Bug 107033
| Summary: | REGRESSION: Several tests crashing after r139853 | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Levi Weintraub <leviw> |
| Component: | Web Inspector (Deprecated) | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED INVALID | ||
| Severity: | Normal | CC: | apavlov, burg, keishi, kkania, loislo, pfeldman, pmuellr, vsevik, web-inspector-bugs, yurys |
| Priority: | P2 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Levi Weintraub
Falkiness dashboard: http://goo.gl/MTsB7
Failing tests:
fast/frames/valid.html
fast/events/form-iframe-target-before-load-crash.html
fast/events/before-unload-with-subframes.html
fast/css/stylesheet-enable-first-alternate-link.html
Here's an example crash:
crash log for DumpRenderTree (pid 2621):
STDOUT: <empty>
STDERR: Received signal 11 <unknown> 000000000000
STDERR: [0x7fe875fbf88e] base::debug::StackTrace::StackTrace()
STDERR: [0x7fe875fbf138] base::debug::(anonymous namespace)::StackDumpSignalHandler()
STDERR: [0x7fe86bd368f0] <unknown>
STDERR: [0x7fe871f0e878] WebCore::Frame::page()
STDERR: [0x7fe871f0eab3] WebCore::InspectorInstrumentation::instrumentingAgentsForFrame()
STDERR: [0x7fe8733d0e50] WebCore::InspectorInstrumentation::frameClearedScheduledNavigation()
STDERR: [0x7fe8733d09ab] WebCore::NavigationScheduler::timerFired()
STDERR: [0x7fe8733d2c5c] WebCore::Timer<>::fired()
STDERR: [0x7fe872b97aa5] WebCore::ThreadTimers::sharedTimerFiredInternal()
STDERR: [0x7fe872b979cf] WebCore::ThreadTimers::sharedTimerFired()
STDERR: [0x7fe8763865d1] webkit_glue::WebKitPlatformSupportImpl::DoTimeout()
STDERR: [0x7fe87638795d] base::internal::RunnableAdapter<>::Run()
STDERR: [0x7fe87638784b] base::internal::InvokeHelper<>::MakeItSo()
STDERR: [0x7fe87638778b] base::internal::Invoker<>::Run()
STDERR: [0x7fe875fb51a5] base::Callback<>::Run()
STDERR: [0x7fe87607a787] base::Timer::RunScheduledTask()
STDERR: [0x7fe87607a87b] base::BaseTimerTaskInternal::Run()
STDERR: [0x7fe87607abd7] base::internal::RunnableAdapter<>::Run()
STDERR: [0x7fe87607ab5b] base::internal::InvokeHelper<>::MakeItSo()
STDERR: [0x7fe87607ab07] base::internal::Invoker<>::Run()
STDERR: [0x7fe875fb51a5] base::Callback<>::Run()
STDERR: [0x7fe875ffab2b] MessageLoop::RunTask()
STDERR: [0x7fe875ffac46] MessageLoop::DeferOrRunPendingTask()
STDERR: [0x7fe875ffb4db] MessageLoop::DoWork()
STDERR: [0x7fe875f99736] base::MessagePumpGlib::RunWithDispatcher()
STDERR: [0x7fe875f99b16] base::MessagePumpGlib::Run()
STDERR: [0x7fe875ffa71b] MessageLoop::RunInternal()
STDERR: [0x7fe875ffa5d2] MessageLoop::RunHandler()
STDERR: [0x7fe87603282e] base::RunLoop::Run()
STDERR: [0x7fe875ff9f00] MessageLoop::Run()
STDERR: [0x0000005184ae] webkit_support::RunMessageLoop()
STDERR: [0x000000499986] TestShell::waitTestFinished()
STDERR: [0x000000490c4c] TestShell::runFileTest()
STDERR: [0x00000046c974] runTest()
STDERR: [0x00000046d4ca] main
STDERR: [0x7fe86b9c1c4d] <unknown>
STDERR: [0x00000046ad09] <unknown>
STDERR: r8: 000000000000004c r9: 0101010101010101 r10: 0000000000000000 r11: 00007fe86ba28c96
STDERR: r12: 0000000000000001 r13: 00007fffcd83ae10 r14: 0000000000000000 r15: 0000000000000000
STDERR: di: cdcdcdcdcdcdcdcd si: 0000000000000000 bp: 00007fffcd8394b0 bx: 0000000000000000
STDERR: dx: 0000000000001cf7 ax: cdcdcdcdcdcdcdcd cx: 0000000000185fa0 sp: 00007fffcd8394b0
STDERR: ip: 00007fe871f0e878 efl: 0000000000010282 cgf: 0000000000000033 erf: 0000000000000000
STDERR: trp: 000000000000000d msk: 0000000000000000 cr2: 0000000000000000
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Levi Weintraub
These only occur on Debug.
Levi Weintraub
Marked the broken tests as crashing in r139893.
Ken Kania
I'm unable to repro any of these failures on my local linux box. I'll try windows.
From the crash stack, the problem looks like the frame is being deleted during the redirect, and we end up accessing junk.
Brian Burg
Wrong component.