Bug 127778 – ASSERTION FAILED: style().outlineSize() <= view().maximalOutlineSize() in WebCore::RenderBox::clippedOverflowRectForRepaint

• Component: Layout and Rendering
• Status: RESOLVED WORKSFORME

[Martin Hodovan]

The failing test case:

<style>
    html{
        outline-style:auto;
        outline-width:inherit;
        outline-offset:1cm;
    } 
</style>


The error message:

ASSERTION FAILED: style().outlineSize() <= view().maximalOutlineSize()
/WebKit/Source/WebCore/rendering/RenderBox.cpp(2058) : virtual WebCore::LayoutRect WebCore::RenderBox::clippedOverflowRectForRepaint(const WebCore::RenderLayerModelObject*) const
Program received signal SIGSEGV, Segmentation fault.


The backtrace:

#1  0x00007ffff11e895c in WebCore::RenderBox::clippedOverflowRectForRepaint (this=0x834bc0, repaintContainer=0x0)
    at /home/martin/Data/WebKit/Source/WebCore/rendering/RenderBox.cpp:2058
#2  0x00007ffff127a712 in WebCore::RenderLayer::computeRepaintRects (this=0x834ef0, repaintContainer=0x0, geometryMap=0x7fffffffb8f0)
    at /home/martin/Data/WebKit/Source/WebCore/rendering/RenderLayer.cpp:715
#3  0x00007ffff1279a4f in WebCore::RenderLayer::updateLayerPositions (this=0x834ef0, geometryMap=0x7fffffffb8f0, flags=13)
    at /home/martin/Data/WebKit/Source/WebCore/rendering/RenderLayer.cpp:434
#4  0x00007ffff1279d61 in WebCore::RenderLayer::updateLayerPositions (this=0x93b140, geometryMap=0x7fffffffb8f0, flags=13)
    at /home/martin/Data/WebKit/Source/WebCore/rendering/RenderLayer.cpp:486
#5  0x00007ffff1279815 in WebCore::RenderLayer::updateLayerPositionsAfterLayout (this=0x93b140, rootLayer=0x93b140, flags=13)
    at /home/martin/Data/WebKit/Source/WebCore/rendering/RenderLayer.cpp:390
#6  0x00007ffff0edb96b in WebCore::FrameView::layout (this=0x787230, allowSubtree=true) at /home/martin/Data/WebKit/Source/WebCore/page/FrameView.cpp:1328
#7  0x00007ffff0ede9c4 in WebCore::FrameView::visibleContentsResized (this=0x787230) at /home/martin/Data/WebKit/Source/WebCore/page/FrameView.cpp:2193
#8  0x00007ffff0f8844a in WebCore::ScrollView::updateScrollbars (this=0x787230, desiredOffset=...) at /home/martin/Data/WebKit/Source/WebCore/platform/ScrollView.cpp:618
#9  0x00007ffff0f86e55 in WebCore::ScrollView::setContentsSize (this=0x787230, newSize=...) at /home/martin/Data/WebKit/Source/WebCore/platform/ScrollView.cpp:343
#10 0x00007ffff0ed95c1 in WebCore::FrameView::setContentsSize (this=0x787230, size=...) at /home/martin/Data/WebKit/Source/WebCore/page/FrameView.cpp:547
#11 0x00007ffff0ed9803 in WebCore::FrameView::adjustViewSize (this=0x787230) at /home/martin/Data/WebKit/Source/WebCore/page/FrameView.cpp:577
#12 0x00007ffff0edb8ca in WebCore::FrameView::layout (this=0x787230, allowSubtree=true) at /home/martin/Data/WebKit/Source/WebCore/page/FrameView.cpp:1318
#13 0x00007ffff0938afe in WebCore::Document::implicitClose (this=0x9038f0) at /home/martin/Data/WebKit/Source/WebCore/dom/Document.cpp:2455
#14 0x00007ffff0db3e09 in WebCore::FrameLoader::checkCallImplicitClose (this=0x925698) at /home/martin/Data/WebKit/Source/WebCore/loader/FrameLoader.cpp:892
#15 0x00007ffff0db3baa in WebCore::FrameLoader::checkCompleted (this=0x925698) at /home/martin/Data/WebKit/Source/WebCore/loader/FrameLoader.cpp:838
#16 0x00007ffff0db390f in WebCore::FrameLoader::finishedParsing (this=0x925698) at /home/martin/Data/WebKit/Source/WebCore/loader/FrameLoader.cpp:762
#17 0x00007ffff093ffa9 in WebCore::Document::finishedParsing (this=0x9038f0) at /home/martin/Data/WebKit/Source/WebCore/dom/Document.cpp:4449
#18 0x00007ffff0c36c9d in WebCore::HTMLConstructionSite::finishedParsing (this=0x8dba38) at /home/martin/Data/WebKit/Source/WebCore/html/parser/HTMLConstructionSite.cpp:337
#19 0x00007ffff0c701de in WebCore::HTMLTreeBuilder::finished (this=0x8dba20) at /home/martin/Data/WebKit/Source/WebCore/html/parser/HTMLTreeBuilder.cpp:3046
#20 0x00007ffff0c3df68 in WebCore::HTMLDocumentParser::end (this=0x8a48d0) at /home/martin/Data/WebKit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:439
#21 0x00007ffff0c3e051 in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x8a48d0)
    at /home/martin/Data/WebKit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:450
#22 0x00007ffff0c3cc99 in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x8a48d0) at /home/martin/Data/WebKit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:165
#23 0x00007ffff0c3e096 in WebCore::HTMLDocumentParser::attemptToEnd (this=0x8a48d0) at /home/martin/Data/WebKit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:462
#24 0x00007ffff0c3e14f in WebCore::HTMLDocumentParser::finish (this=0x8a48d0) at /home/martin/Data/WebKit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:490
#25 0x00007ffff0da5935 in WebCore::DocumentWriter::end (this=0x83d420) at /home/martin/Data/WebKit/Source/WebCore/loader/DocumentWriter.cpp:248
#26 0x00007ffff0d90f1f in WebCore::DocumentLoader::finishedLoading (this=0x83d380, finishTime=0) at /home/martin/Data/WebKit/Source/WebCore/loader/DocumentLoader.cpp:440
#27 0x00007ffff0d90c88 in WebCore::DocumentLoader::notifyFinished (this=0x83d380, resource=0x80d230) at /home/martin/Data/WebKit/Source/WebCore/loader/DocumentLoader.cpp:374
#28 0x00007ffff0e371d4 in WebCore::CachedResource::checkNotify (this=0x80d230) at /home/martin/Data/WebKit/Source/WebCore/loader/cache/CachedResource.cpp:332
#29 0x00007ffff0e372b2 in WebCore::CachedResource::finishLoading (this=0x80d230) at /home/martin/Data/WebKit/Source/WebCore/loader/cache/CachedResource.cpp:348
#30 0x00007ffff0e33c62 in WebCore::CachedRawResource::finishLoading (this=0x80d230, data=0x724ae0)
    at /home/martin/Data/WebKit/Source/WebCore/loader/cache/CachedRawResource.cpp:94
#31 0x00007ffff0defacd in WebCore::SubresourceLoader::didFinishLoading (this=0x80d760, finishTime=0)
    at /home/martin/Data/WebKit/Source/WebCore/loader/SubresourceLoader.cpp:309
#32 0x00007ffff0debd85 in WebCore::ResourceLoader::didFinishLoading (this=0x80d760, finishTime=0) at /home/martin/Data/WebKit/Source/WebCore/loader/ResourceLoader.cpp:517
#33 0x00007ffff1b689ad in WebCore::readCallback (asyncResult=0x810200, data=0x83f310)
    at /home/martin/Data/WebKit/Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:1325
#34 0x00007fffe7908b49 in async_ready_callback_wrapper (source_object=0x876aa0, res=0x810200, user_data=0x83f310) at ginputstream.c:530
#35 0x00007fffe792ac9b in g_task_return_now (task=0x810200) at gtask.c:1105
#36 0x00007fffe792acb9 in complete_in_idle_cb (task=0x810200) at gtask.c:1114
#37 0x00007fffed0e5f15 in g_main_dispatch (context=0x80fc80) at gmain.c:3054
#38 g_main_context_dispatch (context=context@entry=0x80fc80) at gmain.c:3630
#39 0x00007ffff7576d0b in _ecore_glib_select__locked (ecore_timeout=0x7fff00000001, efds=<optimized out>, wfds=0x7fffffffc9c0, rfds=0x7fffffffc940, ecore_fds=10, 
    ctx=<optimized out>) at ecore_glib.c:171
#40 _ecore_glib_select (ecore_fds=10, rfds=0x7fffffffc940, wfds=0x7fffffffc9c0, efds=<optimized out>, ecore_timeout=0x7fff00000001) at ecore_glib.c:205
#41 0x00007ffff7570e97 in _ecore_main_select (timeout=<optimized out>) at ecore_main.c:1466
#42 0x00007ffff7571a45 in _ecore_main_loop_iterate_internal (once_only=once_only@entry=0) at ecore_main.c:1894
#43 0x00007ffff7571d57 in ecore_main_loop_begin () at ecore_main.c:956
#44 0x00000000004068e7 in main (argc=2, argv=0x7fffffffde48) at /home/martin/Data/WebKit/Tools/EWebLauncher/main.c:1008

[Martin Hodovan]

Created attachment 222444 [details]
Test case

[Brent Fulgham]

This issue no longer occurs under GuardMalloc or ASAN as of r204037. If you believe there is still a bug, please reopen this issue with a revised test case.