<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>20881</bug_id>
          
          <creation_ts>2008-09-16 09:04:05 -0700</creation_ts>
          <short_desc>change-one-anim.html test causes crash in DRT</short_desc>
          <delta_ts>2008-09-16 13:16:29 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>CSS</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Mac</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Chris Marrin">cmarrin</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>dino</cc>
    
    <cc>simon.fraser</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>91363</commentid>
    <comment_count>0</comment_count>
    <who name="Chris Marrin">cmarrin</who>
    <bug_when>2008-09-16 09:04:05 -0700</bug_when>
    <thetext>This test calls layoutTestController.notifyDone() twice. Simon and I tracked this down as the source of the crashes we have been seeing in DRT.  It looks like the crash is happening because notifyDone is being called after the layoutTestController has been destroyed, causing memory corruption. Soon thereafter some random memory smasher happens.

Simon is looking at fixing the norifyDone problem. I have also fixed the test to avoid the second call to notifyDone, and the crash goes away. Patch attached.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>91364</commentid>
    <comment_count>1</comment_count>
      <attachid>23474</attachid>
    <who name="Chris Marrin">cmarrin</who>
    <bug_when>2008-09-16 09:07:50 -0700</bug_when>
    <thetext>Created attachment 23474
Patch to fix bug</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>91365</commentid>
    <comment_count>2</comment_count>
    <who name="Simon Fraser (smfr)">simon.fraser</who>
    <bug_when>2008-09-16 09:09:55 -0700</bug_when>
    <thetext>Change looks good to me.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>91372</commentid>
    <comment_count>3</comment_count>
      <attachid>23474</attachid>
    <who name="Darin Adler">darin</who>
    <bug_when>2008-09-16 09:47:25 -0700</bug_when>
    <thetext>Comment on attachment 23474
Patch to fix bug

r=me

It would be slightly better if the change log explained what was wrong and what the fix accomplishes.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>91425</commentid>
    <comment_count>4</comment_count>
    <who name="Simon Fraser (smfr)">simon.fraser</who>
    <bug_when>2008-09-16 13:16:29 -0700</bug_when>
    <thetext>Committing to http://svn.webkit.org/repository/webkit/trunk ...
	M	LayoutTests/ChangeLog
	M	LayoutTests/animations/change-one-anim.html
	M	LayoutTests/svg/custom/gradient-attr-update.svg
Committed r36520
</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>23474</attachid>
            <date>2008-09-16 09:07:50 -0700</date>
            <delta_ts>2008-09-16 09:47:25 -0700</delta_ts>
            <desc>Patch to fix bug</desc>
            <filename>20881.patch</filename>
            <type>text/plain</type>
            <size>1051</size>
            <attacher name="Chris Marrin">cmarrin</attacher>
            
              <data encoding="base64">SW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="10490"
          type_id="1"
          status="+"
          setter="darin"
    />
          </attachment>
      

    </bug>

</bugzilla>