Bug 190974

Summary:

Layout Test imported/blink/fast/forms/datalist/slider-appearance-with-ticks-crash.html is Crashing on macOS WK2 and iOS WK2

Product:

WebKit

Reporter:

Dawei Fenton (:realdawei) <realdawei>

Component:

Tools / Tests

Assignee:

Nobody <webkit-unassigned>

Status:

NEW

Severity:

Normal

CC:

lforschler, ryanhaddad, tsavell, webkit-bug-importer, wenson_hsieh

Priority:

Keywords:

InRadar

Version:

Other

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Crash Log	none

Dawei Fenton (:realdawei)

Reported 2018-10-26 15:04:23 PDT

Created attachment 353207 [details] Crash Log The following layout test is Crashing on [insert platform] imported/blink/fast/forms/datalist/slider-appearance-with-ticks-crash.html Flakiness Dashboard: https://webkit-test-results.webkit.org/dashboards/flakiness_dashboard.html#showAllRuns=true&tests=imported%2Fblink%2Ffast%2Fforms%2Fdatalist%2Fslider-appearance-with-ticks-crash.html Crashed Thread: 0 Dispatch queue: com.apple.main-thread Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000015 Exception Note: EXC_CORPSE_NOTIFY Termination Signal: Segmentation fault: 11 Termination Reason: Namespace SIGNAL, Code 0xb Terminating Process: exc handler [19209] VM Regions Near 0x15: --> __TEXT 000000010e991000-000000010e993000 [ 8K] r-x/rwx SM=COW /Volumes/VOLUME/*/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent.Development Application Specific Information: CRASHING TEST: imported/blink/fast/forms/datalist/slider-appearance-with-ticks-crash.html Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.WebCore 0x00000001112f51a9 WebCore::RenderTheme::paintSliderTicks(WebCore::RenderObject const&, WebCore::PaintInfo const&, WebCore::IntRect const&) + 329 (RenderTheme.cpp:1088) 1 com.apple.WebCore 0x0000000110291369 WebCore::RenderThemeMac::paintSliderTrack(WebCore::RenderObject const&, WebCore::PaintInfo const&, WebCore::IntRect const&) + 281 (RenderThemeMac.mm:1852) 2 com.apple.WebCore 0x00000001112f3357 WebCore::RenderTheme::paint(WebCore::RenderBox const&, WebCore::ControlStates&, WebCore::PaintInfo const&, WebCore::LayoutRect const&) + 887 (RenderTheme.cpp:362) 3 com.apple.WebCore 0x00000001111d656f WebCore::RenderBox::paintBoxDecorations(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 943 (RenderBox.cpp:1290) 4 com.apple.WebCore 0x000000011119e80b WebCore::RenderBlock::paintObject(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 75 (RenderBlock.cpp:1228) 5 com.apple.WebCore 0x000000011119e174 WebCore::RenderBlock::paint(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 244 (RenderBlock.cpp:1105) 6 com.apple.WebCore 0x000000011120cc04 WebCore::RenderElement::paintAsInlineBlock(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 116 (RenderElement.cpp:999) 7 com.apple.WebCore 0x0000000111185b05 WebCore::InlineElementBox::paint(WebCore::PaintInfo&, WebCore::LayoutPoint const&, WebCore::LayoutUnit, WebCore::LayoutUnit) + 117 (InlineElementBox.cpp:82) 8 com.apple.WebCore 0x000000011118bbf0 WebCore::InlineFlowBox::paint(WebCore::PaintInfo&, WebCore::LayoutPoint const&, WebCore::LayoutUnit, WebCore::LayoutUnit) + 1040 9 com.apple.WebCore 0x0000000111309002 WebCore::RootInlineBox::paint(WebCore::PaintInfo&, WebCore::LayoutPoint const&, WebCore::LayoutUnit, WebCore::LayoutUnit) + 34 (RootInlineBox.cpp:169) 10 com.apple.WebCore 0x00000001112875d6 WebCore::RenderLineBoxList::paint(WebCore::RenderBoxModelObject*, WebCore::PaintInfo&, WebCore::LayoutPoint const&) const + 902 (RenderLineBoxList.cpp:260) 11 com.apple.WebCore 0x000000011119e9f5 WebCore::RenderBlock::paintObject(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 565 (RenderBlock.cpp:1125) 12 com.apple.WebCore 0x000000011119e174 WebCore::RenderBlock::paint(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 244 (RenderBlock.cpp:1105) 13 com.apple.WebCore 0x000000011119e5a1 WebCore::RenderBlock::paintChild(WebCore::RenderBox&, WebCore::PaintInfo&, WebCore::LayoutPoint const&, WebCore::PaintInfo&, bool, WebCore::RenderBlock::PaintBlockType) + 641 (RenderBlock.cpp:1185) 14 com.apple.WebCore 0x000000011119e2ef WebCore::RenderBlock::paintChildren(WebCore::PaintInfo&, WebCore::LayoutPoint const&, WebCore::PaintInfo&, bool) + 95 (RenderBlock.cpp:1145) 15 com.apple.WebCore 0x000000011119ea18 WebCore::RenderBlock::paintObject(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 600 (RenderBlock.cpp:1265) 16 com.apple.WebCore 0x000000011119e174 WebCore::RenderBlock::paint(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 244 (RenderBlock.cpp:1105) 17 com.apple.WebCore 0x000000011119e5a1 WebCore::RenderBlock::paintChild(WebCore::RenderBox&, WebCore::PaintInfo&, WebCore::LayoutPoint const&, WebCore::PaintInfo&, bool, WebCore::RenderBlock::PaintBlockType) + 641 (RenderBlock.cpp:1185) 18 com.apple.WebCore 0x000000011119e2ef WebCore::RenderBlock::paintChildren(WebCore::PaintInfo&, WebCore::LayoutPoint const&, WebCore::PaintInfo&, bool) + 95 (RenderBlock.cpp:1145) 19 com.apple.WebCore 0x000000011119ea18 WebCore::RenderBlock::paintObject(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 600 (RenderBlock.cpp:1265) 20 com.apple.WebCore 0x000000011119e174 WebCore::RenderBlock::paint(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 244 (RenderBlock.cpp:1105) 21 com.apple.WebCore 0x0000000111260566 WebCore::RenderLayer::paintForegroundForFragmentsWithPhase(WebCore::PaintPhase, WTF::Vector<WebCore::LayerFragment, 1ul, WTF::CrashOnOverflow, 16ul> const&, WebCore::GraphicsContext&, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::PaintBehavior>, WebCore::RenderObject*) + 406 (RenderLayer.cpp:4714) 22 com.apple.WebCore 0x000000011125e33f WebCore::RenderLayer::paintForegroundForFragments(WTF::Vector<WebCore::LayerFragment, 1ul, WTF::CrashOnOverflow, 16ul> const&, WebCore::GraphicsContext&, WebCore::GraphicsContext&, WebCore::LayoutRect const&, bool, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::PaintBehavior>, WebCore::RenderObject*) + 415 (RenderLayer.cpp:4690) 23 com.apple.WebCore 0x000000011125b43c WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::RenderLayer::PaintLayerFlag>) + 3164 (RenderLayer.cpp:4297) 24 com.apple.WebCore 0x000000011125b525 WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::RenderLayer::PaintLayerFlag>) + 3397 (RenderLayer.cpp:4310) 25 com.apple.WebCore 0x0000000111271a70 WebCore::RenderLayerBacking::paintIntoLayer(WebCore::GraphicsLayer const*, WebCore::GraphicsContext&, WebCore::IntRect const&, WTF::OptionSet<WebCore::PaintBehavior>, unsigned char) + 592 (RenderLayerBacking.cpp:2525) 26 com.apple.WebCore 0x0000000111271dff WebCore::RenderLayerBacking::paintContents(WebCore::GraphicsLayer const*, WebCore::GraphicsContext&, unsigned char, WebCore::FloatRect const&, unsigned int) + 639 (RenderLayerBacking.cpp:2576) 27 com.apple.WebCore 0x0000000111048b08 WebCore::GraphicsLayer::paintGraphicsLayerContents(WebCore::GraphicsContext&, WebCore::FloatRect const&, unsigned int) + 152 (GraphicsLayer.cpp:484) 28 com.apple.WebCore 0x000000011005617a WebCore::PlatformCALayer::drawLayerContents(CGContext*, WebCore::PlatformCALayer*, WTF::Vector<WebCore::FloatRect, 5ul, WTF::CrashOnOverflow, 16ul>&, unsigned int) + 362 (PlatformCALayerCocoa.mm:1186) 29 com.apple.WebCore 0x0000000111092038 WebCore::TileGrid::platformCALayerPaintContents(WebCore::PlatformCALayer*, WebCore::GraphicsContext&, WebCore::FloatRect const&, unsigned int) + 200 (TileGrid.cpp:734) 30 com.apple.WebCore 0x0000000110135a6f -[WebSimpleLayer drawInContext:] + 191 31 com.apple.QuartzCore 0x00007fff3be46d4f CABackingStoreUpdate_ + 577 32 com.apple.QuartzCore 0x00007fff3bea7a5d invocation function for block in CA::Layer::display_() + 53 33 com.apple.QuartzCore 0x00007fff3be45f48 -[CALayer _display] + 1839 34 com.apple.WebCore 0x000000011013597b -[WebSimpleLayer display] + 43 (WebLayer.mm:118) 35 com.apple.QuartzCore 0x00007fff3be45474 CA::Layer::display_if_needed(CA::Transaction*) + 634 36 com.apple.QuartzCore 0x00007fff3be336cb CA::Context::commit_transaction(CA::Transaction*) + 319 37 com.apple.QuartzCore 0x00007fff3be32f9c CA::Transaction::commit() + 576 38 com.apple.WebKit 0x000000010ec8868c WebKit::TiledCoreAnimationDrawingArea::forceRepaint() + 150 (TiledCoreAnimationDrawingArea.mm:152) 39 com.apple.WebKitTestRunner.InjectedBundle 0x00000001b2799d1c WTR::InjectedBundlePage::dump() + 36 (InjectedBundlePage.cpp:897) 40 com.apple.WebKit 0x000000010ecdb5ea WebKit::InjectedBundlePageLoaderClient::didFinishLoadForFrame(WebKit::WebPage&, WebKit::WebFrame&, WTF::RefPtr<API::Object, WTF::DumbPtrTraits<API::Object> >&) + 82 (InjectedBundlePageLoaderClient.cpp:141) 41 com.apple.WebKit 0x000000010ed18190 WebKit::WebFrameLoaderClient::dispatchDidFinishLoad() + 102 (WebFrameLoaderClient.cpp:612) 42 com.apple.WebCore 0x0000000110e4115d WebCore::FrameLoader::checkLoadCompleteForThisFrame() + 2413 (FrameLoader.cpp:2512) 43 com.apple.WebCore 0x0000000110e38dab WebCore::FrameLoader::checkLoadComplete() + 427 (iterator:712) 44 com.apple.WebCore 0x0000000110e17fe1 WebCore::DocumentLoader::finishedLoading() + 689 (DocumentLoader.cpp:442) 45 com.apple.WebCore 0x0000000110ea064c WebCore::CachedResource::checkNotify() + 332 (CachedResource.cpp:348) 46 com.apple.WebCore 0x0000000110e9be42 WebCore::CachedRawResource::finishLoading(WebCore::SharedBuffer*) + 594 (CachedRawResource.cpp:121) 47 com.apple.WebCore 0x0000000110e6f6da WebCore::SubresourceLoader::didFinishLoading(WebCore::NetworkLoadMetrics const&) + 506 (SubresourceLoader.cpp:636) 48 com.apple.WebKit 0x000000010eceeef5 WebKit::WebResourceLoader::didFinishResourceLoad(WebCore::NetworkLoadMetrics const&) + 211 (WebResourceLoader.cpp:162) 49 com.apple.WebKit 0x000000010edc7915 WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&, IPC::Decoder&) + 749 (NetworkLoadMetrics.h:49) 50 com.apple.WebKit 0x000000010ece8e33 WebKit::NetworkProcessConnection::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 625 (NetworkProcessConnection.cpp:78) 51 com.apple.WebKit 0x000000010e9ab3c2 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >) + 108 (Connection.cpp:1007) 52 com.apple.WebKit 0x000000010e9aeac4 IPC::Connection::dispatchOneIncomingMessage() + 180 (Connection.cpp:1074) 53 com.apple.JavaScriptCore 0x000000011422dda7 WTF::RunLoop::performWork() + 231 (RunLoop.cpp:106) 54 com.apple.JavaScriptCore 0x000000011422e032 WTF::RunLoop::performWork(void*) + 34 (RunLoopCF.cpp:39) 55 com.apple.CoreFoundation 0x00007fff309aaf39 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17 56 com.apple.CoreFoundation 0x00007fff309aaedf __CFRunLoopDoSource0 + 108 57 com.apple.CoreFoundation 0x00007fff3098ed8c __CFRunLoopDoSources0 + 195 58 com.apple.CoreFoundation 0x00007fff3098e333 __CFRunLoopRun + 1226 59 com.apple.CoreFoundation 0x00007fff3098dc16 CFRunLoopRunSpecific + 467 60 com.apple.Foundation 0x00007fff32dd16ba -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 280 61 com.apple.Foundation 0x00007fff32dd158f -[NSRunLoop(NSRunLoop) run] + 76 62 libxpc.dylib 0x00007fff5e35dee6 _xpc_objc_main + 555 63 libxpc.dylib 0x00007fff5e35d9e5 xpc_main + 433 64 com.apple.WebKit.WebContent 0x000000010e992636 WebKit::XPCServiceMain(int, char const**) + 547 65 com.apple.WebKit.WebContent 0x000000010e9927bb main + 9 66 libdyld.dylib 0x00007fff5e1270a5 start + 1

Attachments
Crash Log (86.38 KB, text/plain) 2018-10-26 15:04 PDT, Dawei Fenton (:realdawei)	no flags	Details
View All Add attachment proposed patch, testcase, etc.

Dawei Fenton (:realdawei)

Comment 1 2018-10-26 15:05:58 PDT

Crashing on macOS WK2 and iOS WK2

Radar WebKit Bug Importer

Comment 2 2018-10-26 15:08:16 PDT

<rdar://problem/45600902>

Note You need to log in before you can comment on or make changes to this bug.