Bug 167787

Summary: WebContent crash when pasting into input fields at com.apple.WebCore: WebCore::ResourceRequestBase::url const + 9
Product: WebKit Reporter: Antti Koivisto <koivisto>
Component: CSSAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: commit-queue, dino, dstockwell, simon.fraser
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
patch kling: review+

Antti Koivisto
Reported 2017-02-03 02:50:19 PST
Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Subtype: KERN_INVALID_ADDRESS at 0x00000000000000ed Thread 0 name: Dispatch queue: com.apple.main-thread Thread 0 Crashed ↩: 0 WebCore 0x000000018dba2aa4 WebCore::ResourceRequestBase::url() const + 16 (ResourceRequestBase.cpp:609) 1 WebCore 0x000000018de795e0 WebCore::CSSImageValue::CSSImageValue(WebCore::CachedImage&) + 60 (CachedResource.h:116) 2 WebCore 0x000000018de795e0 WebCore::CSSImageValue::CSSImageValue(WebCore::CachedImage&) + 60 (CachedResource.h:116) 3 WebCore 0x000000018de96f04 WebCore::blendFunc(WebCore::AnimationBase const*, WebCore::StyleImage*, WebCore::StyleImage*, double) + 908 (CSSImageValue.h:38) 4 WebCore 0x000000018de96b14 WebCore::FillLayerRefCountedPropertyWrapper<WebCore::StyleImage>::blend(WebCore::AnimationBase const*, WebCore::FillLayer*, WebCore::FillLayer const*, WebCore::FillLayer const*, double) const + 140 (CSSPropertyAnimation.cpp:1022) 5 WebCore 0x000000018de966e4 WebCore::FillLayersPropertyWrapper::blend(WebCore::AnimationBase const*, WebCore::RenderStyle*, WebCore::RenderStyle const*, WebCore::RenderStyle const*, double) const + 176 (CSSPropertyAnimation.cpp:1111) 6 WebCore 0x000000018dcbd948 WebCore::CSSPropertyAnimation::blendProperties(WebCore::AnimationBase const*, WebCore::CSSPropertyID, WebCore::RenderStyle*, WebCore::RenderStyle const*, WebCore::RenderStyle const*, double) + 188 (CSSPropertyAnimation.cpp:1579) 7 WebCore 0x000000018e1b21f4 WebCore::ImplicitAnimation::animate(WebCore::CompositeAnimation*, WebCore::RenderElement*, WebCore::RenderStyle const*, WebCore::RenderStyle const*, std::__1::unique_ptr<WebCore::RenderStyle, std::__1::default_delete<WebCore::RenderStyle> >&, bool&) + 216 (ImplicitAnimation.cpp:82) 8 WebCore 0x000000018ddd9f24 WebCore::CompositeAnimation::animate(WebCore::RenderElement&, WebCore::RenderStyle const*, WebCore::RenderStyle const&, std::__1::unique_ptr<WebCore::RenderStyle, std::__1::default_delete<WebCore::RenderStyle> >&) + 228 (CompositeAnimation.cpp:303) 9 WebCore 0x000000018dd134c8 WebCore::AnimationController::updateAnimations(WebCore::RenderElement&, WebCore::RenderStyle const&, std::__1::unique_ptr<WebCore::RenderStyle, std::__1::default_delete<WebCore::RenderStyle> >&) + 196 (AnimationController.cpp:618) 10 WebCore 0x000000018ea586a4 WebCore::Style::TreeResolver::createAnimatedElementUpdate(std::__1::unique_ptr<WebCore::RenderStyle, std::__1::default_delete<WebCore::RenderStyle> >, WebCore::Element&, WebCore::Style::Change) + 132 (StyleTreeResolver.cpp:273) 11 WebCore 0x000000018ea58400 WebCore::Style::TreeResolver::resolveElement(WebCore::Element&) + 232 (StyleTreeResolver.cpp:203) 12 WebCore 0x000000018ea5910c WebCore::Style::TreeResolver::resolveComposedTree() + 1300 (StyleTreeResolver.cpp:423) 13 WebCore 0x000000018ea5970c WebCore::Style::TreeResolver::resolve(WebCore::Style::Change) + 520 (StyleTreeResolver.cpp:479) 14 WebCore 0x000000018df23130 WebCore::Document::recalcStyle(WebCore::Style::Change) + 484 (Document.cpp:1826)
Attachments
patch (1.40 KB, patch)
2017-02-03 02:54 PST, Antti Koivisto 		kling: review+
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Antti Koivisto
Comment 1 2017-02-03 02:50:51 PST
rdar://problem/29168795
Antti Koivisto
Comment 2 2017-02-03 02:54:21 PST
Created attachment 300515 [details] patch
Antti Koivisto
Comment 3 2017-02-03 03:14:10 PST
Committed r211625: <http://trac.webkit.org/changeset/211625>
Note You need to log in before you can comment on or make changes to this bug.