9862 2006-07-11 15:37:21 -0700 REGRESSION: GMail: Crash in RenderView::repaintViewRectangle when spoofing as FF 2006-07-12 21:46:32 -0700 1 1 1 Unclassified WebKit Layout and Rendering 420+ Mac OS X 10.4 RESOLVED FIXED GoogleBug, InRadar, NeedsReduction, Regression P1 Normal --- 9638 1 justin.garcia webkit-unassigned mitz oldest_to_newest 49353 0 justin.garcia 2006-07-11 15:37:21 -0700 Spoof as FF Goto: http://gmail.google.com/ Login Crash: #0 0x01f8eb4c in WebCore::RenderView::repaintViewRectangle at RenderView.cpp:226 #1 0x01fb90bc in WebCore::RenderObject::repaint at RenderObject.cpp:1676 #2 0x01fa9318 in WebCore::RenderLayer::updateLayerPositions at RenderLayer.cpp:181 #3 0x01ec6288 in WebCore::FrameView::layout at FrameView.cpp:484 #4 0x01ec654c in WebCore::FrameView::layoutTimerFired at FrameView.cpp:1168 #5 0x0226f208 in WebCore::Timer<WebCore::FrameView>::fired at Timer.h:94 #6 0x0205811c in WebCore::TimerBase::fireTimers at Timer.cpp:335 #7 0x020581e8 in WebCore::TimerBase::sharedTimerFired at Timer.cpp:352 #8 0x02057594 in WebCore::timerFired at SharedTimerMac.cpp:46 Blocks progress on 9638 since you have to spoof as FF to enable GMail's RT Editor. 49365 1 justin.garcia 2006-07-11 17:08:22 -0700 Regressed somewhere between 15197 and 15227. 49374 2 alice.barraclough 2006-07-11 19:24:26 -0700 <rdar://problem/4622407> also at www.liberation.fr without spoofing 49384 3 mitz 2006-07-11 22:48:52 -0700 I got a similar crash twice when I tried to close the big Flash ad at http://www.ynet.co.il/ 49385 4 9387 mitz 2006-07-11 23:21:25 -0700 Created attachment 9387 Test case This test case triggers the same crash, which happens when you attempt to paint the contents of an IFRAME with display:none. Click the button then go ahead and print (or click Preview in the print dialog). 49386 5 9388 mitz 2006-07-11 23:25:01 -0700 Created attachment 9388 Better test case - just click to crash 49387 6 9389 mitz 2006-07-11 23:57:22 -0700 Created attachment 9389 Add missing null check 49567 7 ddkilzer 2006-07-12 21:46:32 -0700 Committed revision 15402. 9387 2006-07-11 23:21:25 -0700 2006-07-11 23:25:01 -0700 Test case iframe crasher reduction.html text/html 163 mitz PGlmcmFtZSBpZD0idCIgc3JjPSJhYm91dDpibGFuayI+PC9pZnJhbWU+CkNsaWNrIGFuZCBwcmlu dCB0byA8YnV0dG9uIG9uY2xpY2s9ImRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0Jykuc3R5bGUu ZGlzcGxheT0nbm9uZSc7IHdpbmRvdy5wcmludCgpOyI+Q3Jhc2g8L2J1dHRvbj4uCg== 9388 2006-07-11 23:25:01 -0700 2006-07-11 23:25:01 -0700 Better test case - just click to crash iframe crasher reduction.html text/html 185 mitz PGlmcmFtZSBpZD0idCIgc3JjPSJhYm91dDpibGFuayI+PC9pZnJhbWU+CkNsaWNrIHRvIDxidXR0 b24gb25jbGljaz0iZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ3QnKS5zdHlsZS5kaXNwbGF5PSdu b25lJzsgZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ3QnKS5zcmM9J2Fib3V0OmJsYW5rJzsiPkNy YXNoPC9idXR0b24+Lgo= 9389 2006-07-11 23:57:22 -0700 2006-07-12 00:22:15 -0700 Add missing null check 9862_r1.patch text/plain 4094 mitz SW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9D aGFuZ2VMb2cJKHJldmlzaW9uIDE1Mzc1KQorKysgTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCSh3b3Jr aW5nIGNvcHkpCkBAIC0xLDMgKzEsMTMgQEAKKzIwMDYtMDctMTIgIE1pdHogUGV0dGVsICA8b3Bl bmRhcndpbi5vcmdAbWl0enBldHRlbC5jb20+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZ IChPT1BTISkuCisKKyAgICAgICAgLSB0ZXN0IGZvciBodHRwOi8vYnVnemlsbGEub3BlbmRhcndp bi5vcmcvc2hvd19idWcuY2dpP2lkPTk4NjIKKyAgICAgICAgICBSRUdSRVNTSU9OOiBHTWFpbDog Q3Jhc2ggaW4gUmVuZGVyVmlldzo6cmVwYWludFZpZXdSZWN0YW5nbGUgd2hlbiBzcG9vZmluZyBh cyBGRgorCisgICAgICAgICogZmFzdC9mcmFtZXMvcmVwYWludC1kaXNwbGF5LW5vbmUtY3Jhc2gt ZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBmYXN0L2ZyYW1lcy9yZXBhaW50LWRpc3Bs YXktbm9uZS1jcmFzaC5odG1sOiBBZGRlZC4KKwogMjAwNi0wNy0xMSAgSnVzdGluIEdhcmNpYSAg PGp1c3Rpbi5nYXJjaWFAYXBwbGUuY29tPgogCiAgICAgICAgIFJldmlld2VkIGJ5IGxldmkKSW5k ZXg6IExheW91dFRlc3RzL2Zhc3QvZnJhbWVzL3JlcGFpbnQtZGlzcGxheS1ub25lLWNyYXNoLWV4 cGVjdGVkLnR4dAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9mYXN0L2ZyYW1lcy9yZXBhaW50 LWRpc3BsYXktbm9uZS1jcmFzaC1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCisrKyBMYXlvdXRU ZXN0cy9mYXN0L2ZyYW1lcy9yZXBhaW50LWRpc3BsYXktbm9uZS1jcmFzaC1leHBlY3RlZC50eHQJ KHJldmlzaW9uIDApCkBAIC0wLDAgKzEsNSBAQAorVGhpcyBpcyBhIHRlc3QgZm9yIGh0dHA6Ly9i dWd6aWxsYS5vcGVuZGFyd2luLm9yZy9zaG93X2J1Zy5jZ2k/aWQ9OTg2MiBSRUdSRVNTSU9OOiBH TWFpbDogQ3Jhc2ggaW4gUmVuZGVyVmlldzo6cmVwYWludFZpZXdSZWN0YW5nbGUgd2hlbiBzcG9v ZmluZyBhcyBGRi4KKworTm8gY3Jhc2ggbWVhbnMgdGVzdCBQQVNTLgorCisKSW5kZXg6IExheW91 dFRlc3RzL2Zhc3QvZnJhbWVzL3JlcGFpbnQtZGlzcGxheS1ub25lLWNyYXNoLmh0bWwKPT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQotLS0gTGF5b3V0VGVzdHMvZmFzdC9mcmFtZXMvcmVwYWludC1kaXNwbGF5LW5vbmUtY3Jh c2guaHRtbAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL2Zhc3QvZnJhbWVzL3JlcGFpbnQt ZGlzcGxheS1ub25lLWNyYXNoLmh0bWwJKHJldmlzaW9uIDApCkBAIC0wLDAgKzEsMjggQEAKKzxz Y3JpcHQ+CisgICAgaWYgKHdpbmRvdy5sYXlvdXRUZXN0Q29udHJvbGxlcikgeworICAgICAgICBs YXlvdXRUZXN0Q29udHJvbGxlci5kdW1wQXNUZXh0KCk7CisgICAgICAgIGxheW91dFRlc3RDb250 cm9sbGVyLndhaXRVbnRpbERvbmUoKTsKKyAgICB9CisKKyAgICBmdW5jdGlvbiB0ZXN0KCkKKyAg ICB7CisgICAgICAgIHZhciB0ID0gZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ3QnKTsKKyAgICAg ICAgZG9jdW1lbnQuYm9keS5vZmZzZXRUb3A7CisgICAgICAgIHQuc3R5bGUuZGlzcGxheT0nbm9u ZSc7CisgICAgICAgIHQuc3JjPSdhYm91dDpibGFuayc7CisgICAgICAgIHQuZG9jdW1lbnQuYm9k eS5vZmZzZXRUb3A7CisgICAgICAgIGlmICh3aW5kb3cubGF5b3V0VGVzdENvbnRyb2xsZXIpIHsK KyAgICAgICAgICAgIGxheW91dFRlc3RDb250cm9sbGVyLm5vdGlmeURvbmUoKTsKKyAgICAgICAg fQorICAgIH0KKzwvc2NyaXB0PgorPGJvZHkgb25sb2FkPSJ0ZXN0KCkiPgorICAgIDxwPgorICAg ICAgICBUaGlzIGlzIGEgdGVzdCBmb3IgPGk+PGEgaHJlZj0iaHR0cDovL2J1Z3ppbGxhLm9wZW5k YXJ3aW4ub3JnL3Nob3dfYnVnLmNnaT9pZD05ODYyIj5odHRwOi8vYnVnemlsbGEub3BlbmRhcndp bi5vcmcvc2hvd19idWcuY2dpP2lkPTk4NjI8L2E+CisgICAgICAgIFJFR1JFU1NJT046IEdNYWls OiBDcmFzaCBpbiBSZW5kZXJWaWV3OjpyZXBhaW50Vmlld1JlY3RhbmdsZSB3aGVuIHNwb29maW5n IGFzIEZGPC9pPi4KKyAgICA8L3A+CisgICAgPHA+CisgICAgICAgIE5vIGNyYXNoIG1lYW5zIHRl c3QgUEFTUy4KKyAgICA8L3A+CisgICAgPGlmcmFtZSBpZD0idCI+PC9pZnJhbWU+Cis8L2JvZHk+ CkluZGV4OiBXZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBXZWJDb3JlL0NoYW5nZUxv ZwkocmV2aXNpb24gMTUzNzUpCisrKyBXZWJDb3JlL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpA QCAtMSwzICsxLDE2IEBACisyMDA2LTA3LTEyICBNaXR6IFBldHRlbCAgPG9wZW5kYXJ3aW4ub3Jn QG1pdHpwZXR0ZWwuY29tPgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgor CisgICAgICAgIC0gZml4IGh0dHA6Ly9idWd6aWxsYS5vcGVuZGFyd2luLm9yZy9zaG93X2J1Zy5j Z2k/aWQ9OTg2MgorICAgICAgICAgIFJFR1JFU1NJT046IEdNYWlsOiBDcmFzaCBpbiBSZW5kZXJW aWV3OjpyZXBhaW50Vmlld1JlY3RhbmdsZSB3aGVuIHNwb29maW5nIGFzIEZGCisKKyAgICAgICAg VGVzdDogZmFzdC9mcmFtZXMvcmVwYWludC1kaXNwbGF5LW5vbmUtY3Jhc2guaHRtbAorCisgICAg ICAgICogcmVuZGVyaW5nL1JlbmRlclZpZXcuY3BwOgorICAgICAgICAoV2ViQ29yZTo6UmVuZGVy Vmlldzo6cmVwYWludFZpZXdSZWN0YW5nbGUpOiBBZGRlZCBudWxsIGNoZWNraW5nIG9mIHRoZSBv d25lciBlbGVtZW50J3MKKyAgICAgICAgcmVuZGVyZXIsIHdoaWNoIGNhbiBiZSBudWxsIGlmIHRo ZSBpZnJhbWUgaXMgc2V0IHRvIGRpc3BsYXk6bm9uZS4KKwogMjAwNi0wNy0xMSAgRGF2aWQgS2ls emVyICA8ZGRraWx6ZXJAa2lsemVyLm5ldD4KIAogICAgICAgICBXaW5kb3dzIGJ1aWxkIGZpeC4g IFJldmlld2VkIGJ5IE5PQk9EWS4KSW5kZXg6IFdlYkNvcmUvcmVuZGVyaW5nL1JlbmRlclZpZXcu Y3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvcmVuZGVyaW5nL1JlbmRlclZpZXcuY3BwCShyZXZp c2lvbiAxNTM1OCkKKysrIFdlYkNvcmUvcmVuZGVyaW5nL1JlbmRlclZpZXcuY3BwCSh3b3JraW5n IGNvcHkpCkBAIC0yMTMsMTIgKzIxMywxMSBAQCB2b2lkIFJlbmRlclZpZXc6OnJlcGFpbnRWaWV3 UmVjdGFuZ2xlKGNvCiAgICAgICAgIEVsZW1lbnQqIGVsdCA9IGVsZW1lbnQoKS0+ZG9jdW1lbnQo KS0+b3duZXJFbGVtZW50KCk7CiAgICAgICAgIGlmICghZWx0KQogICAgICAgICAgICAgbV9mcmFt ZVZpZXctPnJlcGFpbnRSZWN0YW5nbGUociwgaW1tZWRpYXRlKTsKLSAgICAgICAgZWxzZSB7Cisg ICAgICAgIGVsc2UgaWYgKFJlbmRlck9iamVjdCogb2JqID0gZWx0LT5yZW5kZXJlcigpKSB7CiAg ICAgICAgICAgICAvLyBTdWJ0cmFjdCBvdXQgdGhlIGNvbnRlbnRzWCBhbmQgY29udGVudHNZIG9m ZnNldHMgdG8gZ2V0IG91ciBjb29yZHMgd2l0aGluIHRoZSB2aWV3aW5nCiAgICAgICAgICAgICAv LyByZWN0YW5nbGUuCiAgICAgICAgICAgICByLm1vdmUoLW1fZnJhbWVWaWV3LT5jb250ZW50c1go KSwgLW1fZnJhbWVWaWV3LT5jb250ZW50c1koKSk7CiAKLSAgICAgICAgICAgIFJlbmRlck9iamVj dCogb2JqID0gZWx0LT5yZW5kZXJlcigpOwogICAgICAgICAgICAgLy8gRklYTUU6IEhhcmRjb2Rl ZCBvZmZzZXRzIGhlcmUgYXJlIG5vdCBnb29kLgogICAgICAgICAgICAgaW50IHlGcmFtZU9mZnNl dCA9IG1fZnJhbWVWaWV3LT5oYXNCb3JkZXIoKSA/IDIgOiAwOwogICAgICAgICAgICAgaW50IHhG cmFtZU9mZnNldCA9IG1fZnJhbWVWaWV3LT5oYXNCb3JkZXIoKSA/IDEgOiAwOwo=