Bug 140941 – ASSERTION FAILED: !(newRadii.topLeft().height() && newRadii.bottomLeft().height()) in WebCore::calculateAdjustedInnerBorder

• Component: Layout and Rendering
• Status: NEW

[Renata Hodovan]

Created attachment 245449 [details]
Test case

Load this with debug WK:

<style>
table {
    -webkit-border-radius:.30% / .8;
}
</style>
<table border="1px">

Note: if doctype is defined then the fail disappears.


Backtrace:

ASSERTION FAILED: !(newRadii.topLeft().height() && newRadii.bottomLeft().height())
../../Source/WebCore/rendering/RenderBoxModelObject.cpp(2257) : WebCore::RoundedRect WebCore::calculateAdjustedInnerBorder(const WebCore::RoundedRect&, WebCore::BoxSide)

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fff8affd700 (LWP 30331)]
0x00007fffed8d24bb in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:321
321	    *(int *)(uintptr_t)0xbbadbeef = 0;
#0  0x00007fffed8d24bb in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:321
#1  0x00007ffff38f7f43 in WebCore::calculateAdjustedInnerBorder (innerBorder=..., side=WebCore::BSLeft) at ../../Source/WebCore/rendering/RenderBoxModelObject.cpp:2257
#2  0x00007ffff38f86d3 in WebCore::RenderBoxModelObject::clipBorderSideForComplexInnerPath (this=0x7ffff7f3cb00, graphicsContext=0x7ffff7f3d900, outerBorder=..., innerBorder=..., side=WebCore::BSLeft, edges=0x7fffffffbac0) at ../../Source/WebCore/rendering/RenderBoxModelObject.cpp:2294
#3  0x00007ffff38f3201 in WebCore::RenderBoxModelObject::paintOneBorderSide (this=0x7ffff7f3cb00, graphicsContext=0x7ffff7f3d900, style=..., outerBorder=..., innerBorder=..., sideRect=..., side=WebCore::BSLeft, adjacentSide1=WebCore::BSTop, adjacentSide2=WebCore::BSBottom, edges=0x7fffffffbac0, path=0x7fffffffb7f0, bleedAvoidance=WebCore::BackgroundBleedNone, includeLogicalLeftEdge=true, includeLogicalRightEdge=true, antialias=false, overrideColor=0x0) at ../../Source/WebCore/rendering/RenderBoxModelObject.cpp:1615
#4  0x00007ffff38f3f84 in WebCore::RenderBoxModelObject::paintBorderSides (this=0x7ffff7f3cb00, graphicsContext=0x7ffff7f3d900, style=..., outerBorder=..., innerBorder=..., innerBorderAdjustment=..., edges=0x7fffffffbac0, edgeSet=15, bleedAvoidance=WebCore::BackgroundBleedNone, includeLogicalLeftEdge=true, includeLogicalRightEdge=true, antialias=false, overrideColor=0x0) at ../../Source/WebCore/rendering/RenderBoxModelObject.cpp:1693
#5  0x00007ffff38f5607 in WebCore::RenderBoxModelObject::paintBorder (this=0x7ffff7f3cb00, info=..., rect=..., style=..., bleedAvoidance=WebCore::BackgroundBleedNone, includeLogicalLeftEdge=true, includeLogicalRightEdge=true) at ../../Source/WebCore/rendering/RenderBoxModelObject.cpp:1915
#6  0x00007ffff3a23950 in WebCore::RenderTable::paintBoxDecorations (this=0x7ffff7f3cb00, paintInfo=..., paintOffset=...) at ../../Source/WebCore/rendering/RenderTable.cpp:743
#7  0x00007ffff3a23140 in WebCore::RenderTable::paintObject (this=0x7ffff7f3cb00, paintInfo=..., paintOffset=...) at ../../Source/WebCore/rendering/RenderTable.cpp:664
#8  0x00007ffff3a23074 in WebCore::RenderTable::paint (this=0x7ffff7f3cb00, paintInfo=..., paintOffset=...) at ../../Source/WebCore/rendering/RenderTable.cpp:655
#9  0x00007ffff386f841 in WebCore::RenderBlock::paintChild (this=0x7ffff7f13c00, child=..., paintInfo=..., paintOffset=..., paintInfoForChild=..., usePrintRect=false) at ../../Source/WebCore/rendering/RenderBlock.cpp:1507
#10 0x00007ffff386f43b in WebCore::RenderBlock::paintChildren (this=0x7ffff7f13c00, paintInfo=..., paintOffset=..., paintInfoForChild=..., usePrintRect=false) at ../../Source/WebCore/rendering/RenderBlock.cpp:1477
#11 0x00007ffff386f3d7 in WebCore::RenderBlock::paintContents (this=0x7ffff7f13c00, paintInfo=..., paintOffset=...) at ../../Source/WebCore/rendering/RenderBlock.cpp:1470
#12 0x00007ffff3870034 in WebCore::RenderBlock::paintObject (this=0x7ffff7f13c00, paintInfo=..., paintOffset=...) at ../../Source/WebCore/rendering/RenderBlock.cpp:1603
#13 0x00007ffff386f180 in WebCore::RenderBlock::paint (this=0x7ffff7f13c00, paintInfo=..., paintOffset=...) at ../../Source/WebCore/rendering/RenderBlock.cpp:1437
#14 0x00007ffff386f841 in WebCore::RenderBlock::paintChild (this=0x7ffff7f13cc0, child=..., paintInfo=..., paintOffset=..., paintInfoForChild=..., usePrintRect=false) at ../../Source/WebCore/rendering/RenderBlock.cpp:1507
#15 0x00007ffff386f43b in WebCore::RenderBlock::paintChildren (this=0x7ffff7f13cc0, paintInfo=..., paintOffset=..., paintInfoForChild=..., usePrintRect=false) at ../../Source/WebCore/rendering/RenderBlock.cpp:1477
#16 0x00007ffff386f3d7 in WebCore::RenderBlock::paintContents (this=0x7ffff7f13cc0, paintInfo=..., paintOffset=...) at ../../Source/WebCore/rendering/RenderBlock.cpp:1470
#17 0x00007ffff3870034 in WebCore::RenderBlock::paintObject (this=0x7ffff7f13cc0, paintInfo=..., paintOffset=...) at ../../Source/WebCore/rendering/RenderBlock.cpp:1603
#18 0x00007ffff386f180 in WebCore::RenderBlock::paint (this=0x7ffff7f13cc0, paintInfo=..., paintOffset=...) at ../../Source/WebCore/rendering/RenderBlock.cpp:1437
#19 0x00007ffff3985f3d in WebCore::RenderLayer::paintForegroundForFragmentsWithPhase (this=0x7ffff7f3a480, phase=WebCore::PaintPhaseChildBlockBackgrounds, layerFragments=..., context=0x7ffff7f3d900, localPaintingInfo=..., paintBehavior=0, subtreePaintRootForRenderer=0x0) at ../../Source/WebCore/rendering/RenderLayer.cpp:4695
#20 0x00007ffff3985b75 in WebCore::RenderLayer::paintForegroundForFragments (this=0x7ffff7f3a480, layerFragments=..., context=0x7ffff7f3d900, transparencyLayerContext=0x7ffff7f3d900, transparencyPaintDirtyRect=..., haveTransparency=false, localPaintingInfo=..., paintBehavior=0, subtreePaintRootForRenderer=0x0, selectionOnly=false) at ../../Source/WebCore/rendering/RenderLayer.cpp:4655
#21 0x00007ffff3983f42 in WebCore::RenderLayer::paintLayerContents (this=0x7ffff7f3a480, context=0x7ffff7f3d900, paintingInfo=..., paintFlags=224) at ../../Source/WebCore/rendering/RenderLayer.cpp:4286
#22 0x00007ffff39829dc in WebCore::RenderLayer::paintLayerContentsAndReflection (this=0x7ffff7f3a480, context=0x7ffff7f3d900, paintingInfo=..., paintFlags=224) at ../../Source/WebCore/rendering/RenderLayer.cpp:3961
#23 0x00007ffff39828bb in WebCore::RenderLayer::paintLayer (this=0x7ffff7f3a480, context=0x7ffff7f3d900, paintingInfo=..., paintFlags=224) at ../../Source/WebCore/rendering/RenderLayer.cpp:3943
#24 0x00007ffff3984745 in WebCore::RenderLayer::paintList (this=0x7ffff7f3aa20, list=0x7ffff7f0d3b0, context=0x7ffff7f3d900, paintingInfo=..., paintFlags=224) at ../../Source/WebCore/rendering/RenderLayer.cpp:4385
#25 0x00007ffff3984005 in WebCore::RenderLayer::paintLayerContents (this=0x7ffff7f3aa20, context=0x7ffff7f3d900, paintingInfo=..., paintFlags=224) at ../../Source/WebCore/rendering/RenderLayer.cpp:4297
#26 0x00007ffff39829dc in WebCore::RenderLayer::paintLayerContentsAndReflection (this=0x7ffff7f3aa20, context=0x7ffff7f3d900, paintingInfo=..., paintFlags=0) at ../../Source/WebCore/rendering/RenderLayer.cpp:3961
#27 0x00007ffff39828bb in WebCore::RenderLayer::paintLayer (this=0x7ffff7f3aa20, context=0x7ffff7f3d900, paintingInfo=..., paintFlags=0) at ../../Source/WebCore/rendering/RenderLayer.cpp:3943
#28 0x00007ffff3981931 in WebCore::RenderLayer::paint (this=0x7ffff7f3aa20, context=0x7ffff7f3d900, damageRect=..., subpixelAccumulation=..., paintBehavior=0, subtreePaintRoot=0x0, paintFlags=0) at ../../Source/WebCore/rendering/RenderLayer.cpp:3746
#29 0x00007ffff35e09cd in WebCore::FrameView::paintContents (this=0x7ffff7ecdb00, context=0x7ffff7f3d900, dirtyRect=...) at ../../Source/WebCore/page/FrameView.cpp:3860
#30 0x00007ffff36a94b1 in WebCore::ScrollView::paint (this=0x7ffff7ecdb00, context=0x7ffff7f3d900, rect=...) at ../../Source/WebCore/platform/ScrollView.cpp:1203
#31 0x00007ffff2967481 in WebKit::WebPage::drawRect (this=0x7ffff7f34800, graphicsContext=..., rect=...) at ../../Source/WebKit2/WebProcess/WebPage/WebPage.cpp:1362
#32 0x00007ffff2a65d38 in WebKit::DrawingAreaImpl::display (this=0x6bc1f0, updateInfo=...) at ../../Source/WebKit2/WebProcess/WebPage/DrawingAreaImpl.cpp:658
#33 0x00007ffff2a655ce in WebKit::DrawingAreaImpl::display (this=0x6bc1f0) at ../../Source/WebKit2/WebProcess/WebPage/DrawingAreaImpl.cpp:574
#34 0x00007ffff2a6548c in WebKit::DrawingAreaImpl::displayTimerFired (this=0x6bc1f0) at ../../Source/WebKit2/WebProcess/WebPage/DrawingAreaImpl.cpp:553
#35 0x00007ffff2a67a83 in WTF::RunLoop::Timer<WebKit::DrawingAreaImpl>::fired (this=0x6bc3f0) at ../../Source/WTF/wtf/RunLoop.h:121
#36 0x00007ffff45437c9 in WTF::RunLoop::TimerBase::__lambda1::operator() (__closure=0x59ff10) at ../../Source/WTF/wtf/gtk/RunLoopGtk.cpp:121
#37 0x00007ffff4543c6f in std::_Function_handler<bool(), WTF::RunLoop::TimerBase::start(double, bool)::__lambda1>::_M_invoke(const std::_Any_data &) (__functor=...) at /usr/include/c++/4.8/functional:2057
#38 0x00007ffff4542e4a in std::function<bool ()>::operator()() const (this=0x7fffffffd5e8) at /usr/include/c++/4.8/functional:2464
#39 0x00007fffed924bc2 in WTF::GMainLoopSource::boolCallback (this=0x6bc400) at ../../Source/WTF/wtf/gobject/GMainLoopSource.cpp:405
#40 0x00007fffed925037 in WTF::GMainLoopSource::boolSourceCallback (source=0x6bc400, source@entry=<error reading variable: value has been optimized out>) at ../../Source/WTF/wtf/gobject/GMainLoopSource.cpp:462
#41 0x00007fffea742443 in g_timeout_dispatch (source=0x73d6b0, callback=<optimized out>, user_data=<optimized out>) at gmain.c:4472
#42 0x00007fffea741a1d in g_main_dispatch (context=0x478300) at gmain.c:3064
#43 g_main_context_dispatch (context=context@entry=0x478300) at gmain.c:3663
#44 0x00007fffea741d88 in g_main_context_iterate (context=0x478300, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3734
#45 0x00007fffea74204a in g_main_loop_run (loop=0x9013d0) at gmain.c:3928
#46 0x00007ffff45432bc in WTF::RunLoop::run () at ../../Source/WTF/wtf/gtk/RunLoopGtk.cpp:59
#47 0x00007ffff2a6f856 in WebKit::ChildProcessMain<WebKit::WebProcess, WebKit::WebProcessMain> (argc=2, argv=0x7fffffffd988) at ../../Source/WebKit2/Shared/unix/ChildProcessMain.h:61
#48 0x00007ffff2a6f6bb in WebKit::WebProcessMainUnix (argc=2, argv=0x7fffffffd988) at ../../Source/WebKit2/WebProcess/gtk/WebProcessMainGtk.cpp:77
#49 0x0000000000400891 in main (argc=2, argv=0x7fffffffd988) at ../../Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp:44

[Brent Fulgham]

Reproduces in r204037.

[Brent Fulgham]

<rdar://problem/27711383>