 WebCore`WebCore::Element::didAddAttribute(this=0x0000000123fe2e80, name=0x00000001154f0cc8, value={ length = 6, contents = &apos;foobar&apos; }) at Element.cpp:3325
    frame #40: 0x00000001128f31b3 WebCore`WebCore::Element::addAttributeInternal(this=0x0000000123fe2e80, name=0x00000001154f0cc8, value={ length = 6, contents = &apos;foobar&apos; }, inSynchronizationOfLazyAttribute=NotInSynchronizationOfLazyAttribute) at Element.cpp:2354
    frame #41: 0x00000001128ec371 WebCore`WebCore::Element::setAttributeInternal(this=0x0000000123fe2e80, index=4294967295, name=0x00000001154f0cc8, newValue={ length = 6, contents = &apos;foobar&apos; }, inSynchronizationOfLazyAttribute=NotInSynchronizationOfLazyAttribute) at Element.cpp:1314
    frame #42: 0x00000001128ec515 WebCore`WebCore::Element::setAttributeWithoutSynchronization(this=0x0000000123fe2e80, name=0x00000001154f0cc8, value={ length = 6, contents = &apos;foobar&apos; }) at Element.cpp:1296
    frame #43: 0x0000000112bc56a3 WebCore`WebCore::HTMLInputElement::updateType(this=0x0000000123fe2e80) at HTMLInputElement.cpp:509
    frame #44: 0x0000000112bc6b49 WebCore`WebCore::HTMLInputElement::parseAttribute(this=0x0000000123fe2e80, name=0x00000001154f0c88, value={ length = 6, contents = &apos;button&apos; }) at HTMLInputElement.cpp:694
    frame #45: 0x00000001128ec927 WebCore`WebCore::Element::attributeChanged(this=0x0000000123fe2e80, name=0x00000001154f0c88, oldValue={ length = 0, contents = &apos;&apos; }, newValue={ length = 6, contents = &apos;button&apos; }, (null)=ModifiedDirectly) at Element.cpp:1377
    frame #46: 0x00000001129ec5ef WebCore`WebCore::StyledElement::attributeChanged(this=0x0000000123fe2e80, name=0x00000001154f0c88, oldValue={ length = 0, contents = &apos;&apos; }, newValue={ length = 6, contents = &apos;button&apos; }, reason=ModifiedDirectly) at StyledElement.cpp:90
    frame #47: 0x00000001128f326f WebCore`WebCore::Element::didAddAttribute(this=0x0000000123fe2e80, name=0x00000001154f0c88, value={ length = 6, contents = &apos;button&apos; }) at Element.cpp:3323
    frame #48: 0x00000001128f31b3 WebCore`WebCore::Element::addAttributeInternal(this=0x0000000123fe2e80, name=0x00000001154f0c88, value={ length = 6, contents = &apos;button&apos; }, inSynchronizationOfLazyAttribute=NotInSynchronizationOfLazyAttribute) at Element.cpp:2354
    frame #49: 0x00000001128ec371 WebCore`WebCore::Element::setAttributeInternal(this=0x0000000123fe2e80, index=4294967295, name=0x00000001154f0c88, newValue={ length = 6, contents = &apos;button&apos; }, inSynchronizationOfLazyAttribute=NotInSynchronizationOfLazyAttribute) at Element.cpp:1314
    frame #50: 0x00000001128ec515 WebCore`WebCore::Element::setAttributeWithoutSynchronization(this=0x0000000123fe2e80, name=0x00000001154f0c88, value={ length = 6, contents = &apos;button&apos; }) at Element.cpp:1296
    frame #51: 0x0000000112bc50d7 WebCore`WebCore::HTMLInputElement::setType(this=0x0000000123fe2e80, type={ length = 6, contents = &apos;button&apos; }) at HTMLInputElement.cpp:480
    frame #52: 0x00000001113f9089 WebCore`WebCore::setJSHTMLInputElementTypeSetter(this=0x00007ffee8a33738)::&apos;lambda&apos;()::operator()() const at JSHTMLInputElement.cpp:1318
    frame #53: 0x00000001113f903d WebCore`std::__1::enable_if&lt;std::is_same&lt;void, decltype(fp1())&gt;::value, void&gt;::type WebCore::AttributeSetter::call&lt;WebCore::setJSHTMLInputElementTypeSetter((null)=0x00007ffee8a34140, (null)=0x00007ffee8a33808, functor=0x00007ffee8a33738)::&apos;lambda&apos;()&gt;(JSC::ExecState&amp;, JSC::ThrowScope&amp;, WebCore::setJSHTMLInputElementTypeSetter(JSC::ExecState&amp;, WebCore::JSHTMLInputElement&amp;, JSC::JSValue, JSC::ThrowScope&amp;)::&apos;lambda&apos;()&amp;&amp;) at JSDOMAttribute.h:97
    frame #54: 0x00000001113f8ff0 WebCore`WebCore::setJSHTMLInputElementTypeSetter(state=0x00007ffee8a34140, thisObject=0x0000000124804000, value=JSValue @ 0x00007ffee8a33780, throwScope=0x00007ffee8a33808) at JSHTMLInputElement.cpp:1317
    frame #55: 0x00000001113e59d8 WebCore`bool WebCore::IDLAttribute&lt;WebCore::JSHTMLInputElement&gt;::set&lt;&amp;(state=0x00007ffee8a34140, thisValue=4907352064, encodedValue=4907647072, attributeName=&quot;type&quot;)), (WebCore::CastedThisErrorBehavior)0&gt;(JSC::ExecState&amp;, long long, long long, char const*) at JSDOMAttribute.h:50
    frame #56: 0x00000001113e589c WebCore`WebCore::setJSHTMLInputElementType(state=0x00007ffee8a34140, thisValue=4907352064, encodedValue=4907647072) at JSHTMLInputElement.cpp:1325
    frame #57: 0x000000011f7c713d JavaScriptCore`JSC::callCustomSetter(exec=0x00007ffee8a34140, setter=(WebCore`WebCore::setJSHTMLInputElementType(JSC::ExecState*, long long, long long) at JSHTMLInputElement.cpp:1324), isAccessor=true, thisValue=JSValue @ 0x00007ffee8a338f0, value=JSValue @ 0x00007ffee8a338e8)(JSC::ExecState*, long long, long long), bool, JSC::JSValue, JSC::JSValue) at CustomGetterSetter.cpp:41
    frame #58: 0x000000011f7c7213 JavaScriptCore`JSC::callCustomSetter(exec=0x00007ffee8a34140, customGetterSetter=JSValue @ 0x00007ffee8a33960, isAccessor=true, base=0x0000000124838060, thisValue=JSValue @ 0x00007ffee8a33958, value=JSValue @ 0x00007ffee8a33950) at CustomGetterSetter.cpp:58
    frame #59: 0x000000011f8c7550 JavaScriptCore`JSC::JSObject::putInlineSlow(this=0x0000000124804000, exec=0x00007ffee8a34140, propertyName=PropertyName @ 0x00007ffee8a33bb0, value=JSValue @ 0x00007ffee8a33ba8, slot=0x00007ffee8a33fe8) at JSObject.cpp:794
    frame #60: 0x000000011f0775a0 JavaScriptCore`JSC::JSObject::putInlineForJSObject(cell=0x0000000124804000, exec=0x00007ffee8a34140, propertyName=PropertyName @ 0x00007ffee8a33d40, value=JSValue @ 0x00007ffee8a33d38, slot=0x00007ffee8a33fe8) at JSObjectInlines.h:229
    frame #61: 0x000000011f0770c8 JavaScriptCore`JSC::JSCell::putInline(this=0x0000000124804000, exec=0x00007ffee8a34140, propertyName=PropertyName @ 0x00007ffee8a33db0, value=JSValue @ 0x00007ffee8a33da8, slot=0x00007ffee8a33fe8) at JSCellInlines.h:375
    frame #62: 0x000000011f078933 JavaScriptCore`JSC::JSValue::putInline(this=0x00007ffee8a34010, exec=0x00007ffee8a34140, propertyName=PropertyName @ 0x00007ffee8a33e20, value=JSValue @ 0x00007ffee8a33e18, slot=0x00007ffee8a33fe8) at JSCJSValueInlines.h:911
    frame #63: 0x000000011f5d0b62 JavaScriptCore`::llint_slow_path_put_by_id(exec=0x00007ffee8a34140, pc=0x00000001244fb150) at LLIntSlowPaths.cpp:749
    frame #64: 0x000000011e7dd1b1 JavaScriptCore`llint_entry at LowLevelInterpreter64.asm:58
    frame #65: 0x000000011e7d9402 JavaScriptCore`vmEntryToJavaScript at LowLevelInterpreter64.asm:257
    frame #66: 0x000000011f565b8e JavaScriptCore`JSC::JITCode::execute(this=0x0000000123f26758, vm=0x0000000124500000, protoCallFrame=0x00007ffee8a34448) at JITCode.cpp:81
    frame #67: 0x000000011f50a7a3 JavaScriptCore`JSC::Interpreter::executeProgram(this=0x0000000123ffc338, source=0x00007ffee8a35cf8, callFrame=0x00000001248dc058, thisObj=0x00000001248f4000) at Interpreter.cpp:969
    frame #68: 0x000000011f7bf127 JavaScriptCore`JSC::evaluate(exec=0x00000001248dc058, source=0x00007ffee8a35cf8, thisValue=JSValue @ 0x00007ffee8a359c0, returnedException=0x00007ffee8a35af8) at Completion.cpp:103
    frame #69: 0x000000011f7bf2b0 JavaScriptCore`JSC::profiledEvaluate(exec=0x00000001248dc058, reason=Other, source=0x00007ffee8a35cf8, thisValue=JSValue @ 0x00007ffee8a35a30, returnedException=0x00007ffee8a35af8) at Completion.cpp:118
    frame #70: 0x00000001123e338b WebCore`WebCore::JSMainThreadExecState::profiledEvaluate(exec=0x00000001248dc058, reason=Other, source=0x00007ffee8a35cf8, thisValue=JSValue @ 0x00007ffee8a35a90, returnedException=0x00007ffee8a35af8) at JSMainThreadExecState.h:78
    frame #71: 0x00000001123e3178 WebCore`WebCore::ScriptController::evaluateInWorld(this=0x0000000123ff2f68, sourceCode=0x00007ffee8a35cf0, world=0x0000000123feb208, exceptionDetails=0x0000000000000000) at ScriptController.cpp:177
    frame #72: 0x00000001123e346d WebCore`WebCore::ScriptController::evaluate(this=0x0000000123ff2f68, sourceCode=0x00007ffee8a35cf0, exceptionDetails=0x0000000000000000) at ScriptController.cpp:193
    frame #73: 0x00000001129a150d WebCore`WebCore::ScriptElement::executeClassicScript(this=0x0000000123ff95e8, sourceCode=0x00007ffee8a35cf0) at ScriptElement.cpp:387
    frame #74: 0x000000011299f9e9 WebCore`WebCore::ScriptElement::prepareScript(this=0x0000000123ff95e8, scriptStartPosition=0x00007ffee8a36000, supportLegacyTypes=DisallowLegacyTypeInTypeAttribute) at ScriptElement.cpp:267
    frame #75: 0x0000000112d29900 WebCore`WebCore::HTMLScriptRunner::runScript(this=0x0000000123ff7730, scriptElement=0x0000000123ff95e8, scriptStartPosition=0x00007ffee8a36000) at HTMLScriptRunner.cpp:250
    frame #76: 0x0000000112d2976f WebCore`WebCore::HTMLScriptRunner::execute(this=0x0000000123ff7730, element=0x00007ffee8a35ff0, scriptStartPosition=0x00007ffee8a36000) at HTMLScriptRunner.cpp:140
    frame #77: 0x0000000112d0bff5 WebCore`WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder(this=0x0000000123f64000) at HTMLDocumentParser.cpp:212
    frame #78: 0x0000000112d0c4b3 WebCore`WebCore::HTMLDocumentParser::pumpTokenizerLoop(this=0x0000000123f64000, mode=AllowYield, parsingFragment=false, session=0x00007ffee8a363e8) at HTMLDocumentParser.cpp:231
    frame #79: 0x0000000112d0b1f8 WebCore`WebCore::HTMLDocumentParser::pumpTokenizer(this=0x0000000123f64000, mode=AllowYield) at HTMLDocumentParser.cpp:281
    frame #80: 0x0000000112d0ad6b WebCore`WebCore::HTMLDocumentParser::pumpTokenizerIfPossible(this=0x0000000123f64000, mode=AllowYield) at HTMLDocumentParser.cpp:172
    frame #81: 0x0000000112d0d7aa WebCore`WebCore::HTMLDocumentParser::append(this=0x0000000123f64000, inputSource=0x00007ffee8a36908) at HTMLDocumentParser.cpp:395
    frame #82: 0x000000011282b182 WebCore`WebCore::DecodedDataDocumentParser::flush(this=0x0000000123f64000, writer=0x00000001246f36b0) at DecodedDataDocumentParser.cpp:60
    frame #83: 0x0000000112f41e7c WebCore`WebCore::DocumentWriter::end(this=0x00000001246f36b0) at DocumentWriter.cpp:274
    frame #84: 0x0000000112f0554f WebCore`WebCore::DocumentLoader::finishedLoading(this=0x00000001246f3600) at DocumentLoader.cpp:429
    frame #85: 0x0000000112f052ed WebCore`WebCore::DocumentLoader::notifyFinished(this=0x00000001246f3600, resource=0x0000000123f69000) at DocumentLoader.cpp:379
    frame #86: 0x0000000112f056dc WebCore`non-virtual thunk to WebCore::DocumentLoader::notifyFinished(this=0x00000001246f3600, resource=0x0000000123f69000) at DocumentLoader.cpp:0
    frame #87: 0x000000011302f52d WebCore`WebCore::CachedResource::checkNotify(this=0x0000000123f69000) at CachedResource.cpp:347
    frame #88: 0x0000000113021ee1 WebCore`WebCore::CachedResource::finishLoading(this=0x0000000123f69000, (null)=0x0000000123fa4340) at CachedResource.cpp:363
    frame #89: 0x000000011302c396 WebCore`WebCore::CachedRawResource::finishLoading(this=0x0000000123f69000, data=0x0000000123fa4340) at CachedRawResource.cpp:117
    frame #90: 0x0000000112fc6429 WebCore`WebCore::SubresourceLoader::didFinishLoading(this=0x0000000123fb9000, networkLoadMetrics=0x00007ffee8a36d60) at SubresourceLoader.cpp:619
    frame #91: 0x0000000112fb2cf5 WebCore`WebCore::ResourceLoader::didFinishLoading(this=0x0000000123fb9000, (null)=0x0000000123f6d348) at ResourceLoader.cpp:680
    frame #92: 0x00000001116eb9d4 WebCore`-[WebCoreResourceHandleAsOperationQueueDelegate connectionDidFinishLoading:]::$_7::operator(this=0x0000000123f66008)() at WebCoreResourceHandleAsOperationQueueDelegate.mm:320
    frame #93: 0x00000001116eb8b9 WebCore`WTF::Function&lt;void ()&gt;::CallableWrapper&lt;-[WebCoreResourceHandleAsOperationQueueDelegate connectionDidFinishLoading:]::$_7&gt;::call(this=0x0000000123f66000) at Function.h:101
    frame #94: 0x000000011fcd029b JavaScriptCore`WTF::Function&lt;void ()&gt;::operator(this=0x00007ffee8a36f80)() const at Function.h:56
    frame #95: 0x000000011fcf346b JavaScriptCore`WTF::dispatchFunctionsFromMainThread() at MainThread.cpp:129
    frame #96: 0x000000011fcf60f5 JavaScriptCore`::-[JSWTFMainThreadCaller call](self=0x00007fbee3026e40, _cmd=&quot;call&quot;) at MainThreadMac.mm:55
    frame #97: 0x00007fff4b1c42b5 Foundation`__NSThreadPerformPerform + 334
    frame #98: 0x00007fff4909ba61 CoreFoundation`__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
    frame #99: 0x00007fff4915547c CoreFoundation`__CFRunLoopDoSource0 + 108
    frame #100: 0x00007fff4907e4c0 CoreFoundation`__CFRunLoopDoSources0 + 208
    frame #101: 0x00007fff4907d93d CoreFoundation`__CFRunLoopRun + 1293
    frame #102: 0x00007fff4907d1a3 CoreFoundation`CFRunLoopRunSpecific + 483
    frame #103: 0x00007fff48366d66 HIToolbox`RunCurrentEventLoopInMode + 286
    frame #104: 0x00007fff48366ad6 HIToolbox`ReceiveNextEventCommon + 613
    frame #105: 0x00007fff48366854 HIToolbox`_BlockUntilNextEventMatchingListInModeWithFilter + 64
    frame #106: 0x00007fff465ebb63 AppKit`_DPSNextEvent + 2085
    frame #107: 0x00007fff46d81eb0 AppKit`-[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 3044
    frame #108: 0x00007fff465e0975 AppKit`-[NSApplication run] + 764
    frame #109: 0x00007fff465afb4e AppKit`NSApplicationMain + 804
    frame #110: 0x00000001071cc119 MiniBrowser`main(argc=1, argv=0x00007ffee8a38780) at main.m:32
    frame #111: 0x00007fff7153c015 libdyld.dylib`start + 1</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1404180</commentid>
    <comment_count>1</comment_count>
    <who name="alan">zalan</who>
    <bug_when>2018-03-06 15:11:25 -0800</bug_when>
    <thetext>&lt;rdar://problem/38085397&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1404190</commentid>
    <comment_count>2</comment_count>
      <attachid>335151</attachid>
    <who name="alan">zalan</who>
    <bug_when>2018-03-06 15:27:57 -0800</bug_when>
    <thetext>Created attachment 335151
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1404191</commentid>
    <comment_count>3</comment_count>
    <who name="alan">zalan</who>
    <bug_when>2018-03-06 15:28:39 -0800</bug_when>
    <thetext>Not sure if changing the order here has any side effect.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1404579</commentid>
    <comment_count>4</comment_count>
      <attachid>335151</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2018-03-07 19:51:37 -0800</bug_when>
    <thetext>Comment on attachment 335151
Patch

Clearing flags on attachment: 335151

Committed r229393: &lt;https://trac.webkit.org/changeset/229393&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1404580</commentid>
    <comment_count>5</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2018-03-07 19:51:39 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>335151</attachid>
            <date>2018-03-06 15:27:57 -0800</date>
            <delta_ts>2018-03-07 19:51:37 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-183385-20180306152756.patch</filename>
            <type>text/plain</type>
            <size>4956</size>
            <attacher name="alan">zalan</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjI5Mjg4CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
      

    </bug>

</bugzilla>