RESOLVED FIXED 121913
ASSERTION FAILED: m_logicalLeftSelectionOffset == m_block->logicalLeftSelectionOffset(rootBlock, position, *m_cache) in WebCore::LogicalSelectionOffsetCaches::ContainingBlockInfo::logicalLeftSelectionOffset 
https://bugs.webkit.org/show_bug.cgi?id=121913
Summary ASSERTION FAILED: m_logicalLeftSelectionOffset == m_block->logicalLeftSelecti...
Renata Hodovan
Reported 2013-09-25 09:40:06 PDT
Ehh... a new failing test again related to the active design mode: <html> <div> <h2>foo</h2>bar </div> <div></div> <p style="float:left;margin:5px" ></p> <iframe onload=" document.designMode=&apos;on&apos;; document.execCommand(&apos;selectall&apos;);" > Backtrace: Program received signal SIGSEGV, Segmentation fault. 0x00007ffff560a08a in WTFCrash () at /home/reni/Data/REPOS/webkit_sec/Source/WTF/wtf/Assertions.cpp:342 342 *(int *)(uintptr_t)0xbbadbeef = 0; (gdb) bt #0 0x00007ffff560a08a in WTFCrash () at /home/reni/Data/REPOS/webkit_sec/Source/WTF/wtf/Assertions.cpp:342 #1 0x00007ffff4731d48 in WebCore::LogicalSelectionOffsetCaches::ContainingBlockInfo::logicalLeftSelectionOffset (this=0x7fffffff95d0, rootBlock=0x823c18, position=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/LogicalSelectionOffsetCaches.h:110 #2 0x00007ffff4740fd1 in WebCore::RenderBlock::logicalLeftSelectionOffset (this=0x8b1a88, rootBlock=0x823c18, position=..., cache=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlock.cpp:3063 #3 0x00007ffff4740918 in WebCore::RenderBlock::logicalLeftSelectionGap (this=0x8b1a88, rootBlock=0x823c18, rootBlockPhysicalPosition=..., offsetFromRootBlock=..., selObj=0x8b1a88, logicalLeft=..., logicalTop=..., logicalHeight=..., cache=..., paintInfo=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlock.cpp:3017 #4 0x00007ffff48f8e69 in WebCore::RootInlineBox::lineSelectionGap (this=0x922838, rootBlock=0x823c18, rootBlockPhysicalPosition=..., offsetFromRootBlock=..., selTop=..., selHeight=..., cache=..., paintInfo=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RootInlineBox.cpp:484 #5 0x00007ffff473fca1 in WebCore::RenderBlock::inlineSelectionGaps (this=0x8b1a88, rootBlock=0x823c18, rootBlockPhysicalPosition=..., offsetFromRootBlock=..., lastLogicalTop=..., lastLogicalLeft=..., lastLogicalRight=..., cache=..., paintInfo=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlock.cpp:2905 #6 0x00007ffff473f4d2 in WebCore::RenderBlock::selectionGaps (this=0x8b1a88, rootBlock=0x823c18, rootBlockPhysicalPosition=..., offsetFromRootBlock=..., lastLogicalTop=..., lastLogicalLeft=..., lastLogicalRight=..., cache=..., paintInfo=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlock.cpp:2856 #7 0x00007ffff4740569 in WebCore::RenderBlock::blockSelectionGaps (this=0x89b188, rootBlock=0x823c18, rootBlockPhysicalPosition=..., offsetFromRootBlock=..., lastLogicalTop=..., lastLogicalLeft=..., lastLogicalRight=..., cache=..., paintInfo=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlock.cpp:2986 #8 0x00007ffff473f574 in WebCore::RenderBlock::selectionGaps (this=0x89b188, rootBlock=0x823c18, rootBlockPhysicalPosition=..., offsetFromRootBlock=..., lastLogicalTop=..., lastLogicalLeft=..., lastLogicalRight=..., cache=..., paintInfo=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlock.cpp:2858 #9 0x00007ffff4740569 in WebCore::RenderBlock::blockSelectionGaps (this=0x823c18, rootBlock=0x823c18, rootBlockPhysicalPosition=..., offsetFromRootBlock=..., lastLogicalTop=..., lastLogicalLeft=..., lastLogicalRight=..., cache=..., paintInfo=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlock.cpp:2986 #10 0x00007ffff473f574 in WebCore::RenderBlock::selectionGaps (this=0x823c18, rootBlock=0x823c18, rootBlockPhysicalPosition=..., offsetFromRootBlock=..., lastLogicalTop=..., lastLogicalLeft=..., lastLogicalRight=..., cache=..., paintInfo=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlock.cpp:2858 #11 0x00007ffff473e6bc in WebCore::RenderBlock::selectionGapRectsForRepaint (this=0x823c18, repaintContainer=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlock.cpp:2749 #12 0x00007ffff48e65da in WebCore::RenderBlockSelectionInfo::RenderBlockSelectionInfo (this=0x8d65d0, b=0x823c18) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderSelectionInfo.h:86 #13 0x00007ffff48ea15b in WebCore::RenderView::setSelection (this=0x784388, start=0x8e7458, startPos=0, end=0x8d86b8, endPos=1, blockRepaintMode=WebCore::RenderView::RepaintNewXOROld) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderView.cpp:867 #14 0x00007ffff41f8689 in WebCore::FrameSelection::updateAppearance (this=0x77d120) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/FrameSelection.cpp:1819 #15 0x00007ffff41f199c in WebCore::FrameSelection::setSelection (this=0x77d120, newSelection=..., options=6, align=WebCore::FrameSelection::AlignCursorOnScrollIfNeeded, granularity=WebCore::CharacterGranularity) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/FrameSelection.cpp:316 #16 0x00007ffff41f7b23 in WebCore::FrameSelection::selectAll (this=0x77d120) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/FrameSelection.cpp:1667 #17 0x00007ffff41eb4e6 in WebCore::executeSelectAll (frame=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/EditorCommand.cpp:1017 #18 0x00007ffff41ecec2 in WebCore::Editor::Command::execute (this=0x7fffffffa270, parameter=..., triggeringEvent=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/EditorCommand.cpp:1717 #19 0x00007ffff40ba43e in WebCore::Document::execCommand (this=0x899000, commandName=..., userInterface=false, value=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:4176 #20 0x00007ffff4ddad84 in WebCore::jsDocumentPrototypeFunctionExecCommand (exec=0x7fff9d9c6f50) at generated/JSDocument.cpp:2763 #21 0x00007fff9ffff0e5 in ?? () #22 0x00007fffffffa410 in ?? () #23 0x00007ffff6777793 in llint_op_call () from /home/reni/Data/REPOS/webkit_sec/WebKitBuild/Debug/lib/libQt5WebKit.so.5 #24 0x00007fff9d9c6f98 in ?? () #25 0x00000000007bc688 in ?? () ---Type <return> to continue, or q <return> to quit--- #26 0x00007fffffffa3d0 in ?? () #27 0x00007ffff542942d in JSC::JSStack::installTrapsAfterFrame (this=0x0, frame=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/interpreter/JSStackInlines.h:214 #28 0x00007ffff543c424 in JSC::JITCode::execute (this=0x8c8b20, stack=0x7bc688, callFrame=0x7fff9d9c6f98, vm=0x83c780) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/jit/JITCode.cpp:46 #29 0x00007ffff54262c6 in JSC::Interpreter::executeCall (this=0x7bc670, callFrame=0x7fff9c12f9b0, function=0x7fff9c08e4b0, callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/interpreter/Interpreter.cpp:969 #30 0x00007ffff54fbfaa in JSC::call (exec=0x7fff9c12f9b0, functionObject=..., callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/runtime/CallData.cpp:39 #31 0x00007ffff3e3b61e in WebCore::JSMainThreadExecState::call (exec=0x7fff9c12f9b0, functionObject=..., callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/bindings/js/JSMainThreadExecState.h:53 #32 0x00007ffff3e6a88d in WebCore::JSEventListener::handleEvent (this=0x8d2920, scriptExecutionContext=0x8990b0, event=0x8c2be0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/bindings/js/JSEventListener.cpp:133 #33 0x00007ffff41270ac in WebCore::EventTarget::fireEventListeners (this=0x8d2880, event=0x8c2be0, d=0x8d2e20, entry=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventTarget.cpp:277 #34 0x00007ffff4126dc9 in WebCore::EventTarget::fireEventListeners (this=0x8d2880, event=0x8c2be0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventTarget.cpp:233 #35 0x00007ffff4153335 in WebCore::Node::handleLocalEvents (this=0x8d2880, event=0x8c2be0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Node.cpp:2067 #36 0x00007ffff4118f46 in WebCore::EventContext::handleLocalEvents (this=0x8ce8d0, event=0x8c2be0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventContext.cpp:58 #37 0x00007ffff411ae81 in WebCore::EventDispatcher::dispatchEventAtTarget (this=0x7fffffffaa50) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatcher.cpp:161 #38 0x00007ffff411ab3e in WebCore::EventDispatcher::dispatch (this=0x7fffffffaa50) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatcher.cpp:118 #39 0x00007ffff4119907 in WebCore::EventDispatchMediator::dispatchEvent (this=0x8ef7d0, dispatcher=0x7fffffffaa50) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatchMediator.cpp:54 #40 0x00007ffff411a0eb in WebCore::EventDispatcher::dispatchEvent (node=0x8d2880, mediator=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatcher.cpp:52 #41 0x00007ffff415354a in WebCore::Node::dispatchEvent (this=0x8d2880, event=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Node.cpp:2088 #42 0x00007ffff4544089 in WebCore::DOMWindow::dispatchLoadEvent (this=0x8af0c0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/page/DOMWindow.cpp:1701 #43 0x00007ffff40b897f in WebCore::Document::dispatchWindowLoadEvent (this=0x8f0440) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:3649 #44 0x00007ffff40b3ffb in WebCore::Document::implicitClose (this=0x8f0440) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:2442 #45 0x00007ffff44ba161 in WebCore::FrameLoader::checkCallImplicitClose (this=0x8b4600) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:850 #46 0x00007ffff44b9ed2 in WebCore::FrameLoader::checkCompleted (this=0x8b4600) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:793 #47 0x00007ffff44b9c07 in WebCore::FrameLoader::finishedParsing (this=0x8b4600) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:726 #48 0x00007ffff40bb203 in WebCore::Document::finishedParsing (this=0x8f0440) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:4441 #49 0x00007ffff4314817 in WebCore::HTMLConstructionSite::finishedParsing (this=0x8ab408) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLConstructionSite.cpp:352 #50 0x00007ffff4349ead in WebCore::HTMLTreeBuilder::finished (this=0x8ab3f0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLTreeBuilder.cpp:2908 #51 0x00007ffff431c0aa in WebCore::HTMLDocumentParser::end (this=0x8edcd0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:758 #52 0x00007ffff431c195 in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x8edcd0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:769 #53 0x00007ffff431ad82 in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x8edcd0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:212 #54 0x00007ffff431c1da in WebCore::HTMLDocumentParser::attemptToEnd (this=0x8edcd0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:781 #55 0x00007ffff431c293 in WebCore::HTMLDocumentParser::finish (this=0x8edcd0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:830 #56 0x00007ffff44b18fb in WebCore::DocumentWriter::end (this=0x8ebaf0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentWriter.cpp:245 ---Type <return> to continue, or q <return> to quit--- #57 0x00007ffff44a3d2d in WebCore::DocumentLoader::finishedLoading (this=0x8eba50, finishTime=92192.744950984998) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:408 #58 0x00007ffff44a782e in WebCore::DocumentLoader::maybeLoadEmpty (this=0x8eba50) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:1347 #59 0x00007ffff44a794d in WebCore::DocumentLoader::startLoadingMainResource (this=0x8eba50) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:1359 #60 0x00007ffff44c04ae in WebCore::FrameLoader::continueLoadAfterWillSubmitForm (this=0x8b4600) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:2230 #61 0x00007ffff44c3194 in WebCore::FrameLoader::continueLoadAfterNavigationPolicy (this=0x8b4600, formState=..., shouldContinue=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:2884 #62 0x00007ffff44c2657 in WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy (argument=0x8b4600, request=..., formState=..., shouldContinue=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:2714 #63 0x00007ffff44dc623 in WebCore::PolicyCallback::call (this=0x7fffffffb690, shouldContinue=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/PolicyCallback.cpp:103 #64 0x00007ffff44dd7ba in WebCore::PolicyChecker::continueAfterNavigationPolicy (this=0x8b2730, policy=WebCore::PolicyUse) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/PolicyChecker.cpp:180 #65 0x00007ffff3a94002 in WebCore::FrameLoaderClientQt::callPolicyFunction (this=0x8cb850, function= (void (WebCore::PolicyChecker::*)(WebCore::PolicyChecker * const, WebCore::PolicyAction)) 0x7ffff44dd550 <WebCore::PolicyChecker::continueAfterNavigationPolicy(WebCore::PolicyAction)>, action=WebCore::PolicyUse) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:246 #66 0x00007ffff3a99f1c in WebCore::FrameLoaderClientQt::dispatchDecidePolicyForNavigationAction (this=0x8cb850, function= (void (WebCore::PolicyChecker::*)(WebCore::PolicyChecker * const, WebCore::PolicyAction)) 0x7ffff44dd550 <WebCore::PolicyChecker::continueAfterNavigationPolicy(WebCore::PolicyAction)>, action=..., request=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:1282 #67 0x00007ffff44dd095 in WebCore::PolicyChecker::checkNavigationPolicy (this=0x8b2730, request=..., loader=0x8eba50, formState=..., function=0x7ffff44c2608 <WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy(void*, WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool)>, argument=0x8b4600) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/PolicyChecker.cpp:99 #68 0x00007ffff44bcf8a in WebCore::FrameLoader::loadWithDocumentLoader (this=0x8b4600, loader=0x8eba50, type=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, prpFormState=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:1423 #69 0x00007ffff44bc80b in WebCore::FrameLoader::loadWithNavigationAction (this=0x8b4600, request=..., action=..., lockHistory=false, type=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, formState=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:1327 #70 0x00007ffff44bbdd3 in WebCore::FrameLoader::loadURL (this=0x8b4600, newURL=..., referrer=..., frameName=..., lockHistory=false, newLoadType=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, event=..., prpFormState=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:1262 #71 0x00007ffff44ba3f4 in WebCore::FrameLoader::loadURLIntoChildFrame (this=0x781ae0, url=..., referer=..., childFrame=0x8b4570) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:878 #72 0x00007ffff3a9a38a in WebCore::FrameLoaderClientQt::createFrame (this=0x792320, url=..., name=..., ownerElement=0x8d2880, referrer=..., allowsScrolling=true, marginWidth=-1, marginHeight=-1) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:1327 #73 0x00007ffff44ed221 in WebCore::SubframeLoader::loadSubframe (this=0x781e00, ownerElement=0x8d2880, url=..., name=..., referrer=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:361 #74 0x00007ffff44ecfd7 in WebCore::SubframeLoader::loadOrRedirectSubframe (this=0x781e00, ownerElement=0x8d2880, url=..., frameName=..., lockHistory=true, lockBackForwardList=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:335 #75 0x00007ffff44ebc88 in WebCore::SubframeLoader::requestFrame (this=0x781e00, ownerElement=0x8d2880, urlString=..., frameName=..., lockHistory=true, lockBackForwardList=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:89 #76 0x00007ffff42a8ff8 in WebCore::HTMLFrameElementBase::openURL (this=0x8d2880, lockHistory=true, lockBackForwardList=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLFrameElementBase.cpp:89 #77 0x00007ffff42a946c in WebCore::HTMLFrameElementBase::setNameAndOpenURL (this=0x8d2880) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLFrameElementBase.cpp:142 #78 0x00007ffff42a9537 in WebCore::HTMLFrameElementBase::didNotifySubtreeInsertions (this=0x8d2880) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLFrameElementBase.cpp:173 #79 0x00007ffff409ce4c in WebCore::ChildNodeInsertionNotifier::notify (this=0x7fffffffc6d0, node=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/ContainerNodeAlgorithms.h:234 #80 0x00007ffff409feb0 in WebCore::ContainerNode::parserAppendChild (this=0x823b90, newChild=...) ---Type <return> to continue, or q <return> to quit--- at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/ContainerNode.cpp:764 #81 0x00007ffff43133b4 in WebCore::executeTask (task=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLConstructionSite.cpp:97 #82 0x00007ffff43137ed in WebCore::HTMLConstructionSite::executeQueuedTasks (this=0x7cbd58) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLConstructionSite.cpp:150 #83 0x00007ffff433dc04 in WebCore::HTMLTreeBuilder::constructTree (this=0x7cbd40, token=0x7fffffffc800) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLTreeBuilder.cpp:368 #84 0x00007ffff431ba62 in WebCore::HTMLDocumentParser::constructTreeFromHTMLToken (this=0x7b8de0, rawToken=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:595 #85 0x00007ffff431b6c4 in WebCore::HTMLDocumentParser::pumpTokenizer (this=0x7b8de0, mode=WebCore::HTMLDocumentParser::AllowYield) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:552 #86 0x00007ffff431aea9 in WebCore::HTMLDocumentParser::pumpTokenizerIfPossible (this=0x7b8de0, mode=WebCore::HTMLDocumentParser::AllowYield) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:236 #87 0x00007ffff431bfca in WebCore::HTMLDocumentParser::append (this=0x7b8de0, inputSource=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:742 #88 0x00007ffff40a66a9 in WebCore::DecodedDataDocumentParser::flush (this=0x7b8de0, writer=0x734e30) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/DecodedDataDocumentParser.cpp:60 #89 0x00007ffff44b18c1 in WebCore::DocumentWriter::end (this=0x734e30) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentWriter.cpp:242 #90 0x00007ffff44a3d2d in WebCore::DocumentLoader::finishedLoading (this=0x734d90, finishTime=0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:408 #91 0x00007ffff44a3a96 in WebCore::DocumentLoader::notifyFinished (this=0x734d90, resource=0x7ada60) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:345 #92 0x00007ffff448af8a in WebCore::CachedResource::checkNotify (this=0x7ada60) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedResource.cpp:369 #93 0x00007ffff448b060 in WebCore::CachedResource::finishLoading (this=0x7ada60) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedResource.cpp:385 #94 0x00007ffff44876d4 in WebCore::CachedRawResource::finishLoading (this=0x7ada60, data=0x7e4360) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedRawResource.cpp:94 #95 0x00007ffff44eedcf in WebCore::SubresourceLoader::didFinishLoading (this=0x79e800, finishTime=0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubresourceLoader.cpp:283 #96 0x00007ffff44e56d7 in WebCore::ResourceLoader::didFinishLoading (this=0x79e800, finishTime=0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/ResourceLoader.cpp:489 #97 0x00007ffff49a6e1b in WebCore::QNetworkReplyHandler::finish (this=0x791d40) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:516 #98 0x00007ffff49a5b3a in WebCore::QNetworkReplyHandlerCallQueue::flush (this=0x791d78) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:250 #99 0x00007ffff49a5837 in WebCore::QNetworkReplyHandlerCallQueue::push (this=0x791d78, method=(void (WebCore::QNetworkReplyHandler::*)(WebCore::QNetworkReplyHandler * const)) 0x7ffff49a6c60 <WebCore::QNetworkReplyHandler::finish()>) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:216 #100 0x00007ffff49a6784 in WebCore::QNetworkReplyWrapper::didReceiveFinished (this=0x7960e0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:409 #101 0x00007ffff49a9116 in WebCore::QNetworkReplyWrapper::qt_static_metacall (_o=0x7960e0, _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0x7fffffffce40) at .moc/release-shared/moc_QNetworkReplyHandler.cpp:175 #102 0x00007ffff208722b in QMetaObject::activate(QObject*, int, int, void**) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #103 0x00007ffff208847e in QObject::event(QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #104 0x00007ffff2f3286c in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Widgets.so.5 #105 0x00007ffff2f34ad0 in QApplication::notify(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Widgets.so.5 #106 0x00007ffff2060f7e in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #107 0x00007ffff2063b3e in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #108 0x00007ffff20aa603 in ?? () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #109 0x00007fffef073446 in g_main_dispatch (context=0x65fe30) at /build/buildd/glib2.0-2.37.93/./glib/gmain.c:3065 #110 g_main_context_dispatch (context=context@entry=0x65fe30) at /build/buildd/glib2.0-2.37.93/./glib/gmain.c:3641 #111 0x00007fffef073798 in g_main_context_iterate (context=context@entry=0x65fe30, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) ---Type <return> to continue, or q <return> to quit--- at /build/buildd/glib2.0-2.37.93/./glib/gmain.c:3712 #112 0x00007fffef07383c in g_main_context_iteration (context=0x65fe30, may_block=1) at /build/buildd/glib2.0-2.37.93/./glib/gmain.c:3773 #113 0x00007ffff20aa67c in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #114 0x00007ffff205ffab in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #115 0x00007ffff20667ce in QCoreApplication::exec() () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #116 0x0000000000420da0 in launcherMain (app=...) at /home/reni/Data/REPOS/webkit_sec/Tools/QtTestBrowser/qttestbrowser.cpp:50 #117 0x0000000000422880 in main (argc=2, argv=0x7fffffffdaf8) at /home/reni/Data/REPOS/webkit_sec/Tools/QtTestBrowser/qttestbrowser.cpp:319
Attachments
Add attachment proposed patch, testcase, etc.
Renata Hodovan
Comment 1 2013-09-25 09:44:37 PDT
Bug https://bugs.webkit.org/show_bug.cgi?id=117408 seems quite similar, probably we can fix them together.
Brent Fulgham
Comment 2 2016-08-03 12:49:58 PDT
This appears to have been fixed by Bug 117408.
Note You need to log in before you can comment on or make changes to this bug.