Bug 82308

Summary:	[Qt] fast/dom/shadow/drag-to-meter-in-shadow-crash.html asserts
Product:	WebKit	Reporter:	Csaba Osztrogonác <ossy>
Component:	Tools / Tests	Assignee:	zalan <zalan>
Status:	RESOLVED INVALID
Severity:	Critical	CC:	dglazkov, ossy, shinyak, zalan
Priority:	P1	Keywords:	Qt, QtTriaged
Version:	528+ (Nightly build)
Hardware:	All
OS:	All
Bug Depends on:
Bug Blocks:	79668, 82177

Csaba Osztrogonác

Reported 2012-03-27 01:48:59 PDT

fast/dom/shadow/drag-to-meter-in-shadow-crash.html introduced in http://trac.webkit.org/changeset/112197 and asserts on Qt in debug mode. (And crashes on Qt-WK2 in release mode.) Qt WK2 debug crash log: ASSERTION FAILED: position.isNull() || position.anchorType() == Position::PositionIsOffsetInAnchor || position.containerNode() || !position.anchorNode()->shadowAncestorNode() /home/oszi/WebKit/Source/WebCore/html/HTMLTextFormControlElement.cpp(571) : WebCore::HTMLTextFormControlElement* WebCore::enclosingTextFormControl(const WebCore::Position&) 1 0x7f1521092987 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebCore::enclosingTextFormControl(WebCore::Position const&)+0x8d) [0x7f1521092987] 2 0x7f1520f7c392 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebCore::FrameSelection::isInPasswordField() const+0x2e) [0x7f1520f7c392] 3 0x7f1520a1ac43 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebKit::WebPage::editorState() const+0x117) [0x7f1520a1ac43] 4 0x7f15209de776 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebKit::WebEditorClient::respondToChangedSelection(WebCore::Frame*)+0x126) [0x7f15209de776] 5 0x7f1520f532a2 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebCore::Editor::respondToChangedSelection(WebCore::VisibleSelection const&)+0x4e) [0x7f1520f532a2] 6 0x7f1520f64bb2 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebCore::Editor::respondToChangedSelection(WebCore::VisibleSelection const&, unsigned int)+0xa98) [0x7f1520f64bb2] 7 0x7f1520f72dea /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebCore::FrameSelection::setSelection(WebCore::VisibleSelection const&, unsigned int, WebCore::FrameSelection::CursorAlignOnScroll, WebCore::TextGranularity)+0x398) [0x7f1520f72dea] 8 0x7f1520f70f47 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebCore::FrameSelection::setSelection(WebCore::VisibleSelection const&, WebCore::TextGranularity)+0x37) [0x7f1520f70f47] 9 0x7f1520f72964 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebCore::FrameSelection::setNonDirectionalSelectionIfNeeded(WebCore::VisibleSelection const&, WebCore::TextGranularity, WebCore::FrameSelection::EndPointsAdjustmentMode)+0x380) [0x7f1520f72964] 10 0x7f15213325bc /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebCore::EventHandler::updateSelectionForMouseDownDispatchingSelectStart(WebCore::Node*, WebCore::VisibleSelection const&, WebCore::TextGranularity)+0x9e) [0x7f15213325bc] 11 0x7f1521333456 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebCore::EventHandler::handleMousePressEventSingleClick(WebCore::MouseEventWithHitTestResults const&)+0x61e) [0x7f1521333456] 12 0x7f152133389e /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebCore::EventHandler::handleMousePressEvent(WebCore::MouseEventWithHitTestResults const&)+0x344) [0x7f152133389e] 13 0x7f1521337217 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebCore::EventHandler::handleMousePressEvent(WebCore::PlatformMouseEvent const&)+0x913) [0x7f1521337217] 14 0x7f1520a1eecd /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(+0x1fe9ecd) [0x7f1520a1eecd] 15 0x7f1520a1f253 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebKit::WebPage::mouseEventSyncForTesting(WebKit::WebMouseEvent const&, bool&)+0xe9) [0x7f1520a1f253] 16 0x7f1520a6b380 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(void CoreIPC::callMemberFunction<WebKit::WebPage, void (WebKit::WebPage::*)(WebKit::WebMouseEvent const&, bool&), WebKit::WebMouseEvent, bool>(CoreIPC::Arguments1<WebKit::WebMouseEvent> const&, CoreIPC::Arguments1<bool>&, WebKit::WebPage*, void (WebKit::WebPage::*)(WebKit::WebMouseEvent const&, bool&))+0x66) [0x7f1520a6b380] 17 0x7f1520a69446 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(void CoreIPC::handleMessage<Messages::WebPage::MouseEventSyncForTesting, WebKit::WebPage, void (WebKit::WebPage::*)(WebKit::WebMouseEvent const&, bool&)>(CoreIPC::ArgumentDecoder*, CoreIPC::ArgumentEncoder*, WebKit::WebPage*, void (WebKit::WebPage::*)(WebKit::WebMouseEvent const&, bool&))+0x77) [0x7f1520a69446] 18 0x7f1520a661e8 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebKit::WebPage::didReceiveSyncWebPageMessage(CoreIPC::Connection*, CoreIPC::MessageID, CoreIPC::ArgumentDecoder*, WTF::OwnPtr<CoreIPC::ArgumentEncoder>&)+0xf6) [0x7f1520a661e8] 19 0x7f1520a23fc3 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebKit::WebPage::didReceiveSyncMessage(CoreIPC::Connection*, CoreIPC::MessageID, CoreIPC::ArgumentDecoder*, WTF::OwnPtr<CoreIPC::ArgumentEncoder>&)+0x3d) [0x7f1520a23fc3] 20 0x7f1520a3de9e /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebKit::WebProcess::didReceiveSyncMessage(CoreIPC::Connection*, CoreIPC::MessageID, CoreIPC::ArgumentDecoder*, WTF::OwnPtr<CoreIPC::ArgumentEncoder>&)+0x72) [0x7f1520a3de9e] 21 0x7f1520a3b6c5 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebKit::WebConnectionToUIProcess::didReceiveSyncMessage(CoreIPC::Connection*, CoreIPC::MessageID, CoreIPC::ArgumentDecoder*, WTF::OwnPtr<CoreIPC::ArgumentEncoder>&)+0x51) [0x7f1520a3b6c5] 22 0x7f15207d9f50 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(CoreIPC::Connection::dispatchSyncMessage(CoreIPC::MessageID, CoreIPC::ArgumentDecoder*)+0x138) [0x7f15207d9f50] 23 0x7f15207da27c /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(CoreIPC::Connection::dispatchMessage(CoreIPC::Connection::Message<CoreIPC::ArgumentDecoder>&)+0x12c) [0x7f15207da27c] 24 0x7f15207d6ced /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(CoreIPC::Connection::SyncMessageState::dispatchMessages()+0x105) [0x7f15207d6ced] 25 0x7f15207d91f5 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(CoreIPC::Connection::waitForSyncReply(unsigned long, double, unsigned int)+0x8f) [0x7f15207d91f5] 26 0x7f15207d8fcc /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(CoreIPC::Connection::sendSyncMessage(CoreIPC::MessageID, unsigned long, WTF::PassOwnPtr<CoreIPC::ArgumentEncoder>, double, unsigned int)+0x24a) [0x7f15207d8fcc] 27 0x7f15209780bf /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(bool CoreIPC::Connection::deprecatedSendSync<WebContextLegacyMessage::Kind, CoreIPC::Arguments2<WTF::String const&, WebKit::InjectedBundleUserMessageEncoder const&>, CoreIPC::Arguments1<WebKit::InjectedBundleUserMessageDecoder&> >(WebContextLegacyMessage::Kind, unsigned long, CoreIPC::Arguments2<WTF::String const&, WebKit::InjectedBundleUserMessageEncoder const&> const&, CoreIPC::Arguments1<WebKit::InjectedBundleUserMessageDecoder&> const&, double)+0x111) [0x7f15209780bf] 28 0x7f1520972811 /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WebKit::InjectedBundle::postSynchronousMessage(WTF::String const&, WebKit::APIObject*, WTF::RefPtr<WebKit::APIObject>&)+0xcf) [0x7f1520972811] 29 0x7f15209671ee /home/oszi/WebKit/WebKitBuild/Debug/lib/libQtWebKit.so.5(WKBundlePostSynchronousMessage+0x6e) [0x7f15209671ee] 30 0x7f14d07ef796 /home/oszi/WebKit/WebKitBuild/Debug/lib/libWTRInjectedBundle.so(WTR::EventSendingController::mouseDown(int, OpaqueJSValue const*)+0x260) [0x7f14d07ef796] 31 0x7f14d080134e /home/oszi/WebKit/WebKitBuild/Debug/lib/libWTRInjectedBundle.so(WTR::JSEventSendingController::mouseDown(OpaqueJSContext const*, OpaqueJSValue*, OpaqueJSValue*, unsigned long, OpaqueJSValue const* const*, OpaqueJSValue const**)+0xba) [0x7f14d080134e] Qt WK1 debug crash log: crash log for DumpRenderTree (pid 3664): STDOUT: <empty> STDERR: ASSERTION FAILED: position.isNull() || position.anchorType() == Position::PositionIsOffsetInAnchor || position.containerNode() || !position.anchorNode()->shadowAncestorNode() STDERR: ../../../../Source/WebCore/html/HTMLTextFormControlElement.cpp(571) : WebCore::HTMLTextFormControlElement* WebCore::enclosingTextFormControl(const WebCore::Position&) STDERR: 1 0x7f32cf341169 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::enclosingTextFormControl(WebCore::Position const&)+0x8d) [0x7f32cf341169] STDERR: 2 0x7f32cf228744 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::FrameSelection::isInPasswordField() const+0x2e) [0x7f32cf228744] STDERR: 3 0x7f32cf1fd7d5 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::Editor::canDHTMLCut()+0x23) [0x7f32cf1fd7d5] STDERR: 4 0x7f32cf218227 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(+0x23c1227) [0x7f32cf218227] STDERR: 5 0x7f32cf2194c4 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::Editor::Command::isEnabled(WebCore::Event*) const+0x82) [0x7f32cf2194c4] STDERR: 6 0x7f32cec7ad83 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(QWebPagePrivate::updateAction(QWebPage::WebAction)+0x1ef) [0x7f32cec7ad83] STDERR: 7 0x7f32cec7ae9d /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(QWebPagePrivate::updateEditorActions()+0x1d) [0x7f32cec7ae9d] STDERR: 8 0x7f32cecc3a90 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::EditorClientQt::respondToChangedSelection(WebCore::Frame*)+0x3e) [0x7f32cecc3a90] STDERR: 9 0x7f32cf1ff268 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::Editor::respondToChangedSelection(WebCore::VisibleSelection const&)+0x4e) [0x7f32cf1ff268] STDERR: 10 0x7f32cf210b78 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::Editor::respondToChangedSelection(WebCore::VisibleSelection const&, unsigned int)+0xa98) [0x7f32cf210b78] STDERR: 11 0x7f32cf21f19c /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::FrameSelection::setSelection(WebCore::VisibleSelection const&, unsigned int, WebCore::FrameSelection::CursorAlignOnScroll, WebCore::TextGranularity)+0x398) [0x7f32cf21f19c] STDERR: 12 0x7f32cf21d2f9 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::FrameSelection::setSelection(WebCore::VisibleSelection const&, WebCore::TextGranularity)+0x37) [0x7f32cf21d2f9] STDERR: 13 0x7f32cf21ed16 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::FrameSelection::setNonDirectionalSelectionIfNeeded(WebCore::VisibleSelection const&, WebCore::TextGranularity, WebCore::FrameSelection::EndPointsAdjustmentMode)+0x380) [0x7f32cf21ed16] STDERR: 14 0x7f32cf5e8c9a /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::EventHandler::updateSelectionForMouseDownDispatchingSelectStart(WebCore::Node*, WebCore::VisibleSelection const&, WebCore::TextGranularity)+0x9e) [0x7f32cf5e8c9a] STDERR: 15 0x7f32cf5e9b34 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::EventHandler::handleMousePressEventSingleClick(WebCore::MouseEventWithHitTestResults const&)+0x61e) [0x7f32cf5e9b34] STDERR: 16 0x7f32cf5e9f7c /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::EventHandler::handleMousePressEvent(WebCore::MouseEventWithHitTestResults const&)+0x344) [0x7f32cf5e9f7c] STDERR: 17 0x7f32cf5ed8f5 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::EventHandler::handleMousePressEvent(WebCore::PlatformMouseEvent const&)+0x913) [0x7f32cf5ed8f5] STDERR: 18 0x7f32cec8b648 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(void QWebPagePrivate::mousePressEvent<QMouseEvent>(QMouseEvent*)+0x1ba) [0x7f32cec8b648] STDERR: 19 0x7f32cec85c96 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(QWebPage::event(QEvent*)+0x9a) [0x7f32cec85c96] STDERR: 20 0x7f32cec9435a /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(QWebView::mousePressEvent(QMouseEvent*)+0x5e) [0x7f32cec9435a] STDERR: 21 0x7f32c8ee6115 /usr/local/Trolltech/Qt-4.8.0/lib/libQtGui.so.4(QWidget::event(QEvent*)+0x9d5) [0x7f32c8ee6115] STDERR: 22 0x7f32cec93fc8 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(QWebView::event(QEvent*)+0x282) [0x7f32cec93fc8] STDERR: 23 0x7f32c8e9119c /usr/local/Trolltech/Qt-4.8.0/lib/libQtGui.so.4(QApplicationPrivate::notify_helper(QObject*, QEvent*)+0xac) [0x7f32c8e9119c] STDERR: 24 0x7f32c8e9884e /usr/local/Trolltech/Qt-4.8.0/lib/libQtGui.so.4(QApplication::notify(QObject*, QEvent*)+0x91e) [0x7f32c8e9884e] STDERR: 25 0x7f32c85c30ec /usr/local/Trolltech/Qt-4.8.0/lib/libQtCore.so.4(QCoreApplication::notifyInternal(QObject*, QEvent*)+0x8c) [0x7f32c85c30ec] STDERR: 26 0x4157eb /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/bin/DumpRenderTree(QCoreApplication::sendEvent(QObject*, QEvent*)+0x4b) [0x4157eb] STDERR: 27 0x424364 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/bin/DumpRenderTree() [0x424364] STDERR: 28 0x423d4f /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/bin/DumpRenderTree() [0x423d4f] STDERR: 29 0x42162f /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/bin/DumpRenderTree() [0x42162f] STDERR: 30 0x42f0c3 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/bin/DumpRenderTree() [0x42f0c3] STDERR: 31 0x42f5bd /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/bin/DumpRenderTree() [0x42f5bd]

Attachments
Add attachment proposed patch, testcase, etc.

Csaba Osztrogonác

Comment 1 2012-03-27 01:58:14 PDT

I skipped it - http://trac.webkit.org/changeset/112226 Please unskip it with the proper fix.

Jocelyn Turcotte

Comment 2 2014-02-03 03:20:29 PST

=== Bulk closing of Qt bugs === If you believe that this bug report is still relevant for a non-Qt port of webkit.org, please re-open it and remove [Qt] from the summary. If you believe that this is still an important QtWebKit bug, please fill a new report at https://bugreports.qt-project.org and add a link to this issue. See http://qt-project.org/wiki/ReportingBugsInQt for additional guidelines.

Note You need to log in before you can comment on or make changes to this bug.