Bug 110441 - ASSERTION FAILED: !m_normalFlowListDirty in RenderLayer::normalFlowList
Summary: ASSERTION FAILED: !m_normalFlowListDirty in RenderLayer::normalFlowList
Status: RESOLVED DUPLICATE of bug 117977
Alias: None
Product: WebKit
Classification: Unclassified
Component: Tables (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks: 116980
  Show dependency tree / graph
 
Reported: 2013-02-21 01:55 PST by Renata Hodovan
Modified: 2014-09-08 05:38 PDT (History)
7 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Renata Hodovan 2013-02-21 01:55:01 PST 
Running the following test we get an assertion faulire:


Program received signal SIGSEGV, Segmentation fault.
0x00007ffff3bf7a54 in WebCore::RenderLayer::normalFlowList (this=0x84bc38)
    at /home/reni/Data/REPOS/webkit/Source/WebCore/rendering/RenderLayer.h:474
474	    Vector<RenderLayer*>* normalFlowList() const { ASSERT(!m_normalFlowListDirty); return m_normalFlowList.get(); }


The test:

<html>
<body>
    <table style="-webkit-transform: translate3d(-100px, 0, 0)">
	<tr>
  	    <td>
		<form>
	  	    <input placeholder="Search videos" value="#"><input>
		</form>
	    </td>
	</tr>
    </table>
</body>
</html>
Comment 1 Eric Seidel (no email) 2013-02-21 07:21:45 PST 
Is this a regression?
Comment 2 Renata Hodovan 2013-02-21 07:31:27 PST 
(In reply to comment #1)
> Is this a regression?

I don't know from when we have this bug. But my fuzzer crashed on it now and since you were the last one who reviewed the line of assertion check I've added you to the CC list.
Comment 3 Simon Fraser (smfr) 2013-02-21 13:34:08 PST 
What does the rest of the stack look like?
Comment 4 Renata Hodovan 2014-09-08 05:38:54 PDT 

*** This bug has been marked as a duplicate of bug 117977 ***