Bug 28295

Summary:

Assertion when background-image changes from multiple to single image

Product:

WebKit

Reporter:

Simon Fraser (smfr) <simon.fraser>

Component:

Layout and Rendering

Assignee:

Simon Fraser (smfr) <simon.fraser>

Status:

RESOLVED FIXED

Severity:

Normal

Priority:

Version:

528+ (Nightly build)

Hardware:

All

OS:

OS X 10.5

Attachments:

Description	Flags
Testcase	none
Patch, testcase	mitz: review+

Simon Fraser (smfr)

Reported 2009-08-13 22:31:51 PDT

Created attachment 34810 [details] Testcase The attached testcase asserts. It changes the image background from using two images to one image. The assertion is: ASSERTION FAILED: m_clients.contains(client) (/Volumes/WebKit/WebKit.git/WebCore/loader/CachedResource.cpp:201 void WebCore::CachedResource::removeClient(WebCore::CachedResourceClient*)) from #0 0x0000000100da0fe4 in WebCore::CachedResource::removeClient (this=0x11adb5ca0, client=0x11adb6058) at /Volumes/WebKit/WebKit.git/WebCore/loader/CachedResource.cpp:201 #1 0x000000010158b031 in WebCore::StyleCachedImage::removeClient (this=0x118b02440, renderer=0x11adb6058) at /Volumes/WebKit/WebKit.git/WebCore/rendering/style/StyleCachedImage.cpp:84 #2 0x00000001014a691f in WebCore::RenderObject::arenaDelete (this=0x11adb6058, arena=0x118b1e660, base=0x11adb6058) at /Volumes/WebKit/WebKit.git/WebCore/rendering/RenderObject.cpp:1864 #3 0x00000001014a6bb3 in WebCore::RenderObject::destroy (this=0x11adb6058) at /Volumes/WebKit/WebKit.git/WebCore/rendering/RenderObject.cpp:1856 #4 0x0000000101457f3d in WebCore::RenderBoxModelObject::destroy (this=0x11adb6058) at /Volumes/WebKit/WebKit.git/WebCore/rendering/RenderBoxModelObject.cpp:75 #5 0x000000010144ef1e in WebCore::RenderBox::destroy (this=0x11adb6058) at /Volumes/WebKit/WebKit.git/WebCore/rendering/RenderBox.cpp:95 #6 0x000000010141de57 in WebCore::RenderBlock::destroy (this=0x11adb6058) at /Volumes/WebKit/WebKit.git/WebCore/rendering/RenderBlock.cpp:204 #7 0x00000001013b6ed7 in WebCore::Node::detach (this=0x11adad7e0) at /Volumes/WebKit/WebKit.git/WebCore/dom/Node.cpp:1165 ...

Attachments
Testcase (948 bytes, text/html) 2009-08-13 22:31 PDT, Simon Fraser (smfr)	no flags	Details
Patch, testcase (4.94 KB, patch) 2009-08-13 23:18 PDT, Simon Fraser (smfr)	mitz: review+	Details Formatted Diff Diff
View All Add attachment proposed patch, testcase, etc.

Simon Fraser (smfr)

Comment 1 2009-08-13 23:18:17 PDT

Created attachment 34813 [details] Patch, testcase

Simon Fraser (smfr)

Comment 2 2009-08-13 23:25:08 PDT

http://trac.webkit.org/changeset/47270

Note You need to log in before you can comment on or make changes to this bug.