92893 2012-08-01 11:52:22 -0700 [EFL] Crash at WebCore::toRenderSlider 2012-08-01 18:44:53 -0700 1 1 1 Unclassified WebKit WebKit EFL 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 92643 1 mikhail.pozdnyakov mikhail.pozdnyakov gyuyoung.kim lucas.de.marchi morrita rakuco webkit.review.bot oldest_to_newest 684408 0 mikhail.pozdnyakov 2012-08-01 11:52:22 -0700 Got following crash executing fast/forms/range/slider-appearance-crash.html 0x00007ffff2b78ced in WebCore::toRenderSlider (object=0x5f9828) at /media/ssd/WebKit/Source/WebCore/rendering/RenderSlider.h:51 51 ASSERT(!object || object->isSlider()); (gdb) bt #0 0x00007ffff2b78ced in WebCore::toRenderSlider (object=0x5f9828) at /media/ssd/WebKit/Source/WebCore/rendering/RenderSlider.h:51 #1 0x00007ffff374d99f in WebCore::RenderThemeEfl::paintThemePart (this=0x48a8a0, object=0x5f9828, type=WebCore::SliderHorizontal, info=..., rect=...) at /media/ssd/WebKit/Source/WebCore/platform/efl/RenderThemeEfl.cpp:329 #2 0x00007ffff374f6c1 in WebCore::RenderThemeEfl::paintSliderTrack (this=0x48a8a0, object=0x5f9828, info=..., rect=...) at /media/ssd/WebKit/Source/WebCore/platform/efl/RenderThemeEfl.cpp:747 #3 0x00007ffff308e760 in WebCore::RenderTheme::paint (this=0x48a8a0, o=0x5f9828, paintInfo=..., r=...) at /media/ssd/WebKit/Source/WebCore/rendering/RenderTheme.cpp:323 #4 0x00007ffff2f81216 in WebCore::RenderBox::paintBoxDecorations (this=0x5f9828, paintInfo=..., paintOffset=...) at /media/ssd/WebKit/Source/WebCore/rendering/RenderBox.cpp:849 #5 0x00007ffff30a5857 in WebCore::RenderWidget::paint (this=0x5f9828, paintInfo=..., paintOffset=...) at /media/ssd/WebKit/Source/WebCore/rendering/RenderWidget.cpp:255 #6 0x00007ffff2efa88d in WebCore::InlineBox::paint (this=0x625a88, paintInfo=..., paintOffset=...) at /media/ssd/WebKit/Source/WebCore/rendering/InlineBox.cpp:239 #7 0x00007ffff2f00915 in WebCore::InlineFlowBox::paint (this=0x600b28, paintInfo=..., paintOffset=..., lineTop=..., lineBottom=...) at /media/ssd/WebKit/Source/WebCore/rendering/InlineFlowBox.cpp:1086 #8 0x00007ffff30abcfb in WebCore::RootInlineBox::paint (this=0x600b28, paintInfo=..., paintOffset=..., lineTop=..., lineBottom=...) at /media/ssd/WebKit/Source/WebCore/rendering/RootInlineBox.cpp:211 #9 0x00007ffff3018b1e in WebCore::RenderLineBoxList::paint (this=0x5ac258, renderer=0x5ac1b8, paintInfo=..., paintOffset=...) at /media/ssd/WebKit/Source/WebCore/rendering/RenderLineBoxList.cpp:262 #10 0x00007ffff2f2522b in WebCore::RenderBlock::paintContents (this=0x5ac1b8, paintInfo=..., paintOffset=...) at /media/ssd/WebKit/Source/WebCore/rendering/RenderBlock.cpp:2854 #11 0x00007ffff2f25db6 in WebCore::RenderBlock::paintObject (this=0x5ac1b8, paintInfo=..., paintOffset=...) 684446 1 155856 mikhail.pozdnyakov 2012-08-01 12:11:54 -0700 Created attachment 155856 patch 684864 2 155856 webkit.review.bot 2012-08-01 18:44:48 -0700 Comment on attachment 155856 patch Clearing flags on attachment: 155856 Committed r124399: <http://trac.webkit.org/changeset/124399> 684865 3 webkit.review.bot 2012-08-01 18:44:53 -0700 All reviewed patches have been landed. Closing bug. 155856 2012-08-01 12:11:54 -0700 2012-08-01 18:44:48 -0700 patch bug92893 text/plain 1854 mikhail.pozdnyakov Y29tbWl0IDEzNzY0ZDNkOGVkZWEyNWZjM2Q0YTc5MDJlOTFkM2M3ZjkyNjhiMmMKQXV0aG9yOiBN aWtoYWlsIFBvemRueWFrb3YgPG1pa2hhaWwucG96ZG55YWtvdkBpbnRlbC5jb20+CkRhdGU6ICAg V2VkIEF1ZyAxIDIyOjEwOjMzIDIwMTIgKzAzMDAKCiAgICBidWc5Mjg5MwoKZGlmZiAtLWdpdCBh L1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZyBiL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwppbmRl eCBhYzE3NDUzLi5iN2IzZTU2IDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cK KysrIGIvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTggQEAKKzIwMTItMDgt MDEgIE1pa2hhaWwgUG96ZG55YWtvdiAgPG1pa2hhaWwucG96ZG55YWtvdkBpbnRlbC5jb20+CisK KyAgICAgICAgW0VGTF0gQ3Jhc2ggYXQgV2ViQ29yZTo6dG9SZW5kZXJTbGlkZXIKKyAgICAgICAg aHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTkyODkzCisKKyAgICAgICAg UmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgQWRkZWQgYSB0eXBlIGNoZWNr IGJlZm9yZSBjYXN0aW5nIGEgcmVuZGVyIG9iamVjdCB0byBSZW5kZXJTbGlkZXIgYXMgCisgICAg ICAgIGFuIGFyYml0cmFyeSBlbGVtZW50IGNhbiBoYXZlIGZvciBleGFtcGxlIHdlYmtpdC1hcHBl YXJhbmNlOiBzbGlkZXItaG9yaXpvbnRhbC4KKworICAgICAgICBObyBuZXcgdGVzdHMuIEV4aXN0 aW5nIHRlc3QgZmFzdC9mb3Jtcy9yYW5nZS9zbGlkZXItYXBwZWFyYW5jZS1jcmFzaC5odG1sIGNv dmVycyB0aGUgY2FzZS4KKworICAgICAgICAqIHBsYXRmb3JtL2VmbC9SZW5kZXJUaGVtZUVmbC5j cHA6CisgICAgICAgIChXZWJDb3JlOjpSZW5kZXJUaGVtZUVmbDo6cGFpbnRUaGVtZVBhcnQpOgor CiAyMDEyLTA4LTAxICBWc2V2b2xvZCBWbGFzb3YgIDx2c2V2aWtAY2hyb21pdW0ub3JnPgogCiAg ICAgICAgIFdlYiBJbnNwZWN0b3I6IENyYXNoZXMgaW4gTmV0d29ya1Jlc291cmNlc0RhdGEuCmRp ZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9wbGF0Zm9ybS9lZmwvUmVuZGVyVGhlbWVFZmwuY3Bw IGIvU291cmNlL1dlYkNvcmUvcGxhdGZvcm0vZWZsL1JlbmRlclRoZW1lRWZsLmNwcAppbmRleCBi NDY2Y2JmLi45Y2Y0MzQ5IDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9wbGF0Zm9ybS9lZmwv UmVuZGVyVGhlbWVFZmwuY3BwCisrKyBiL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL2VmbC9SZW5k ZXJUaGVtZUVmbC5jcHAKQEAgLTMyNiw2ICszMjYsOSBAQCBib29sIFJlbmRlclRoZW1lRWZsOjpw YWludFRoZW1lUGFydChSZW5kZXJPYmplY3QqIG9iamVjdCwgRm9ybVR5cGUgdHlwZSwgY29uc3Qg UAogICAgIC8vIEN1cnJlbnRseSwgb25seSBzbGlkZXJzIG5lZWRzIHRoaXMgbWVzc2FnZTsgaWYg b3RoZXIgd2lkZ2V0IGV2ZXIgbmVlZHMgc3BlY2lhbAogICAgIC8vIHRyZWF0bWVudCwgbW92ZSB0 aGVtIHRvIHNwZWNpYWwgZnVuY3Rpb25zLgogICAgIGlmICh0eXBlID09IFNsaWRlclZlcnRpY2Fs IHx8IHR5cGUgPT0gU2xpZGVySG9yaXpvbnRhbCkgeworICAgICAgICBpZiAoIW9iamVjdC0+aXNT bGlkZXIoKSkKKyAgICAgICAgICAgIHJldHVybiB0cnVlOyAvLyBwcm9iYWJseSBoYXZlIC13ZWJr aXQtYXBwZWFyYW5jZTogc2xpZGVyLi4KKwogICAgICAgICBSZW5kZXJTbGlkZXIqIHJlbmRlclNs aWRlciA9IHRvUmVuZGVyU2xpZGVyKG9iamVjdCk7CiAgICAgICAgIEhUTUxJbnB1dEVsZW1lbnQq IGlucHV0ID0gcmVuZGVyU2xpZGVyLT5ub2RlKCktPnRvSW5wdXRFbGVtZW50KCk7CiAgICAgICAg IEVkamVfTWVzc2FnZV9GbG9hdF9TZXQqIG1zZzsK