Bug 52033

Summary:	REGRESSION (r74663): Assertion failure in WebCore::HTMLDocumentParser::textPosition
Product:	WebKit	Reporter:	Andy Estes <aestes>
Component:	DOM	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED DUPLICATE
Severity:	Normal	CC:	abarth
Priority:	P1	Keywords:	InRadar, NeedsReduction, Regression
Version:	528+ (Nightly build)
Hardware:	PC
OS:	OS X 10.5

Andy Estes

Reported 2011-01-06 16:23:52 PST

This assertion is hit when visiting Wikipedia (http://en.wikipedia.org) in a Debug build. Here is the stacktrace: Thread 0 Crashed: Dispatch queue: com.apple.main-thread 0 com.apple.WebCore 0x000000010168a2f4 WebCore::HTMLDocumentParser::textPosition() const + 134 (HTMLDocumentParser.cpp:413) 1 com.apple.WebCore 0x00000001016f9195 WebCore::HTMLTreeBuilder::processScriptStartTag(WebCore::AtomicHTMLToken&) + 187 (HTMLTreeBuilder.cpp:2780) 2 com.apple.WebCore 0x0000000101701c9a WebCore::HTMLTreeBuilder::processStartTagForInHead(WebCore::AtomicHTMLToken&) + 674 (HTMLTreeBuilder.cpp:2744) 3 com.apple.WebCore 0x0000000101702a8a WebCore::HTMLTreeBuilder::processStartTagForInBody(WebCore::AtomicHTMLToken&) + 532 (HTMLTreeBuilder.cpp:733) 4 com.apple.WebCore 0x00000001016fbae9 WebCore::HTMLTreeBuilder::processStartTag(WebCore::AtomicHTMLToken&) + 1839 (HTMLTreeBuilder.cpp:1213) 5 com.apple.WebCore 0x00000001016fb31d WebCore::HTMLTreeBuilder::processToken(WebCore::AtomicHTMLToken&) + 183 (HTMLTreeBuilder.cpp:472) 6 com.apple.WebCore 0x0000000101704724 WebCore::HTMLTreeBuilder::constructTreeFromAtomicToken(WebCore::AtomicHTMLToken&) + 30 (HTMLTreeBuilder.cpp:457) 7 com.apple.WebCore 0x00000001017047fe WebCore::HTMLTreeBuilder::constructTreeFromToken(WebCore::HTMLToken&) + 42 (HTMLTreeBuilder.cpp:447) 8 com.apple.WebCore 0x000000010168a94d WebCore::HTMLDocumentParser::pumpTokenizer(WebCore::HTMLDocumentParser::SynchronousMode) + 623 (HTMLDocumentParser.cpp:233) 9 com.apple.WebCore 0x000000010168ac64 WebCore::HTMLDocumentParser::pumpTokenizerIfPossible(WebCore::HTMLDocumentParser::SynchronousMode) + 156 (HTMLDocumentParser.cpp:170) 10 com.apple.WebCore 0x000000010168ad1b WebCore::HTMLDocumentParser::resumeParsingAfterScriptExecution() + 181 (HTMLDocumentParser.cpp:430) 11 com.apple.WebCore 0x000000010168aeb0 WebCore::HTMLDocumentParser::executeScriptsWaitingForStylesheets() + 394 (HTMLDocumentParser.cpp:500) 12 com.apple.WebCore 0x000000010143045f WebCore::Document::removePendingSheet() + 173 (Document.cpp:2880) 13 com.apple.WebCore 0x0000000101d8a513 WebCore::StyleElement::sheetLoaded(WebCore::Document*) + 103 (StyleElement.cpp:165) 14 com.apple.WebCore 0x00000001016e2e49 WebCore::HTMLStyleElement::sheetLoaded() + 37 (HTMLStyleElement.h:54) 15 com.apple.WebCore 0x00000001013dce24 WebCore::CSSStyleSheet::checkLoaded() + 138 (CSSStyleSheet.cpp:232) 16 com.apple.WebCore 0x000000010134e11b WebCore::CSSImportRule::setCSSStyleSheet(WTF::String const&, WebCore::KURL const&, WTF::String const&, WebCore::CachedCSSStyleSheet const*) + 1041 (CSSImportRule.cpp:104) 17 com.apple.WebCore 0x0000000101294bd5 WebCore::CachedCSSStyleSheet::checkNotify() + 169 (CachedCSSStyleSheet.cpp:116) 18 com.apple.WebCore 0x0000000101294c67 WebCore::CachedCSSStyleSheet::error(WebCore::CachedResource::Status) + 115 (CachedCSSStyleSheet.cpp:125) 19 com.apple.WebCore 0x00000001012acf6b WebCore::CachedResourceRequest::didReceiveData(WebCore::SubresourceLoader*, char const*, int) + 289 (CachedResourceRequest.cpp:261) 20 com.apple.WebCore 0x0000000101d9337b WebCore::SubresourceLoader::didReceiveData(char const*, int, long long, bool) + 149 (SubresourceLoader.cpp:158) 21 com.apple.WebCore 0x0000000101cd5e96 WebCore::ResourceLoader::didReceiveData(WebCore::ResourceHandle*, char const*, int, int) + 128 (ResourceLoader.cpp:432) 22 com.apple.WebCore 0x0000000101cd0b84 -[WebCoreResourceHandleAsDelegate connection:didReceiveData:lengthReceived:] + 301 (ResourceHandleMac.mm:881)

Attachments
Add attachment proposed patch, testcase, etc.

Andy Estes

Comment 1 2011-01-06 16:24:11 PST

<rdar://problem/8821575>

Adam Barth

Comment 2 2011-01-06 16:25:29 PST

This is a dupe of another recently filed bug. I'm working on a reduction.

Andy Estes

Comment 3 2011-01-06 16:29:03 PST

*** This bug has been marked as a duplicate of bug 52013 ***

Note You need to log in before you can comment on or make changes to this bug.