52013 2011-01-06 13:35:56 -0800 REGRESSION (r74663): ASSERTION FAILED: m_tokenizer->lineNumber() == line.zeroBasedInt() 2011-01-06 23:18:12 -0800 1 1 1 Unclassified WebKit DOM 528+ (Nightly build) PC OS X 10.5 RESOLVED FIXED http://www.macnn.com HasReduction, InRadar, Regression P2 Normal --- 51311 1 simon.fraser webkit-unassigned abarth aestes commit-queue eric joone simon.fraser tonyg oldest_to_newest 330382 0 simon.fraser 2011-01-06 13:35:56 -0800 When I load http://www.macnn.com, I this this assertion: ASSERTION FAILED: m_tokenizer->lineNumber() == line.zeroBasedInt() at (gdb) bt #0 0x00000001033d6fc8 in WebCore::HTMLDocumentParser::textPosition (this=0x12c89b000) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/html/parser/HTMLDocumentParser.cpp:413 #1 0x0000000103445bcd in WebCore::HTMLTreeBuilder::processScriptStartTag (this=0x10b3a6db0, token=@0x7fff5fbfd580) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/html/parser/HTMLTreeBuilder.cpp:2780 #2 0x000000010344e6d2 in WebCore::HTMLTreeBuilder::processStartTagForInHead (this=0x10b3a6db0, token=@0x7fff5fbfd580) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/html/parser/HTMLTreeBuilder.cpp:2743 #3 0x000000010344f4c2 in WebCore::HTMLTreeBuilder::processStartTagForInBody (this=0x10b3a6db0, token=@0x7fff5fbfd580) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/html/parser/HTMLTreeBuilder.cpp:733 #4 0x0000000103448521 in WebCore::HTMLTreeBuilder::processStartTag (this=0x10b3a6db0, token=@0x7fff5fbfd580) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/html/parser/HTMLTreeBuilder.cpp:1212 #5 0x0000000103447d55 in WebCore::HTMLTreeBuilder::processToken (this=0x10b3a6db0, token=@0x7fff5fbfd580) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/html/parser/HTMLTreeBuilder.cpp:471 #6 0x000000010345115c in WebCore::HTMLTreeBuilder::constructTreeFromAtomicToken (this=0x10b3a6db0, token=@0x7fff5fbfd580) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/html/parser/HTMLTreeBuilder.cpp:452 #7 0x0000000103451236 in WebCore::HTMLTreeBuilder::constructTreeFromToken (this=0x10b3a6db0, rawToken=@0x12c89b0b0) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/html/parser/HTMLTreeBuilder.cpp:447 #8 0x00000001033d7621 in WebCore::HTMLDocumentParser::pumpTokenizer (this=0x12c89b000, mode=WebCore::HTMLDocumentParser::AllowYield) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/html/parser/HTMLDocumentParser.cpp:232 #9 0x00000001033d7938 in WebCore::HTMLDocumentParser::pumpTokenizerIfPossible (this=0x12c89b000, mode=WebCore::HTMLDocumentParser::AllowYield) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/html/parser/HTMLDocumentParser.cpp:169 #10 0x00000001033d79ef in WebCore::HTMLDocumentParser::resumeParsingAfterScriptExecution (this=0x12c89b000) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/html/parser/HTMLDocumentParser.cpp:429 #11 0x00000001033d7d19 in WebCore::HTMLDocumentParser::notifyFinished (this=0x12c89b000, cachedResource=0x130469460) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/html/parser/HTMLDocumentParser.cpp:474 #12 0x0000000102ffa0c0 in WebCore::CachedScript::checkNotify (this=0x130469460) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/loader/cache/CachedScript.cpp:100 #13 0x0000000102ffa1d2 in WebCore::CachedScript::data (this=0x130469460, data=@0x7fff5fbfd760, allDataReceived=true) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/loader/cache/CachedScript.cpp:90 #14 0x0000000102ff919f in WebCore::CachedResourceRequest::didFinishLoading (this=0x13049c250, loader=0x13049ae50) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/loader/cache/CachedResourceRequest.cpp:159 #15 0x0000000103ae0086 in WebCore::SubresourceLoader::didFinishLoading (this=0x13049ae50, finishTime=0) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/loader/SubresourceLoader.cpp:181 #16 0x0000000103a22eb4 in WebCore::ResourceLoader::didFinishLoading (this=0x13049ae50, finishTime=0) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/loader/ResourceLoader.cpp:437 #17 0x0000000103a1e341 in -[WebCoreResourceHandleAsDelegate connectionDidFinishLoading:] (self=0x130491aa0, _cmd=0x7fff87d54b96, connection=0x130498a60) at /Volumes/InternalData/Development/webkit/OpenSource/WebCore/platform/network/mac/ResourceHandleMac.mm:924 #18 0x00007fff87c2e728 in _NSURLConnectionDidFinishLoading () #19 0x00007fff81edb2ac in URLConnectionClient::_clientDidFinishLoading () #20 0x00007fff81f409c6 in URLConnectionClient::ClientConnectionEventQueue::processAllEventsAndConsumePayload () #21 0x00007fff81f40c32 in URLConnectionClient::ClientConnectionEventQueue::processAllEventsAndConsumePayload () #22 0x00007fff81ec7979 in URLConnectionClient::processEvents () #23 0x00007fff81ec7754 in MultiplexerSource::perform () #24 0x00007fff804b2401 in __CFRunLoopDoSources0 () #25 0x00007fff804b05f9 in __CFRunLoopRun () 330499 1 abarth 2011-01-06 15:31:46 -0800 I has the repro. 330537 2 aestes 2011-01-06 16:29:03 -0800 *** Bug 52033 has been marked as a duplicate of this bug. *** 330538 3 aestes 2011-01-06 16:30:08 -0800 <rdar://problem/8821575> 330550 4 abarth 2011-01-06 16:47:18 -0800 I've reproed the wikipedia version too. 330570 5 abarth 2011-01-06 17:28:22 -0800 Reduced test case: <script>document.writeln("\n"); </script><script></script> 330572 6 abarth 2011-01-06 17:36:53 -0800 <script>document.writeln("\n"); document.writeln("\n"); document.writeln("\n"); document.writeln("\n"); document.writeln("\n"); document.writeln("\n"); document.writeln("\n"); </script><script></script> makes the line numbers off by arbitrary amounts. 330574 7 simon.fraser 2011-01-06 17:44:11 -0800 Someone fingered this as the commit that caused it: http://trac.webkit.org/changeset/74663 330575 8 abarth 2011-01-06 17:49:17 -0800 Yep. I think I see the bug. Building/testing fix now. 330582 9 78194 abarth 2011-01-06 17:56:51 -0800 Created attachment 78194 Patch 330639 10 78194 commit-queue 2011-01-06 21:14:44 -0800 Comment on attachment 78194 Patch Clearing flags on attachment: 78194 Committed r75228: <http://trac.webkit.org/changeset/75228> 330640 11 commit-queue 2011-01-06 21:14:51 -0800 All reviewed patches have been landed. Closing bug. 78194 2011-01-06 17:56:51 -0800 2011-01-06 21:14:44 -0800 Patch bug-52013-20110106175650.patch text/plain 3334 abarth SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n CShyZXZpc2lvbiA3NTIxNSkKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA IC0xLDMgKzEsMTggQEAKKzIwMTEtMDEtMDYgIEFkYW0gQmFydGggIDxhYmFydGhAd2Via2l0Lm9y Zz4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBSRUdS RVNTSU9OIChyNzQ2NjMpOiBBU1NFUlRJT04gRkFJTEVEOiBtX3Rva2VuaXplci0+bGluZU51bWJl cigpID09IGxpbmUuemVyb0Jhc2VkSW50KCkKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5v cmcvc2hvd19idWcuY2dpP2lkPTUyMDEzCisKKyAgICAgICAgV2hlbiBleGNsdWRpbmcgbGluZSBu dW1iZXJzIGZvciBjb21wb3NpdGUgc3RyaW5ncywgd2UgZm9yZ290IHRvIGV4Y2x1ZGUKKyAgICAg ICAgdGhlIGxpbmUgbnVtYmVyIGZvciB0aGUgY3VycmVudCBzdHJpbmchCisKKyAgICAgICAgVGVz dDogZmFzdC9wYXJzZXIvbGluZS1udW1iZXItY29tcG9zaXRlLXNlZ21lbnRlZC1zdHJpbmcuaHRt bAorCisgICAgICAgICogcGxhdGZvcm0vdGV4dC9TZWdtZW50ZWRTdHJpbmcuY3BwOgorICAgICAg ICAoV2ViQ29yZTo6U2VnbWVudGVkU3RyaW5nOjpzZXRFeGNsdWRlTGluZU51bWJlcnMpOgorCiAy MDExLTAxLTA1ICBaaGVueWFvIE1vICA8em1vQGdvb2dsZS5jb20+CiAKICAgICAgICAgUmV2aWV3 ZWQgYnkgS2VubmV0aCBSdXNzZWxsLgpJbmRleDogV2ViQ29yZS9wbGF0Zm9ybS90ZXh0L1NlZ21l bnRlZFN0cmluZy5jcHAKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gV2ViQ29yZS9wbGF0Zm9ybS90ZXh0L1NlZ21l bnRlZFN0cmluZy5jcHAJKHJldmlzaW9uIDc1MTc1KQorKysgV2ViQ29yZS9wbGF0Zm9ybS90ZXh0 L1NlZ21lbnRlZFN0cmluZy5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTc4LDEzICs3OCwxMyBAQCB1 bnNpZ25lZCBTZWdtZW50ZWRTdHJpbmc6Omxlbmd0aCgpIGNvbnN0CiAKIHZvaWQgU2VnbWVudGVk U3RyaW5nOjpzZXRFeGNsdWRlTGluZU51bWJlcnMoKQogeworICAgIG1fY3VycmVudFN0cmluZy5z ZXRFeGNsdWRlTGluZU51bWJlcnMoKTsKICAgICBpZiAobV9jb21wb3NpdGUpIHsKICAgICAgICAg RGVxdWU8U2VnbWVudGVkU3Vic3RyaW5nPjo6aXRlcmF0b3IgaXQgPSBtX3N1YnN0cmluZ3MuYmVn aW4oKTsKICAgICAgICAgRGVxdWU8U2VnbWVudGVkU3Vic3RyaW5nPjo6aXRlcmF0b3IgZSA9IG1f c3Vic3RyaW5ncy5lbmQoKTsKICAgICAgICAgZm9yICg7IGl0ICE9IGU7ICsraXQpCiAgICAgICAg ICAgICBpdC0+c2V0RXhjbHVkZUxpbmVOdW1iZXJzKCk7Ci0gICAgfSBlbHNlCi0gICAgICAgIG1f Y3VycmVudFN0cmluZy5zZXRFeGNsdWRlTGluZU51bWJlcnMoKTsKKyAgICB9CiB9CiAKIHZvaWQg U2VnbWVudGVkU3RyaW5nOjpjbGVhcigpCkluZGV4OiBMYXlvdXRUZXN0cy9DaGFuZ2VMb2cKPT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PQotLS0gTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCShyZXZpc2lvbiA3NTIxNSkKKysrIExh eW91dFRlc3RzL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE2IEBACisyMDEx LTAxLTA2ICBBZGFtIEJhcnRoICA8YWJhcnRoQHdlYmtpdC5vcmc+CisKKyAgICAgICAgUmV2aWV3 ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgUkVHUkVTU0lPTiAocjc0NjYzKTogQVNT RVJUSU9OIEZBSUxFRDogbV90b2tlbml6ZXItPmxpbmVOdW1iZXIoKSA9PSBsaW5lLnplcm9CYXNl ZEludCgpCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD01 MjAxMworCisgICAgICAgIFRoaXMgdGVzdCBjYXNlIHVzZWQgdG8gdHJpZ2dlciBhbiBBU1NFUlQu ICBJdCdzIHVuY2xlYXIgdG8gbWUgd2hldGhlcgorICAgICAgICB0aGVyZSdzIGEgbW9yZSBkaXJl Y3Qgd2F5IHRvIHRlc3QgdGhpcyBmaXguCisKKyAgICAgICAgKiBmYXN0L3BhcnNlci9saW5lLW51 bWJlci1jb21wb3NpdGUtc2VnbWVudGVkLXN0cmluZy1leHBlY3RlZC50eHQ6IEFkZGVkLgorICAg ICAgICAqIGZhc3QvcGFyc2VyL2xpbmUtbnVtYmVyLWNvbXBvc2l0ZS1zZWdtZW50ZWQtc3RyaW5n Lmh0bWw6IEFkZGVkLgorCiAyMDExLTAxLTA2ICBNaWhhaSBQYXJwYXJpdGEgIDxtaWhhaXBAY2hy b21pdW0ub3JnPgogCiAgICAgICAgIFVucmV2aWV3ZWQsIHRlc3QgZXhwZWN0YXRpb24gdXBkYXRl LgpJbmRleDogTGF5b3V0VGVzdHMvZmFzdC9wYXJzZXIvbGluZS1udW1iZXItY29tcG9zaXRlLXNl Z21lbnRlZC1zdHJpbmctZXhwZWN0ZWQudHh0Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2Zh c3QvcGFyc2VyL2xpbmUtbnVtYmVyLWNvbXBvc2l0ZS1zZWdtZW50ZWQtc3RyaW5nLWV4cGVjdGVk LnR4dAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL2Zhc3QvcGFyc2VyL2xpbmUtbnVtYmVy LWNvbXBvc2l0ZS1zZWdtZW50ZWQtc3RyaW5nLWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMCkKQEAg LTAsMCArMSBAQAorVGhpcyB0ZXN0IHBhc3NlcyBpZiBpdCBkb2Vzbid0IHRyaWdnZXIgYW4gQVNT RVJULgpJbmRleDogTGF5b3V0VGVzdHMvZmFzdC9wYXJzZXIvbGluZS1udW1iZXItY29tcG9zaXRl LXNlZ21lbnRlZC1zdHJpbmcuaHRtbAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9mYXN0L3Bh cnNlci9saW5lLW51bWJlci1jb21wb3NpdGUtc2VnbWVudGVkLXN0cmluZy5odG1sCShyZXZpc2lv biAwKQorKysgTGF5b3V0VGVzdHMvZmFzdC9wYXJzZXIvbGluZS1udW1iZXItY29tcG9zaXRlLXNl Z21lbnRlZC1zdHJpbmcuaHRtbAkocmV2aXNpb24gMCkKQEAgLTAsMCArMSw3IEBACis8c2NyaXB0 PmRvY3VtZW50LndyaXRlbG4oIlxuIik7Cis8L3NjcmlwdD48c2NyaXB0Pjwvc2NyaXB0PgorVGhp cyB0ZXN0IHBhc3NlcyBpZiBpdCBkb2Vzbid0IHRyaWdnZXIgYW4gQVNTRVJULgorPHNjcmlwdD4K K2lmICh3aW5kb3cubGF5b3V0VGVzdENvbnRyb2xsZXIpCisgICAgbGF5b3V0VGVzdENvbnRyb2xs ZXIuZHVtcEFzVGV4dCgpOworPC9zY3JpcHQ+Cg==