Bug 88852

Summary: REGRESSION(r120051): some tests are crashing (Requested by morrita on #webkit).
Product: WebKit Reporter: WebKit Review Bot <webkit.review.bot>
Component: New BugsAssignee: WebKit Review Bot <webkit.review.bot>
Status: RESOLVED FIXED    
Severity: Normal CC: dglazkov, jbadics, morrita
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 88148    
Attachments:
Description Flags
ROLLOUT of r120051 none

Description WebKit Review Bot 2012-06-12 04:02:39 PDT 
http://trac.webkit.org/changeset/120051 broke the build:
some tests are crashing (Requested by morrita on #webkit).

This is an automatic bug report generated by the sheriff-bot. If this bug
report was created because of a flaky test, please file a bug for the flaky
test (if we don't already have one on file) and dup this bug against that bug
so that we can track how often these flaky tests case pain.

"Only you can prevent forest fires." -- Smokey the Bear
Comment 1 WebKit Review Bot 2012-06-12 04:03:37 PDT 
Created attachment 147049 [details]
ROLLOUT of r120051

Any committer can land this patch automatically by marking it commit-queue+.  The commit-queue will build and test the patch before landing to ensure that the rollout will be successful.  This process takes approximately 15 minutes.

If you would like to land the rollout faster, you can use the following command:

  webkit-patch land-attachment ATTACHMENT_ID

where ATTACHMENT_ID is the ID of this attachment.
Comment 2 Hajime Morrita 2012-06-12 04:11:36 PDT 
From: http://build.chromium.org/p/chromium.webkit/builders/Webkit%20Linux%20%28dbg%29/builds/7899/steps/webkit_tests/logs/stdio

03:04:51.111 13716 worker/14 fast/dom/Attr/access-after-element-destruction.html crashed, stack trace:
03:04:51.112 13716   ASSERTION FAILED: !m_inRemovedLastRefFunction
03:04:51.112 13716   third_party/WebKit/Source/WebCore/platform/TreeShared.h(65) : void WebCore::TreeShared<NodeType, ParentNodeType>::ref() [with NodeType = WebCore::Node, ParentNodeType = WebCore::ContainerNode]
03:04:51.112 13716   1   0x49d1d9
03:04:51.112 13716   2   0x49d9f0
03:04:51.112 13716   3   0x49d7a3
03:04:51.112 13716   4   0x5070a2
03:04:51.112 13716   5   0x6c720c
03:04:51.112 13716   6   0x6c6fd3
03:04:51.112 13716   7   0x1017313
03:04:51.112 13716   8   0x101755b
03:04:51.112 13716   9   0x6d1838
03:04:51.113 13716   10  0x6d4e0f
03:04:51.113 13716   11  0x6d1866
03:04:51.113 13716   12  0x6d193b
03:04:51.113 13716   13  0x6d3cad
03:04:51.113 13716   14  0x6d3290
03:04:51.113 13716   15  0x6d2544
03:04:51.113 13716   16  0x6cc658
03:04:51.113 13716   17  0x6e1466
03:04:51.113 13716   18  0x7632a0
03:04:51.113 13716   19  0x49d408
03:04:51.113 13716   20  0x17cf0cd
03:04:51.114 13716   21  0xbae4d4
03:04:51.114 13716   22  0xbacf9a
03:04:51.114 13716   23  0xbbc96c
03:04:51.114 13716   24  0xbbbb72
03:04:51.114 13716   25  0xb97a9d
03:04:51.114 13716   26  0xbbb7d8
03:04:51.114 13716   27  0xde7117
03:04:51.114 13716   28  0xb3eb3c
03:04:51.114 13716   29  0xb39ab0
03:04:51.114 13716   30  0xb39a81
03:04:51.114 13716   31  0x122c9ac0618e
03:04:51.114 13716   [13791:13791:6958893186397:ERROR:process_util_posix.cc(143)] Received signal 11
03:04:51.115 13716   	base::debug::StackTrace::StackTrace() [0x86f842]
03:04:51.115 13716   	base::(anonymous namespace)::StackDumpSignalHandler() [0x82f869]
03:04:51.115 13716   	0x7f651d4c7af0
03:04:51.115 13716   	WebCore::TreeShared<>::ref() [0x49d1e3]
03:04:51.115 13716   	WTF::refIfNotNull<>() [0x49d9f0]
03:04:51.115 13716   	WTF::PassRefPtr<>::PassRefPtr() [0x49d7a3]
03:04:51.115 13716   	WebKit::ContextFeaturesClientImpl::isEnabled() [0x5070a2]
03:04:51.115 13716   	WebCore::ContextFeatures::isEnabled() [0x6c720c]
03:04:51.115 13716   	WebCore::ContextFeatures::styleScopedEnabled() [0x6c6fd3]
03:04:51.115 13716   	WebCore::HTMLStyleElement::unregisterWithScopingNode() [0x1017313]
03:04:51.116 13716   	WebCore::HTMLStyleElement::removedFrom() [0x101755b]
03:04:51.116 13716   	WebCore::ChildNodeRemovalNotifier::notifyNodeRemovedFromDocument() [0x6d1838]
03:04:51.116 13716   	WebCore::ChildNodeRemovalNotifier::notifyDescendantRemovedFromDocument() [0x6d4e0f]
03:04:51.116 13716   	WebCore::ChildNodeRemovalNotifier::notifyNodeRemovedFromDocument() [0x6d1866]
03:04:51.116 13716   	WebCore::ChildNodeRemovalNotifier::notify() [0x6d193b]
03:04:51.116 13716   	WebCore::Private::NodeRemovalDispatcher<>::dispatch() [0x6d3cad]
03:04:51.116 13716   	WebCore::Private::addChildNodesToDeletionQueue<>() [0x6d3290]
03:04:51.116 13716   	WebCore::removeAllChildrenInContainer<>() [0x6d2544]
03:04:51.116 13716   	WebCore::ContainerNode::removeAllChildren() [0x6cc658]
03:04:51.116 13716   	WebCore::Document::removedLastRef() [0x6e1466]
03:04:51.116 13716   	WebCore::Node::removedLastRef() [0x7632a0]
03:04:51.117 13716   	WebCore::TreeShared<>::deref() [0x49d408]
03:04:51.117 13716   	WebCore::DOMDataStore::weakNodeCallback() [0x17cf0cd]
03:04:51.117 13716   	v8::internal::GlobalHandles::Node::PostGarbageCollectionProcessing() [0xbae4d4]
03:04:51.117 13716   	v8::internal::GlobalHandles::PostGarbageCollectionProcessing() [0xbacf9a]
03:04:51.117 13716   	v8::internal::Heap::PerformGarbageCollection() [0xbbc96c]
03:04:51.117 13716   	v8::internal::Heap::CollectGarbage() [0xbbbb72]
03:04:51.117 13716   	v8::internal::Heap::CollectGarbage() [0xb97a9d]
03:04:51.117 13716   	v8::internal::Heap::CollectAllGarbage() [0xbbb7d8]
03:04:51.117 13716   	v8::internal::GCExtension::GC() [0xde7117]
03:04:51.117 13716   	v8::internal::HandleApiCallHelper<>() [0xb3eb3c]
03:04:51.117 13716   	v8::internal::Builtin_Impl_HandleApiCall() [0xb39ab0]
03:04:51.118 13716   	v8::internal::Builtin_HandleApiCall() [0xb39a81]
03:04:51.118 13716   	0x122c9ac0618e
0
Comment 3 Hajime Morrita 2012-06-12 04:14:43 PDT 
From: http://build.chromium.org/p/chromium.webkit/builders/Webkit%20Linux%20%28dbg%29/builds/7899/steps/webkit_tests/logs/stdio

03:04:51.111 13716 worker/14 fast/dom/Attr/access-after-element-destruction.html crashed, stack trace:
03:04:51.112 13716   ASSERTION FAILED: !m_inRemovedLastRefFunction
03:04:51.112 13716   third_party/WebKit/Source/WebCore/platform/TreeShared.h(65) : void WebCore::TreeShared<NodeType, ParentNodeType>::ref() [with NodeType = WebCore::Node, ParentNodeType = WebCore::ContainerNode]
03:04:51.112 13716   1   0x49d1d9
03:04:51.112 13716   2   0x49d9f0
03:04:51.112 13716   3   0x49d7a3
03:04:51.112 13716   4   0x5070a2
03:04:51.112 13716   5   0x6c720c
03:04:51.112 13716   6   0x6c6fd3
03:04:51.112 13716   7   0x1017313
03:04:51.112 13716   8   0x101755b
03:04:51.112 13716   9   0x6d1838
03:04:51.113 13716   10  0x6d4e0f
03:04:51.113 13716   11  0x6d1866
03:04:51.113 13716   12  0x6d193b
03:04:51.113 13716   13  0x6d3cad
03:04:51.113 13716   14  0x6d3290
03:04:51.113 13716   15  0x6d2544
03:04:51.113 13716   16  0x6cc658
03:04:51.113 13716   17  0x6e1466
03:04:51.113 13716   18  0x7632a0
03:04:51.113 13716   19  0x49d408
03:04:51.113 13716   20  0x17cf0cd
03:04:51.114 13716   21  0xbae4d4
03:04:51.114 13716   22  0xbacf9a
03:04:51.114 13716   23  0xbbc96c
03:04:51.114 13716   24  0xbbbb72
03:04:51.114 13716   25  0xb97a9d
03:04:51.114 13716   26  0xbbb7d8
03:04:51.114 13716   27  0xde7117
03:04:51.114 13716   28  0xb3eb3c
03:04:51.114 13716   29  0xb39ab0
03:04:51.114 13716   30  0xb39a81
03:04:51.114 13716   31  0x122c9ac0618e
03:04:51.114 13716   [13791:13791:6958893186397:ERROR:process_util_posix.cc(143)] Received signal 11
03:04:51.115 13716   	base::debug::StackTrace::StackTrace() [0x86f842]
03:04:51.115 13716   	base::(anonymous namespace)::StackDumpSignalHandler() [0x82f869]
03:04:51.115 13716   	0x7f651d4c7af0
03:04:51.115 13716   	WebCore::TreeShared<>::ref() [0x49d1e3]
03:04:51.115 13716   	WTF::refIfNotNull<>() [0x49d9f0]
03:04:51.115 13716   	WTF::PassRefPtr<>::PassRefPtr() [0x49d7a3]
03:04:51.115 13716   	WebKit::ContextFeaturesClientImpl::isEnabled() [0x5070a2]
03:04:51.115 13716   	WebCore::ContextFeatures::isEnabled() [0x6c720c]
03:04:51.115 13716   	WebCore::ContextFeatures::styleScopedEnabled() [0x6c6fd3]
03:04:51.115 13716   	WebCore::HTMLStyleElement::unregisterWithScopingNode() [0x1017313]
03:04:51.116 13716   	WebCore::HTMLStyleElement::removedFrom() [0x101755b]
03:04:51.116 13716   	WebCore::ChildNodeRemovalNotifier::notifyNodeRemovedFromDocument() [0x6d1838]
03:04:51.116 13716   	WebCore::ChildNodeRemovalNotifier::notifyDescendantRemovedFromDocument() [0x6d4e0f]
03:04:51.116 13716   	WebCore::ChildNodeRemovalNotifier::notifyNodeRemovedFromDocument() [0x6d1866]
03:04:51.116 13716   	WebCore::ChildNodeRemovalNotifier::notify() [0x6d193b]
03:04:51.116 13716   	WebCore::Private::NodeRemovalDispatcher<>::dispatch() [0x6d3cad]
03:04:51.116 13716   	WebCore::Private::addChildNodesToDeletionQueue<>() [0x6d3290]
03:04:51.116 13716   	WebCore::removeAllChildrenInContainer<>() [0x6d2544]
03:04:51.116 13716   	WebCore::ContainerNode::removeAllChildren() [0x6cc658]
03:04:51.116 13716   	WebCore::Document::removedLastRef() [0x6e1466]
03:04:51.116 13716   	WebCore::Node::removedLastRef() [0x7632a0]
03:04:51.117 13716   	WebCore::TreeShared<>::deref() [0x49d408]
03:04:51.117 13716   	WebCore::DOMDataStore::weakNodeCallback() [0x17cf0cd]
03:04:51.117 13716   	v8::internal::GlobalHandles::Node::PostGarbageCollectionProcessing() [0xbae4d4]
03:04:51.117 13716   	v8::internal::GlobalHandles::PostGarbageCollectionProcessing() [0xbacf9a]
03:04:51.117 13716   	v8::internal::Heap::PerformGarbageCollection() [0xbbc96c]
03:04:51.117 13716   	v8::internal::Heap::CollectGarbage() [0xbbbb72]
03:04:51.117 13716   	v8::internal::Heap::CollectGarbage() [0xb97a9d]
03:04:51.117 13716   	v8::internal::Heap::CollectAllGarbage() [0xbbb7d8]
03:04:51.117 13716   	v8::internal::GCExtension::GC() [0xde7117]
03:04:51.117 13716   	v8::internal::HandleApiCallHelper<>() [0xb3eb3c]
03:04:51.117 13716   	v8::internal::Builtin_Impl_HandleApiCall() [0xb39ab0]
03:04:51.118 13716   	v8::internal::Builtin_HandleApiCall() [0xb39a81]
03:04:51.118 13716   	0x122c9ac0618e
0
Comment 4 WebKit Review Bot 2012-06-12 04:18:35 PDT 
Comment on attachment 147049 [details]
ROLLOUT of r120051

Clearing flags on attachment: 147049

Committed r120057: <http://trac.webkit.org/changeset/120057>
Comment 5 WebKit Review Bot 2012-06-12 04:18:40 PDT 
All reviewed patches have been landed.  Closing bug.
Comment 6 János Badics 2012-06-12 04:36:55 PDT 
*** Bug 88857 has been marked as a duplicate of this bug. ***