71377 2011-11-02 11:11:33 -0700 Assertion in FontCache::getCachedFontData() when painting into composited layer 2011-11-02 14:02:25 -0700 1 1 1 Unclassified WebKit Layout and Rendering 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED http://build.webkit.org/results/SnowLeopard%20Intel%20Debug%20(Tests)/r99063%20(2806)/platform/mac/accessibility/select-element-selection-with-optgroups-crash-log.txt InRadar P2 Normal --- 1 simon.fraser simon.fraser msaboff simon.fraser webkit-bug-importer oldest_to_newest 494748 0 simon.fraser 2011-11-02 11:11:33 -0700 Bots show an assertion here: Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: KERN_INVALID_ADDRESS at 0x00000000bbadbeef Crashed Thread: 0 Dispatch queue: com.apple.main-thread Thread 0 Crashed: Dispatch queue: com.apple.main-thread 0 com.apple.WebCore 0x0000000101730a0b WebCore::FontCache::getCachedFontData(WebCore::FontPlatformData const*, WebCore::FontCache::ShouldRetain) + 121 (FontCache.cpp:280) 1 com.apple.WebCore 0x000000010173bb2e WebCore::FontCache::getFontDataForCharacters(WebCore::Font const&, unsigned short const*, int) + 1462 (FontCacheMac.mm:166) 2 com.apple.WebCore 0x0000000101740f0d WebCore::Font::glyphDataAndPageForCharacter(int, bool, WebCore::FontDataVariant) const + 2325 (FontFastPath.cpp:201) 3 com.apple.WebCore 0x00000001017411cd WebCore::Font::glyphDataForCharacter(int, bool, WebCore::FontDataVariant) const + 47 (FontFastPath.cpp:47) 4 com.apple.WebCore 0x00000001017412c2 WebCore::Font::getEmphasisMarkGlyphData(WTF::AtomicString const&, WebCore::GlyphData&) const + 220 (FontFastPath.cpp:280) 5 com.apple.WebCore 0x000000010174131c WebCore::Font::emphasisMarkHeight(WTF::AtomicString const&) const + 52 (FontFastPath.cpp:315) 6 com.apple.WebCore 0x00000001018f4414 WebCore::InlineFlowBox::computeOverAnnotationAdjustment(int) const + 742 (InlineFlowBox.cpp:1417) 7 com.apple.WebCore 0x00000001020757e5 WebCore::RootInlineBox::selectionTop() const + 95 (RootInlineBox.cpp:419) 8 com.apple.WebCore 0x0000000101f6771f WebCore::RenderLineBoxList::lineIntersectsDirtyRect(WebCore::RenderBoxModelObject*, WebCore::InlineFlowBox*, WebCore::PaintInfo const&, WebCore::IntPoint const&) const + 51 (RenderLineBoxList.cpp:197) 9 com.apple.WebCore 0x0000000101f6820e WebCore::RenderLineBoxList::paint(WebCore::RenderBoxModelObject*, WebCore::PaintInfo&, WebCore::IntPoint const&) const + 1310 (RenderLineBoxList.cpp:260) 10 com.apple.WebCore 0x0000000101e9b443 WebCore::RenderBlock::paintContents(WebCore::PaintInfo&, WebCore::IntPoint const&) + 161 (RenderBlock.cpp:2507) 11 com.apple.WebCore 0x0000000101ea6193 WebCore::RenderBlock::paintObject(WebCore::PaintInfo&, WebCore::IntPoint const&) + 477 (RenderBlock.cpp:2622) 12 com.apple.WebCore 0x0000000101e9c276 WebCore::RenderBlock::paint(WebCore::PaintInfo&, WebCore::IntPoint const&) + 256 (RenderBlock.cpp:2363) 13 com.apple.WebCore 0x0000000101f4e98a WebCore::RenderLayer::paintLayer(WebCore::RenderLayer*, WebCore::GraphicsContext*, WebCore::IntRect const&, unsigned int, WebCore::RenderObject*, WebCore::RenderRegion*, WTF::HashMap<WebCore::OverlapTestRequestClient*, WebCore::IntRect, WTF::PtrHash<WebCore::OverlapTestRequestClient*>, WTF::HashTraits<WebCore::OverlapTestRequestClient*>, WTF::HashTraits<WebCore::IntRect> >*, unsigned int) + 2814 (RenderLayer.cpp:2807) 14 com.apple.WebCore 0x0000000101f4f762 WebCore::RenderLayer::paintList(WTF::Vector<WebCore::RenderLayer*, 0ul>*, WebCore::RenderLayer*, WebCore::GraphicsContext*, WebCore::IntRect const&, unsigned int, WebCore::RenderObject*, WebCore::RenderRegion*, WTF::HashMap<WebCore::OverlapTestRequestClient*, WebCore::IntRect, WTF::PtrHash<WebCore::OverlapTestRequestClient*>, WTF::HashTraits<WebCore::OverlapTestRequestClient*>, WTF::HashTraits<WebCore::IntRect> >*, unsigned int) + 156 (RenderLayer.cpp:2865) 15 com.apple.WebCore 0x0000000101f58306 WebCore::RenderLayerBacking::paintIntoLayer(WebCore::RenderLayer*, WebCore::GraphicsContext*, WebCore::IntRect const&, unsigned int, WebCore::GraphicsLayerPaintingPhase, WebCore::RenderObject*) + 1782 (RenderLayerBacking.cpp:1169) 16 com.apple.WebCore 0x0000000101f58664 WebCore::RenderLayerBacking::paintContents(WebCore::GraphicsLayer const*, WebCore::GraphicsContext&, WebCore::GraphicsLayerPaintingPhase, WebCore::IntRect const&) + 464 (RenderLayerBacking.cpp:1218) 17 com.apple.WebCore 0x00000001017d3bf6 WebCore::GraphicsLayer::paintGraphicsLayerContents(WebCore::GraphicsContext&, WebCore::IntRect const&) + 94 (GraphicsLayer.cpp:284) 18 com.apple.WebCore 0x00000001017dd363 WebCore::GraphicsLayerCA::platformCALayerPaintContents(WebCore::GraphicsContext&, WebCore::IntRect const&) + 37 (GraphicsLayerCA.cpp:908) 19 com.apple.WebCore 0x00000001022a0fa4 drawLayerContents(CGContext*, CALayer*, WebCore::PlatformCALayer*) + 501 (WebLayer.mm:79) ... 494749 1 webkit-bug-importer 2011-11-02 11:13:02 -0700 <rdar://problem/10384540> 494762 2 simon.fraser 2011-11-02 11:32:24 -0700 Bot shows that it's fast/inline/inline-box-adjust-position-crash2.html 494772 3 113343 simon.fraser 2011-11-02 11:46:39 -0700 Created attachment 113343 Patch 494787 4 msaboff 2011-11-02 12:03:55 -0700 Looks to be the right place given the backtrace. 494888 5 simon.fraser 2011-11-02 14:02:25 -0700 http://trac.webkit.org/changeset/99095 113343 2011-11-02 11:46:39 -0700 2011-11-02 13:59:52 -0700 Patch bug-71377-20111102114638.patch text/plain 1754 simon.fraser U3VidmVyc2lvbiBSZXZpc2lvbjogOTkwNzcKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0No YW5nZUxvZyBiL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwppbmRleCA3OGQyMmViZGJiNjNlNmUx YzgyNGFlYjkyNDAzNGFlODk2MzdiMjk5Li4wNTMzNzAwMzk1MTQzNmE4YzFlZTJhYWM1YjhjNThk MTlkNzhjNzEzIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKKysrIGIvU291 cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTcgQEAKKzIwMTEtMTEtMDIgIFNpbW9u IEZyYXNlciAgPHNpbW9uLmZyYXNlckBhcHBsZS5jb20+CisKKyAgICAgICAgQXNzZXJ0aW9uIGlu IEZvbnRDYWNoZTo6Z2V0Q2FjaGVkRm9udERhdGEoKSB3aGVuIHBhaW50aW5nIGludG8gY29tcG9z aXRlZCBsYXllcgorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/ aWQ9NzEzNzcKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAg ICBBZGQgb25lIG9mIHRoZSBteXN0ZXJpb3VzIEZvbnRDYWNoZVB1cmdlUHJldmVudGVycyBvbiB0 aGUgc3RhY2sgd2hlbiBwYWludGluZworICAgICAgICBjb21wb3NpdGluZyBsYXllcnMsIGp1c3Qg YXMgRnJhbWVWaWV3OjpwYWludENvbnRlbnRzIGRvZXMsIHRvIGZpeCBhbiBhc3NlcnRpb24KKyAg ICAgICAgc2VlbiBvbiB0aGUgYm90cyB3aXRoIHNvbWUgbGF5b3V0IHRlc3RzLgorCisgICAgICAg ICogcmVuZGVyaW5nL1JlbmRlckxheWVyQmFja2luZy5jcHA6CisgICAgICAgIChXZWJDb3JlOjpS ZW5kZXJMYXllckJhY2tpbmc6OnBhaW50SW50b0xheWVyKToKKwogMjAxMS0xMC0yOCAgUnlvc3Vr ZSBOaXdhICA8cm5pd2FAd2Via2l0Lm9yZz4KIAogICAgICAgICBkaXYgeyBkaXNwbGF5OiBub25l OyB9IG1ha2VzIHBhc3RpbmcgaW50byB0ZXh0IGZpZWxkcyBpbXBvc3NpYmxlCmRpZmYgLS1naXQg YS9Tb3VyY2UvV2ViQ29yZS9yZW5kZXJpbmcvUmVuZGVyTGF5ZXJCYWNraW5nLmNwcCBiL1NvdXJj ZS9XZWJDb3JlL3JlbmRlcmluZy9SZW5kZXJMYXllckJhY2tpbmcuY3BwCmluZGV4IGY3N2MxY2U0 YjFjNDE2NzdjMzdkMzk4YjlkMGQ3OTQ4OGM2YjE1MDAuLmQwZTZlMDQyYTk2Yjc3ZDBkZjExNWM3 NTUyMjVlNGViMWYxY2YxMGMgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL3JlbmRlcmluZy9S ZW5kZXJMYXllckJhY2tpbmcuY3BwCisrKyBiL1NvdXJjZS9XZWJDb3JlL3JlbmRlcmluZy9SZW5k ZXJMYXllckJhY2tpbmcuY3BwCkBAIC0zNCw2ICszNCw3IEBACiAjaW5jbHVkZSAiQ1NTUHJvcGVy dHlOYW1lcy5oIgogI2luY2x1ZGUgIkNTU1N0eWxlU2VsZWN0b3IuaCIKICNpbmNsdWRlICJDaHJv bWUuaCIKKyNpbmNsdWRlICJGb250Q2FjaGUuaCIKICNpbmNsdWRlICJGcmFtZVZpZXcuaCIKICNp bmNsdWRlICJHcmFwaGljc0NvbnRleHQuaCIKICNpbmNsdWRlICJHcmFwaGljc0xheWVyLmgiCkBA IC0xMDkxLDYgKzEwOTIsOCBAQCB2b2lkIFJlbmRlckxheWVyQmFja2luZzo6cGFpbnRJbnRvTGF5 ZXIoUmVuZGVyTGF5ZXIqIHJvb3RMYXllciwgR3JhcGhpY3NDb250ZXh0KgogICAgICAgICBBU1NF UlRfTk9UX1JFQUNIRUQoKTsKICAgICAgICAgcmV0dXJuOwogICAgIH0KKworICAgIEZvbnRDYWNo ZVB1cmdlUHJldmVudGVyIGZvbnRDYWNoZVB1cmdlUHJldmVudGVyOwogICAgIAogICAgIG1fb3du aW5nTGF5ZXItPnVwZGF0ZUxheWVyTGlzdHNJZk5lZWRlZCgpOwogICAgIAo=