Bug 123863

Summary:

Assertion failure end < m_runCount in WebCore::BidiRunList<WebCore::BidiRun>::reverseRuns

Product:

WebKit

Reporter:

Ryosuke Niwa <rniwa>

Component:

Text

Assignee:

Ryosuke Niwa <rniwa>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

enrica, igor.oliveira, mitz, mmaxfield, webkit-bug-importer

Priority:

Keywords:

BlinkMergeCandidate, InRadar

Version:

528+ (Nightly build)

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Merges the fix	none
Merges the fix	none

Ryosuke Niwa

Reported 2013-11-05 21:12:56 PST

Merge https://chromium.googlesource.com/chromium/blink/+/cbaa92c763a37d89eeabd01658e522219299290c ASSERTION FAILED: end < m_runCount /Volumes/Data/webkit2/Source/WebCore/platform/text/BidiRunList.h(207) : void WebCore::BidiRunList<WebCore::BidiRun>::reverseRuns(unsigned int, unsigned int) [Run = WebCore::BidiRun] 1 0x1098fd4d0 WTFCrash 2 0x10c4fd9cf WebCore::BidiRunList<WebCore::BidiRun>::reverseRuns(unsigned int, unsigned int) 3 0x10c4fbb20 WebCore::BidiResolver<WebCore::InlineIterator, WebCore::BidiRun>::createBidiRunsForLine(WebCore::InlineIterator const&, WebCore::VisualDirectionOverride, bool) 4 0x10c4eb522 WebCore::constructBidiRunsForSegment(WebCore::BidiResolver<WebCore::InlineIterator, WebCore::BidiRun>&, WebCore::BidiRunList<WebCore::BidiRun>&, WebCore::InlineIterator const&, WebCore::VisualDirectionOverride, bool) 5 0x10c4e4163 WebCore::constructBidiRunsForLine(WebCore::RenderBlockFlow const*, WebCore::BidiResolver<WebCore::InlineIterator, WebCore::BidiRun>&, WebCore::BidiRunList<WebCore::BidiRun>&, WebCore::InlineIterator const&, WebCore::VisualDirectionOverride, bool) 6 0x10c4e0dcf WebCore::RenderBlockFlow::layoutRunsAndFloatsInRange(WebCore::LineLayoutState&, WebCore::BidiResolver<WebCore::InlineIterator, WebCore::BidiRun>&, WebCore::InlineIterator const&, WebCore::BidiStatus const&, unsigned int) 7 0x10c4df4a9 WebCore::RenderBlockFlow::layoutRunsAndFloats(WebCore::LineLayoutState&, bool) 8 0x10c4e4db1 WebCore::RenderBlockFlow::layoutLineBoxes(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 9 0x10ccd70c1 WebCore::RenderBlockFlow::layoutInlineChildren(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 10 0x10ccd6335 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) 11 0x10c4a543d WebCore::RenderBlock::layout() 12 0x10ccd96e8 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 13 0x10ccd7341 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) 14 0x10ccd6358 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) 15 0x10c4a543d WebCore::RenderBlock::layout() 16 0x10ccd96e8 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 17 0x10ccd7341 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) 18 0x10ccd6358 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) 19 0x10c4a543d WebCore::RenderBlock::layout() 20 0x10ccd96e8 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 21 0x10ccd7341 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) 22 0x10ccd6358 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) 23 0x10c4a543d WebCore::RenderBlock::layout() 24 0x10c762a5d WebCore::RenderView::layoutContent(WebCore::LayoutState const&) 25 0x10c763c07 WebCore::RenderView::layout() 26 0x10b8fe0ae WebCore::FrameView::layout(bool) 27 0x10b63e11c WebCore::Document::implicitClose() 28 0x10b8d1c0b WebCore::FrameLoader::checkCallImplicitClose() 29 0x10b8d1886 WebCore::FrameLoader::checkCompleted() 30 0x10b8d01a8 WebCore::FrameLoader::finishedParsing() 31 0x10b648c9b WebCore::Document::finishedParsing()

Attachments
Merges the fix (3.06 KB, patch) 2013-11-05 21:23 PST, Ryosuke Niwa	no flags	Details Formatted Diff Diff
Merges the fix (3.49 KB, patch) 2013-11-05 21:28 PST, Ryosuke Niwa	no flags	Details Formatted Diff Diff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.

Ryosuke Niwa

Comment 1 2013-11-05 21:23:17 PST

Created attachment 216123 [details] Merges the fix

Radar WebKit Bug Importer

Comment 2 2013-11-05 21:24:01 PST

<rdar://problem/15401213>

Ryosuke Niwa

Comment 3 2013-11-05 21:28:07 PST

Created attachment 216124 [details] Merges the fix

Andreas Kling

Comment 4 2013-11-06 00:01:15 PST

Comment on attachment 216123 [details] Merges the fix r=me

Ryosuke Niwa

Comment 5 2013-11-06 00:03:11 PST

Comment on attachment 216123 [details] Merges the fix Clearing flags on attachment: 216123 Committed r158729: <http://trac.webkit.org/changeset/158729>

Ryosuke Niwa

Comment 6 2013-11-06 00:03:20 PST

All reviewed patches have been landed. Closing bug.

Note You need to log in before you can comment on or make changes to this bug.