Bug 121497

Summary: ASSERTION FAILED: anchorType() == PositionIsOffsetInAnchor in WebCore::Position::offsetInContainerNode
Product: WebKit Reporter: Renata Hodovan <rhodovan.u-szeged>
Component: HTML EditingAssignee: Nobody <webkit-unassigned>
Status: RESOLVED CONFIGURATION CHANGED    
Severity: Normal CC: ahmad.saleem792, bfulgham, cdumez, darin, enrica, eric, mhodovan.u-szeged, rniwa, webkit-bug-importer, zalan
Priority: P2 Keywords: InRadar
Version: 528+ (Nightly build)   
Hardware: PC   
OS: Linux   
Bug Depends on:    
Bug Blocks: 116980    
Attachments:
Description Flags
Test case none

Renata Hodovan
Reported 2013-09-17 09:13:01 PDT
Created attachment 211914 [details] Test case The failing test: <u style="position: absolute;"></u> <bdo></bdo><code/></code><input><iframe onload='document.designMode="on";document.execCommand("selectall");document.execCommand("italic");document.execCommand("RemoveFormat");'></iframe> Its backtrace: Program received signal SIGSEGV, Segmentation fault. 0x00007ffff56dafad in WTFCrash () at /home/reni/Data/REPOS/webkit_sec/Source/WTF/wtf/Assertions.cpp:342 342 *(int *)(uintptr_t)0xbbadbeef = 0; (gdb) bt #0 0x00007ffff56dafad in WTFCrash () at /home/reni/Data/REPOS/webkit_sec/Source/WTF/wtf/Assertions.cpp:342 #1 0x00007ffff3b9d274 in WebCore::Position::offsetInContainerNode (this=0x7fffffff9ed0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Position.h:107 #2 0x00007ffff42944ef in WebCore::ApplyStyleCommand::removeInlineStyle (this=0x8e5410, style=0x8e5540, start=..., end=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/ApplyStyleCommand.cpp:1141 #3 0x00007ffff4291178 in WebCore::ApplyStyleCommand::applyInlineStyle (this=0x8e5410, style=0x8e5540) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/ApplyStyleCommand.cpp:634 #4 0x00007ffff428e6b5 in WebCore::ApplyStyleCommand::doApply (this=0x8e5410) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/ApplyStyleCommand.cpp:227 #5 0x00007ffff429e0fe in WebCore::CompositeEditCommand::applyCommandToComposite (this=0x90f2a0, prpCommand=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/CompositeEditCommand.cpp:267 #6 0x00007ffff42fc83d in WebCore::RemoveFormatCommand::doApply (this=0x90f2a0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/RemoveFormatCommand.cpp:96 #7 0x00007ffff429dec6 in WebCore::CompositeEditCommand::apply (this=0x90f2a0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/CompositeEditCommand.cpp:216 #8 0x00007ffff429dc4e in WebCore::applyCommand (command=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/CompositeEditCommand.cpp:172 #9 0x00007ffff42bf96c in WebCore::Editor::removeFormattingAndStyle (this=0x7dfe90) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/Editor.cpp:684 #10 0x00007ffff42d1792 in WebCore::executeRemoveFormat (frame=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/EditorCommand.cpp:974 #11 0x00007ffff42d32d2 in WebCore::Editor::Command::execute (this=0x7fffffffa250, parameter=..., triggeringEvent=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/EditorCommand.cpp:1709 #12 0x00007ffff41a1ed6 in WebCore::Document::execCommand (this=0x8b0610, commandName=..., userInterface=false, value=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:4172 #13 0x00007ffff4ebfb12 in WebCore::jsDocumentPrototypeFunctionExecCommand (exec=0x7fff8abfe0a8) at generated/JSDocument.cpp:2763 #14 0x00007fff9ffff0e5 in ?? () #15 0x00007fffffffa3f0 in ?? () #16 0x00007ffff679ffa2 in llint_op_call () from /home/reni/Data/REPOS/webkit_sec/WebKitBuild/Debug/lib/libQt5WebKit.so.5 #17 0x00007fff8abfe060 in ?? () #18 0x00000000007a4f78 in ?? () #19 0x00007fffffffa3b0 in ?? () #20 0x00007ffff5506ba3 in JSC::JSStack::installTrapsAfterFrame (this=0x0, frame=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/interpreter/JSStackInlines.h:212 #21 0x00007ffff551752c in JSC::JITCode::execute (this=0x8f0c00, stack=0x7a4f78, callFrame=0x7fff8abfe060, vm=0x826170) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/jit/JITCode.cpp:46 #22 0x00007ffff5503a02 in JSC::Interpreter::executeCall (this=0x7a4f60, callFrame=0x7fff9c0af9e0, function=0x7fff9c01e5f0, callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/interpreter/Interpreter.cpp:841 #23 0x00007ffff55d58b7 in JSC::call (exec=0x7fff9c0af9e0, functionObject=..., callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/runtime/CallData.cpp:39 #24 0x00007ffff3f118bf in WebCore::JSMainThreadExecState::call (exec=0x7fff9c0af9e0, functionObject=..., callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/bindings/js/JSMainThreadExecState.h:53 #25 0x00007ffff3f40c6d in WebCore::JSEventListener::handleEvent (this=0x8e91c0, scriptExecutionContext=0x8b06c0, event=0x8ee290) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/bindings/js/JSEventListener.cpp:130 #26 0x00007ffff420f7aa in WebCore::EventTarget::fireEventListeners (this=0x8e9230, event=0x8ee290, d=0x8c7920, entry=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventTarget.cpp:271 #27 0x00007ffff420f4c7 in WebCore::EventTarget::fireEventListeners (this=0x8e9230, event=0x8ee290) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventTarget.cpp:227 #28 0x00007ffff423b79b in WebCore::Node::handleLocalEvents (this=0x8e9230, event=0x8ee290) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Node.cpp:2097 #29 0x00007ffff4201d54 in WebCore::EventContext::handleLocalEvents (this=0x8ee1f0, event=0x8ee290) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventContext.cpp:58 #30 0x00007ffff4203c33 in WebCore::EventDispatcher::dispatchEventAtTarget (this=0x7fffffffaa30) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatcher.cpp:161 #31 0x00007ffff42038f0 in WebCore::EventDispatcher::dispatch (this=0x7fffffffaa30) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatcher.cpp:118 #32 0x00007ffff4202715 in WebCore::EventDispatchMediator::dispatchEvent (this=0x90e020, dispatcher=0x7fffffffaa30) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatchMediator.cpp:54 ---Type <return> to continue, or q <return> to quit--- #33 0x00007ffff4202e9d in WebCore::EventDispatcher::dispatchEvent (node=0x8e9230, mediator=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatcher.cpp:52 #34 0x00007ffff423b9b0 in WebCore::Node::dispatchEvent (this=0x8e9230, event=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Node.cpp:2118 #35 0x00007ffff462bc41 in WebCore::DOMWindow::dispatchLoadEvent (this=0x8c8c80) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/page/DOMWindow.cpp:1714 #36 0x00007ffff41a03c0 in WebCore::Document::dispatchWindowLoadEvent (this=0x912eb0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:3639 #37 0x00007ffff419ba6b in WebCore::Document::implicitClose (this=0x912eb0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:2419 #38 0x00007ffff45a08af in WebCore::FrameLoader::checkCallImplicitClose (this=0x90a560) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:848 #39 0x00007ffff45a0620 in WebCore::FrameLoader::checkCompleted (this=0x90a560) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:791 #40 0x00007ffff45a0355 in WebCore::FrameLoader::finishedParsing (this=0x90a560) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:724 #41 0x00007ffff41a2c9b in WebCore::Document::finishedParsing (this=0x912eb0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:4437 #42 0x00007ffff43f6273 in WebCore::HTMLConstructionSite::finishedParsing (this=0x8e9948) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLConstructionSite.cpp:352 #43 0x00007ffff442a989 in WebCore::HTMLTreeBuilder::finished (this=0x8e9930) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLTreeBuilder.cpp:2912 #44 0x00007ffff43fd99e in WebCore::HTMLDocumentParser::end (this=0x9114d0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:763 #45 0x00007ffff43fda89 in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x9114d0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:774 #46 0x00007ffff43fc5f8 in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x9114d0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:211 #47 0x00007ffff43fdace in WebCore::HTMLDocumentParser::attemptToEnd (this=0x9114d0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:786 #48 0x00007ffff43fdb87 in WebCore::HTMLDocumentParser::finish (this=0x9114d0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:835 #49 0x00007ffff45980ab in WebCore::DocumentWriter::end (this=0x90e560) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentWriter.cpp:244 #50 0x00007ffff458ab61 in WebCore::DocumentLoader::finishedLoading (this=0x90e4c0, finishTime=12027.942013547001) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:407 #51 0x00007ffff458e738 in WebCore::DocumentLoader::maybeLoadEmpty (this=0x90e4c0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:1348 #52 0x00007ffff458e857 in WebCore::DocumentLoader::startLoadingMainResource (this=0x90e4c0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:1360 #53 0x00007ffff45a6c86 in WebCore::FrameLoader::continueLoadAfterWillSubmitForm (this=0x90a560) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:2229 #54 0x00007ffff45a98de in WebCore::FrameLoader::continueLoadAfterNavigationPolicy (this=0x90a560, formState=..., shouldContinue=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:2883 #55 0x00007ffff45a8df7 in WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy (argument=0x90a560, request=..., formState=..., shouldContinue=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:2713 #56 0x00007ffff45c220b in WebCore::PolicyCallback::call (this=0x7fffffffb680, shouldContinue=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/PolicyCallback.cpp:103 #57 0x00007ffff45c33a2 in WebCore::PolicyChecker::continueAfterNavigationPolicy (this=0x90a820, policy=WebCore::PolicyUse) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/PolicyChecker.cpp:180 #58 0x00007ffff3b764b4 in WebCore::FrameLoaderClientQt::callPolicyFunction (this=0x8deb40, function= (void (WebCore::PolicyChecker::*)(WebCore::PolicyChecker * const, WebCore::PolicyAction)) 0x7ffff45c3138 <WebCore::PolicyChecker::continueAfterNavigationPolicy(WebCore::PolicyAction)>, action=WebCore::PolicyUse) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:246 #59 0x00007ffff3b7c3c6 in WebCore::FrameLoaderClientQt::dispatchDecidePolicyForNavigationAction (this=0x8deb40, function= (void (WebCore::PolicyChecker::*)(WebCore::PolicyChecker * const, WebCore::PolicyAction)) 0x7ffff45c3138 <WebCore::PolicyChecker::continueAfterNavigationPolicy(WebCore::PolicyAction)>, action=..., request=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:1282 #60 0x00007ffff45c2c7d in WebCore::PolicyChecker::checkNavigationPolicy (this=0x90a820, request=..., loader=0x90e4c0, formState=..., function=0x7ffff45a8da8 <WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy(void*, WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool)>, argument=0x90a560) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/PolicyChecker.cpp:99 #61 0x00007ffff45a36ce in WebCore::FrameLoader::loadWithDocumentLoader (this=0x90a560, loader=0x90e4c0, type=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, prpFormState=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:1421 ---Type <return> to continue, or q <return> to quit--- #62 0x00007ffff45a2f4f in WebCore::FrameLoader::loadWithNavigationAction (this=0x90a560, request=..., action=..., lockHistory=false, type=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, formState=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:1325 #63 0x00007ffff45a251d in WebCore::FrameLoader::loadURL (this=0x90a560, newURL=..., referrer=..., frameName=..., lockHistory=false, newLoadType=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, event=..., prpFormState=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:1260 #64 0x00007ffff45a0b42 in WebCore::FrameLoader::loadURLIntoChildFrame (this=0x7e0340, url=..., referer=..., childFrame=0x90a4d0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:876 #65 0x00007ffff3b7c834 in WebCore::FrameLoaderClientQt::createFrame (this=0x7735b0, url=..., name=..., ownerElement=0x8e9230, referrer=..., allowsScrolling=true, marginWidth=-1, marginHeight=-1) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:1327 #66 0x00007ffff45d2e59 in WebCore::SubframeLoader::loadSubframe (this=0x7e0368, ownerElement=0x8e9230, url=..., name=..., referrer=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:361 #67 0x00007ffff45d2c0d in WebCore::SubframeLoader::loadOrRedirectSubframe (this=0x7e0368, ownerElement=0x8e9230, url=..., frameName=..., lockHistory=true, lockBackForwardList=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:335 #68 0x00007ffff45d18be in WebCore::SubframeLoader::requestFrame (this=0x7e0368, ownerElement=0x8e9230, urlString=..., frameName=..., lockHistory=true, lockBackForwardList=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:89 #69 0x00007ffff438d38e in WebCore::HTMLFrameElementBase::openURL (this=0x8e9230, lockHistory=true, lockBackForwardList=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLFrameElementBase.cpp:89 #70 0x00007ffff438d888 in WebCore::HTMLFrameElementBase::setNameAndOpenURL (this=0x8e9230) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLFrameElementBase.cpp:142 #71 0x00007ffff438d953 in WebCore::HTMLFrameElementBase::didNotifySubtreeInsertions (this=0x8e9230) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLFrameElementBase.cpp:173 #72 0x00007ffff41848e0 in WebCore::ChildNodeInsertionNotifier::notify (this=0x7fffffffc6c0, node=0x8e9230) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/ContainerNodeAlgorithms.h:233 #73 0x00007ffff4187833 in WebCore::ContainerNode::parserAppendChild (this=0x8b2f60, newChild=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/ContainerNode.cpp:730 #74 0x00007ffff43f4e10 in WebCore::executeTask (task=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLConstructionSite.cpp:97 #75 0x00007ffff43f5249 in WebCore::HTMLConstructionSite::executeQueuedTasks (this=0x7a0328) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLConstructionSite.cpp:150 #76 0x00007ffff441e6d0 in WebCore::HTMLTreeBuilder::constructTree (this=0x7a0310, token=0x7fffffffc7f0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLTreeBuilder.cpp:368 #77 0x00007ffff43fd322 in WebCore::HTMLDocumentParser::constructTreeFromHTMLToken (this=0x7dc4d0, rawToken=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:597 #78 0x00007ffff43fcf57 in WebCore::HTMLDocumentParser::pumpTokenizer (this=0x7dc4d0, mode=WebCore::HTMLDocumentParser::AllowYield) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:551 #79 0x00007ffff43fc71f in WebCore::HTMLDocumentParser::pumpTokenizerIfPossible (this=0x7dc4d0, mode=WebCore::HTMLDocumentParser::AllowYield) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:235 #80 0x00007ffff43fd8be in WebCore::HTMLDocumentParser::append (this=0x7dc4d0, inputSource=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:747 #81 0x00007ffff418dc07 in WebCore::DecodedDataDocumentParser::flush (this=0x7dc4d0, writer=0x694220) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/DecodedDataDocumentParser.cpp:60 #82 0x00007ffff4598071 in WebCore::DocumentWriter::end (this=0x694220) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentWriter.cpp:241 #83 0x00007ffff458ab61 in WebCore::DocumentLoader::finishedLoading (this=0x694180, finishTime=0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:407 #84 0x00007ffff458a8ca in WebCore::DocumentLoader::notifyFinished (this=0x694180, resource=0x76ded0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:344 #85 0x00007ffff4571afe in WebCore::CachedResource::checkNotify (this=0x76ded0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedResource.cpp:369 #86 0x00007ffff4571bd4 in WebCore::CachedResource::finishLoading (this=0x76ded0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedResource.cpp:385 #87 0x00007ffff456e326 in WebCore::CachedRawResource::finishLoading (this=0x76ded0, data=0x73f430) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedRawResource.cpp:94 #88 0x00007ffff45d4a15 in WebCore::SubresourceLoader::didFinishLoading (this=0x7c4f80, finishTime=0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubresourceLoader.cpp:282 ---Type <return> to continue, or q <return> to quit--- #89 0x00007ffff45cb33b in WebCore::ResourceLoader::didFinishLoading (this=0x7c4f80, finishTime=0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/ResourceLoader.cpp:488 #90 0x00007ffff4a86713 in WebCore::QNetworkReplyHandler::finish (this=0x7c57c0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:516 #91 0x00007ffff4a85432 in WebCore::QNetworkReplyHandlerCallQueue::flush (this=0x7c57f8) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:250 #92 0x00007ffff4a8512f in WebCore::QNetworkReplyHandlerCallQueue::push (this=0x7c57f8, method=(void (WebCore::QNetworkReplyHandler::*)(WebCore::QNetworkReplyHandler * const)) 0x7ffff4a86558 <WebCore::QNetworkReplyHandler::finish()>) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:216 #93 0x00007ffff4a8607c in WebCore::QNetworkReplyWrapper::didReceiveFinished (this=0x7c85e0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:409 #94 0x00007ffff4a88a0e in WebCore::QNetworkReplyWrapper::qt_static_metacall (_o=0x7c85e0, _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0x7fffffffce40) at .moc/release-shared/moc_QNetworkReplyHandler.cpp:176 #95 0x00007ffff21e65cb in QMetaObject::activate(QObject*, int, int, void**) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #96 0x00007ffff21e784e in QObject::event(QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #97 0x00007ffff302ddbc in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Widgets.so.5 #98 0x00007ffff3031075 in QApplication::notify(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Widgets.so.5 #99 0x00007ffff21c1dbe in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #100 0x00007ffff21c3a76 in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #101 0x00007ffff2209333 in ?? () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #102 0x00007fffee34a3c6 in g_main_dispatch (context=0x6632f0) at /build/buildd/glib2.0-2.37.7/./glib/gmain.c:3065 #103 g_main_context_dispatch (context=context@entry=0x6632f0) at /build/buildd/glib2.0-2.37.7/./glib/gmain.c:3641 #104 0x00007fffee34a718 in g_main_context_iterate (context=context@entry=0x6632f0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at /build/buildd/glib2.0-2.37.7/./glib/gmain.c:3712 #105 0x00007fffee34a7bc in g_main_context_iteration (context=0x6632f0, may_block=1) at /build/buildd/glib2.0-2.37.7/./glib/gmain.c:3773 #106 0x00007ffff22094bc in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #107 0x00007ffff21c0d3b in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #108 0x00007ffff21c4120 in QCoreApplication::exec() () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5 #109 0x0000000000421ba0 in launcherMain (app=...) at /home/reni/Data/REPOS/webkit_sec/Tools/QtTestBrowser/qttestbrowser.cpp:49 #110 0x0000000000423680 in main (argc=2, argv=0x7fffffffdb18) at /home/reni/Data/REPOS/webkit_sec/Tools/QtTestBrowser/qttestbrowser.cpp:318
Attachments
Test case (223 bytes, text/html)
2013-09-17 09:13 PDT, Renata Hodovan 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Renata Hodovan
Comment 1 2014-09-08 06:03:54 PDT
*** Bug 136064 has been marked as a duplicate of this bug. ***
Brent Fulgham
Comment 2 2016-08-03 12:38:41 PDT
This is still occurring in r204037.
Radar WebKit Bug Importer
Comment 3 2016-08-03 12:39:21 PDT
<rdar://problem/27683620>
Radar WebKit Bug Importer
Comment 4 2016-08-03 12:39:27 PDT
<rdar://problem/27683623>
Ahmad Saleem
Comment 5 2023-01-20 10:47:58 PST
I am not able to hit assertion using Minibrowser WK2 Debug build based of 259136@main on attached test case. Can we close this? Thanks!
Note You need to log in before you can comment on or make changes to this bug.