Bug 121497 - ASSERTION FAILED: anchorType() == PositionIsOffsetInAnchor in WebCore::Position::offsetInContainerNode
Summary: ASSERTION FAILED: anchorType() == PositionIsOffsetInAnchor in WebCore::Positi...
Status: RESOLVED CONFIGURATION CHANGED
Alias: None
Product: WebKit
Classification: Unclassified
Component: HTML Editing (show other bugs)
Version: 528+ (Nightly build)
Hardware: PC Linux
: P2 Normal
Assignee: Nobody
URL:
Keywords: InRadar
: 136064 (view as bug list)
Depends on:
Blocks: 116980
  Show dependency treegraph
 
Reported: 2013-09-17 09:13 PDT by Renata Hodovan
Modified: 2023-01-20 13:28 PST (History)
10 users (show)

See Also:


Attachments
Test case (223 bytes, text/html)
2013-09-17 09:13 PDT, Renata Hodovan
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Renata Hodovan 2013-09-17 09:13:01 PDT
Created attachment 211914 [details]
Test case

The failing test:

<u style="position: absolute;"></u>
<bdo></bdo><code/></code><input><iframe onload='document.designMode="on";document.execCommand("selectall");document.execCommand("italic");document.execCommand("RemoveFormat");'></iframe>


Its backtrace:

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff56dafad in WTFCrash () at /home/reni/Data/REPOS/webkit_sec/Source/WTF/wtf/Assertions.cpp:342
342	    *(int *)(uintptr_t)0xbbadbeef = 0;
(gdb) bt
#0  0x00007ffff56dafad in WTFCrash () at /home/reni/Data/REPOS/webkit_sec/Source/WTF/wtf/Assertions.cpp:342
#1  0x00007ffff3b9d274 in WebCore::Position::offsetInContainerNode (this=0x7fffffff9ed0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Position.h:107
#2  0x00007ffff42944ef in WebCore::ApplyStyleCommand::removeInlineStyle (this=0x8e5410, style=0x8e5540, start=..., end=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/ApplyStyleCommand.cpp:1141
#3  0x00007ffff4291178 in WebCore::ApplyStyleCommand::applyInlineStyle (this=0x8e5410, style=0x8e5540)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/ApplyStyleCommand.cpp:634
#4  0x00007ffff428e6b5 in WebCore::ApplyStyleCommand::doApply (this=0x8e5410)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/ApplyStyleCommand.cpp:227
#5  0x00007ffff429e0fe in WebCore::CompositeEditCommand::applyCommandToComposite (this=0x90f2a0, prpCommand=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/CompositeEditCommand.cpp:267
#6  0x00007ffff42fc83d in WebCore::RemoveFormatCommand::doApply (this=0x90f2a0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/RemoveFormatCommand.cpp:96
#7  0x00007ffff429dec6 in WebCore::CompositeEditCommand::apply (this=0x90f2a0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/CompositeEditCommand.cpp:216
#8  0x00007ffff429dc4e in WebCore::applyCommand (command=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/CompositeEditCommand.cpp:172
#9  0x00007ffff42bf96c in WebCore::Editor::removeFormattingAndStyle (this=0x7dfe90) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/Editor.cpp:684
#10 0x00007ffff42d1792 in WebCore::executeRemoveFormat (frame=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/EditorCommand.cpp:974
#11 0x00007ffff42d32d2 in WebCore::Editor::Command::execute (this=0x7fffffffa250, parameter=..., triggeringEvent=0x0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/EditorCommand.cpp:1709
#12 0x00007ffff41a1ed6 in WebCore::Document::execCommand (this=0x8b0610, commandName=..., userInterface=false, value=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:4172
#13 0x00007ffff4ebfb12 in WebCore::jsDocumentPrototypeFunctionExecCommand (exec=0x7fff8abfe0a8) at generated/JSDocument.cpp:2763
#14 0x00007fff9ffff0e5 in ?? ()
#15 0x00007fffffffa3f0 in ?? ()
#16 0x00007ffff679ffa2 in llint_op_call () from /home/reni/Data/REPOS/webkit_sec/WebKitBuild/Debug/lib/libQt5WebKit.so.5
#17 0x00007fff8abfe060 in ?? ()
#18 0x00000000007a4f78 in ?? ()
#19 0x00007fffffffa3b0 in ?? ()
#20 0x00007ffff5506ba3 in JSC::JSStack::installTrapsAfterFrame (this=0x0, frame=0x0)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/interpreter/JSStackInlines.h:212
#21 0x00007ffff551752c in JSC::JITCode::execute (this=0x8f0c00, stack=0x7a4f78, callFrame=0x7fff8abfe060, vm=0x826170)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/jit/JITCode.cpp:46
#22 0x00007ffff5503a02 in JSC::Interpreter::executeCall (this=0x7a4f60, callFrame=0x7fff9c0af9e0, function=0x7fff9c01e5f0, callType=JSC::CallTypeJS, 
    callData=..., thisValue=..., args=...) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/interpreter/Interpreter.cpp:841
#23 0x00007ffff55d58b7 in JSC::call (exec=0x7fff9c0af9e0, functionObject=..., callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/runtime/CallData.cpp:39
#24 0x00007ffff3f118bf in WebCore::JSMainThreadExecState::call (exec=0x7fff9c0af9e0, functionObject=..., callType=JSC::CallTypeJS, callData=..., 
    thisValue=..., args=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/bindings/js/JSMainThreadExecState.h:53
#25 0x00007ffff3f40c6d in WebCore::JSEventListener::handleEvent (this=0x8e91c0, scriptExecutionContext=0x8b06c0, event=0x8ee290)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/bindings/js/JSEventListener.cpp:130
#26 0x00007ffff420f7aa in WebCore::EventTarget::fireEventListeners (this=0x8e9230, event=0x8ee290, d=0x8c7920, entry=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventTarget.cpp:271
#27 0x00007ffff420f4c7 in WebCore::EventTarget::fireEventListeners (this=0x8e9230, event=0x8ee290)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventTarget.cpp:227
#28 0x00007ffff423b79b in WebCore::Node::handleLocalEvents (this=0x8e9230, event=0x8ee290)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Node.cpp:2097
#29 0x00007ffff4201d54 in WebCore::EventContext::handleLocalEvents (this=0x8ee1f0, event=0x8ee290)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventContext.cpp:58
#30 0x00007ffff4203c33 in WebCore::EventDispatcher::dispatchEventAtTarget (this=0x7fffffffaa30)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatcher.cpp:161
#31 0x00007ffff42038f0 in WebCore::EventDispatcher::dispatch (this=0x7fffffffaa30)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatcher.cpp:118
#32 0x00007ffff4202715 in WebCore::EventDispatchMediator::dispatchEvent (this=0x90e020, dispatcher=0x7fffffffaa30)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatchMediator.cpp:54
---Type <return> to continue, or q <return> to quit---
#33 0x00007ffff4202e9d in WebCore::EventDispatcher::dispatchEvent (node=0x8e9230, mediator=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatcher.cpp:52
#34 0x00007ffff423b9b0 in WebCore::Node::dispatchEvent (this=0x8e9230, event=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Node.cpp:2118
#35 0x00007ffff462bc41 in WebCore::DOMWindow::dispatchLoadEvent (this=0x8c8c80) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/page/DOMWindow.cpp:1714
#36 0x00007ffff41a03c0 in WebCore::Document::dispatchWindowLoadEvent (this=0x912eb0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:3639
#37 0x00007ffff419ba6b in WebCore::Document::implicitClose (this=0x912eb0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:2419
#38 0x00007ffff45a08af in WebCore::FrameLoader::checkCallImplicitClose (this=0x90a560)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:848
#39 0x00007ffff45a0620 in WebCore::FrameLoader::checkCompleted (this=0x90a560) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:791
#40 0x00007ffff45a0355 in WebCore::FrameLoader::finishedParsing (this=0x90a560) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:724
#41 0x00007ffff41a2c9b in WebCore::Document::finishedParsing (this=0x912eb0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:4437
#42 0x00007ffff43f6273 in WebCore::HTMLConstructionSite::finishedParsing (this=0x8e9948)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLConstructionSite.cpp:352
#43 0x00007ffff442a989 in WebCore::HTMLTreeBuilder::finished (this=0x8e9930)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLTreeBuilder.cpp:2912
#44 0x00007ffff43fd99e in WebCore::HTMLDocumentParser::end (this=0x9114d0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:763
#45 0x00007ffff43fda89 in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x9114d0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:774
#46 0x00007ffff43fc5f8 in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x9114d0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:211
#47 0x00007ffff43fdace in WebCore::HTMLDocumentParser::attemptToEnd (this=0x9114d0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:786
#48 0x00007ffff43fdb87 in WebCore::HTMLDocumentParser::finish (this=0x9114d0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:835
#49 0x00007ffff45980ab in WebCore::DocumentWriter::end (this=0x90e560) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentWriter.cpp:244
#50 0x00007ffff458ab61 in WebCore::DocumentLoader::finishedLoading (this=0x90e4c0, finishTime=12027.942013547001)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:407
#51 0x00007ffff458e738 in WebCore::DocumentLoader::maybeLoadEmpty (this=0x90e4c0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:1348
#52 0x00007ffff458e857 in WebCore::DocumentLoader::startLoadingMainResource (this=0x90e4c0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:1360
#53 0x00007ffff45a6c86 in WebCore::FrameLoader::continueLoadAfterWillSubmitForm (this=0x90a560)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:2229
#54 0x00007ffff45a98de in WebCore::FrameLoader::continueLoadAfterNavigationPolicy (this=0x90a560, formState=..., shouldContinue=true)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:2883
#55 0x00007ffff45a8df7 in WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy (argument=0x90a560, request=..., formState=..., shouldContinue=true)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:2713
#56 0x00007ffff45c220b in WebCore::PolicyCallback::call (this=0x7fffffffb680, shouldContinue=true)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/PolicyCallback.cpp:103
#57 0x00007ffff45c33a2 in WebCore::PolicyChecker::continueAfterNavigationPolicy (this=0x90a820, policy=WebCore::PolicyUse)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/PolicyChecker.cpp:180
#58 0x00007ffff3b764b4 in WebCore::FrameLoaderClientQt::callPolicyFunction (this=0x8deb40, function=
    (void (WebCore::PolicyChecker::*)(WebCore::PolicyChecker * const, WebCore::PolicyAction)) 0x7ffff45c3138 <WebCore::PolicyChecker::continueAfterNavigationPolicy(WebCore::PolicyAction)>, action=WebCore::PolicyUse) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:246
#59 0x00007ffff3b7c3c6 in WebCore::FrameLoaderClientQt::dispatchDecidePolicyForNavigationAction (this=0x8deb40, function=
    (void (WebCore::PolicyChecker::*)(WebCore::PolicyChecker * const, WebCore::PolicyAction)) 0x7ffff45c3138 <WebCore::PolicyChecker::continueAfterNavigationPolicy(WebCore::PolicyAction)>, action=..., request=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:1282
#60 0x00007ffff45c2c7d in WebCore::PolicyChecker::checkNavigationPolicy (this=0x90a820, request=..., loader=0x90e4c0, formState=..., 
    function=0x7ffff45a8da8 <WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy(void*, WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool)>, argument=0x90a560) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/PolicyChecker.cpp:99
#61 0x00007ffff45a36ce in WebCore::FrameLoader::loadWithDocumentLoader (this=0x90a560, loader=0x90e4c0, 
    type=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, prpFormState=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:1421
---Type <return> to continue, or q <return> to quit---
#62 0x00007ffff45a2f4f in WebCore::FrameLoader::loadWithNavigationAction (this=0x90a560, request=..., action=..., lockHistory=false, 
    type=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, formState=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:1325
#63 0x00007ffff45a251d in WebCore::FrameLoader::loadURL (this=0x90a560, newURL=..., referrer=..., frameName=..., lockHistory=false, 
    newLoadType=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, event=..., prpFormState=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:1260
#64 0x00007ffff45a0b42 in WebCore::FrameLoader::loadURLIntoChildFrame (this=0x7e0340, url=..., referer=..., childFrame=0x90a4d0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:876
#65 0x00007ffff3b7c834 in WebCore::FrameLoaderClientQt::createFrame (this=0x7735b0, url=..., name=..., ownerElement=0x8e9230, referrer=..., 
    allowsScrolling=true, marginWidth=-1, marginHeight=-1) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:1327
#66 0x00007ffff45d2e59 in WebCore::SubframeLoader::loadSubframe (this=0x7e0368, ownerElement=0x8e9230, url=..., name=..., referrer=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:361
#67 0x00007ffff45d2c0d in WebCore::SubframeLoader::loadOrRedirectSubframe (this=0x7e0368, ownerElement=0x8e9230, url=..., frameName=..., lockHistory=true, 
    lockBackForwardList=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:335
#68 0x00007ffff45d18be in WebCore::SubframeLoader::requestFrame (this=0x7e0368, ownerElement=0x8e9230, urlString=..., frameName=..., lockHistory=true, 
    lockBackForwardList=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:89
#69 0x00007ffff438d38e in WebCore::HTMLFrameElementBase::openURL (this=0x8e9230, lockHistory=true, lockBackForwardList=true)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLFrameElementBase.cpp:89
#70 0x00007ffff438d888 in WebCore::HTMLFrameElementBase::setNameAndOpenURL (this=0x8e9230)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLFrameElementBase.cpp:142
#71 0x00007ffff438d953 in WebCore::HTMLFrameElementBase::didNotifySubtreeInsertions (this=0x8e9230)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLFrameElementBase.cpp:173
#72 0x00007ffff41848e0 in WebCore::ChildNodeInsertionNotifier::notify (this=0x7fffffffc6c0, node=0x8e9230)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/ContainerNodeAlgorithms.h:233
#73 0x00007ffff4187833 in WebCore::ContainerNode::parserAppendChild (this=0x8b2f60, newChild=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/ContainerNode.cpp:730
#74 0x00007ffff43f4e10 in WebCore::executeTask (task=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLConstructionSite.cpp:97
#75 0x00007ffff43f5249 in WebCore::HTMLConstructionSite::executeQueuedTasks (this=0x7a0328)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLConstructionSite.cpp:150
#76 0x00007ffff441e6d0 in WebCore::HTMLTreeBuilder::constructTree (this=0x7a0310, token=0x7fffffffc7f0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLTreeBuilder.cpp:368
#77 0x00007ffff43fd322 in WebCore::HTMLDocumentParser::constructTreeFromHTMLToken (this=0x7dc4d0, rawToken=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:597
#78 0x00007ffff43fcf57 in WebCore::HTMLDocumentParser::pumpTokenizer (this=0x7dc4d0, mode=WebCore::HTMLDocumentParser::AllowYield)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:551
#79 0x00007ffff43fc71f in WebCore::HTMLDocumentParser::pumpTokenizerIfPossible (this=0x7dc4d0, mode=WebCore::HTMLDocumentParser::AllowYield)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:235
#80 0x00007ffff43fd8be in WebCore::HTMLDocumentParser::append (this=0x7dc4d0, inputSource=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:747
#81 0x00007ffff418dc07 in WebCore::DecodedDataDocumentParser::flush (this=0x7dc4d0, writer=0x694220)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/DecodedDataDocumentParser.cpp:60
#82 0x00007ffff4598071 in WebCore::DocumentWriter::end (this=0x694220) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentWriter.cpp:241
#83 0x00007ffff458ab61 in WebCore::DocumentLoader::finishedLoading (this=0x694180, finishTime=0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:407
#84 0x00007ffff458a8ca in WebCore::DocumentLoader::notifyFinished (this=0x694180, resource=0x76ded0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:344
#85 0x00007ffff4571afe in WebCore::CachedResource::checkNotify (this=0x76ded0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedResource.cpp:369
#86 0x00007ffff4571bd4 in WebCore::CachedResource::finishLoading (this=0x76ded0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedResource.cpp:385
#87 0x00007ffff456e326 in WebCore::CachedRawResource::finishLoading (this=0x76ded0, data=0x73f430)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedRawResource.cpp:94
#88 0x00007ffff45d4a15 in WebCore::SubresourceLoader::didFinishLoading (this=0x7c4f80, finishTime=0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubresourceLoader.cpp:282
---Type <return> to continue, or q <return> to quit---
#89 0x00007ffff45cb33b in WebCore::ResourceLoader::didFinishLoading (this=0x7c4f80, finishTime=0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/ResourceLoader.cpp:488
#90 0x00007ffff4a86713 in WebCore::QNetworkReplyHandler::finish (this=0x7c57c0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:516
#91 0x00007ffff4a85432 in WebCore::QNetworkReplyHandlerCallQueue::flush (this=0x7c57f8)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:250
#92 0x00007ffff4a8512f in WebCore::QNetworkReplyHandlerCallQueue::push (this=0x7c57f8, 
    method=(void (WebCore::QNetworkReplyHandler::*)(WebCore::QNetworkReplyHandler * const)) 0x7ffff4a86558 <WebCore::QNetworkReplyHandler::finish()>)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:216
#93 0x00007ffff4a8607c in WebCore::QNetworkReplyWrapper::didReceiveFinished (this=0x7c85e0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:409
#94 0x00007ffff4a88a0e in WebCore::QNetworkReplyWrapper::qt_static_metacall (_o=0x7c85e0, _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0x7fffffffce40)
    at .moc/release-shared/moc_QNetworkReplyHandler.cpp:176
#95 0x00007ffff21e65cb in QMetaObject::activate(QObject*, int, int, void**) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5
#96 0x00007ffff21e784e in QObject::event(QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5
#97 0x00007ffff302ddbc in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Widgets.so.5
#98 0x00007ffff3031075 in QApplication::notify(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Widgets.so.5
#99 0x00007ffff21c1dbe in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5
#100 0x00007ffff21c3a76 in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) ()
   from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5
#101 0x00007ffff2209333 in ?? () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5
#102 0x00007fffee34a3c6 in g_main_dispatch (context=0x6632f0) at /build/buildd/glib2.0-2.37.7/./glib/gmain.c:3065
#103 g_main_context_dispatch (context=context@entry=0x6632f0) at /build/buildd/glib2.0-2.37.7/./glib/gmain.c:3641
#104 0x00007fffee34a718 in g_main_context_iterate (context=context@entry=0x6632f0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>)
    at /build/buildd/glib2.0-2.37.7/./glib/gmain.c:3712
#105 0x00007fffee34a7bc in g_main_context_iteration (context=0x6632f0, may_block=1) at /build/buildd/glib2.0-2.37.7/./glib/gmain.c:3773
#106 0x00007ffff22094bc in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) ()
   from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5
#107 0x00007ffff21c0d3b in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5
#108 0x00007ffff21c4120 in QCoreApplication::exec() () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r40/lib/libQt5Core.so.5
#109 0x0000000000421ba0 in launcherMain (app=...) at /home/reni/Data/REPOS/webkit_sec/Tools/QtTestBrowser/qttestbrowser.cpp:49
#110 0x0000000000423680 in main (argc=2, argv=0x7fffffffdb18) at /home/reni/Data/REPOS/webkit_sec/Tools/QtTestBrowser/qttestbrowser.cpp:318
Comment 1 Renata Hodovan 2014-09-08 06:03:54 PDT
*** Bug 136064 has been marked as a duplicate of this bug. ***
Comment 2 Brent Fulgham 2016-08-03 12:38:41 PDT
This is still occurring in r204037.
Comment 3 Radar WebKit Bug Importer 2016-08-03 12:39:21 PDT
<rdar://problem/27683620>
Comment 4 Radar WebKit Bug Importer 2016-08-03 12:39:27 PDT
<rdar://problem/27683623>
Comment 5 Ahmad Saleem 2023-01-20 10:47:58 PST
I am not able to hit assertion using Minibrowser WK2 Debug build based of 259136@main on attached test case.

Can we close this? Thanks!