98001 2012-10-01 01:44:42 -0700 [chromium] crash when running accessibility/canvas-fallback-content-2.html 2012-10-02 04:41:23 -0700 1 1 1 Unclassified WebKit Accessibility 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 jochen jochen abarth dmazzoni jochen ojan webkit.review.bot oldest_to_newest 731481 0 jochen 2012-10-01 01:44:42 -0700 When trying to run the test accessibility/canvas-fallback-content-2.html in content_shell like this: echo file://$(pwd)/LayoutTests/accessibility/canvas-fallback-content-2.html | out/Debug/content_shell --no-sandbox --dump-render-tree I get the following crash: [20467:20467:1001/103914:9811384406:ERROR:process_util_posix.cc(144)] Received signal 11 base::debug::StackTrace::StackTrace() [0x50cf7e] base::(anonymous namespace)::StackDumpSignalHandler() [0x524df4] 0x7f602d4eb4c0 WTF::StringImpl::rawHash() [0xc7520a] WTF::StringImpl::hasHash() [0xc751e5] WTF::StringImpl::existingHash() [0xc75169] WTF::AtomicStringHash::hash() [0xc7513d] WTF::HashMapTranslator<>::hash<>() [0x3042bf5] WTF::HashTable<>::add<>() [0x30427cd] WTF::HashMap<>::inlineAdd() [0x30426cc] WTF::HashMap<>::add() [0x30424a4] WebCore::Document::getCachedLocalizer() [0x303b928] WebCore::Element::localizer() [0x308d50d] WebCore::NumberInputType::localizeValue() [0x2ddc975] WebCore::NumberInputType::visibleValue() [0x2ddca31] WebCore::TextFieldInputType::updateInnerTextValue() [0x2de7e46] WebCore::HTMLInputElement::updateType() [0x2d75e1c] WebCore::HTMLInputElement::parseAttribute() [0x2d7710f] WebCore::Element::attributeChanged() [0x30888e9] WebCore::StyledElement::attributeChanged() [0x311a349] WebCore::Element::parserSetAttributes() [0x308943a] WebCore::HTMLConstructionSite::createHTMLElement() [0x2eb6856] WebCore::HTMLConstructionSite::insertSelfClosingHTMLElement() [0x2eb6dcf] WebCore::HTMLTreeBuilder::processStartTagForInBody() [0x2e4c85f] WebCore::HTMLTreeBuilder::processStartTag() [0x2e46426] WebCore::HTMLTreeBuilder::processToken() [0x2e45ae1] WebCore::HTMLTreeBuilder::constructTreeFromAtomicToken() [0x2e44e1b] WebCore::HTMLTreeBuilder::constructTreeFromToken() [0x2e44d1a] WebCore::HTMLDocumentParser::pumpTokenizer() [0x2e2ab66] WebCore::HTMLDocumentParser::pumpTokenizerIfPossible() [0x2e2a5f5] WebCore::HTMLDocumentParser::resumeParsingAfterScriptExecution() [0x2e2ba21] WebCore::HTMLDocumentParser::notifyFinished() [0x2e2bdc7] WebCore::HTMLDocumentParser::notifyFinished() [0x2e2be2f] WebCore::CachedResource::checkNotify() [0x28e97dd] WebCore::CachedScript::data() [0x2904118] WebCore::SubresourceLoader::didFinishLoading() [0x28cb94a] WebCore::ResourceLoader::didFinishLoading() [0x28c5705] WebCore::ResourceHandleInternal::didFinishLoading() [0x39a2624] webkit_glue::WebURLLoaderImpl::Context::OnCompletedRequest() [0x1d40e54] content::ResourceDispatcher::OnRequestComplete() [0xbeb4bd] DispatchToMethod<>() [0xbecde8] ResourceMsg_RequestComplete::Dispatch<>() [0xbec846] content::ResourceDispatcher::DispatchMessage() [0xbea227] content::ResourceDispatcher::OnMessageReceived() [0xbe962a] ChildThread::OnMessageReceived() [0xacca3b] IPC::ChannelProxy::Context::OnDispatchMessage() [0x2091b59] base::internal::RunnableAdapter<>::Run() [0x2095c7a] base::internal::InvokeHelper<>::MakeItSo() [0x2095be1] base::internal::Invoker<>::Run() [0x2095b8c] base::Callback<>::Run() [0x42be1e] MessageLoop::RunTask() [0x49bcbc] MessageLoop::DeferOrRunPendingTask() [0x49c0ab] MessageLoop::DoWork() [0x49c255] base::MessagePumpDefault::Run() [0x4a6168] MessageLoop::RunInternal() [0x49b6e6] MessageLoop::RunHandler() [0x49b595] base::RunLoop::Run() [0x4bd5c2] MessageLoop::Run() [0x49ae31] RendererMain() [0xd16610] content::RunZygote() [0xca6297] content::RunNamedProcessTypeMain() [0xca6594] content::ContentMainRunnerImpl::Run() [0xca738d] Also tracked in https://code.google.com/p/chromium/issues/detail?id=153248 731678 1 166471 jochen 2012-10-01 07:20:01 -0700 Created attachment 166471 Patch 731876 2 166471 webkit.review.bot 2012-10-01 12:07:46 -0700 Comment on attachment 166471 Patch Clearing flags on attachment: 166471 Committed r130062: <http://trac.webkit.org/changeset/130062> 731877 3 webkit.review.bot 2012-10-01 12:07:50 -0700 All reviewed patches have been landed. Closing bug. 732143 4 ojan 2012-10-01 17:13:59 -0700 Reverted r130062 for reason: Causes a ton of gtest failures on the chromium bots Committed r130101: <http://trac.webkit.org/changeset/130101> 732144 5 ojan 2012-10-01 17:15:08 -0700 See http://build.chromium.org/p/chromium.webkit/builders/Win%20%28dbg%29/builds/7893 for the failures. 732146 6 ojan 2012-10-01 17:15:46 -0700 It wasn't clear to me whether this assert was showing places where the code is wrong or whether the assert is wrong. Either way, it would be good to fix the gtest failures first. 732377 7 jochen 2012-10-02 00:45:30 -0700 (In reply to comment #6) > It wasn't clear to me whether this assert was showing places where the code is wrong or whether the assert is wrong. Either way, it would be good to fix the gtest failures first. sorry for the mess. It's indeed a failure in the tests. I'm fixing this. 732541 8 jochen 2012-10-02 04:41:23 -0700 Landed again http://trac.webkit.org/changeset/130152 166471 2012-10-01 07:20:01 -0700 2012-10-01 12:07:45 -0700 Patch bug-98001-20121001161915.patch text/plain 1676 jochen U3VidmVyc2lvbiBSZXZpc2lvbjogMTMwMDQyCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggNWE4ZWI5NTJhMjllNWQ1 NjMwOWUyYmM0MGIxYWYyMzJlNjJhMmE5Mi4uZmVkZjU1NTgxZDE2MGViZjgwZmU5YmZiOWQ3NDk3 ODE4OWI1MjE4YSAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE3IEBACisyMDEyLTEwLTAxICBKb2No ZW4gRWlzaW5nZXIgIDxqb2NoZW5AY2hyb21pdW0ub3JnPgorCisgICAgICAgIFtjaHJvbWl1bV0g QVNTRVJUIHRoYXQgdGhlIGVtYmVkZGVyIGhhcyBzZXQgYSBkZWZhdWx0IGxvY2FsZQorICAgICAg ICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9OTgwMDEKKworICAgICAg ICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBUaGUgY2FsbHNpdGVzIGFz c3VtZSB0aGF0IHRoZSBkZWZhdWx0IGxhbmd1YWdlIGlzIGFsd2F5cyBkZWZpbmVkLCBlLmcuCisg ICAgICAgIERvY3VtZW50OjpnZXRDYWNoZWRMb2NhbGl6ZXIuIEFkZCBhbiBBU1NFUlQoKSBzdGF0 ZW1lbnQgc28gYW4gZW1iZWRkZXIKKyAgICAgICAgZG9lc24ndCBoYXZlIHRvIGd1ZXNzIHdoYXQg dGhleSBkaWQgd3JvbmcuCisKKyAgICAgICAgKiBwbGF0Zm9ybS9jaHJvbWl1bS9MYW5ndWFnZUNo cm9taXVtLmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OnBsYXRmb3JtTGFuZ3VhZ2UpOgorCiAyMDEy LTEwLTAxICBBbmRyZWkgQnVjdXIgIDxhYnVjdXJAYWRvYmUuY29tPgogCiAgICAgICAgIFtDU1Mg UmVnaW9uc10gUmVtb3ZlIHRoZSBkZXByZWNhdGVkIEFQSSBEb2N1bWVudC53ZWJraXRHZXRGbG93 QnlOYW1lCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9wbGF0Zm9ybS9jaHJvbWl1bS9MYW5n dWFnZUNocm9taXVtLmNwcCBiL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL2Nocm9taXVtL0xhbmd1 YWdlQ2hyb21pdW0uY3BwCmluZGV4IDQ2Y2M4YWRkNmNjZDNiMGZjMzA4OGE3ZGQ5NjBiMjk5OTk5 NTI4MzQuLjQ1NDRlNDJhMTZhZmM5OTIyNGNlNjI3OGYxOGY2NjMxMDc5ZmIyMDYgMTAwNjQ0Ci0t LSBhL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL2Nocm9taXVtL0xhbmd1YWdlQ2hyb21pdW0uY3Bw CisrKyBiL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL2Nocm9taXVtL0xhbmd1YWdlQ2hyb21pdW0u Y3BwCkBAIC00MCw4ICs0MCwxMCBAQCBuYW1lc3BhY2UgV2ViQ29yZSB7CiBzdGF0aWMgU3RyaW5n IHBsYXRmb3JtTGFuZ3VhZ2UoKQogewogICAgIERFRklORV9TVEFUSUNfTE9DQUwoU3RyaW5nLCBj b21wdXRlZERlZmF1bHRMYW5ndWFnZSwgKCkpOwotICAgIGlmIChjb21wdXRlZERlZmF1bHRMYW5n dWFnZS5pc0VtcHR5KCkpCisgICAgaWYgKGNvbXB1dGVkRGVmYXVsdExhbmd1YWdlLmlzRW1wdHko KSkgewogICAgICAgICBjb21wdXRlZERlZmF1bHRMYW5ndWFnZS5hcHBlbmQoV2ViS2l0OjpQbGF0 Zm9ybTo6Y3VycmVudCgpLT5kZWZhdWx0TG9jYWxlKCkpOworICAgICAgICBBU1NFUlQoIWNvbXB1 dGVkRGVmYXVsdExhbmd1YWdlLmlzRW1wdHkoKSk7CisgICAgfQogICAgIHJldHVybiBjb21wdXRl ZERlZmF1bHRMYW5ndWFnZTsKIH0KIAo=