121949 – ASSERTION FAILED: m_refChild->parentNode()->rendererIsEditable() || !m_refChild->parentNode()->attached() in WebCore::InsertNodeBeforeCommand::InsertNodeBeforeCommand

RESOLVED CONFIGURATION CHANGED 121949

ASSERTION FAILED: m_refChild->parentNode()->rendererIsEditable() || !m_refChild->parentNode()->attached() in WebCore::InsertNodeBeforeCommand::InsertNodeBeforeCommand

https://bugs.webkit.org/show_bug.cgi?id=121949

Summary ASSERTION FAILED: m_refChild->parentNode()->rendererIsEditable() || !m_refChi...

Renata Hodovan

Reported 2013-09-26 05:12:07 PDT

Created attachment 212694 [details] Test case And an another design mode related bug.... Test: <html>foo <div contenteditable="false"> <span contenteditable="true"></span> </div> <iframe onload=" document.designMode='on'; document.execCommand('selectall'); document.execCommand('italic'); "> Backtrace: Program received signal SIGSEGV, Segmentation fault. 0x00007ffff560a08a in WTFCrash () at /home/reni/Data/REPOS/webkit_sec/Source/WTF/wtf/Assertions.cpp:342 342 *(int *)(uintptr_t)0xbbadbeef = 0; (gdb) bt #0 0x00007ffff560a08a in WTFCrash () at /home/reni/Data/REPOS/webkit_sec/Source/WTF/wtf/Assertions.cpp:342 #1 0x00007ffff420530d in WebCore::InsertNodeBeforeCommand::InsertNodeBeforeCommand (this=0x8d1950, insertChild=..., refChild=..., shouldAssumeContentIsAlwaysEditable=WebCore::DoNotAssumeContentIsAlwaysEditable) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/InsertNodeBeforeCommand.cpp:48 #2 0x00007ffff41b5d08 in WebCore::InsertNodeBeforeCommand::create (childToInsert=..., childToInsertBefore=..., shouldAssumeContentIsAlwaysEditable=WebCore::DoNotAssumeContentIsAlwaysEditable) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/InsertNodeBeforeCommand.h:38 #3 0x00007ffff41b729c in WebCore::CompositeEditCommand::insertNodeBefore (this=0x8b5aa0, insertChild=..., refChild=..., shouldAssumeContentIsAlwaysEditable=WebCore::DoNotAssumeContentIsAlwaysEditable) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/CompositeEditCommand.cpp:331 #4 0x00007ffff41ae399 in WebCore::ApplyStyleCommand::surroundNodeRangeWithElement (this=0x8b5aa0, passedStartNode=..., endNode=..., elementToInsert=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/ApplyStyleCommand.cpp:1350 #5 0x00007ffff41af86b in WebCore::ApplyStyleCommand::applyInlineStyleChange (this=0x8b5aa0, passedStart=..., passedEnd=..., styleChange=..., addStyledElement=WebCore::ApplyStyleCommand::AddStyledElement) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/ApplyStyleCommand.cpp:1493 #6 0x00007ffff41ab141 in WebCore::ApplyStyleCommand::applyInlineStyleToNodeRange (this=0x8b5aa0, style=0x8cd410, startNode=..., pastEndNode=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/ApplyStyleCommand.cpp:827 #7 0x00007ffff41aa41b in WebCore::ApplyStyleCommand::fixRangeAndApplyInlineStyle (this=0x8b5aa0, style=0x8cd410, start=..., end=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/ApplyStyleCommand.cpp:712 #8 0x00007ffff41aa037 in WebCore::ApplyStyleCommand::applyInlineStyle (this=0x8b5aa0, style=0x8cd410) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/ApplyStyleCommand.cpp:675 #9 0x00007ffff41a70e1 in WebCore::ApplyStyleCommand::doApply (this=0x8b5aa0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/ApplyStyleCommand.cpp:225 #10 0x00007ffff41b6aea in WebCore::CompositeEditCommand::apply (this=0x8b5aa0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/CompositeEditCommand.cpp:213 #11 0x00007ffff41b68ea in WebCore::applyCommand (command=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/CompositeEditCommand.cpp:172 #12 0x00007ffff41d9614 in WebCore::Editor::applyStyle (this=0x77b280, style=0x8b7950, editingAction=WebCore::EditActionUnspecified) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/Editor.cpp:762 #13 0x00007ffff41e7b16 in WebCore::applyCommandToFrame (frame=..., source=WebCore::CommandFromDOM, action=WebCore::EditActionItalics, style=0x8b7950) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/EditorCommand.cpp:112 #14 0x00007ffff41e811d in WebCore::executeToggleStyle (frame=..., source=WebCore::CommandFromDOM, action=WebCore::EditActionItalics, propertyID=WebCore::CSSPropertyFontStyle, offValue=0x7ffff59d7f94 "normal", onValue=0x7ffff59d7f9b "italic") at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/EditorCommand.cpp:173 #15 0x00007ffff41eba47 in WebCore::executeToggleItalic (frame=..., source=WebCore::CommandFromDOM) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/EditorCommand.cpp:1115 #16 0x00007ffff41ecec2 in WebCore::Editor::Command::execute (this=0x7fffffffa290, parameter=..., triggeringEvent=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/editing/EditorCommand.cpp:1717 #17 0x00007ffff40ba43e in WebCore::Document::execCommand (this=0x86f3f0, commandName=..., userInterface=false, value=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:4176 #18 0x00007ffff4ddad84 in WebCore::jsDocumentPrototypeFunctionExecCommand (exec=0x7fff9d9c6f50) at generated/JSDocument.cpp:2763 #19 0x00007fff9ffff0e5 in ?? () #20 0x00007fffffffa430 in ?? () #21 0x00007ffff6777793 in llint_op_call () from /home/reni/Data/REPOS/webkit_sec/WebKitBuild/Debug/lib/libQt5WebKit.so.5 #22 0x00007fff9d9c6f98 in ?? () #23 0x00000000007ba988 in ?? () #24 0x00007fffffffa3f0 in ?? () #25 0x00007ffff542942d in JSC::JSStack::installTrapsAfterFrame (this=0x0, frame=0x0) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/interpreter/JSStackInlines.h:214 #26 0x00007ffff543c424 in JSC::JITCode::execute (this=0x89dde0, stack=0x7ba988, callFrame=0x7fff9d9c6f98, vm=0x83aa80) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/jit/JITCode.cpp:46 #27 0x00007ffff54262c6 in JSC::Interpreter::executeCall (this=0x7ba970, callFrame=0x7fff9d34f9b0, function=0x7fff9c04e4b0, callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/interpreter/Interpreter.cpp:969 #28 0x00007ffff54fbfaa in JSC::call (exec=0x7fff9d34f9b0, functionObject=..., callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/runtime/CallData.cpp:39 #29 0x00007ffff3e3b61e in WebCore::JSMainThreadExecState::call (exec=0x7fff9d34f9b0, functionObject=..., callType=JSC::CallTypeJS, callData=..., ---Type <return> to continue, or q <return> to quit--- thisValue=..., args=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/bindings/js/JSMainThreadExecState.h:53 #30 0x00007ffff3e6a88d in WebCore::JSEventListener::handleEvent (this=0x8720a0, scriptExecutionContext=0x86f4a0, event=0x8925f0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/bindings/js/JSEventListener.cpp:133 #31 0x00007ffff41270ac in WebCore::EventTarget::fireEventListeners (this=0x8722d0, event=0x8925f0, d=0x872400, entry=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventTarget.cpp:277 #32 0x00007ffff4126dc9 in WebCore::EventTarget::fireEventListeners (this=0x8722d0, event=0x8925f0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventTarget.cpp:233 #33 0x00007ffff4153335 in WebCore::Node::handleLocalEvents (this=0x8722d0, event=0x8925f0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Node.cpp:2067 #34 0x00007ffff4118f46 in WebCore::EventContext::handleLocalEvents (this=0x8921c0, event=0x8925f0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventContext.cpp:58 #35 0x00007ffff411ae81 in WebCore::EventDispatcher::dispatchEventAtTarget (this=0x7fffffffaa70) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatcher.cpp:161 #36 0x00007ffff411ab3e in WebCore::EventDispatcher::dispatch (this=0x7fffffffaa70) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatcher.cpp:118 #37 0x00007ffff4119907 in WebCore::EventDispatchMediator::dispatchEvent (this=0x88f040, dispatcher=0x7fffffffaa70) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatchMediator.cpp:54 #38 0x00007ffff411a0eb in WebCore::EventDispatcher::dispatchEvent (node=0x8722d0, mediator=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/EventDispatcher.cpp:52 #39 0x00007ffff415354a in WebCore::Node::dispatchEvent (this=0x8722d0, event=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Node.cpp:2088 #40 0x00007ffff4544089 in WebCore::DOMWindow::dispatchLoadEvent (this=0x891d60) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/page/DOMWindow.cpp:1701 #41 0x00007ffff40b897f in WebCore::Document::dispatchWindowLoadEvent (this=0x891040) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:3649 #42 0x00007ffff40b3ffb in WebCore::Document::implicitClose (this=0x891040) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:2442 #43 0x00007ffff44ba161 in WebCore::FrameLoader::checkCallImplicitClose (this=0x888640) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:850 #44 0x00007ffff44b9ed2 in WebCore::FrameLoader::checkCompleted (this=0x888640) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:793 #45 0x00007ffff44b9c07 in WebCore::FrameLoader::finishedParsing (this=0x888640) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:726 #46 0x00007ffff40bb203 in WebCore::Document::finishedParsing (this=0x891040) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:4441 #47 0x00007ffff4314817 in WebCore::HTMLConstructionSite::finishedParsing (this=0x88ef18) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLConstructionSite.cpp:352 #48 0x00007ffff4349ead in WebCore::HTMLTreeBuilder::finished (this=0x88ef00) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLTreeBuilder.cpp:2908 #49 0x00007ffff431c0aa in WebCore::HTMLDocumentParser::end (this=0x88f690) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:758 #50 0x00007ffff431c195 in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x88f690) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:769 #51 0x00007ffff431ad82 in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x88f690) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:212 #52 0x00007ffff431c1da in WebCore::HTMLDocumentParser::attemptToEnd (this=0x88f690) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:781 #53 0x00007ffff431c293 in WebCore::HTMLDocumentParser::finish (this=0x88f690) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:830 #54 0x00007ffff44b18fb in WebCore::DocumentWriter::end (this=0x88d5a0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentWriter.cpp:245 #55 0x00007ffff44a3d2d in WebCore::DocumentLoader::finishedLoading (this=0x88d500, finishTime=4646.692705722) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:408 #56 0x00007ffff44a782e in WebCore::DocumentLoader::maybeLoadEmpty (this=0x88d500) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:1347 #57 0x00007ffff44a794d in WebCore::DocumentLoader::startLoadingMainResource (this=0x88d500) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:1359 #58 0x00007ffff44c04ae in WebCore::FrameLoader::continueLoadAfterWillSubmitForm (this=0x888640) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:2230 #59 0x00007ffff44c3194 in WebCore::FrameLoader::continueLoadAfterNavigationPolicy (this=0x888640, formState=..., shouldContinue=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:2884 #60 0x00007ffff44c2657 in WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy (argument=0x888640, request=..., formState=..., shouldContinue=true) ---Type <return> to continue, or q <return> to quit--- at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:2714 #61 0x00007ffff44dc623 in WebCore::PolicyCallback::call (this=0x7fffffffb6b0, shouldContinue=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/PolicyCallback.cpp:103 #62 0x00007ffff44dd7ba in WebCore::PolicyChecker::continueAfterNavigationPolicy (this=0x8888f0, policy=WebCore::PolicyUse) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/PolicyChecker.cpp:180 #63 0x00007ffff3a94002 in WebCore::FrameLoaderClientQt::callPolicyFunction (this=0x8883d0, function= (void (WebCore::PolicyChecker::*)(WebCore::PolicyChecker * const, WebCore::PolicyAction)) 0x7ffff44dd550 <WebCore::PolicyChecker::continueAfterNavigationPolicy(WebCore::PolicyAction)>, action=WebCore::PolicyUse) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:246 #64 0x00007ffff3a99f1c in WebCore::FrameLoaderClientQt::dispatchDecidePolicyForNavigationAction (this=0x8883d0, function= (void (WebCore::PolicyChecker::*)(WebCore::PolicyChecker * const, WebCore::PolicyAction)) 0x7ffff44dd550 <WebCore::PolicyChecker::continueAfterNavigationPolicy(WebCore::PolicyAction)>, action=..., request=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:1282 #65 0x00007ffff44dd095 in WebCore::PolicyChecker::checkNavigationPolicy (this=0x8888f0, request=..., loader=0x88d500, formState=..., function=0x7ffff44c2608 <WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy(void*, WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool)>, argument=0x888640) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/PolicyChecker.cpp:99 #66 0x00007ffff44bcf8a in WebCore::FrameLoader::loadWithDocumentLoader (this=0x888640, loader=0x88d500, type=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, prpFormState=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:1423 #67 0x00007ffff44bc80b in WebCore::FrameLoader::loadWithNavigationAction (this=0x888640, request=..., action=..., lockHistory=false, type=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, formState=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:1327 #68 0x00007ffff44bbdd3 in WebCore::FrameLoader::loadURL (this=0x888640, newURL=..., referrer=..., frameName=..., lockHistory=false, newLoadType=WebCore::FrameLoadTypeRedirectWithLockedBackForwardList, event=..., prpFormState=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:1262 #69 0x00007ffff44ba3f4 in WebCore::FrameLoader::loadURLIntoChildFrame (this=0x77fde0, url=..., referer=..., childFrame=0x8885b0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:878 #70 0x00007ffff3a9a38a in WebCore::FrameLoaderClientQt::createFrame (this=0x790620, url=..., name=..., ownerElement=0x8722d0, referrer=..., allowsScrolling=true, marginWidth=-1, marginHeight=-1) at /home/reni/Data/REPOS/webkit_sec/Source/WebKit/qt/WebCoreSupport/FrameLoaderClientQt.cpp:1327 #71 0x00007ffff44ed221 in WebCore::SubframeLoader::loadSubframe (this=0x780100, ownerElement=0x8722d0, url=..., name=..., referrer=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:361 #72 0x00007ffff44ecfd7 in WebCore::SubframeLoader::loadOrRedirectSubframe (this=0x780100, ownerElement=0x8722d0, url=..., frameName=..., lockHistory=true, lockBackForwardList=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:335 #73 0x00007ffff44ebc88 in WebCore::SubframeLoader::requestFrame (this=0x780100, ownerElement=0x8722d0, urlString=..., frameName=..., lockHistory=true, lockBackForwardList=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubframeLoader.cpp:89 #74 0x00007ffff42a8ff8 in WebCore::HTMLFrameElementBase::openURL (this=0x8722d0, lockHistory=true, lockBackForwardList=true) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLFrameElementBase.cpp:89 #75 0x00007ffff42a946c in WebCore::HTMLFrameElementBase::setNameAndOpenURL (this=0x8722d0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLFrameElementBase.cpp:142 #76 0x00007ffff42a9537 in WebCore::HTMLFrameElementBase::didNotifySubtreeInsertions (this=0x8722d0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/HTMLFrameElementBase.cpp:173 #77 0x00007ffff409ce4c in WebCore::ChildNodeInsertionNotifier::notify (this=0x7fffffffc6f0, node=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/ContainerNodeAlgorithms.h:234 #78 0x00007ffff409feb0 in WebCore::ContainerNode::parserAppendChild (this=0x821e90, newChild=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/ContainerNode.cpp:764 #79 0x00007ffff43133b4 in WebCore::executeTask (task=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLConstructionSite.cpp:97 #80 0x00007ffff43137ed in WebCore::HTMLConstructionSite::executeQueuedTasks (this=0x77f168) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLConstructionSite.cpp:150 #81 0x00007ffff433dc04 in WebCore::HTMLTreeBuilder::constructTree (this=0x77f150, token=0x7fffffffc820) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLTreeBuilder.cpp:368 #82 0x00007ffff431ba62 in WebCore::HTMLDocumentParser::constructTreeFromHTMLToken (this=0x7b70e0, rawToken=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:595 #83 0x00007ffff431b6c4 in WebCore::HTMLDocumentParser::pumpTokenizer (this=0x7b70e0, mode=WebCore::HTMLDocumentParser::AllowYield) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:552 #84 0x00007ffff431aea9 in WebCore::HTMLDocumentParser::pumpTokenizerIfPossible (this=0x7b70e0, mode=WebCore::HTMLDocumentParser::AllowYield) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:236 ---Type <return> to continue, or q <return> to quit--- #85 0x00007ffff431bfca in WebCore::HTMLDocumentParser::append (this=0x7b70e0, inputSource=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:742 #86 0x00007ffff40a66a9 in WebCore::DecodedDataDocumentParser::flush (this=0x7b70e0, writer=0x732080) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/DecodedDataDocumentParser.cpp:60 #87 0x00007ffff44b18c1 in WebCore::DocumentWriter::end (this=0x732080) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentWriter.cpp:242 #88 0x00007ffff44a3d2d in WebCore::DocumentLoader::finishedLoading (this=0x731fe0, finishTime=0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:408 #89 0x00007ffff44a3a96 in WebCore::DocumentLoader::notifyFinished (this=0x731fe0, resource=0x7abc50) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:345 #90 0x00007ffff448af8a in WebCore::CachedResource::checkNotify (this=0x7abc50) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedResource.cpp:369 #91 0x00007ffff448b060 in WebCore::CachedResource::finishLoading (this=0x7abc50) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedResource.cpp:385 #92 0x00007ffff44876d4 in WebCore::CachedRawResource::finishLoading (this=0x7abc50, data=0x7e4d00) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedRawResource.cpp:94 #93 0x00007ffff44eedcf in WebCore::SubresourceLoader::didFinishLoading (this=0x7ac670, finishTime=0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubresourceLoader.cpp:283 #94 0x00007ffff44e56d7 in WebCore::ResourceLoader::didFinishLoading (this=0x7ac670, finishTime=0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/ResourceLoader.cpp:489 #95 0x00007ffff49a6e1b in WebCore::QNetworkReplyHandler::finish (this=0x78fc50) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:516 #96 0x00007ffff49a5b3a in WebCore::QNetworkReplyHandlerCallQueue::flush (this=0x78fc88) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:250 #97 0x00007ffff49a5837 in WebCore::QNetworkReplyHandlerCallQueue::push (this=0x78fc88, method=(void (WebCore::QNetworkReplyHandler::*)(WebCore::QNetworkReplyHandler * const)) 0x7ffff49a6c60 <WebCore::QNetworkReplyHandler::finish()>) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:216 #98 0x00007ffff49a6784 in WebCore::QNetworkReplyWrapper::didReceiveFinished (this=0x732bd0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:409 #99 0x00007ffff49a9116 in WebCore::QNetworkReplyWrapper::qt_static_metacall (_o=0x732bd0, _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0x7fffffffce60) at .moc/release-shared/moc_QNetworkReplyHandler.cpp:175 #100 0x00007ffff208722b in QMetaObject::activate(QObject*, int, int, void**) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #101 0x00007ffff208847e in QObject::event(QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #102 0x00007ffff2f3286c in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Widgets.so.5 #103 0x00007ffff2f34ad0 in QApplication::notify(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Widgets.so.5 #104 0x00007ffff2060f7e in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #105 0x00007ffff2063b3e in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #106 0x00007ffff20aa603 in ?? () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #107 0x00007fffef073446 in g_main_dispatch (context=0x65fe30) at /build/buildd/glib2.0-2.37.93/./glib/gmain.c:3065 #108 g_main_context_dispatch (context=context@entry=0x65fe30) at /build/buildd/glib2.0-2.37.93/./glib/gmain.c:3641 #109 0x00007fffef073798 in g_main_context_iterate (context=context@entry=0x65fe30, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at /build/buildd/glib2.0-2.37.93/./glib/gmain.c:3712 #110 0x00007fffef07383c in g_main_context_iteration (context=0x65fe30, may_block=1) at /build/buildd/glib2.0-2.37.93/./glib/gmain.c:3773 #111 0x00007ffff20aa67c in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #112 0x00007ffff205ffab in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #113 0x00007ffff20667ce in QCoreApplication::exec() () from /usr/local/Trolltech/Qt5/Qt-5.1.1/lib/libQt5Core.so.5 #114 0x0000000000420da0 in launcherMain (app=...) at /home/reni/Data/REPOS/webkit_sec/Tools/QtTestBrowser/qttestbrowser.cpp:50 #115 0x0000000000422880 in main (argc=2, argv=0x7fffffffdb18) at /home/reni/Data/REPOS/webkit_sec/Tools/QtTestBrowser/qttestbrowser.cpp:319

Attachments
Test case (296 bytes, text/html) 2013-09-26 05:12 PDT, Renata Hodovan	no flags	Details
View All Add attachment proposed patch, testcase, etc.

Brent Fulgham

Comment 1 2016-08-03 12:52:14 PDT

This is reproducible under r204037.

Radar WebKit Bug Importer

Comment 2 2016-08-03 12:54:25 PDT

<rdar://problem/27683851>

Ryosuke Niwa

Comment 3 2022-11-17 11:48:02 PST

This no longer reproduces at https://commits.webkit.org/256797@main

Note You need to log in before you can comment on or make changes to this bug.

Status RESOLVED

Resolution CONFIGURATION CHANGED

Priority P2

Severity Normal

Classification Unclassified

Version 528+ (Nightly build)

Hardware PC

OS Linux

Product WebKit

Component Layout and Rendering

Assignee

Nobody

Reported

2013-09-26 05:12 PDT

Modified

2022-11-17 11:48 PST History

CC List

5 users Show

URL

Keywords InRadar

Depends on

Blocks

116980

Dependencies

tree graph