Bug 89441

Summary: ASSERT in Document::setCompatibilityMode() on fast/dynamic/crash-paint-no-documentElement-renderer.html .
Product: WebKit Reporter: Hao Zheng <zhenghao>
Component: WebCore Misc.Assignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal    
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   

Description Hao Zheng 2012-06-19 00:43:33 PDT
I see this on chromium-linux.

ASSERTION FAILED: !m_styleSheets->length()
third_party/WebKit/Source/WebCore/dom/Document.cpp(768) : void WebCore::Document::setCompatibilityMode(WebCore::Document::CompatibilityMode)
1   0x6e3fdc
2   0x10aa0f4
3   0x10a98f1
4   0x109e7a5
5   0x109e56c
6   0x109e493
7   0x1086804
8   0x10861c5
9   0x1086031
10  0x108705e
11  0x1087117
12  0x6eac96
13  0x6eac47
14  0x1bae445
15  0xb445f4
16  0xb3f568
17  0xb3f539
18  0x3b0a37e0618e
[27697:27697:709218392694:ERROR:process_util_posix.cc(143)] Received signal 11
        base::debug::StackTrace::StackTrace() [0x8718d6]
        base::(anonymous namespace)::StackDumpSignalHandler() [0x83191d]
        0x7fd69cd83af0
        WebCore::Document::setCompatibilityMode() [0x6e3fe6]
        WebCore::HTMLTreeBuilder::defaultForInitial() [0x10aa0f4]
        WebCore::HTMLTreeBuilder::processEndOfFile() [0x10a98f1]
        WebCore::HTMLTreeBuilder::processToken() [0x109e7a5]
        WebCore::HTMLTreeBuilder::constructTreeFromAtomicToken() [0x109e56c]
        WebCore::HTMLTreeBuilder::constructTreeFromToken() [0x109e493]
        WebCore::HTMLDocumentParser::pumpTokenizer() [0x1086804]
        WebCore::HTMLDocumentParser::pumpTokenizerIfPossible() [0x10861c5]
        WebCore::HTMLDocumentParser::prepareToStopParsing() [0x1086031]
        WebCore::HTMLDocumentParser::attemptToEnd() [0x108705e]
        WebCore::HTMLDocumentParser::finish() [0x1087117]
        WebCore::Document::explicitClose() [0x6eac96]
        WebCore::Document::close() [0x6eac47]
        WebCore::HTMLDocumentV8Internal::closeCallback() [0x1bae445]
        v8::internal::HandleApiCallHelper<>() [0xb445f4]
        v8::internal::Builtin_Impl_HandleApiCall() [0xb3f568]
        v8::internal::Builtin_HandleApiCall() [0xb3f539]
        0x3b0a37e0618e
Comment 1 Hao Zheng 2012-06-19 00:55:55 PDT

*** This bug has been marked as a duplicate of bug 68859 ***