Bug 153043
| Summary: | [iOS Simulator] fast/picture/image-picture-loads-1x.html crashes | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Ryan Haddad <ryanhaddad> |
| Component: | Images | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED FIXED | ||
| Severity: | Normal | CC: | hyatt, jonlee |
| Priority: | P2 | ||
| Version: | WebKit Nightly Build | ||
| Hardware: | iPhone / iPad | ||
| OS: | iOS 9.0 | ||
| See Also: | https://bugs.webkit.org/show_bug.cgi?id=153027 | ||
Ryan Haddad
[iOS Simulator] fast/picture/image-picture-loads-1x.html crashes
Application Specific Information:
CoreSimulator 179 - Device: iPhone 5s WebKit Tester2 - Runtime: iOS 9.0 (13A340) - DeviceType: iPhone 5s
CRASHING TEST: fast/picture/image-picture-invalid.html
Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0 com.apple.WebCore 0x000000010b093404 WebCore::HTMLImageElement::bestFitSourceFromPictureElement() + 1092
1 com.apple.WebCore 0x000000010b0937fc WebCore::HTMLImageElement::selectImageSource() + 28
2 com.apple.WebCore 0x000000010b0c7538 WebCore::HTMLPictureElement::sourcesChanged() + 72
3 com.apple.WebCore 0x000000010b0d7fac WebCore::HTMLSourceElement::removedFrom(WebCore::ContainerNode&) + 108
4 com.apple.WebCore 0x000000010acdeaa4 WebCore::notifyNodeRemovedFromDocument(WebCore::ContainerNode&, WebCore::Node&) + 36
5 com.apple.WebCore 0x000000010acdeb46 WebCore::notifyNodeRemovedFromDocument(WebCore::ContainerNode&, WebCore::Node&) + 198
6 com.apple.WebCore 0x000000010acdeb46 WebCore::notifyNodeRemovedFromDocument(WebCore::ContainerNode&, WebCore::Node&) + 198
7 com.apple.WebCore 0x000000010acdeb46 WebCore::notifyNodeRemovedFromDocument(WebCore::ContainerNode&, WebCore::Node&) + 198
8 com.apple.WebCore 0x000000010acdee66 WebCore::addChildNodesToDeletionQueue(WebCore::Node*&, WebCore::Node*&, WebCore::ContainerNode&) + 150f
9 com.apple.WebCore 0x000000010acdef12 WebCore::removeDetachedChildrenInContainer(WebCore::ContainerNode&) + 50
10 com.apple.WebCore 0x000000010ae3a4cf WebCore::Document::removedLastRef() + 383
11 ??? 0x000000010a370d08 0 + 4466347272
12 ??? 0x000000010a37099d 0 + 4466346397
Full crashlog:
<https://build.webkit.org/results/Apple%20iOS%209%20Simulator%20Release%20WK2%20(Tests)/r194928%20(2253)/fast/picture/image-picture-loads-1x-crash-log.txt>
<https://build.webkit.org/builders/Apple%20iOS%209%20Simulator%20Release%20WK2%20%28Tests%29/builds/2253>
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Ryan Haddad
Skipped on ios-simulator with <https://trac.webkit.org/r194930>
Dave Hyatt
Can close this since 153027 is reopened and covering this.