20860 2008-09-15 14:26:44 -0700 REGRESSION: Crash in RenderLayer::hasVisibleContent() loading wavy.com 2008-09-15 23:39:59 -0700 1 1 1 Unclassified WebKit Layout and Rendering 528+ (Nightly build) Mac OS X 10.5 RESOLVED FIXED NeedsReduction, Regression P1 Normal --- 1 doggeral webkit-unassigned mitz oldest_to_newest 91237 0 doggeral 2008-09-15 14:26:44 -0700 when trying to go to the following local news link on my earthlink start page, http://www.wavy.com/Global/story.asp?S=9010429&nav=menu45_2_5, webkit crashes. It will do it every time. 91278 1 dev+webkit 2008-09-15 17:18:34 -0700 Confirmed with r36447: Thread 0 Crashed: 0 com.apple.WebCore 0x036dbb7d WebCore::RenderLayer::hasVisibleContent() const + 9 (RenderLayer.h:272) 1 com.apple.WebCore 0x036e5c23 WebCore::RenderBox::absoluteClippedOverflowRect() + 49 (RenderBox.cpp:1079) 2 com.apple.WebKit 0x001c8c1e -[WebFrame(WebInternal) _getVisibleRect:] + 180 (WebFrame.mm:617) 3 com.apple.WebKit 0x001dc9b8 -[WebFrameView visibleRect] + 178 (WebFrameView.mm:509) 4 com.apple.AppKit 0x92442681 -[NSView(NSInternal) _setWindowNeedsDisplayInViewsDrawableRect] + 93 5 com.apple.AppKit 0x9244b475 -[NSView _removeSubview:] + 278 6 com.apple.AppKit 0x9244110d -[NSView _setSuperview:] + 667 7 com.apple.AppKit 0x9244acc2 -[NSView removeFromSuperview] + 338 8 com.apple.WebCore 0x03899909 WebCore::safeRemoveFromSuperview(NSView*) + 295 (WidgetMac.mm:77) 9 com.apple.WebCore 0x0389b4dd WebCore::Widget::removeFromSuperview() + 225 (WidgetMac.mm:325) 10 com.apple.WebCore 0x03851c75 WebCore::ScrollView::removeChild(WebCore::Widget*) + 17 (ScrollViewMac.mm:227) 91323 2 23462 mitz 2008-09-15 23:23:19 -0700 Created attachment 23462 Check the correct object for having layout before asking a layout-y question 91326 3 23462 hyatt 2008-09-15 23:38:11 -0700 Comment on attachment 23462 Check the correct object for having layout before asking a layout-y question r=me 91327 4 mitz 2008-09-15 23:39:59 -0700 Fixed in <http://trac.webkit.org/changeset/36486>. 23462 2008-09-15 23:23:19 -0700 2008-09-15 23:38:11 -0700 Check the correct object for having layout before asking a layout-y question 20860_r1.diff text/plain 1368 mitz SW5kZXg6IFdlYktpdC9tYWMvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYktpdC9tYWMvQ2hh bmdlTG9nCShyZXZpc2lvbiAzNjQ4NSkKKysrIFdlYktpdC9tYWMvQ2hhbmdlTG9nCSh3b3JraW5n IGNvcHkpCkBAIC0xLDMgKzEsMTUgQEAKKzIwMDgtMDktMTUgIERhbiBCZXJuc3RlaW4gIDxtaXR6 QGFwcGxlLmNvbT4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAg ICAgICAtIGZpeCBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MjA4NjAK KyAgICAgICAgICBSRUdSRVNTSU9OOiBDcmFzaCBpbiBSZW5kZXJMYXllcjo6aGFzVmlzaWJsZUNv bnRlbnQoKSBsb2FkaW5nIHdhdnkuY29tCisKKyAgICAgICAgKiBXZWJWaWV3L1dlYkZyYW1lLm1t OgorICAgICAgICAoLVtXZWJGcmFtZSBfZ2V0VmlzaWJsZVJlY3Q6XSk6IENoYW5nZWQgdG8gY2hl Y2sgaWYgdGhlIFJlbmRlclBhcnQgaGFzCisgICAgICAgIGxheW91dCBiZWZvcmUgYWNjZXNzaW5n IGl0LCBpbnN0ZWFkIG9mIGNoZWNraW5nIGlmIHRoZSBmcmFtZSBpbnNpZGUgaXQKKyAgICAgICAg aGFzIGxheW91dC4KKwogMjAwOC0wOS0xNSAgQ2hyaXMgRmxlaXphY2ggIDxjZmxlaXphY2hAYXBw bGUuY29tPgogCiAgICAgICAgIFJldmlld2VkIGJ5IERhcmluIEFkbGVyLCBCZXRoIERha2luCklu ZGV4OiBXZWJLaXQvbWFjL1dlYlZpZXcvV2ViRnJhbWUubW0KPT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gV2ViS2l0 L21hYy9XZWJWaWV3L1dlYkZyYW1lLm1tCShyZXZpc2lvbiAzNjQ3NikKKysrIFdlYktpdC9tYWMv V2ViVmlldy9XZWJGcmFtZS5tbQkod29ya2luZyBjb3B5KQpAQCAtNjEwLDEwICs2MTAsOSBAQCBz dGF0aWMgaW5saW5lIFdlYkRhdGFTb3VyY2UgKmRhdGFTb3VyY2UoCiAtIChCT09MKV9nZXRWaXNp YmxlUmVjdDooTlNSZWN0KilyZWN0OwogewogICAgIEFTU0VSVF9BUkcocmVjdCwgcmVjdCk7Ci0g ICAgaWYgKFtzZWxmIF9uZWVkc0xheW91dF0pCi0gICAgICAgIHJldHVybiBOTzsKLQogICAgIGlm IChSZW5kZXJQYXJ0KiBvd25lclJlbmRlcmVyID0gX3ByaXZhdGUtPmNvcmVGcmFtZS0+b3duZXJS ZW5kZXJlcigpKSB7CisgICAgICAgIGlmIChvd25lclJlbmRlcmVyLT5uZWVkc0xheW91dCgpKQor ICAgICAgICAgICAgcmV0dXJuIE5POwogICAgICAgICAqcmVjdCA9IG93bmVyUmVuZGVyZXItPmFi c29sdXRlQ2xpcHBlZE92ZXJmbG93UmVjdCgpOwogICAgICAgICByZXR1cm4gWUVTOwogICAgIH0K