19030 2008-05-13 08:34:27 -0700 Assertion failure in CSSGradientValue::image with -webkit-gradient as body's background 2008-05-13 08:40:38 -0700 1 1 1 Unclassified WebKit CSS 528+ (Nightly build) All All RESOLVED DUPLICATE 18445 InRadar P2 Normal --- 1 aroben webkit-unassigned hyatt mitz oldest_to_newest 80268 0 aroben 2008-05-13 08:34:27 -0700 I'm hitting an assertion failure when loading a page that has a -webkit-gradient as the background of the body element. 80269 1 21109 aroben 2008-05-13 08:34:46 -0700 Created attachment 21109 testcase (asserts in debug build) 80270 2 aroben 2008-05-13 08:36:07 -0700 Program received signal EXC_BAD_ACCESS, Could not access memory. Reason: KERN_INVALID_ADDRESS at address: 0xbbadbeef 0x02cf6f6c in WebCore::CSSGradientValue::image (this=0x4d9bf50, renderer=0x4dadf7c, size=@0xbfffc65c) at /Users/aroben/dev/WebKit/OpenSource/WebCore/css/CSSGradientValue.cpp:109 109 ASSERT(m_clients.contains(renderer)); (gdb) bt #0 0x02cf6f6c in WebCore::CSSGradientValue::image (this=0x4d9bf50, renderer=0x4dadf7c, size=@0xbfffc65c) at /Users/aroben/dev/WebKit/OpenSource/WebCore/css/CSSGradientValue.cpp:109 #1 0x02a5d5c4 in WebCore::StyleGeneratedImage::image (this=0x4db43c0, renderer=0x4dadf7c, size=@0xbfffc65c) at /Users/aroben/dev/WebKit/OpenSource/WebCore/rendering/RenderStyle.cpp:221 #2 0x02a012df in WebCore::RenderBox::paintFillLayerExtended (this=0x4dadf7c, paintInfo=@0xbfffcafc, c=@0xbfffc878, bgLayer=0x4d9d648, clipY=0, clipH=992, tx=0, ty=0, w=1033, h=992, box=0x0, op=WebCore::CompositeSourceOver) at /Users/aroben/dev/WebKit/OpenSource/WebCore/rendering/RenderBox.cpp:825 #3 0x029f6e8e in WebCore::RenderBox::paintFillLayer (this=0x4dadf7c, paintInfo=@0xbfffcafc, c=@0xbfffc878, fillLayer=0x4d9d648, clipY=0, clipH=992, tx=0, ty=0, width=1033, height=992, op=WebCore::CompositeSourceOver) at /Users/aroben/dev/WebKit/OpenSource/WebCore/rendering/RenderBox.cpp:497 #4 0x029f6f4c in WebCore::RenderBox::paintFillLayers (this=0x4dadf7c, paintInfo=@0xbfffcafc, c=@0xbfffc878, fillLayer=0x4d9d648, clipY=0, clipH=992, tx=0, ty=0, width=1033, height=992, op=WebCore::CompositeSourceOver) at /Users/aroben/dev/WebKit/OpenSource/WebCore/rendering/RenderBox.cpp:491 #5 0x029fa12f in WebCore::RenderBox::paintRootBoxDecorations (this=0x4dadf7c, paintInfo=@0xbfffcafc, tx=0, ty=0) at /Users/aroben/dev/WebKit/OpenSource/WebCore/rendering/RenderBox.cpp:362 #6 0x029fa225 in WebCore::RenderBox::paintBoxDecorations (this=0x4dadf7c, paintInfo=@0xbfffcafc, tx=0, ty=0) at /Users/aroben/dev/WebKit/OpenSource/WebCore/rendering/RenderBox.cpp:374 #7 0x029ea21c in WebCore::RenderBlock::paintObject (this=0x4dadf7c, paintInfo=@0xbfffcafc, tx=0, ty=0) at /Users/aroben/dev/WebKit/OpenSource/WebCore/rendering/RenderBlock.cpp:1609 #8 0x029dc43c in WebCore::RenderBlock::paint (this=0x4dadf7c, paintInfo=@0xbfffcafc, tx=0, ty=0) at /Users/aroben/dev/WebKit/OpenSource/WebCore/rendering/RenderBlock.cpp:1457 #9 0x02a2646d in WebCore::RenderLayer::paintLayer (this=0x1b834ccc, rootLayer=0x1b8836cc, p=0xbfffce04, paintDirtyRect=@0xbfffce0c, haveTransparency=false, paintRestriction=WebCore::PaintRestrictionNone, paintingRoot=0x0, appliedTransform=false) at /Users/aroben/dev/WebKit/OpenSource/WebCore/rendering/RenderLayer.cpp:1604 #10 0x02a2689a in WebCore::RenderLayer::paintLayer (this=0x1b8836cc, rootLayer=0x1b8836cc, p=0xbfffce04, paintDirtyRect=@0xbfffce0c, haveTransparency=false, paintRestriction=WebCore::PaintRestrictionNone, paintingRoot=0x0, appliedTransform=false) at /Users/aroben/dev/WebKit/OpenSource/WebCore/rendering/RenderLayer.cpp:1661 #11 0x02a26a58 in WebCore::RenderLayer::paint (this=0x1b8836cc, p=0xbfffce04, damageRect=@0xbfffce0c, paintRestriction=WebCore::PaintRestrictionNone, paintingRoot=0x0) at /Users/aroben/dev/WebKit/OpenSource/WebCore/rendering/RenderLayer.cpp:1478 #12 0x02791541 in WebCore::Frame::paint (this=0x9218c0, p=0xbfffce04, rect=@0xbfffce0c) at /Users/aroben/dev/WebKit/OpenSource/WebCore/page/Frame.cpp:1366 #13 0x003cc760 in -[WebFrame(WebInternal) _drawRect:] (self=0x1b85e400, _cmd=0x94880054, rect={origin = {x = 0, y = 0}, size = {width = 1033, height = 992}}) at /Users/aroben/dev/WebKit/OpenSource/WebKit/mac/WebView/WebFrame.mm:570 #14 0x003ead65 in -[WebHTMLView drawSingleRect:] (self=0x91fed0, _cmd=0x2eb3f47, rect={origin = {x = 0, y = 0}, size = {width = 1033, height = 992}}) at /Users/aroben/dev/WebKit/OpenSource/WebKit/mac/WebView/WebHTMLView.mm:2837 #15 0x003eb0f3 in -[WebHTMLView drawRect:] (self=0x91fed0, _cmd=0x948a8630, rect={origin = {x = 0, y = 0}, size = {width = 1033, height = 992}}) at /Users/aroben/dev/WebKit/OpenSource/WebKit/mac/WebView/WebHTMLView.mm:2897 80271 3 aroben 2008-05-13 08:36:46 -0700 <rdar://problem/5931174> 80272 4 mitz 2008-05-13 08:40:38 -0700 *** This bug has been marked as a duplicate of 18445 *** 21109 2008-05-13 08:34:46 -0700 2008-05-13 08:34:46 -0700 testcase (asserts in debug build) gradient.html text/html 128 aroben PHN0eWxlPgogICAgYm9keSB7CiAgICAgICAgYmFja2dyb3VuZDogLXdlYmtpdC1ncmFkaWVudChs aW5lYXIsIGxlZnQgdG9wLCBsZWZ0IGJvdHRvbSwgZnJvbShibGFjayksIHRvKHdoaXRlKSk7CiAg ICB9Cjwvc3R5bGU+Cgo=