Bug 9784 – Layout tests crash intermittently in WebCore::Frame::disconnectOwnerElement()

• Component: Frames
• Status: RESOLVED DUPLICATE

[David Kilzer (:ddkilzer)]

I'm seeing layout tests crash intermittently in WebCore::Frame::disconnectOwnerElement().  The first crash I saw happened in fast/forms/textarea-appearance-wrap.html using a locally-built WebKit r15196.  The second crash happened in fast/flexbox/018.html using a locally-built WebKit r15227.  I will post crash logs shortly.

This could be related to the fix for Bug 3581.

[David Kilzer (:ddkilzer)]

Note that I'm running Mac OS X 10.4.7 (8J135/PowerPC) with Safari 2.0.4 (419.3).

[David Kilzer (:ddkilzer)]

Created attachment 9260 [details]
Crash log for Frame::disconnectOwnerElement() (2 crashes)

[David Kilzer (:ddkilzer)]

Created attachment 9261 [details]
Crash log for WebCore::Frame::~Frame() assertion

While rerunning fast/flexbox/018.html, I just had an assertion failure.  The stack trace (see attachment) looks identical up to the point where the assertion stack stops.

=================
ASSERTION FAILED: !d->m_ownerElement (/Users/ddkilzer/Projects/Cocoa/WebKit/WebCore/page/Frame.cpp:211 virtual WebCore::Frame::~Frame())
=================

[David Kilzer (:ddkilzer)]

I can't say for sure, but the no-svg buildbot may be suffering from this problem.  Someone would have to check ~/Library/Logs/CrashReporter/DumpRenderTree.crash.log to see where the last two builds have failed.

http://build.webkit.org/periodic-powerpc-mac-os-x-no-svg/builds/778/step-layout-test/0
http://build.webkit.org/periodic-powerpc-mac-os-x-no-svg/builds/777/step-layout-test/0

[David Kilzer (:ddkilzer)]

Created attachment 9265 [details]
Crash log for WebCore::RenderPart::setFrame()

A different crash running DumpRenderTree on fast/forms/textarea-appearance-wrap.html in WebCore::RenderPart::setFrame().

[David Kilzer (:ddkilzer)]

Looks like this is a duplicate of both Bug 9785 and Bug 9787.  I'll pick one.



*** This bug has been marked as a duplicate of 9787 ***