[GTK] fast/borders/inline-mask-overlay-image-outset.html flaky crash

• Component: WebKitGTK
• Status: RESOLVED DUPLICATE

[Philippe Normand]

I observe this one on 64-bits Debug at least:


#0  0x00002b74aef9cd3e in WebCore::CSSPrimitiveValue::CSSPrimitiveValue (this=0x3859b000, num=-nan(0xfffff000000ff), type=WebCore::CSSPrimitiveValue::CSS_IDENT) at ../../Source/WebCore/css/CSSPrimitiveValue.cpp:189
189	    ASSERT(isfinite(num));


Thread 1 (Thread 0x2b74bcd568e0 (LWP 29796)):
#0  0x00002b74aef9cd3e in WebCore::CSSPrimitiveValue::CSSPrimitiveValue (this=0x3859b000, num=-nan(0xfffff000000ff), type=WebCore::CSSPrimitiveValue::CSS_IDENT) at ../../Source/WebCore/css/CSSPrimitiveValue.cpp:189
#1  0x00002b74aef1eccf in WebCore::CSSPrimitiveValue::create (value=-nan(0xfffff000000ff), type=WebCore::CSSPrimitiveValue::CSS_IDENT) at ../../Source/WebCore/css/CSSPrimitiveValue.h:126
#2  0x00002b74aefa3e09 in WebCore::CSSPrimitiveValueCache::createValue (this=0x385f6020, value=-nan(0xfffff000000ff), type=WebCore::CSSPrimitiveValue::CSS_IDENT) at ../../Source/WebCore/css/CSSPrimitiveValueCache.cpp:90
#3  0x00002b74aef87cfd in WebCore::BorderImageQuadParseContext::commitBorderImageQuad (this=0x7fff51faa9e0) at ../../Source/WebCore/css/CSSParser.cpp:5573
#4  0x00002b74aef79cc8 in WebCore::CSSParser::parseBorderImageQuad (this=0x7fff51fad880, validUnits=525, result=...) at ../../Source/WebCore/css/CSSParser.cpp:5627
#5  0x00002b74aef79d53 in WebCore::CSSParser::parseBorderImageWidth (this=0x7fff51fad880, result=...) at ../../Source/WebCore/css/CSSParser.cpp:5635
#6  0x00002b74aef7959d in WebCore::CSSParser::parseBorderImage (this=0x7fff51fad880, propId=1252, result=...) at ../../Source/WebCore/css/CSSParser.cpp:5354
#7  0x00002b74aef68ef0 in WebCore::CSSParser::parseValue (this=0x7fff51fad880, propId=1252, important=false) at ../../Source/WebCore/css/CSSParser.cpp:1459
#8  0x00002b74afa21790 in cssyyparse (parser=0x7fff51fad880) at ../../Source/WebCore/css/CSSGrammar.y:1305
#9  0x00002b74aef65636 in WebCore::CSSParser::parseSheet (this=0x7fff51fad880, sheet=0x38537b30, string="\n.inlineTest {\n\tfont-size:24px;\n\t background-color:grey;\n         -webkit-mask-box-image: url(resources/mask.png) 75 / auto / 10px;\n    padding:10px 75px;\n    line-height:3\n}\n", startLineNumber=1, ruleRangeMap=0x0) at ../../Source/WebCore/css/CSSParser.cpp:278
#10 0x00002b74af0229ce in WebCore::CSSStyleSheet::parseStringAtLine (this=0x38537b30, string="\n.inlineTest {\n\tfont-size:24px;\n\t background-color:grey;\n         -webkit-mask-box-image: url(resources/mask.png) 75 / auto / 10px;\n    padding:10px 75px;\n    line-height:3\n}\n", strict=false, startLineNumber=1) at ../../Source/WebCore/css/CSSStyleSheet.cpp:215
#11 0x00002b74af130a2a in WebCore::StyleElement::createSheet (this=0x38589d90, e=0x38589d10, startLineNumber=1, text="\n.inlineTest {\n\tfont-size:24px;\n\t background-color:grey;\n         -webkit-mask-box-image: url(resources/mask.png) 75 / auto / 10px;\n    padding:10px 75px;\n    line-height:3\n}\n") at ../../Source/WebCore/dom/StyleElement.cpp:163
#12 0x00002b74af13063b in WebCore::StyleElement::process (this=0x38589d90, e=0x38589d10) at ../../Source/WebCore/dom/StyleElement.cpp:139
#13 0x00002b74af1303c4 in WebCore::StyleElement::finishParsingChildren (this=0x38589d90, element=0x38589d10) at ../../Source/WebCore/dom/StyleElement.cpp:109
#14 0x00002b74af28c73b in WebCore::HTMLStyleElement::finishParsingChildren (this=0x38589d10) at ../../Source/WebCore/html/HTMLStyleElement.cpp:65
#15 0x00002b74af2b7c96 in WebCore::HTMLElementStack::popCommon (this=0x385bc168) at ../../Source/WebCore/html/parser/HTMLElementStack.cpp:570
#16 0x00002b74af2b6548 in WebCore::HTMLElementStack::pop (this=0x385bc168) at ../../Source/WebCore/html/parser/HTMLElementStack.cpp:221
#17 0x00002b74af2da3fb in WebCore::HTMLTreeBuilder::processEndTag (this=0x385bc120, token=...) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:2237
#18 0x00002b74af2cfcf8 in WebCore::HTMLTreeBuilder::processToken (this=0x385bc120, token=...) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:484
#19 0x00002b74af2cfb90 in WebCore::HTMLTreeBuilder::constructTreeFromAtomicToken (this=0x385bc120, token=...) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:462
#20 0x00002b74af2cfae7 in WebCore::HTMLTreeBuilder::constructTreeFromToken (this=0x385bc120, rawToken=...) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:452
#21 0x00002b74af2b22ed in WebCore::HTMLDocumentParser::pumpTokenizer (this=0x3859fab0, mode=WebCore::HTMLDocumentParser::AllowYield) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:278
#22 0x00002b74af2b1cf0 in WebCore::HTMLDocumentParser::pumpTokenizerIfPossible (this=0x3859fab0, mode=WebCore::HTMLDocumentParser::AllowYield) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:177
#23 0x00002b74af2b28f0 in WebCore::HTMLDocumentParser::append (this=0x3859fab0, source=...) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:370
#24 0x00002b74af05e74e in WebCore::DecodedDataDocumentParser::flush (this=0x3859fab0, writer=0x38579a30) at ../../Source/WebCore/dom/DecodedDataDocumentParser.cpp:60
#25 0x00002b74af3f549d in WebCore::DocumentWriter::endIfNotLoadingMainResource (this=0x38579a30) at ../../Source/WebCore/loader/DocumentWriter.cpp:230
#26 0x00002b74af3f53e7 in WebCore::DocumentWriter::end (this=0x38579a30) at ../../Source/WebCore/loader/DocumentWriter.cpp:212
#27 0x00002b74af3e9221 in WebCore::DocumentLoader::finishedLoading (this=0x38579910) at ../../Source/WebCore/loader/DocumentLoader.cpp:284
#28 0x00002b74af400b35 in WebCore::FrameLoader::finishedLoading (this=0x2280c38) at ../../Source/WebCore/loader/FrameLoader.cpp:2067
#29 0x00002b74af43568d in WebCore::MainResourceLoader::didFinishLoading (this=0x38472570, finishTime=0) at ../../Source/WebCore/loader/MainResourceLoader.cpp:488
#30 0x00002b74af441ffd in WebCore::ResourceLoader::didFinishLoading (this=0x38472570, finishTime=0) at ../../Source/WebCore/loader/ResourceLoader.cpp:451
#31 0x00002b74af5dc4d6 in WebCore::readCallback (source=0x2b75001129e0, asyncResult=0x9497b60, data=0x385663c0) at ../../Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:837
#32 0x00002b74b34cbb59 in async_ready_callback_wrapper (source_object=0x2b75001129e0, res=0x9497b60, user_data=0x385663c0) at /tmp/buildd/glib2.0-2.28.6/./gio/ginputstream.c:470
#33 0x00002b74b34dba68 in complete_in_idle_cb_for_thread (_data=0x384454b0) at /tmp/buildd/glib2.0-2.28.6/./gio/gsimpleasyncresult.c:812
#34 0x00002b74b40484a3 in g_main_dispatch (context=0x21dfe60) at /tmp/buildd/glib2.0-2.28.6/./glib/gmain.c:2440
#35 g_main_context_dispatch (context=0x21dfe60) at /tmp/buildd/glib2.0-2.28.6/./glib/gmain.c:3013
#36 0x00002b74b4048c80 in g_main_context_iterate (context=0x21dfe60, block=1, dispatch=1, self=<optimized out>) at /tmp/buildd/glib2.0-2.28.6/./glib/gmain.c:3091
#37 0x00002b74b40492f2 in g_main_loop_run (loop=0x384cd820) at /tmp/buildd/glib2.0-2.28.6/./glib/gmain.c:3299
#38 0x00002b74b1df64cd in gtk_main () at /build/buildd-gtk+3.0_3.0.12-2-amd64-rEYsqr/gtk+3.0-3.0.12/./gtk/gtkmain.c:1358
#39 0x000000000042fbd1 in runTest (testPathOrURL=...) at ../../Tools/DumpRenderTree/gtk/DumpRenderTree.cpp:708
#40 0x000000000042f209 in runTestingServerLoop () at ../../Tools/DumpRenderTree/gtk/DumpRenderTree.cpp:500
#41 0x0000000000431551 in main (argc=2, argv=0x7fff51faee48) at ../../Tools/DumpRenderTree/gtk/DumpRenderTree.cpp:1206

[Martin Robinson]

Duplicate of https://bugs.webkit.org/show_bug.cgi?id=69000 ?

[Martin Robinson]

https://bugs.webkit.org/show_bug.cgi?id=69933 is another likely duplicate.

[Philippe Normand]

Thanks Martin!

*** This bug has been marked as a duplicate of bug 69933 ***