Bug 183385

Summary: Invalid innerTextRenderer in RenderTextControlSingleLine::styleDidChange()
Product: WebKit Reporter: alan <zalan>
Component: DOMAssignee: alan <zalan>
Status: RESOLVED FIXED    
Severity: Normal CC: cdumez, commit-queue, koivisto, rniwa
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch none

alan
Reported 2018-03-06 15:11:07 PST
frame #1: 0x0000000113a1fc24 WebCore`WebCore::RenderTextControlSingleLine::styleDidChange(this=0x0000000126000120, diff=StyleDifferenceLayout, oldStyle=0x00007ffee8a2dad8) at RenderTextControlSingleLine.cpp:233 frame #2: 0x000000011382768b WebCore`WebCore::RenderElement::setStyle(this=0x0000000126000120, style=0x00007ffee8a2dca8, minimalStyleDifference=StyleDifferenceEqual) at RenderElement.cpp:420 frame #3: 0x0000000113c0e1d3 WebCore`WebCore::RenderTreeUpdater::updateRendererStyle(this=0x00007ffee8a30c80, renderer=0x0000000126000120, newStyle=0x00007ffee8a2dca8, minimalStyleDifference=StyleDifferenceEqual) at RenderTreeUpdater.cpp:300 frame #4: 0x0000000113c0dd20 WebCore`WebCore::RenderTreeUpdater::updateElementRenderer(this=0x00007ffee8a30c80, element=0x0000000123fe2e80, update=0x0000000123f6c9b8) at RenderTreeUpdater.cpp:357 frame #5: 0x0000000113c0d14e WebCore`WebCore::RenderTreeUpdater::updateRenderTree(this=0x00007ffee8a30c80, root=0x0000000123feba90) at RenderTreeUpdater.cpp:198 frame #6: 0x0000000113c0ca09 WebCore`WebCore::RenderTreeUpdater::commit(this=0x00007ffee8a30c80, styleUpdate=unique_ptr<const WebCore::Style::Update, std::__1::default_delete<const WebCore::Style::Update> > @ 0x00007ffee8a30c78) at RenderTreeUpdater.cpp:130 frame #7: 0x000000011284599c WebCore`WebCore::Document::resolveStyle(this=0x0000000123f65000, type=Normal) at Document.cpp:1867 frame #8: 0x0000000112847149 WebCore`WebCore::Document::updateStyleIfNeeded(this=0x0000000123f65000) at Document.cpp:1971 frame #9: 0x0000000112847c00 WebCore`WebCore::Document::updateLayoutIfDimensionsOutOfDate(this=0x0000000123f65000, element=0x0000000123feba90, dimensionsCheck=HeightDimensionsCheck) at Document.cpp:2072 frame #10: 0x00000001128e9390 WebCore`WebCore::Element::offsetHeight(this=0x0000000123feba90) at Element.cpp:842 frame #11: 0x000000011138e15d WebCore`WebCore::jsHTMLElementOffsetHeightGetter(state=0x00007ffee8a31ce0, thisObject=0x0000000124804030, throwScope=0x00007ffee8a317c8) at JSHTMLElement.cpp:976 frame #12: 0x000000011134bdd0 WebCore`long long WebCore::IDLAttribute<WebCore::JSHTMLElement>::get<&(state=0x00007ffee8a31ce0, thisValue=4907352112, attributeName="offsetHeight")), (WebCore::CastedThisErrorBehavior)3>(JSC::ExecState&, long long, char const*) at JSDOMAttribute.h:69 frame #13: 0x000000011134bcdb WebCore`WebCore::jsHTMLElementOffsetHeight(state=0x00007ffee8a31ce0, thisValue=4907352112, (null)=PropertyName @ 0x00007ffee8a31838) at JSHTMLElement.cpp:982 frame #14: 0x000000011f9942bd JavaScriptCore`JSC::PropertySlot::customGetter(this=0x00007ffee8a31b80, exec=0x00007ffee8a31ce0, propertyName=PropertyName @ 0x00007ffee8a31930) const at PropertySlot.cpp:50 frame #15: 0x000000011e8109c2 JavaScriptCore`JSC::PropertySlot::getValue(this=0x00007ffee8a31b80, exec=0x00007ffee8a31ce0, propertyName=PropertyName @ 0x00007ffee8a31980) const at PropertySlot.h:408 frame #16: 0x000000011effbf1f JavaScriptCore`JSC::JSValue::get(this=0x00007ffee8a31bd0, exec=0x00007ffee8a31ce0, propertyName=PropertyName @ 0x00007ffee8a31a50, slot=0x00007ffee8a31b80) const at JSCJSValueInlines.h:812 frame #17: 0x000000011f5cf9a4 JavaScriptCore`::llint_slow_path_get_by_id(exec=0x00007ffee8a31ce0, pc=0x0000000123fc7910) at LLIntSlowPaths.cpp:660 frame #18: 0x000000011e7dcb0d JavaScriptCore`llint_entry at LowLevelInterpreter64.asm:58 frame #19: 0x000000011e7d9402 JavaScriptCore`vmEntryToJavaScript at LowLevelInterpreter64.asm:257 frame #20: 0x000000011f565b8e JavaScriptCore`JSC::JITCode::execute(this=0x0000000125fefaa0, vm=0x0000000124500000, protoCallFrame=0x00007ffee8a31eb8) at JITCode.cpp:81 frame #21: 0x000000011f50b6b5 JavaScriptCore`JSC::Interpreter::executeCall(this=0x0000000123ffc338, callFrame=0x00000001248dc058, function=0x0000000124834000, callType=JS, callData=0x00007ffee8a32500, thisValue=JSValue @ 0x00007ffee8a31fe0, args=0x00007ffee8a323d0) at Interpreter.cpp:1028 frame #22: 0x000000011f7745ea JavaScriptCore`JSC::call(exec=0x00000001248dc058, functionObject=JSValue @ 0x00007ffee8a32060, callType=JS, callData=0x00007ffee8a32500, thisValue=JSValue @ 0x00007ffee8a32058, args=0x00007ffee8a323d0) at CallData.cpp:41 frame #23: 0x000000011f7746c9 JavaScriptCore`JSC::call(exec=0x00000001248dc058, functionObject=JSValue @ 0x00007ffee8a32150, callType=JS, callData=0x00007ffee8a32500, thisValue=JSValue @ 0x00007ffee8a32148, args=0x00007ffee8a323d0, returnedException=0x00007ffee8a323f8) at CallData.cpp:48 frame #24: 0x000000011f77496d JavaScriptCore`JSC::profiledCall(exec=0x00000001248dc058, reason=Other, functionObject=JSValue @ 0x00007ffee8a321e0, callType=JS, callData=0x00007ffee8a32500, thisValue=JSValue @ 0x00007ffee8a321d8, args=0x00007ffee8a323d0, returnedException=0x00007ffee8a323f8) at CallData.cpp:67 frame #25: 0x00000001123689bb WebCore`WebCore::JSMainThreadExecState::profiledCall(exec=0x00000001248dc058, reason=Other, functionObject=JSValue @ 0x00007ffee8a32270, callType=JS, callData=0x00007ffee8a32500, thisValue=JSValue @ 0x00007ffee8a32268, args=0x00007ffee8a323d0, returnedException=0x00007ffee8a323f8) at JSMainThreadExecState.h:72 frame #26: 0x00000001123a69c2 WebCore`WebCore::JSEventListener::handleEvent(this=0x0000000123fb3d90, scriptExecutionContext=0x0000000123f65000, event=0x0000000125ff0800) at JSEventListener.cpp:169 frame #27: 0x0000000112915792 WebCore`WebCore::EventTarget::fireEventListeners(this=0x0000000123fe2e80, event=0x0000000125ff0800, listeners={ size = 1, capacity = 0 }) at EventTarget.cpp:290 frame #28: 0x000000011290cc6a WebCore`WebCore::EventTarget::fireEventListeners(this=0x0000000123fe2e80, event=0x0000000125ff0800) at EventTarget.cpp:232 frame #29: 0x0000000112970524 WebCore`WebCore::Node::handleLocalEvents(this=0x0000000123fe2e80, event=0x0000000125ff0800) at Node.cpp:2317 frame #30: 0x000000011290cafd WebCore`WebCore::EventContext::handleLocalEvents(this=0x0000000123f0bfe0, event=0x0000000125ff0800) const at EventContext.cpp:54 frame #31: 0x000000011290d836 WebCore`WebCore::dispatchEventInDOM(event=0x0000000125ff0800, path=0x00007ffee8a328f0) at EventDispatcher.cpp:91 frame #32: 0x000000011290d361 WebCore`WebCore::EventDispatcher::dispatchEvent(node=0x0000000123fe2e80, event=0x0000000125ff0800) at EventDispatcher.cpp:159 frame #33: 0x000000011297057d WebCore`WebCore::Node::dispatchEvent(this=0x0000000123fe2e80, event=0x0000000125ff0800) at Node.cpp:2327 frame #34: 0x000000011299ecb4 WebCore`WebCore::ScopedEventQueue::dispatchEvent(this=0x00000001154e21b0, event=0x0000000125ff0800) const at ScopedEventQueue.cpp:57 frame #35: 0x000000011299ec5f WebCore`WebCore::ScopedEventQueue::enqueueEvent(this=0x00000001154e21b0, event=0x00007ffee8a32ae0) at ScopedEventQueue.cpp:52 frame #36: 0x000000011290d029 WebCore`WebCore::EventDispatcher::dispatchScopedEvent(node=0x0000000123fe2e80, event=0x0000000125ff0800) at EventDispatcher.cpp:52 frame #37: 0x000000011297054d WebCore`WebCore::Node::dispatchScopedEvent(this=0x0000000123fe2e80, event=0x0000000125ff0800) at Node.cpp:2322 frame #38: 0x00000001129706d5 WebCore`WebCore::Node::dispatchSubtreeModifiedEvent(this=0x0000000123fe2e80) at Node.cpp:2343 frame #39: 0x00000001128f32a8 WebCore`WebCore::Element::didAddAttribute(this=0x0000000123fe2e80, name=0x00000001154f0cc8, value={ length = 6, contents = 'foobar' }) at Element.cpp:3325 frame #40: 0x00000001128f31b3 WebCore`WebCore::Element::addAttributeInternal(this=0x0000000123fe2e80, name=0x00000001154f0cc8, value={ length = 6, contents = 'foobar' }, inSynchronizationOfLazyAttribute=NotInSynchronizationOfLazyAttribute) at Element.cpp:2354 frame #41: 0x00000001128ec371 WebCore`WebCore::Element::setAttributeInternal(this=0x0000000123fe2e80, index=4294967295, name=0x00000001154f0cc8, newValue={ length = 6, contents = 'foobar' }, inSynchronizationOfLazyAttribute=NotInSynchronizationOfLazyAttribute) at Element.cpp:1314 frame #42: 0x00000001128ec515 WebCore`WebCore::Element::setAttributeWithoutSynchronization(this=0x0000000123fe2e80, name=0x00000001154f0cc8, value={ length = 6, contents = 'foobar' }) at Element.cpp:1296 frame #43: 0x0000000112bc56a3 WebCore`WebCore::HTMLInputElement::updateType(this=0x0000000123fe2e80) at HTMLInputElement.cpp:509 frame #44: 0x0000000112bc6b49 WebCore`WebCore::HTMLInputElement::parseAttribute(this=0x0000000123fe2e80, name=0x00000001154f0c88, value={ length = 6, contents = 'button' }) at HTMLInputElement.cpp:694 frame #45: 0x00000001128ec927 WebCore`WebCore::Element::attributeChanged(this=0x0000000123fe2e80, name=0x00000001154f0c88, oldValue={ length = 0, contents = '' }, newValue={ length = 6, contents = 'button' }, (null)=ModifiedDirectly) at Element.cpp:1377 frame #46: 0x00000001129ec5ef WebCore`WebCore::StyledElement::attributeChanged(this=0x0000000123fe2e80, name=0x00000001154f0c88, oldValue={ length = 0, contents = '' }, newValue={ length = 6, contents = 'button' }, reason=ModifiedDirectly) at StyledElement.cpp:90 frame #47: 0x00000001128f326f WebCore`WebCore::Element::didAddAttribute(this=0x0000000123fe2e80, name=0x00000001154f0c88, value={ length = 6, contents = 'button' }) at Element.cpp:3323 frame #48: 0x00000001128f31b3 WebCore`WebCore::Element::addAttributeInternal(this=0x0000000123fe2e80, name=0x00000001154f0c88, value={ length = 6, contents = 'button' }, inSynchronizationOfLazyAttribute=NotInSynchronizationOfLazyAttribute) at Element.cpp:2354 frame #49: 0x00000001128ec371 WebCore`WebCore::Element::setAttributeInternal(this=0x0000000123fe2e80, index=4294967295, name=0x00000001154f0c88, newValue={ length = 6, contents = 'button' }, inSynchronizationOfLazyAttribute=NotInSynchronizationOfLazyAttribute) at Element.cpp:1314 frame #50: 0x00000001128ec515 WebCore`WebCore::Element::setAttributeWithoutSynchronization(this=0x0000000123fe2e80, name=0x00000001154f0c88, value={ length = 6, contents = 'button' }) at Element.cpp:1296 frame #51: 0x0000000112bc50d7 WebCore`WebCore::HTMLInputElement::setType(this=0x0000000123fe2e80, type={ length = 6, contents = 'button' }) at HTMLInputElement.cpp:480 frame #52: 0x00000001113f9089 WebCore`WebCore::setJSHTMLInputElementTypeSetter(this=0x00007ffee8a33738)::'lambda'()::operator()() const at JSHTMLInputElement.cpp:1318 frame #53: 0x00000001113f903d WebCore`std::__1::enable_if<std::is_same<void, decltype(fp1())>::value, void>::type WebCore::AttributeSetter::call<WebCore::setJSHTMLInputElementTypeSetter((null)=0x00007ffee8a34140, (null)=0x00007ffee8a33808, functor=0x00007ffee8a33738)::'lambda'()>(JSC::ExecState&, JSC::ThrowScope&, WebCore::setJSHTMLInputElementTypeSetter(JSC::ExecState&, WebCore::JSHTMLInputElement&, JSC::JSValue, JSC::ThrowScope&)::'lambda'()&&) at JSDOMAttribute.h:97 frame #54: 0x00000001113f8ff0 WebCore`WebCore::setJSHTMLInputElementTypeSetter(state=0x00007ffee8a34140, thisObject=0x0000000124804000, value=JSValue @ 0x00007ffee8a33780, throwScope=0x00007ffee8a33808) at JSHTMLInputElement.cpp:1317 frame #55: 0x00000001113e59d8 WebCore`bool WebCore::IDLAttribute<WebCore::JSHTMLInputElement>::set<&(state=0x00007ffee8a34140, thisValue=4907352064, encodedValue=4907647072, attributeName="type")), (WebCore::CastedThisErrorBehavior)0>(JSC::ExecState&, long long, long long, char const*) at JSDOMAttribute.h:50 frame #56: 0x00000001113e589c WebCore`WebCore::setJSHTMLInputElementType(state=0x00007ffee8a34140, thisValue=4907352064, encodedValue=4907647072) at JSHTMLInputElement.cpp:1325 frame #57: 0x000000011f7c713d JavaScriptCore`JSC::callCustomSetter(exec=0x00007ffee8a34140, setter=(WebCore`WebCore::setJSHTMLInputElementType(JSC::ExecState*, long long, long long) at JSHTMLInputElement.cpp:1324), isAccessor=true, thisValue=JSValue @ 0x00007ffee8a338f0, value=JSValue @ 0x00007ffee8a338e8)(JSC::ExecState*, long long, long long), bool, JSC::JSValue, JSC::JSValue) at CustomGetterSetter.cpp:41 frame #58: 0x000000011f7c7213 JavaScriptCore`JSC::callCustomSetter(exec=0x00007ffee8a34140, customGetterSetter=JSValue @ 0x00007ffee8a33960, isAccessor=true, base=0x0000000124838060, thisValue=JSValue @ 0x00007ffee8a33958, value=JSValue @ 0x00007ffee8a33950) at CustomGetterSetter.cpp:58 frame #59: 0x000000011f8c7550 JavaScriptCore`JSC::JSObject::putInlineSlow(this=0x0000000124804000, exec=0x00007ffee8a34140, propertyName=PropertyName @ 0x00007ffee8a33bb0, value=JSValue @ 0x00007ffee8a33ba8, slot=0x00007ffee8a33fe8) at JSObject.cpp:794 frame #60: 0x000000011f0775a0 JavaScriptCore`JSC::JSObject::putInlineForJSObject(cell=0x0000000124804000, exec=0x00007ffee8a34140, propertyName=PropertyName @ 0x00007ffee8a33d40, value=JSValue @ 0x00007ffee8a33d38, slot=0x00007ffee8a33fe8) at JSObjectInlines.h:229 frame #61: 0x000000011f0770c8 JavaScriptCore`JSC::JSCell::putInline(this=0x0000000124804000, exec=0x00007ffee8a34140, propertyName=PropertyName @ 0x00007ffee8a33db0, value=JSValue @ 0x00007ffee8a33da8, slot=0x00007ffee8a33fe8) at JSCellInlines.h:375 frame #62: 0x000000011f078933 JavaScriptCore`JSC::JSValue::putInline(this=0x00007ffee8a34010, exec=0x00007ffee8a34140, propertyName=PropertyName @ 0x00007ffee8a33e20, value=JSValue @ 0x00007ffee8a33e18, slot=0x00007ffee8a33fe8) at JSCJSValueInlines.h:911 frame #63: 0x000000011f5d0b62 JavaScriptCore`::llint_slow_path_put_by_id(exec=0x00007ffee8a34140, pc=0x00000001244fb150) at LLIntSlowPaths.cpp:749 frame #64: 0x000000011e7dd1b1 JavaScriptCore`llint_entry at LowLevelInterpreter64.asm:58 frame #65: 0x000000011e7d9402 JavaScriptCore`vmEntryToJavaScript at LowLevelInterpreter64.asm:257 frame #66: 0x000000011f565b8e JavaScriptCore`JSC::JITCode::execute(this=0x0000000123f26758, vm=0x0000000124500000, protoCallFrame=0x00007ffee8a34448) at JITCode.cpp:81 frame #67: 0x000000011f50a7a3 JavaScriptCore`JSC::Interpreter::executeProgram(this=0x0000000123ffc338, source=0x00007ffee8a35cf8, callFrame=0x00000001248dc058, thisObj=0x00000001248f4000) at Interpreter.cpp:969 frame #68: 0x000000011f7bf127 JavaScriptCore`JSC::evaluate(exec=0x00000001248dc058, source=0x00007ffee8a35cf8, thisValue=JSValue @ 0x00007ffee8a359c0, returnedException=0x00007ffee8a35af8) at Completion.cpp:103 frame #69: 0x000000011f7bf2b0 JavaScriptCore`JSC::profiledEvaluate(exec=0x00000001248dc058, reason=Other, source=0x00007ffee8a35cf8, thisValue=JSValue @ 0x00007ffee8a35a30, returnedException=0x00007ffee8a35af8) at Completion.cpp:118 frame #70: 0x00000001123e338b WebCore`WebCore::JSMainThreadExecState::profiledEvaluate(exec=0x00000001248dc058, reason=Other, source=0x00007ffee8a35cf8, thisValue=JSValue @ 0x00007ffee8a35a90, returnedException=0x00007ffee8a35af8) at JSMainThreadExecState.h:78 frame #71: 0x00000001123e3178 WebCore`WebCore::ScriptController::evaluateInWorld(this=0x0000000123ff2f68, sourceCode=0x00007ffee8a35cf0, world=0x0000000123feb208, exceptionDetails=0x0000000000000000) at ScriptController.cpp:177 frame #72: 0x00000001123e346d WebCore`WebCore::ScriptController::evaluate(this=0x0000000123ff2f68, sourceCode=0x00007ffee8a35cf0, exceptionDetails=0x0000000000000000) at ScriptController.cpp:193 frame #73: 0x00000001129a150d WebCore`WebCore::ScriptElement::executeClassicScript(this=0x0000000123ff95e8, sourceCode=0x00007ffee8a35cf0) at ScriptElement.cpp:387 frame #74: 0x000000011299f9e9 WebCore`WebCore::ScriptElement::prepareScript(this=0x0000000123ff95e8, scriptStartPosition=0x00007ffee8a36000, supportLegacyTypes=DisallowLegacyTypeInTypeAttribute) at ScriptElement.cpp:267 frame #75: 0x0000000112d29900 WebCore`WebCore::HTMLScriptRunner::runScript(this=0x0000000123ff7730, scriptElement=0x0000000123ff95e8, scriptStartPosition=0x00007ffee8a36000) at HTMLScriptRunner.cpp:250 frame #76: 0x0000000112d2976f WebCore`WebCore::HTMLScriptRunner::execute(this=0x0000000123ff7730, element=0x00007ffee8a35ff0, scriptStartPosition=0x00007ffee8a36000) at HTMLScriptRunner.cpp:140 frame #77: 0x0000000112d0bff5 WebCore`WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder(this=0x0000000123f64000) at HTMLDocumentParser.cpp:212 frame #78: 0x0000000112d0c4b3 WebCore`WebCore::HTMLDocumentParser::pumpTokenizerLoop(this=0x0000000123f64000, mode=AllowYield, parsingFragment=false, session=0x00007ffee8a363e8) at HTMLDocumentParser.cpp:231 frame #79: 0x0000000112d0b1f8 WebCore`WebCore::HTMLDocumentParser::pumpTokenizer(this=0x0000000123f64000, mode=AllowYield) at HTMLDocumentParser.cpp:281 frame #80: 0x0000000112d0ad6b WebCore`WebCore::HTMLDocumentParser::pumpTokenizerIfPossible(this=0x0000000123f64000, mode=AllowYield) at HTMLDocumentParser.cpp:172 frame #81: 0x0000000112d0d7aa WebCore`WebCore::HTMLDocumentParser::append(this=0x0000000123f64000, inputSource=0x00007ffee8a36908) at HTMLDocumentParser.cpp:395 frame #82: 0x000000011282b182 WebCore`WebCore::DecodedDataDocumentParser::flush(this=0x0000000123f64000, writer=0x00000001246f36b0) at DecodedDataDocumentParser.cpp:60 frame #83: 0x0000000112f41e7c WebCore`WebCore::DocumentWriter::end(this=0x00000001246f36b0) at DocumentWriter.cpp:274 frame #84: 0x0000000112f0554f WebCore`WebCore::DocumentLoader::finishedLoading(this=0x00000001246f3600) at DocumentLoader.cpp:429 frame #85: 0x0000000112f052ed WebCore`WebCore::DocumentLoader::notifyFinished(this=0x00000001246f3600, resource=0x0000000123f69000) at DocumentLoader.cpp:379 frame #86: 0x0000000112f056dc WebCore`non-virtual thunk to WebCore::DocumentLoader::notifyFinished(this=0x00000001246f3600, resource=0x0000000123f69000) at DocumentLoader.cpp:0 frame #87: 0x000000011302f52d WebCore`WebCore::CachedResource::checkNotify(this=0x0000000123f69000) at CachedResource.cpp:347 frame #88: 0x0000000113021ee1 WebCore`WebCore::CachedResource::finishLoading(this=0x0000000123f69000, (null)=0x0000000123fa4340) at CachedResource.cpp:363 frame #89: 0x000000011302c396 WebCore`WebCore::CachedRawResource::finishLoading(this=0x0000000123f69000, data=0x0000000123fa4340) at CachedRawResource.cpp:117 frame #90: 0x0000000112fc6429 WebCore`WebCore::SubresourceLoader::didFinishLoading(this=0x0000000123fb9000, networkLoadMetrics=0x00007ffee8a36d60) at SubresourceLoader.cpp:619 frame #91: 0x0000000112fb2cf5 WebCore`WebCore::ResourceLoader::didFinishLoading(this=0x0000000123fb9000, (null)=0x0000000123f6d348) at ResourceLoader.cpp:680 frame #92: 0x00000001116eb9d4 WebCore`-[WebCoreResourceHandleAsOperationQueueDelegate connectionDidFinishLoading:]::$_7::operator(this=0x0000000123f66008)() at WebCoreResourceHandleAsOperationQueueDelegate.mm:320 frame #93: 0x00000001116eb8b9 WebCore`WTF::Function<void ()>::CallableWrapper<-[WebCoreResourceHandleAsOperationQueueDelegate connectionDidFinishLoading:]::$_7>::call(this=0x0000000123f66000) at Function.h:101 frame #94: 0x000000011fcd029b JavaScriptCore`WTF::Function<void ()>::operator(this=0x00007ffee8a36f80)() const at Function.h:56 frame #95: 0x000000011fcf346b JavaScriptCore`WTF::dispatchFunctionsFromMainThread() at MainThread.cpp:129 frame #96: 0x000000011fcf60f5 JavaScriptCore`::-[JSWTFMainThreadCaller call](self=0x00007fbee3026e40, _cmd="call") at MainThreadMac.mm:55 frame #97: 0x00007fff4b1c42b5 Foundation`__NSThreadPerformPerform + 334 frame #98: 0x00007fff4909ba61 CoreFoundation`__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17 frame #99: 0x00007fff4915547c CoreFoundation`__CFRunLoopDoSource0 + 108 frame #100: 0x00007fff4907e4c0 CoreFoundation`__CFRunLoopDoSources0 + 208 frame #101: 0x00007fff4907d93d CoreFoundation`__CFRunLoopRun + 1293 frame #102: 0x00007fff4907d1a3 CoreFoundation`CFRunLoopRunSpecific + 483 frame #103: 0x00007fff48366d66 HIToolbox`RunCurrentEventLoopInMode + 286 frame #104: 0x00007fff48366ad6 HIToolbox`ReceiveNextEventCommon + 613 frame #105: 0x00007fff48366854 HIToolbox`_BlockUntilNextEventMatchingListInModeWithFilter + 64 frame #106: 0x00007fff465ebb63 AppKit`_DPSNextEvent + 2085 frame #107: 0x00007fff46d81eb0 AppKit`-[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 3044 frame #108: 0x00007fff465e0975 AppKit`-[NSApplication run] + 764 frame #109: 0x00007fff465afb4e AppKit`NSApplicationMain + 804 frame #110: 0x00000001071cc119 MiniBrowser`main(argc=1, argv=0x00007ffee8a38780) at main.m:32 frame #111: 0x00007fff7153c015 libdyld.dylib`start + 1
Attachments
Patch (4.84 KB, patch)
2018-03-06 15:27 PST, alan 		no flags
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
alan
Comment 1 2018-03-06 15:11:25 PST
<rdar://problem/38085397>
alan
Comment 2 2018-03-06 15:27:57 PST
Created attachment 335151 [details] Patch
alan
Comment 3 2018-03-06 15:28:39 PST
Not sure if changing the order here has any side effect.
WebKit Commit Bot
Comment 4 2018-03-07 19:51:37 PST
Comment on attachment 335151 [details] Patch Clearing flags on attachment: 335151 Committed r229393: <https://trac.webkit.org/changeset/229393>
WebKit Commit Bot
Comment 5 2018-03-07 19:51:39 PST
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.