<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>222670</bug_id>
          
          <creation_ts>2021-03-03 11:22:54 -0800</creation_ts>
          <short_desc>Crash in RenderListItem::computeMarkerStyle</short_desc>
          <delta_ts>2021-03-28 22:52:21 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Layout and Rendering</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Ali Juma">ajuma</reporter>
          <assigned_to name="Rob Buis">rbuis</assigned_to>
          <cc>bfulgham</cc>
    
    <cc>cgarcia</cc>
    
    <cc>ews-feeder</cc>
    
    <cc>fred.wang</cc>
    
    <cc>gpoo</cc>
    
    <cc>graouts</cc>
    
    <cc>product-security</cc>
    
    <cc>rbuis</cc>
    
    <cc>rniwa</cc>
    
    <cc>rohitrao</cc>
    
    <cc>simon.fraser</cc>
    
    <cc>svillar</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>zalan</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1735398</commentid>
    <comment_count>0</comment_count>
      <attachid>422127</attachid>
    <who name="Ali Juma">ajuma</who>
    <bug_when>2021-03-03 11:22:54 -0800</bug_when>
    <thetext>Created attachment 422127
Minimal test case

Filing this as a security bug since it was found using a fuzzer; there&apos;s no disclosure deadline for this bug.

This also reproduces as a crash in STP 121.

Stacks:
=================================================================
==84974==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x000624e180f2 bp 0x7ffeeb5ea370 sp 0x7ffeeb5ea360 T0)
==84974==The signal is caused by a READ memory access.
==84974==Hint: address points to the zero page.
==84974==WARNING: invalid path to external symbolizer!
==84974==WARNING: Failed to use and restart external symbolizer!
    #0 0x624e180f1 in WTF::Ref&lt;WebCore::StyleBoxData, WTF::RawPtrTraits&lt;WebCore::StyleBoxData&gt; &gt;::copyRef() const &amp; (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x551a0f1)
    #1 0x624e180c8 in WTF::DataRef&lt;WebCore::StyleBoxData&gt;::DataRef(WTF::DataRef&lt;WebCore::StyleBoxData&gt; const&amp;) (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x551a0c8)
    #2 0x624e17f1e in WebCore::RenderStyle::RenderStyle(WebCore::RenderStyle const&amp;, WebCore::RenderStyle::CloneTag) (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5519f1e)
    #3 0x624dfab7f in WebCore::RenderStyle::clone(WebCore::RenderStyle const&amp;) (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x54fcb7f)
    #4 0x624c0a903 in WebCore::RenderListItem::computeMarkerStyle() const (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x530c903)
    #5 0x624f11e35 in WebCore::RenderTreeBuilder::List::updateItemMarker(WebCore::RenderListItem&amp;) (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5613e35)
    #6 0x624f03493 in WebCore::RenderTreeBuilder::updateAfterDescendants(WebCore::RenderElement&amp;) (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5605493)
    #7 0x624f229ae in WebCore::RenderTreeUpdater::updateAfterDescendants(WebCore::Element&amp;, WebCore::Style::ElementUpdates const*) (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x56249ae)
    #8 0x624f22937 in WebCore::RenderTreeUpdater::popParent() (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5624937)
    #9 0x624f21ae7 in WebCore::RenderTreeUpdater::popParentsToDepth(unsigned int) (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5623ae7)
    #10 0x624f218f7 in WebCore::RenderTreeUpdater::updateRenderTree(WebCore::ContainerNode&amp;) (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x56238f7)
    #11 0x624f20e3f in WebCore::RenderTreeUpdater::commit(std::__1::unique_ptr&lt;WebCore::Style::Update const, std::__1::default_delete&lt;WebCore::Style::Update const&gt; &gt;) (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5622e3f)
    #12 0x622e1b5d2 in WebCore::Document::updateRenderTree(std::__1::unique_ptr&lt;WebCore::Style::Update const, std::__1::default_delete&lt;WebCore::Style::Update const&gt; &gt;) (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x351d5d2)
    #13 0x622e1bd0a in WebCore::Document::resolveStyle(WebCore::Document::ResolveStyleType) (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x351dd0a)
    #14 0x622e1cbab in WebCore::Document::updateStyleIfNeeded() (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x351ebab)
    #15 0x622e2522b in WebCore::Document::implicitClose() (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x352722b)
    #16 0x623ca1cd2 in WebCore::FrameLoader::checkCompleted() (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x43a3cd2)
    #17 0x623c9e2c0 in WebCore::FrameLoader::finishedParsing() (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x43a02c0)
    #18 0x622e441f2 in WebCore::Document::finishedParsing() (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x35461f2)
    #19 0x6256e9fef in WebCore::XMLDocumentParser::finish() (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5debfef)
    #20 0x623c6f8c0 in WebCore::DocumentWriter::end() (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x43718c0)
    #21 0x623c20a6c in WebCore::DocumentLoader::finishedLoading() (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x4322a6c)
    #22 0x623c203e9 in WebCore::DocumentLoader::notifyFinished(WebCore::CachedResource&amp;, WebCore::NetworkLoadMetrics const&amp;) (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x43223e9)
    #23 0x623dde41f in WebCore::CachedResource::checkNotify(WebCore::NetworkLoadMetrics const&amp;) (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x44e041f)
    #24 0x623dda2db in WebCore::CachedRawResource::finishLoading(WebCore::SharedBuffer*, WebCore::NetworkLoadMetrics const&amp;) (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x44dc2db)
    #25 0x623d559e7 in WebCore::SubresourceLoader::didFinishLoading(WebCore::NetworkLoadMetrics const&amp;) (/Users/ajuma/Downloads/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x44579e7)
    #26 0x612119866 in WebKit::WebResourceLoader::didFinishResourceLoad(WebCore::NetworkLoadMetrics const&amp;) (/Users/ajuma/Downloads/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0x2119866)
    #27 0x6127e7ec6 in void IPC::handleMessage&lt;Messages::WebResourceLoader::DidFinishResourceLoad, WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&amp;)&gt;(IPC::Decoder&amp;, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&amp;)) (/Users/ajuma/Downloads/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0x27e7ec6)
    #28 0x6127e74d3 in WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&amp;, IPC::Decoder&amp;) (/Users/ajuma/Downloads/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0x27e74d3)
    #29 0x6120d9faa in WebKit::NetworkProcessConnection::didReceiveMessage(IPC::Connection&amp;, IPC::Decoder&amp;) (/Users/ajuma/Downloads/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0x20d9faa)
    #30 0x61008c8c9 in IPC::Connection::dispatchMessage(IPC::Decoder&amp;) (/Users/ajuma/Downloads/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0x8c8c9)
    #31 0x61008d326 in IPC::Connection::dispatchMessage(std::__1::unique_ptr&lt;IPC::Decoder, std::__1::default_delete&lt;IPC::Decoder&gt; &gt;) (/Users/ajuma/Downloads/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0x8d326)
    #32 0x61008deeb in IPC::Connection::dispatchOneIncomingMessage() (/Users/ajuma/Downloads/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0x8deeb)
    #33 0x63f13a1ac in WTF::RunLoop::performWork() (/Users/ajuma/Downloads/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0xcb1ac)
    #34 0x63f13d6f5 in WTF::RunLoop::performWork(void*) (/Users/ajuma/Downloads/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0xce6f5)
    #35 0x7fff3651fd51 in __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation:x86_64h+0x83d51)
    #36 0x7fff3651fcf0 in __CFRunLoopDoSource0 (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation:x86_64h+0x83cf0)
    #37 0x7fff3651fb0a in __CFRunLoopDoSources0 (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation:x86_64h+0x83b0a)
    #38 0x7fff3651e839 in __CFRunLoopRun (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation:x86_64h+0x82839)
    #39 0x7fff3651de3d in CFRunLoopRunSpecific (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation:x86_64h+0x81e3d)
    #40 0x7fff38bb91d7 in -[NSRunLoop(NSRunLoop) runMode:beforeDate:] (/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation:x86_64+0x601d7)
    #41 0x7fff38c6bc7e in -[NSRunLoop(NSRunLoop) run] (/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation:x86_64+0x112c7e)
    #42 0x7fff708544e9 in _xpc_objc_main.cold.4 (/usr/lib/system/libxpc.dylib:x86_64+0x164e9)
    #43 0x7fff7085442f in _xpc_objc_main (/usr/lib/system/libxpc.dylib:x86_64+0x1642f)
    #44 0x7fff70853f62 in xpc_main (/usr/lib/system/libxpc.dylib:x86_64+0x15f62)
    #45 0x610ea8f59 in WebKit::XPCServiceMain(int, char const**) (/Users/ajuma/Downloads/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0xea8f59)
    #46 0x7fff70606cc8 in start (/usr/lib/system/libdyld.dylib:x86_64+0x1acc8)

==84974==Register values:
rax = 0x0000000000000000  rbx = 0x00007ffeeb5ea5e0  rcx = 0x0000100000000000  rdx = 0x0000000000000000
rdi = 0x00007ffeeb5ea5e0  rsi = 0x0000000000000000  rbp = 0x00007ffeeb5ea370  rsp = 0x00007ffeeb5ea360
 r8 = 0x0000612000053637   r9 = 0x00000fffffffffff  r10 = 0x0000000000000000  r11 = 0x0000000000000108
r12 = 0x00001fffdd6bd47c  r13 = 0x00006120000535c0  r14 = 0x0000000000000000  r15 = 0x0000100000000000</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1735400</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2021-03-03 11:23:06 -0800</bug_when>
    <thetext>&lt;rdar://problem/74994617&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1740299</commentid>
    <comment_count>2</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2021-03-16 16:19:52 -0700</bug_when>
    <thetext>I can&apos;t reproduce this crash on trunk. Maybe a duplicate of the bug 223196.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1740743</commentid>
    <comment_count>3</comment_count>
    <who name="Rob Buis">rbuis</who>
    <bug_when>2021-03-17 09:49:45 -0700</bug_when>
    <thetext>(In reply to Ryosuke Niwa from comment #2)
&gt; I can&apos;t reproduce this crash on trunk. Maybe a duplicate of the bug 223196.

This is still easy to repro on current GTK builds.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1740781</commentid>
    <comment_count>4</comment_count>
    <who name="alan">zalan</who>
    <bug_when>2021-03-17 10:52:56 -0700</bug_when>
    <thetext>https://trac.webkit.org/changeset/269774/webkit looks like a strong candidate.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1740980</commentid>
    <comment_count>5</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2021-03-17 18:04:02 -0700</bug_when>
    <thetext>(In reply to Rob Buis from comment #3)
&gt; (In reply to Ryosuke Niwa from comment #2)
&gt; &gt; I can&apos;t reproduce this crash on trunk. Maybe a duplicate of the bug 223196.
&gt; 
&gt; This is still easy to repro on current GTK builds.

Yeah, it looks like this bug requires full safari, not WebKitTestRunner/DumpRenderTree. With that, I can reproduce this.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1743726</commentid>
    <comment_count>6</comment_count>
      <attachid>424232</attachid>
    <who name="Rob Buis">rbuis</who>
    <bug_when>2021-03-25 04:00:09 -0700</bug_when>
    <thetext>Created attachment 424232
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1744131</commentid>
    <comment_count>7</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2021-03-26 03:16:54 -0700</bug_when>
    <thetext>Committed r275087: &lt;https://commits.webkit.org/r275087&gt;

All reviewed patches have been landed. Closing bug and clearing flags on attachment 424232.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>422127</attachid>
            <date>2021-03-03 11:22:54 -0800</date>
            <delta_ts>2021-03-03 11:22:54 -0800</delta_ts>
            <desc>Minimal test case</desc>
            <filename>computeMarkerStyle.xhtml</filename>
            <type>application/xhtml+xml</type>
            <size>488</size>
            <attacher name="Ali Juma">ajuma</attacher>
            
              <data encoding="base64">PGh0bWwgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGh0bWwiIHhtbG5zOnh1bD0iaHR0
cDovL3d3dy5tb3ppbGxhLm9yZy9rZXltYXN0ZXIvZ2F0ZWtlZXBlci90aGVyZS5pcy5vbmx5Lnh1
bCI+PGhlYWQgY29udGVudGVkaXRhYmxlPSIiIGRpcj0ibHRyIiBsYW5nPSJlbiI+CjxzdHlsZSBp
ZD0icyI+PC9zdHlsZT4KPC9oZWFkPgo8Ym9keSBvbmxvYWQ9ImRvY3VtZW50LmdldEVsZW1lbnRC
eUlkKCdzJykuYXBwZW5kQ2hpbGQoZG9jdW1lbnQuY3JlYXRlVGV4dE5vZGUoJyNzYiB7IGRpc3Bs
YXk6IGxpc3QtaXRlbTsgfScpKTsiPgo8c2NyaXB0PmZ1bmN0aW9uIGRvbWZ1enpfcmVtb3ZlQXR0
cmlidXRlKG5vZGUsIGluZGV4KSB7CmRvY3VtZW50LmFkZEV2ZW50TGlzdGVuZXIoJ0RPTUNvbnRl
bnRMb2FkZWQnLCBmdW5jdGlvbigpIHsgc2V0VGltZW91dChmdXp6LCA3NDApOyB9LCBmYWxzZSk7
PC9zY3JpcHQ+PHh1bDpzY3JvbGxib3ggaWQ9InNiIj4=
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>424232</attachid>
            <date>2021-03-25 04:00:09 -0700</date>
            <delta_ts>2021-03-26 03:16:55 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-222670-20210325120008.patch</filename>
            <type>text/plain</type>
            <size>3759</size>
            <attacher name="Rob Buis">rbuis</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjc0OTM0CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
      

    </bug>

</bugzilla>