Bug 12041 - Assertion failure in WebCore::RenderImage::layout
Summary: Assertion failure in WebCore::RenderImage::layout
Status: RESOLVED WORKSFORME
Alias: None
Product: WebKit
Classification: Unclassified
Component: New Bugs (show other bugs)
Version: 420+
Hardware: Mac OS X 10.4
: P2 Major
Assignee: Nobody
URL:
Keywords: HasReduction
Depends on:
Blocks:
 
Reported: 2006-12-31 00:21 PST by Mark Rowe (bdash)
Modified: 2007-07-06 05:25 PDT (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Mark Rowe (bdash) 2006-12-31 00:21:26 PST
<html>
<head>
    <title>Test HTML Page</title>
    <style type="text/css">
    img { display:compact; }
    </style>
</head>
<body>
    <img>here</img>
</body>
</html>


Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_INVALID_ADDRESS at address: 0xbbadbeef
0x01174a68 in WebCore::RenderImage::layout (this=0x170d05bc) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderImage.cpp:292
292         ASSERT(minMaxKnown());
(gdb) bt
#0  0x01174a68 in WebCore::RenderImage::layout (this=0x170d05bc) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderImage.cpp:292
#1  0x015093dd in WebCore::RenderObject::layoutIfNeeded (this=0x170d05bc) at RenderObject.h:509
#2  0x011499b6 in WebCore::RenderBlock::layoutInlineChildren (this=0x170d033c, relayoutChildren=false) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/bidi.cpp:1529
#3  0x0115c454 in WebCore::RenderBlock::layoutBlock (this=0x170d033c, relayoutChildren=false) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:493
#4  0x01150ac2 in WebCore::RenderBlock::layout (this=0x170d033c) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:421
#5  0x015093dd in WebCore::RenderObject::layoutIfNeeded (this=0x170d033c) at RenderObject.h:509
#6  0x0115bb94 in WebCore::RenderBlock::layoutBlockChildren (this=0x170f467c, relayoutChildren=true) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:1102
#7  0x0115c493 in WebCore::RenderBlock::layoutBlock (this=0x170f467c, relayoutChildren=true) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:495
#8  0x01150ac2 in WebCore::RenderBlock::layout (this=0x170f467c) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:421
#9  0x015093dd in WebCore::RenderObject::layoutIfNeeded (this=0x170f467c) at RenderObject.h:509
#10 0x0115bb94 in WebCore::RenderBlock::layoutBlockChildren (this=0x182159ec, relayoutChildren=true) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:1102
#11 0x0115c493 in WebCore::RenderBlock::layoutBlock (this=0x182159ec, relayoutChildren=true) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:495
#12 0x01150ac2 in WebCore::RenderBlock::layout (this=0x182159ec) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:421
#13 0x015093dd in WebCore::RenderObject::layoutIfNeeded (this=0x182159ec) at RenderObject.h:509
#14 0x0115bb94 in WebCore::RenderBlock::layoutBlockChildren (this=0x184f1f3c, relayoutChildren=true) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:1102
#15 0x0115c493 in WebCore::RenderBlock::layoutBlock (this=0x184f1f3c, relayoutChildren=true) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:495
#16 0x01150ac2 in WebCore::RenderBlock::layout (this=0x184f1f3c) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:421
#17 0x011674ab in WebCore::RenderView::layout (this=0x184f1f3c) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderView.cpp:111
#18 0x010eb87b in WebCore::FrameView::layout (this=0x18254900, allowSubtree=true) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/page/FrameView.cpp:424
#19 0x010f2d63 in WebCore::Document::implicitClose (this=0x2222600) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/dom/Document.cpp:1359
#20 0x01394669 in WebCore::FrameLoader::checkEmitLoadEvent (this=0x2063000) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/loader/FrameLoader.cpp:1074
#21 0x01397fb9 in WebCore::FrameLoader::checkCompleted (this=0x2063000) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/loader/FrameLoader.cpp:1042
#22 0x013980bb in WebCore::FrameLoader::loadDone (this=0x2063000) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/loader/FrameLoader.cpp:1016
#23 0x0110b4ee in WebCore::DocLoader::setLoadInProgress (this=0x1823e0f0, load=false) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/loader/DocLoader.cpp:176
#24 0x0110cd7d in WebCore::Loader::receivedAllData (this=0x1640bb8, loader=0x1821f650, allData=0x1821b3f0) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/loader/loader.cpp:110
#25 0x0137c65c in WebCore::SubresourceLoader::didFinishLoading (this=0x1821f650) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/loader/mac/SubresourceLoaderMac.mm:195
#26 0x0137859c in WebCore::ResourceLoader::didFinishLoading (this=0x1821f650) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/loader/mac/ResourceLoaderMac.mm:446
#27 0x013878e3 in -[WebCoreResourceHandleAsDelegate connectionDidFinishLoading:] (self=0x1821bfa0, _cmd=0x90a9d160, con=0x1821b270) at /Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/platform/network/mac/ResourceHandleMac.mm:295
#28 0x9265be00 in -[NSURLConnection(NSURLConnectionInternal) _sendDidFinishLoadingCallback] ()
#29 0x92659ea5 in -[NSURLConnection(NSURLConnectionInternal) _sendCallbacks] ()
#30 0x92659b41 in _sendCallbacks ()
#31 0x90829379 in CFRunLoopRunSpecific ()
#32 0x90828eb5 in CFRunLoopRunInMode ()
#33 0x92dcdb90 in RunCurrentEventLoopInMode ()
#34 0x92dcd297 in ReceiveNextEventCommon ()
#35 0x92dcd0ee in BlockUntilNextEventMatchingListInMode ()
#36 0x9326f465 in _DPSNextEvent ()
#37 0x9326f056 in -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] ()
#38 0x00006f96 in ?? ()
#39 0x93268ddb in -[NSApplication run] ()
#40 0x9325cd2f in NSApplicationMain ()
#41 0x0005f7de in ?? ()
#42 0x0005f6f9 in ?? ()
(gdb)
Comment 1 Mark Rowe (bdash) 2007-07-06 05:25:40 PDT
I'm no longer seeing this assertion failure in r24059.