68550 2011-09-21 11:23:08 -0700 REGRESSION: Crash in RenderBlock::removeFloatingObjectsBelow() 2011-09-21 11:45:48 -0700 1 1 1 Unclassified WebKit Layout and Rendering 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED InRadar, Regression P1 Normal --- 1 mitz mitz oldest_to_newest 470973 0 108189 mitz 2011-09-21 11:23:08 -0700 Created attachment 108189 Test case (will crash) <rdar://problem/9768483> The attached test case causes WebKit to crash in RenderBlock::removeFloatingObjectsBelow(). Patch forthcoming. 470988 1 108195 mitz 2011-09-21 11:35:42 -0700 Created attachment 108195 Check if the floating object set has become empty 470993 2 mitz 2011-09-21 11:45:48 -0700 Fixed in <http://trac.webkit.org/r95654>. 108189 2011-09-21 11:23:08 -0700 2011-09-21 11:23:08 -0700 Test case (will crash) 9768483.html text/html 652 mitz //48ACEARABPAEMAVABZAFAARQAgAGgAdABtAGwAPgAKADwAcAA+AAoAIAAgACAAIAAgAAoAPAAv AHAAPgAKADwAZABpAHYAIABzAHQAeQBsAGUAPQAiAC0AdwBlAGIAawBpAHQALQBjAG8AbAB1AG0A bgBzADoAIAAyADsAIAB3AGkAZAB0AGgAOgAgADIAMAAwAHAAeAA7ACAAaABlAGkAZwBoAHQAOgAg ADQAMABwAHgAOwAgAGYAbwBuAHQALQBmAGEAbQBpAGwAeQA6ACAAYQBoAGUAbQA7ACAALQB3AGUA YgBrAGkAdAAtAGYAbwBuAHQALQBzAG0AbwBvAHQAaABpAG4AZwA6ACAAbgBvAG4AZQA7ACIAPgAK ACAAIAAgACAAPABkAGkAdgAgAHMAdAB5AGwAZQA9ACIAaABlAGkAZwBoAHQAOgAgADEAMgBwAHgA OwAiAD4APAAvAGQAaQB2AD4ACgAgACAAIAAgADwAZABpAHYAPgAKACAAIAAgACAAIAAgACAAIABU AGUAeAB0ADwAYgByAD4ARQAKACAAIAAgACAAIAAgACAAIAA8AGQAaQB2ACAAcwB0AHkAbABlAD0A IgB3AGkAZAB0AGgAOgAgADYAcAB4ADsAIABoAGUAaQBnAGgAdAA6ACAANgBwAHgAOwAgAGYAbABv AGEAdAA6ACAAbABlAGYAdAA7ACAAYgBhAGMAawBnAHIAbwB1AG4AZAAtAGMAbwBsAG8AcgA6ACAA YgBsAHUAZQA7ACIAPgAKACAAIAAgACAAIAAgACAAIAA8AC8AZABpAHYAPgAKACAAIAAgACAAPAAv AGQAaQB2AD4ACgA8AC8AZABpAHYAPgAKAA== 108195 2011-09-21 11:35:42 -0700 2011-09-21 11:37:07 -0700 Check if the floating object set has become empty bug-68550-20110921113541.patch text/plain 3848 mitz SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDk1NjUxKQorKysgU291cmNlL1dlYkNvcmUvQ2hhbmdl TG9nCSh3b3JraW5nIGNvcHkpCkBAIC0xLDMgKzEsMTcgQEAKKzIwMTEtMDktMjEgIERhbiBCZXJu c3RlaW4gIDxtaXR6QGFwcGxlLmNvbT4KKworICAgICAgICA8cmRhcjovL3Byb2JsZW0vOTc2ODQ4 Mz4gUkVHUkVTU0lPTjogQ3Jhc2ggaW4gUmVuZGVyQmxvY2s6OnJlbW92ZUZsb2F0aW5nT2JqZWN0 c0JlbG93KCkKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lk PTY4NTUwCisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAg VGVzdDogZmFzdC9tdWx0aWNvbC9udWxsLWxhc3RGbG9hdC1pbi1yZW1vdmVGbG9hdGluZ09iamVj dHNCZWxvdy5odG1sCisKKyAgICAgICAgKiByZW5kZXJpbmcvUmVuZGVyQmxvY2suY3BwOgorICAg ICAgICAoV2ViQ29yZTo6UmVuZGVyQmxvY2s6OnJlbW92ZUZsb2F0aW5nT2JqZWN0c0JlbG93KTog QnJlYWsgb3V0IG9mIHRoZSB3aGlsZSgpIGxvb3Agd2hlbiB0aGUKKyAgICAgICAgZmxvYXRpbmcg b2JqZWN0IHNldCBpcyBlbXB0eSwgd2hpY2ggY2FuIGhhcHBlbiBpZiB0aGVyZSB3ZXJlIG5vIGZs b2F0cyBvbiBwcmV2aW91cyBsaW5lcworICAgICAgICAoaW4gd2hpY2ggY2FzZSwgbGFzdEZsb2F0 IGlzIDApLgorCiAyMDExLTA5LTIxICBDaGFuZ1Nlb2sgT2ggIDxzaGl2YW1pZG93QGdtYWlsLmNv bT4KIAogICAgICAgICBbR1RLXSBGaXggYnVpbGQgYnJlYWsgd2hlbiBlbmFibGluZyB3ZWJnbCBv biByOTU1OTMKSW5kZXg6IFNvdXJjZS9XZWJDb3JlL3JlbmRlcmluZy9SZW5kZXJCbG9jay5jcHAK PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PQotLS0gU291cmNlL1dlYkNvcmUvcmVuZGVyaW5nL1JlbmRlckJsb2NrLmNwcAko cmV2aXNpb24gOTU2NDUpCisrKyBTb3VyY2UvV2ViQ29yZS9yZW5kZXJpbmcvUmVuZGVyQmxvY2su Y3BwCSh3b3JraW5nIGNvcHkpCkBAIC0zMjkwLDYgKzMyOTAsOCBAQCB2b2lkIFJlbmRlckJsb2Nr OjpyZW1vdmVGbG9hdGluZ09iamVjdHNCCiAgICAgICAgIG1fZmxvYXRpbmdPYmplY3RzLT5yZW1v dmUoY3Vycik7CiAgICAgICAgIEFTU0VSVCghY3Vyci0+bV9vcmlnaW5hdGluZ0xpbmUpOwogICAg ICAgICBkZWxldGUgY3VycjsKKyAgICAgICAgaWYgKGZsb2F0aW5nT2JqZWN0U2V0LmlzRW1wdHko KSkKKyAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBjdXJyID0gZmxvYXRpbmdPYmplY3RTZXQu bGFzdCgpOwogICAgIH0KIH0KSW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 Ci0tLSBMYXlvdXRUZXN0cy9DaGFuZ2VMb2cJKHJldmlzaW9uIDk1NjUxKQorKysgTGF5b3V0VGVz dHMvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBAIC0xLDMgKzEsMTMgQEAKKzIwMTEtMDktMjEg IERhbiBCZXJuc3RlaW4gIDxtaXR6QGFwcGxlLmNvbT4KKworICAgICAgICA8cmRhcjovL3Byb2Js ZW0vOTc2ODQ4Mz4gUkVHUkVTU0lPTjogQ3Jhc2ggaW4gUmVuZGVyQmxvY2s6OnJlbW92ZUZsb2F0 aW5nT2JqZWN0c0JlbG93KCkKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19i dWcuY2dpP2lkPTY4NTUwCisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisK KyAgICAgICAgKiBmYXN0L211bHRpY29sL251bGwtbGFzdEZsb2F0LWluLXJlbW92ZUZsb2F0aW5n T2JqZWN0c0JlbG93LWV4cGVjdGVkLnR4dDogQWRkZWQuCisgICAgICAgICogZmFzdC9tdWx0aWNv bC9udWxsLWxhc3RGbG9hdC1pbi1yZW1vdmVGbG9hdGluZ09iamVjdHNCZWxvdy5odG1sOiBBZGRl ZC4KKwogMjAxMS0wOS0yMSAgVnNldm9sb2QgVmxhc292ICA8dnNldmlrQGNocm9taXVtLm9yZz4K IAogICAgICAgICBXZWIgSW5zcGVjdG9yOiBjbGVhciByZXNvdXJjZSBhZ2VudCByZXNvdXJjZSBj YWNoZSB1cG9uIHJlc291cmNlIGFnZW50J3MgZGlzYWJsZS4KSW5kZXg6IExheW91dFRlc3RzL2Zh c3QvbXVsdGljb2wvbnVsbC1sYXN0RmxvYXQtaW4tcmVtb3ZlRmxvYXRpbmdPYmplY3RzQmVsb3ct ZXhwZWN0ZWQudHh0Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2Zhc3QvbXVsdGljb2wvbnVs bC1sYXN0RmxvYXQtaW4tcmVtb3ZlRmxvYXRpbmdPYmplY3RzQmVsb3ctZXhwZWN0ZWQudHh0CShy ZXZpc2lvbiAwKQorKysgTGF5b3V0VGVzdHMvZmFzdC9tdWx0aWNvbC9udWxsLWxhc3RGbG9hdC1p bi1yZW1vdmVGbG9hdGluZ09iamVjdHNCZWxvdy1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCkBA IC0wLDAgKzEsNiBAQAorVGVzdCBmb3IgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcu Y2dpP2lkPTY4NTUwIFJFR1JFU1NJT046IENyYXNoIGluIFJlbmRlckJsb2NrOjpyZW1vdmVGbG9h dGluZ09iamVjdHNCZWxvdygpLgorCitUaGUgdGVzdCBwYXNzZXMgaWYgaXQgZG9lcyBub3QgY2F1 c2UgYSBjcmFzaCBvciBhc3NlcnRpb24gZmFpbHVyZS4KKworVGV4dAorRQpJbmRleDogTGF5b3V0 VGVzdHMvZmFzdC9tdWx0aWNvbC9udWxsLWxhc3RGbG9hdC1pbi1yZW1vdmVGbG9hdGluZ09iamVj dHNCZWxvdy5odG1sCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2Zhc3QvbXVsdGljb2wvbnVs bC1sYXN0RmxvYXQtaW4tcmVtb3ZlRmxvYXRpbmdPYmplY3RzQmVsb3cuaHRtbAkocmV2aXNpb24g MCkKKysrIExheW91dFRlc3RzL2Zhc3QvbXVsdGljb2wvbnVsbC1sYXN0RmxvYXQtaW4tcmVtb3Zl RmxvYXRpbmdPYmplY3RzQmVsb3cuaHRtbAkocmV2aXNpb24gMCkKQEAgLTAsMCArMSwyMCBAQAor PCFET0NUWVBFIGh0bWw+Cis8cD4KKyAgICAgVGVzdCBmb3IgPGk+PGEgaHJlZj0iaHR0cHM6Ly9i dWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTY4NTUwIj5odHRwczovL2J1Z3Mud2Via2l0 Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9Njg1NTA8L2E+CisgICAgIFJFR1JFU1NJT046IENyYXNoIGlu IFJlbmRlckJsb2NrOjpyZW1vdmVGbG9hdGluZ09iamVjdHNCZWxvdygpPC9pPi4KKzwvcD4KKzxw PgorICAgIFRoZSB0ZXN0IHBhc3NlcyBpZiBpdCBkb2VzIG5vdCBjYXVzZSBhIGNyYXNoIG9yIGFz c2VydGlvbiBmYWlsdXJlLgorPC9wPgorPHNjcmlwdD4KKyAgICBpZiAod2luZG93LmxheW91dFRl c3RDb250cm9sbGVyKQorICAgICAgICBsYXlvdXRUZXN0Q29udHJvbGxlci5kdW1wQXNUZXh0KCk7 Cis8L3NjcmlwdD4KKzxkaXYgc3R5bGU9Ii13ZWJraXQtY29sdW1uczogMjsgd2lkdGg6IDIwMHB4 OyBoZWlnaHQ6IDQwcHg7IGZvbnQtZmFtaWx5OiBhaGVtOyAtd2Via2l0LWZvbnQtc21vb3RoaW5n OiBub25lOyI+CisgICAgPGRpdiBzdHlsZT0iaGVpZ2h0OiAxMnB4OyI+PC9kaXY+CisgICAgPGRp dj4KKyAgICAgICAgVGV4dDxicj5FCisgICAgICAgIDxkaXYgc3R5bGU9IndpZHRoOiA2cHg7IGhl aWdodDogNnB4OyBmbG9hdDogbGVmdDsgYmFja2dyb3VuZC1jb2xvcjogYmx1ZTsiPgorICAgICAg ICA8L2Rpdj4KKyAgICA8L2Rpdj4KKzwvZGl2Pgo=