Bug 137316

Summary:	fast/multicol/newmulticol/spanner-crash.html still crashes sometimes
Product:	WebKit	Reporter:	Beth Dakin <bdakin>
Component:	Layout and Rendering	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED DUPLICATE
Severity:	Normal	CC:	ap, bdakin, ddkilzer, hyatt, stavila
Priority:	P2	Keywords:	InRadar
Version:	528+ (Nightly build)
Hardware:	Unspecified
OS:	Unspecified

Description Beth Dakin 2014-10-01 14:55:08 PDT

fast/multicol/newmulticol/spanner-crash.html crashed on the bots today, in a different way than it had been crashing before. The previous crash was an assert fixed by Hyatt with http://trac.webkit.org/changeset/174126

Here is the new intermittent crash:  

Process:         com.apple.WebKit.WebContent.Development [62651]
Path:            /Volumes/VOLUME/*/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.Development.xpc/Contents/MacOS/com.apple.WebKit.WebContent.Development
Identifier:      com.apple.WebKit.WebContent.Development
Version:         601+ (601.1.1+)
Code Type:       X86-64 (Native)
Parent Process:  ??? [1]
Responsible:     com.apple.WebKit.WebContent.Development [62651]
User ID:         501

Date/Time:       2014-10-01 14:26:04.002 -0700
OS Version:      Mac OS X 10.9.4 (13E28)
Report Version:  11
Anonymous UUID:  E724C068-036D-67C1-EA3C-9A0CD8F1E44C


Crashed Thread:  0  Dispatch queue: com.apple.main-thread

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: EXC_I386_GPFLT

Application Specific Information:
CRASHING TEST:fast/multicol/newmulticol/spanner-crash.html

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore             	0x00000001129cd420 WebCore::Node::treeScope() const + 16 (Node.h:403)
1   com.apple.WebCore             	0x00000001129c8313 WebCore::Node::document() const + 83 (Node.h:398)
2   com.apple.WebCore             	0x00000001129c9c19 WebCore::RenderObject::document() const + 25 (RenderObject.h:584)
3   com.apple.WebCore             	0x00000001129c9b75 WebCore::RenderObject::view() const + 21 (RenderObject.h:571)
4   com.apple.WebCore             	0x0000000114203c7d WebCore::RenderObject::insertedIntoTree() + 317 (RenderObject.cpp:2062)
5   com.apple.WebCore             	0x00000001140c3f86 WebCore::RenderElement::insertedIntoTree() + 326 (RenderElement.cpp:977)
6   com.apple.WebCore             	0x00000001140c23e5 WebCore::RenderElement::insertChildInternal(WebCore::RenderObject*, WebCore::RenderObject*, WebCore::RenderElement::NotifyChildrenType) + 789 (RenderElement.cpp:572)
7   com.apple.WebCore             	0x00000001140c2030 WebCore::RenderElement::addChild(WebCore::RenderObject*, WebCore::RenderObject*) + 736 (RenderElement.cpp:497)
8   com.apple.WebCore             	0x0000000113ffbdbb WebCore::RenderBlock::addChildIgnoringContinuation(WebCore::RenderObject*, WebCore::RenderObject*) + 1323 (RenderBlock.cpp:579)
9   com.apple.WebCore             	0x0000000113ffb888 WebCore::RenderBlock::addChild(WebCore::RenderObject*, WebCore::RenderObject*) + 120 (RenderBlock.cpp:493)
10  com.apple.WebCore             	0x0000000114046923 WebCore::RenderBlockFlow::addChild(WebCore::RenderObject*, WebCore::RenderObject*) + 179 (RenderBlockFlow.cpp:3708)
11  com.apple.WebCore             	0x00000001140a0617 WebCore::RenderBoxModelObject::moveChildTo(WebCore::RenderBoxModelObject*, WebCore::RenderObject*, WebCore::RenderObject*, bool) + 423 (RenderBoxModelObject.cpp:2686)
12  com.apple.WebCore             	0x00000001140a08ac WebCore::RenderBoxModelObject::moveChildrenTo(WebCore::RenderBoxModelObject*, WebCore::RenderObject*, WebCore::RenderObject*, WebCore::RenderObject*, bool) + 556 (RenderBoxModelObject.cpp:2725)
13  com.apple.WebCore             	0x0000000114010ac8 WebCore::RenderBoxModelObject::moveChildrenTo(WebCore::RenderBoxModelObject*, WebCore::RenderObject*, WebCore::RenderObject*, bool) + 72 (RenderBoxModelObject.h:305)
14  com.apple.WebCore             	0x00000001141d62e4 WebCore::RenderMultiColumnFlowThread::populate() + 180 (RenderMultiColumnFlowThread.cpp:162)
15  com.apple.WebCore             	0x000000011402d086 WebCore::RenderBlockFlow::createMultiColumnFlowThread() + 214 (RenderBlockFlow.cpp:129)
16  com.apple.WebCore             	0x0000000114031fbb WebCore::RenderBlockFlow::setComputedColumnCountAndWidth(int, WebCore::LayoutUnit) + 123 (RenderBlockFlow.cpp:3771)
17  com.apple.WebCore             	0x0000000114031f2e WebCore::RenderBlockFlow::computeColumnCountAndWidth() + 1998 (RenderBlockFlow.cpp:428)
18  com.apple.WebCore             	0x00000001140316c2 WebCore::RenderBlockFlow::recomputeLogicalWidthAndColumnWidth() + 66 (RenderBlockFlow.cpp:389)
19  com.apple.WebCore             	0x000000011403213b WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 235 (RenderBlockFlow.cpp:439)
20  com.apple.WebCore             	0x0000000113ffdf2d WebCore::RenderBlock::layout() + 125 (RenderBlock.cpp:1023)
21  com.apple.WebCore             	0x0000000114035dbc WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) + 1324 (RenderBlockFlow.cpp:715)
22  com.apple.WebCore             	0x000000011403373a WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) + 618 (RenderBlockFlow.cpp:634)
23  com.apple.WebCore             	0x00000001140324cd WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 1149 (RenderBlockFlow.cpp:489)
24  com.apple.WebCore             	0x0000000113ffdf2d WebCore::RenderBlock::layout() + 125 (RenderBlock.cpp:1023)
25  com.apple.WebCore             	0x00000001140dff4b WebCore::RenderFlowThread::layout() + 315 (RenderFlowThread.cpp:203)
26  com.apple.WebCore             	0x00000001141d6125 WebCore::RenderMultiColumnFlowThread::layout() + 213 (RenderMultiColumnFlowThread.cpp:136)
27  com.apple.WebCore             	0x000000011404682f WebCore::RenderBlockFlow::layoutSpecialExcludedChild(bool) + 287 (RenderBlockFlow.cpp:3683)
28  com.apple.WebCore             	0x00000001140335ef WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) + 287 (RenderBlockFlow.cpp:605)
29  com.apple.WebCore             	0x00000001140324cd WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 1149 (RenderBlockFlow.cpp:489)
30  com.apple.WebCore             	0x0000000113ffdf2d WebCore::RenderBlock::layout() + 125 (RenderBlock.cpp:1023)
31  com.apple.WebCore             	0x0000000114035dbc WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) + 1324 (RenderBlockFlow.cpp:715)
32  com.apple.WebCore             	0x000000011403373a WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) + 618 (RenderBlockFlow.cpp:634)
33  com.apple.WebCore             	0x00000001140324cd WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 1149 (RenderBlockFlow.cpp:489)
34  com.apple.WebCore             	0x0000000113ffdf2d WebCore::RenderBlock::layout() + 125 (RenderBlock.cpp:1023)
35  com.apple.WebCore             	0x00000001140dff4b WebCore::RenderFlowThread::layout() + 315 (RenderFlowThread.cpp:203)
36  com.apple.WebCore             	0x00000001141d6125 WebCore::RenderMultiColumnFlowThread::layout() + 213 (RenderMultiColumnFlowThread.cpp:136)
37  com.apple.WebCore             	0x000000011404682f WebCore::RenderBlockFlow::layoutSpecialExcludedChild(bool) + 287 (RenderBlockFlow.cpp:3683)
38  com.apple.WebCore             	0x00000001140335ef WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) + 287 (RenderBlockFlow.cpp:605)
39  com.apple.WebCore             	0x00000001140324cd WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 1149 (RenderBlockFlow.cpp:489)
40  com.apple.WebCore             	0x0000000113ffdf2d WebCore::RenderBlock::layout() + 125 (RenderBlock.cpp:1023)
41  com.apple.WebCore             	0x0000000114035dbc WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) + 1324 (RenderBlockFlow.cpp:715)
42  com.apple.WebCore             	0x000000011403373a WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) + 618 (RenderBlockFlow.cpp:634)
43  com.apple.WebCore             	0x00000001140324cd WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 1149 (RenderBlockFlow.cpp:489)
44  com.apple.WebCore             	0x0000000113ffdf2d WebCore::RenderBlock::layout() + 125 (RenderBlock.cpp:1023)
45  com.apple.WebCore             	0x000000011431a08d WebCore::RenderView::layoutContent(WebCore::LayoutState const&) + 93 (RenderView.cpp:233)
46  com.apple.WebCore             	0x000000011431aef1 WebCore::RenderView::layout() + 1873 (RenderView.cpp:359)
47  com.apple.WebCore             	0x00000001132b5994 WebCore::FrameView::layout(bool) + 3220 (FrameView.cpp:1317)
48  com.apple.WebCore             	0x0000000112f19889 WebCore::Document::implicitClose() + 1225 (Document.cpp:2486)
49  com.apple.WebCore             	0x000000011327e88b WebCore::FrameLoader::checkCallImplicitClose() + 155 (FrameLoader.cpp:899)
50  com.apple.WebCore             	0x000000011327e544 WebCore::FrameLoader::checkCompleted() + 276 (FrameLoader.cpp:846)
51  com.apple.WebCore             	0x000000011327cdf8 WebCore::FrameLoader::finishedParsing() + 184 (FrameLoader.cpp:766)
52  com.apple.WebCore             	0x0000000112f2559b WebCore::Document::finishedParsing() + 379 (Document.cpp:4568)
53  com.apple.WebCore             	0x00000001133ace48 WebCore::HTMLConstructionSite::finishedParsing() + 24 (HTMLConstructionSite.cpp:396)
54  com.apple.WebCore             	0x00000001134bc8a7 WebCore::HTMLTreeBuilder::finished() + 183 (HTMLTreeBuilder.cpp:2999)
55  com.apple.WebCore             	0x00000001133bd97e WebCore::HTMLDocumentParser::end() + 190 (HTMLDocumentParser.cpp:440)
56  com.apple.WebCore             	0x00000001133bb9e3 WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd() + 275 (HTMLDocumentParser.cpp:451)
57  com.apple.WebCore             	0x00000001133bb7f0 WebCore::HTMLDocumentParser::prepareToStopParsing() + 288 (HTMLDocumentParser.cpp:165)
58  com.apple.WebCore             	0x00000001133bd9d3 WebCore::HTMLDocumentParser::attemptToEnd() + 67 (HTMLDocumentParser.cpp:463)
59  com.apple.WebCore             	0x00000001133bda28 WebCore::HTMLDocumentParser::finish() + 72 (HTMLDocumentParser.cpp:491)
60  com.apple.WebCore             	0x0000000112fa4bba WebCore::DocumentWriter::end() + 346 (DocumentWriter.cpp:247)
61  com.apple.WebCore             	0x0000000112f6bc43 WebCore::DocumentLoader::finishedLoading(double) + 1587 (DocumentLoader.cpp:442)
62  com.apple.WebCore             	0x0000000112f6b57e WebCore::DocumentLoader::notifyFinished(WebCore::CachedResource*) + 270 (DocumentLoader.cpp:376)
63  com.apple.WebCore             	0x0000000112b73112 WebCore::CachedResource::checkNotify() + 130 (CachedResource.cpp:347)
64  com.apple.WebCore             	0x0000000112b73224 WebCore::CachedResource::finishLoading(WebCore::ResourceBuffer*) + 52 (CachedResource.cpp:364)
65  com.apple.WebCore             	0x0000000112b6f344 WebCore::CachedRawResource::finishLoading(WebCore::ResourceBuffer*) + 228 (CachedRawResource.cpp:102)
66  com.apple.WebCore             	0x00000001145d9863 WebCore::SubresourceLoader::didFinishLoading(double) + 467 (SubresourceLoader.cpp:311)
67  com.apple.WebKit              	0x000000010ea7234c WebKit::WebResourceLoader::didFinishResourceLoad(double) + 156 (WebResourceLoader.cpp:156)
68  com.apple.WebKit              	0x000000010ea757eb void IPC::callMemberFunctionImpl<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(double), std::__1::tuple<double>, 0ul>(WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(double), std::__1::tuple<double>&&, std::index_sequence<0ul>) + 155 (HandleMessage.h:17)
69  com.apple.WebKit              	0x000000010ea75748 void IPC::callMemberFunction<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(double), std::__1::tuple<double>, std::make_index_sequence<1ul> >(std::__1::tuple<double>&&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(double)) + 88 (HandleMessage.h:23)
70  com.apple.WebKit              	0x000000010ea74c3d void IPC::handleMessage<Messages::WebResourceLoader::DidFinishResourceLoad, WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(double)>(IPC::MessageDecoder&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(double)) + 221 (HandleMessage.h:121)
71  com.apple.WebKit              	0x000000010ea74322 WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection*, IPC::MessageDecoder&) + 770 (WebResourceLoaderMessageReceiver.cpp:72)
72  com.apple.WebKit              	0x000000010e526330 WebKit::NetworkProcessConnection::didReceiveMessage(IPC::Connection*, IPC::MessageDecoder&) + 160 (NetworkProcessConnection.cpp:64)
73  com.apple.WebKit              	0x000000010e312ea3 IPC::Connection::dispatchMessage(IPC::MessageDecoder&) + 51 (Connection.cpp:810)
74  com.apple.WebKit              	0x000000010e30b230 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::MessageDecoder, std::__1::default_delete<IPC::MessageDecoder> >) + 368 (Connection.cpp:828)
75  com.apple.WebKit              	0x000000010e312c7f IPC::Connection::dispatchOneMessage() + 1439 (Connection.cpp:856)
76  com.apple.WebKit              	0x000000010e323f62 WTF::FunctionWrapper<void (IPC::Connection::*)()>::operator()(IPC::Connection*) + 114 (Functional.h:218)
77  com.apple.WebKit              	0x000000010e323ee5 WTF::BoundFunctionImpl<WTF::FunctionWrapper<void (IPC::Connection::*)()>, void (IPC::Connection*)>::operator()() + 53 (Functional.h:496)
78  com.apple.WebKit              	0x000000010e32a212 WTF::Function<void ()>::operator()() const + 114 (Functional.h:704)
79  com.apple.WebKit              	0x000000010e32a18c std::__1::__function::__func<WTF::Function<void ()>, std::__1::allocator<WTF::Function<void ()> >, void ()>::operator()() + 60 (functional:1370)
80  com.apple.JavaScriptCore      	0x000000011154609a std::__1::function<void ()>::operator()() const + 26 (functional:1755)
81  com.apple.JavaScriptCore      	0x0000000111555b74 WTF::RunLoop::performWork() + 276 (RunLoop.cpp:106)
82  com.apple.JavaScriptCore      	0x0000000111557054 WTF::RunLoop::performWork(void*) + 36 (RunLoopCF.cpp:38)
83  com.apple.CoreFoundation      	0x00007fff868105b1 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
84  com.apple.CoreFoundation      	0x00007fff86801c62 __CFRunLoopDoSources0 + 242
85  com.apple.CoreFoundation      	0x00007fff868013ef __CFRunLoopRun + 831
86  com.apple.CoreFoundation      	0x00007fff86800e75 CFRunLoopRunSpecific + 309
87  com.apple.HIToolbox           	0x00007fff89aaca0d RunCurrentEventLoopInMode + 226
88  com.apple.HIToolbox           	0x00007fff89aac7b7 ReceiveNextEventCommon + 479
89  com.apple.HIToolbox           	0x00007fff89aac5bc _BlockUntilNextEventMatchingListInModeWithFilter + 65
90  com.apple.AppKit              	0x00007fff922f124e _DPSNextEvent + 1434
91  com.apple.AppKit              	0x00007fff922f089b -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 122
92  com.apple.AppKit              	0x00007fff922e499c -[NSApplication run] + 553
93  com.apple.AppKit              	0x00007fff922cf783 NSApplicationMain + 940
94  com.apple.XPCService          	0x00007fff91cf1c0f _xpc_main + 385
95  libxpc.dylib                  	0x00007fff92fa9bde xpc_main + 399
96  com.apple.WebKit.WebContent.Development	0x000000010a728135 main + 37
97  libdyld.dylib                 	0x00007fff89dd45fd start + 1

Comment 1 Beth Dakin 2014-10-01 15:01:43 PDT

Marked as crash-flaky: http://trac.webkit.org/changeset/174176

Comment 2 Alexey Proskuryakov 2014-11-17 12:49:27 PST

<rdar://problem/19005378>

Comment 3 Alexey Proskuryakov 2014-11-17 12:59:17 PST

Skipped in r176222.

Comment 4 David Kilzer (:ddkilzer) 2015-02-03 15:49:39 PST

Fixed in r175641.  <http://trac.webkit.org/changeset/175641>

*** This bug has been marked as a duplicate of bug 137273 ***

Comment 5 Alexey Proskuryakov 2015-08-12 22:31:23 PDT

Unskipped in r188376.