Bug 101609 - ASSERTION FAILED: enclosingIntRect(rendererMappedResult) == enclosingIntRect(FloatQuad(result).boundingBox())
Summary: ASSERTION FAILED: enclosingIntRect(rendererMappedResult) == enclosingIntRect(...
Status: ASSIGNED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Layout and Rendering (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Simon Fraser (smfr)
URL: http://dev.sencha.com/deploy/touch/ex...
Keywords:
Depends on:
Blocks:
 
Reported: 2012-11-08 08:15 PST by ChangSeok Oh
Modified: 2020-02-18 15:07 PST (History)
2 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description ChangSeok Oh 2012-11-08 08:15:54 PST
Build option is 
../../autogen.sh --prefix=/usr/local --enable-debug --enable-webgl --disable-egl --with-gstreamer=1.0

And then run like this.
./Programs/GtkLauncher http://dev.sencha.com/deploy/touch/examples/production/kitchensink/#demo/forms --enable-accelerated-compositing

I tested gtk port but I guess mac port has a same issue.

Backtrace for gtk port is...

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff50c1b04 in WebCore::RenderGeometryMap::absoluteRect (
    this=0x7fffffffa330, rect=...)
    at ../../Source/WebCore/rendering/RenderGeometryMap.cpp:85
85	    ASSERT(enclosingIntRect(rendererMappedResult) == enclosingIntRect(FloatQuad(result).boundingBox()));
(gdb) bt
#0  0x00007ffff50c1b04 in WebCore::RenderGeometryMap::absoluteRect (
    this=0x7fffffffa330, rect=...)
    at ../../Source/WebCore/rendering/RenderGeometryMap.cpp:85
#1  0x00007ffff50fd216 in WebCore::RenderLayerCompositor::computeCompositingRequirements (this=0x851d20, ancestorLayer=0x7fe928, layer=0x2567cc8, 
    overlapMap=0x7fffffffa2f0, compositingState=..., 
    layersChanged=@0x7fffffffa7c9: false, 
    descendantHas3DTransform=@0x7fffffffa13e: false)
    at ../../Source/WebCore/rendering/RenderLayerCompositor.cpp:793
#2  0x00007ffff50fd63c in WebCore::RenderLayerCompositor::computeCompositingRequirements (this=0x851d20, ancestorLayer=0x851bf8, layer=0x7fe928, 
    overlapMap=0x7fffffffa2f0, compositingState=..., 
    layersChanged=@0x7fffffffa7c9: false, 
    descendantHas3DTransform=@0x7fffffffa29e: false)
    at ../../Source/WebCore/rendering/RenderLayerCompositor.cpp:870
#3  0x00007ffff50fd63c in WebCore::RenderLayerCompositor::computeCompositingRequirements (this=0x851d20, ancestorLayer=0x0, layer=0x851bf8, overlapMap=0x7fffffffa2f0, 
    compositingState=..., layersChanged=@0x7fffffffa7c9: false, 
    descendantHas3DTransform=@0x7fffffffa7ca: false)
    at ../../Source/WebCore/rendering/RenderLayerCompositor.cpp:870
#4  0x00007ffff50fbbe8 in WebCore::RenderLayerCompositor::updateCompositingLayers (
    this=0x851d20, updateType=WebCore::CompositingUpdateOnScroll, 
    updateRoot=0x851bf8)
    at ../../Source/WebCore/rendering/RenderLayerCompositor.cpp:443
#5  0x00007ffff50d8ec9 in WebCore::RenderLayer::updateCompositingLayersAfterScroll
    (this=0x2567608) at ../../Source/WebCore/rendering/RenderLayer.cpp:1913
#6  0x00007ffff50d7e6d in WebCore::RenderLayer::scrollTo (this=0x2567608, x=550, 
    y=0) at ../../Source/WebCore/rendering/RenderLayer.cpp:1754
#7  0x00007ffff50da6d1 in WebCore::RenderLayer::setScrollOffset (this=0x2567608, 
    offset=...) at ../../Source/WebCore/rendering/RenderLayer.cpp:2089
#8  0x00007ffff4f52fc6 in WebCore::ScrollableArea::scrollPositionChanged (
    this=0x2567608, position=...)
    at ../../Source/WebCore/platform/ScrollableArea.cpp:155
#9  0x00007ffff4f53261 in WebCore::ScrollableArea::setScrollOffsetFromAnimation (
    this=0x2567608, offset=...)
    at ../../Source/WebCore/platform/ScrollableArea.cpp:200
#10 0x00007ffff4f501a1 in WebCore::ScrollAnimator::notifyPositionChanged (
    this=0x25d7780) at ../../Source/WebCore/platform/ScrollAnimator.cpp:149
#11 0x00007ffff4f4fb35 in WebCore::ScrollAnimator::scrollToOffsetWithoutAnimation (
    this=0x25d7780, offset=...)
    at ../../Source/WebCore/platform/ScrollAnimator.cpp:79
#12 0x00007ffff4f52e5c in WebCore::ScrollableArea::scrollToOffsetWithoutAnimation (
    this=0x2567608, offset=...)
    at ../../Source/WebCore/platform/ScrollableArea.cpp:130
---Type <return> to continue, or q <return> to quit---
#13 0x00007ffff50d7c92 in WebCore::RenderLayer::scrollToOffset (this=0x2567608, 
    scrollOffset=..., clamp=WebCore::RenderLayer::ScrollOffsetClamped)
    at ../../Source/WebCore/rendering/RenderLayer.cpp:1704
#14 0x00007ffff506ec7b in WebCore::RenderLayer::scrollToXOffset (this=0x2567608, 
    x=550, clamp=WebCore::RenderLayer::ScrollOffsetClamped)
    at ../../Source/WebCore/rendering/RenderLayer.h:329
#15 0x00007ffff505588f in WebCore::RenderBox::setScrollLeft (this=0x2567538, 
    newLeft=550) at ../../Source/WebCore/rendering/RenderBox.cpp:391
#16 0x00007ffff48e4515 in WebCore::Element::setScrollLeft (this=0x21df5b0, 
    newLeft=550) at ../../Source/WebCore/dom/Element.cpp:538
#17 0x00007ffff55a3871 in WebCore::setJSElementScrollLeft (exec=0x7fff9c00e0a8, 
    thisObject=0x7fffa4142140, value=...)
    at DerivedSources/WebCore/JSElement.cpp:1230
#18 0x00007ffff55abe4c in JSC::lookupPut<WebCore::JSElement> (exec=0x7fff9c00e0a8, 
    propertyName=..., value=..., table=0x7ffff7dc6db0, thisObj=0x7fffa4142140, 
    shouldThrow=false) at ../../Source/JavaScriptCore/runtime/Lookup.h:373
#19 0x00007ffff55ab82e in JSC::lookupPut<WebCore::JSElement, WebCore::JSNode> (
    exec=0x7fff9c00e0a8, propertyName=..., value=..., table=0x7ffff7dc6db0, 
    thisObj=0x7fffa4142140, slot=...)
    at ../../Source/JavaScriptCore/runtime/Lookup.h:389
#20 0x00007ffff55a3805 in WebCore::JSElement::put (cell=0x7fffa4142140, 
    exec=0x7fff9c00e0a8, propertyName=..., value=..., slot=...)
    at DerivedSources/WebCore/JSElement.cpp:1222
#21 0x00007ffff55ff8a0 in JSC::lookupPut<WebCore::JSHTMLElement, WebCore::JSElement> (exec=0x7fff9c00e0a8, propertyName=..., value=..., table=0x7ffff7dc7b70, 
    thisObj=0x7fffa4142140, slot=...)
    at ../../Source/JavaScriptCore/runtime/Lookup.h:390
#22 0x00007ffff55fdc01 in WebCore::JSHTMLElement::put (cell=0x7fffa4142140, 
    exec=0x7fff9c00e0a8, propertyName=..., value=..., slot=...)
    at DerivedSources/WebCore/JSHTMLElement.cpp:445
#23 0x00007ffff55f836b in JSC::lookupPut<WebCore::JSHTMLDivElement, WebCore::JSHTMLElement> (exec=0x7fff9c00e0a8, propertyName=..., value=..., table=0x7ffff7dc7a50, 
    thisObj=0x7fffa4142140, slot=...)
    at ../../Source/JavaScriptCore/runtime/Lookup.h:390
#24 0x00007ffff55f7925 in WebCore::JSHTMLDivElement::put (cell=0x7fffa4142140, 
    exec=0x7fff9c00e0a8, propertyName=..., value=..., slot=...)
    at DerivedSources/WebCore/JSHTMLDivElement.cpp:143
#25 0x00007ffff1e849b3 in JSC::JSValue::put (this=0x7fffffffae80, 
    exec=0x7fff9c00e0a8, propertyName=..., value=..., slot=...)
    at ../../Source/JavaScriptCore/runtime/JSObject.h:1339
#26 0x00007ffff1f81a32 in JSC::LLInt::llint_slow_path_put_by_id (
    exec=0x7fff9c00e0a8, pc=0x2221970)
    at ../../Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:982
#27 0x00007ffff1f8ac9e in llint_op_put_by_id ()
---Type <return> to continue, or q <return> to quit---
   from /home/shivamidow/Projects/WebKit/WebKitBuild/Debug/.libs/libjavascriptcoregtk-3.0.so.0
#28 0x00007fff9c007358 in ?? ()
#29 0x00007fffa4142140 in ?? ()
#30 0x000000000221e030 in ?? ()
#31 0x0000000000000005 in ?? ()
#32 0x00007fffa60f2a71 in ?? ()
#33 0x00007fff8ea09640 in ?? ()
#34 0x00007fff9c007648 in ?? ()
#35 0x00007fff9c007648 in ?? ()
#36 0x00007fff9c007548 in ?? ()
#37 0x00007fffa6053720 in ?? ()
#38 0x00000000008a99c0 in ?? ()
#39 0x00007fff9c00e100 in ?? ()
#40 0x0000000000000000 in ?? ()
Comment 1 Alexey Proskuryakov 2012-11-08 18:36:00 PST
Yes, I can reproduce on Mac (using today's ToT).
Comment 2 Simon Fraser (smfr) 2012-11-08 19:32:24 PST
Scrolling :-\
Comment 3 Alexey Proskuryakov 2012-12-20 11:35:00 PST
Duplicate of bug 88128?