RESOLVED DUPLICATE of bug 137273 137316
fast/multicol/newmulticol/spanner-crash.html still crashes sometimes 
https://bugs.webkit.org/show_bug.cgi?id=137316
Summary fast/multicol/newmulticol/spanner-crash.html still crashes sometimes
Beth Dakin
Reported 2014-10-01 14:55:08 PDT
fast/multicol/newmulticol/spanner-crash.html crashed on the bots today, in a different way than it had been crashing before. The previous crash was an assert fixed by Hyatt with http://trac.webkit.org/changeset/174126 Here is the new intermittent crash: Process: com.apple.WebKit.WebContent.Development [62651] Path: /Volumes/VOLUME/*/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.Development.xpc/Contents/MacOS/com.apple.WebKit.WebContent.Development Identifier: com.apple.WebKit.WebContent.Development Version: 601+ (601.1.1+) Code Type: X86-64 (Native) Parent Process: ??? [1] Responsible: com.apple.WebKit.WebContent.Development [62651] User ID: 501 Date/Time: 2014-10-01 14:26:04.002 -0700 OS Version: Mac OS X 10.9.4 (13E28) Report Version: 11 Anonymous UUID: E724C068-036D-67C1-EA3C-9A0CD8F1E44C Crashed Thread: 0 Dispatch queue: com.apple.main-thread Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: EXC_I386_GPFLT Application Specific Information: CRASHING TEST:fast/multicol/newmulticol/spanner-crash.html Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.WebCore 0x00000001129cd420 WebCore::Node::treeScope() const + 16 (Node.h:403) 1 com.apple.WebCore 0x00000001129c8313 WebCore::Node::document() const + 83 (Node.h:398) 2 com.apple.WebCore 0x00000001129c9c19 WebCore::RenderObject::document() const + 25 (RenderObject.h:584) 3 com.apple.WebCore 0x00000001129c9b75 WebCore::RenderObject::view() const + 21 (RenderObject.h:571) 4 com.apple.WebCore 0x0000000114203c7d WebCore::RenderObject::insertedIntoTree() + 317 (RenderObject.cpp:2062) 5 com.apple.WebCore 0x00000001140c3f86 WebCore::RenderElement::insertedIntoTree() + 326 (RenderElement.cpp:977) 6 com.apple.WebCore 0x00000001140c23e5 WebCore::RenderElement::insertChildInternal(WebCore::RenderObject*, WebCore::RenderObject*, WebCore::RenderElement::NotifyChildrenType) + 789 (RenderElement.cpp:572) 7 com.apple.WebCore 0x00000001140c2030 WebCore::RenderElement::addChild(WebCore::RenderObject*, WebCore::RenderObject*) + 736 (RenderElement.cpp:497) 8 com.apple.WebCore 0x0000000113ffbdbb WebCore::RenderBlock::addChildIgnoringContinuation(WebCore::RenderObject*, WebCore::RenderObject*) + 1323 (RenderBlock.cpp:579) 9 com.apple.WebCore 0x0000000113ffb888 WebCore::RenderBlock::addChild(WebCore::RenderObject*, WebCore::RenderObject*) + 120 (RenderBlock.cpp:493) 10 com.apple.WebCore 0x0000000114046923 WebCore::RenderBlockFlow::addChild(WebCore::RenderObject*, WebCore::RenderObject*) + 179 (RenderBlockFlow.cpp:3708) 11 com.apple.WebCore 0x00000001140a0617 WebCore::RenderBoxModelObject::moveChildTo(WebCore::RenderBoxModelObject*, WebCore::RenderObject*, WebCore::RenderObject*, bool) + 423 (RenderBoxModelObject.cpp:2686) 12 com.apple.WebCore 0x00000001140a08ac WebCore::RenderBoxModelObject::moveChildrenTo(WebCore::RenderBoxModelObject*, WebCore::RenderObject*, WebCore::RenderObject*, WebCore::RenderObject*, bool) + 556 (RenderBoxModelObject.cpp:2725) 13 com.apple.WebCore 0x0000000114010ac8 WebCore::RenderBoxModelObject::moveChildrenTo(WebCore::RenderBoxModelObject*, WebCore::RenderObject*, WebCore::RenderObject*, bool) + 72 (RenderBoxModelObject.h:305) 14 com.apple.WebCore 0x00000001141d62e4 WebCore::RenderMultiColumnFlowThread::populate() + 180 (RenderMultiColumnFlowThread.cpp:162) 15 com.apple.WebCore 0x000000011402d086 WebCore::RenderBlockFlow::createMultiColumnFlowThread() + 214 (RenderBlockFlow.cpp:129) 16 com.apple.WebCore 0x0000000114031fbb WebCore::RenderBlockFlow::setComputedColumnCountAndWidth(int, WebCore::LayoutUnit) + 123 (RenderBlockFlow.cpp:3771) 17 com.apple.WebCore 0x0000000114031f2e WebCore::RenderBlockFlow::computeColumnCountAndWidth() + 1998 (RenderBlockFlow.cpp:428) 18 com.apple.WebCore 0x00000001140316c2 WebCore::RenderBlockFlow::recomputeLogicalWidthAndColumnWidth() + 66 (RenderBlockFlow.cpp:389) 19 com.apple.WebCore 0x000000011403213b WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 235 (RenderBlockFlow.cpp:439) 20 com.apple.WebCore 0x0000000113ffdf2d WebCore::RenderBlock::layout() + 125 (RenderBlock.cpp:1023) 21 com.apple.WebCore 0x0000000114035dbc WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) + 1324 (RenderBlockFlow.cpp:715) 22 com.apple.WebCore 0x000000011403373a WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) + 618 (RenderBlockFlow.cpp:634) 23 com.apple.WebCore 0x00000001140324cd WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 1149 (RenderBlockFlow.cpp:489) 24 com.apple.WebCore 0x0000000113ffdf2d WebCore::RenderBlock::layout() + 125 (RenderBlock.cpp:1023) 25 com.apple.WebCore 0x00000001140dff4b WebCore::RenderFlowThread::layout() + 315 (RenderFlowThread.cpp:203) 26 com.apple.WebCore 0x00000001141d6125 WebCore::RenderMultiColumnFlowThread::layout() + 213 (RenderMultiColumnFlowThread.cpp:136) 27 com.apple.WebCore 0x000000011404682f WebCore::RenderBlockFlow::layoutSpecialExcludedChild(bool) + 287 (RenderBlockFlow.cpp:3683) 28 com.apple.WebCore 0x00000001140335ef WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) + 287 (RenderBlockFlow.cpp:605) 29 com.apple.WebCore 0x00000001140324cd WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 1149 (RenderBlockFlow.cpp:489) 30 com.apple.WebCore 0x0000000113ffdf2d WebCore::RenderBlock::layout() + 125 (RenderBlock.cpp:1023) 31 com.apple.WebCore 0x0000000114035dbc WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) + 1324 (RenderBlockFlow.cpp:715) 32 com.apple.WebCore 0x000000011403373a WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) + 618 (RenderBlockFlow.cpp:634) 33 com.apple.WebCore 0x00000001140324cd WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 1149 (RenderBlockFlow.cpp:489) 34 com.apple.WebCore 0x0000000113ffdf2d WebCore::RenderBlock::layout() + 125 (RenderBlock.cpp:1023) 35 com.apple.WebCore 0x00000001140dff4b WebCore::RenderFlowThread::layout() + 315 (RenderFlowThread.cpp:203) 36 com.apple.WebCore 0x00000001141d6125 WebCore::RenderMultiColumnFlowThread::layout() + 213 (RenderMultiColumnFlowThread.cpp:136) 37 com.apple.WebCore 0x000000011404682f WebCore::RenderBlockFlow::layoutSpecialExcludedChild(bool) + 287 (RenderBlockFlow.cpp:3683) 38 com.apple.WebCore 0x00000001140335ef WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) + 287 (RenderBlockFlow.cpp:605) 39 com.apple.WebCore 0x00000001140324cd WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 1149 (RenderBlockFlow.cpp:489) 40 com.apple.WebCore 0x0000000113ffdf2d WebCore::RenderBlock::layout() + 125 (RenderBlock.cpp:1023) 41 com.apple.WebCore 0x0000000114035dbc WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) + 1324 (RenderBlockFlow.cpp:715) 42 com.apple.WebCore 0x000000011403373a WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) + 618 (RenderBlockFlow.cpp:634) 43 com.apple.WebCore 0x00000001140324cd WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 1149 (RenderBlockFlow.cpp:489) 44 com.apple.WebCore 0x0000000113ffdf2d WebCore::RenderBlock::layout() + 125 (RenderBlock.cpp:1023) 45 com.apple.WebCore 0x000000011431a08d WebCore::RenderView::layoutContent(WebCore::LayoutState const&) + 93 (RenderView.cpp:233) 46 com.apple.WebCore 0x000000011431aef1 WebCore::RenderView::layout() + 1873 (RenderView.cpp:359) 47 com.apple.WebCore 0x00000001132b5994 WebCore::FrameView::layout(bool) + 3220 (FrameView.cpp:1317) 48 com.apple.WebCore 0x0000000112f19889 WebCore::Document::implicitClose() + 1225 (Document.cpp:2486) 49 com.apple.WebCore 0x000000011327e88b WebCore::FrameLoader::checkCallImplicitClose() + 155 (FrameLoader.cpp:899) 50 com.apple.WebCore 0x000000011327e544 WebCore::FrameLoader::checkCompleted() + 276 (FrameLoader.cpp:846) 51 com.apple.WebCore 0x000000011327cdf8 WebCore::FrameLoader::finishedParsing() + 184 (FrameLoader.cpp:766) 52 com.apple.WebCore 0x0000000112f2559b WebCore::Document::finishedParsing() + 379 (Document.cpp:4568) 53 com.apple.WebCore 0x00000001133ace48 WebCore::HTMLConstructionSite::finishedParsing() + 24 (HTMLConstructionSite.cpp:396) 54 com.apple.WebCore 0x00000001134bc8a7 WebCore::HTMLTreeBuilder::finished() + 183 (HTMLTreeBuilder.cpp:2999) 55 com.apple.WebCore 0x00000001133bd97e WebCore::HTMLDocumentParser::end() + 190 (HTMLDocumentParser.cpp:440) 56 com.apple.WebCore 0x00000001133bb9e3 WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd() + 275 (HTMLDocumentParser.cpp:451) 57 com.apple.WebCore 0x00000001133bb7f0 WebCore::HTMLDocumentParser::prepareToStopParsing() + 288 (HTMLDocumentParser.cpp:165) 58 com.apple.WebCore 0x00000001133bd9d3 WebCore::HTMLDocumentParser::attemptToEnd() + 67 (HTMLDocumentParser.cpp:463) 59 com.apple.WebCore 0x00000001133bda28 WebCore::HTMLDocumentParser::finish() + 72 (HTMLDocumentParser.cpp:491) 60 com.apple.WebCore 0x0000000112fa4bba WebCore::DocumentWriter::end() + 346 (DocumentWriter.cpp:247) 61 com.apple.WebCore 0x0000000112f6bc43 WebCore::DocumentLoader::finishedLoading(double) + 1587 (DocumentLoader.cpp:442) 62 com.apple.WebCore 0x0000000112f6b57e WebCore::DocumentLoader::notifyFinished(WebCore::CachedResource*) + 270 (DocumentLoader.cpp:376) 63 com.apple.WebCore 0x0000000112b73112 WebCore::CachedResource::checkNotify() + 130 (CachedResource.cpp:347) 64 com.apple.WebCore 0x0000000112b73224 WebCore::CachedResource::finishLoading(WebCore::ResourceBuffer*) + 52 (CachedResource.cpp:364) 65 com.apple.WebCore 0x0000000112b6f344 WebCore::CachedRawResource::finishLoading(WebCore::ResourceBuffer*) + 228 (CachedRawResource.cpp:102) 66 com.apple.WebCore 0x00000001145d9863 WebCore::SubresourceLoader::didFinishLoading(double) + 467 (SubresourceLoader.cpp:311) 67 com.apple.WebKit 0x000000010ea7234c WebKit::WebResourceLoader::didFinishResourceLoad(double) + 156 (WebResourceLoader.cpp:156) 68 com.apple.WebKit 0x000000010ea757eb void IPC::callMemberFunctionImpl<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(double), std::__1::tuple<double>, 0ul>(WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(double), std::__1::tuple<double>&&, std::index_sequence<0ul>) + 155 (HandleMessage.h:17) 69 com.apple.WebKit 0x000000010ea75748 void IPC::callMemberFunction<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(double), std::__1::tuple<double>, std::make_index_sequence<1ul> >(std::__1::tuple<double>&&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(double)) + 88 (HandleMessage.h:23) 70 com.apple.WebKit 0x000000010ea74c3d void IPC::handleMessage<Messages::WebResourceLoader::DidFinishResourceLoad, WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(double)>(IPC::MessageDecoder&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(double)) + 221 (HandleMessage.h:121) 71 com.apple.WebKit 0x000000010ea74322 WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection*, IPC::MessageDecoder&) + 770 (WebResourceLoaderMessageReceiver.cpp:72) 72 com.apple.WebKit 0x000000010e526330 WebKit::NetworkProcessConnection::didReceiveMessage(IPC::Connection*, IPC::MessageDecoder&) + 160 (NetworkProcessConnection.cpp:64) 73 com.apple.WebKit 0x000000010e312ea3 IPC::Connection::dispatchMessage(IPC::MessageDecoder&) + 51 (Connection.cpp:810) 74 com.apple.WebKit 0x000000010e30b230 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::MessageDecoder, std::__1::default_delete<IPC::MessageDecoder> >) + 368 (Connection.cpp:828) 75 com.apple.WebKit 0x000000010e312c7f IPC::Connection::dispatchOneMessage() + 1439 (Connection.cpp:856) 76 com.apple.WebKit 0x000000010e323f62 WTF::FunctionWrapper<void (IPC::Connection::*)()>::operator()(IPC::Connection*) + 114 (Functional.h:218) 77 com.apple.WebKit 0x000000010e323ee5 WTF::BoundFunctionImpl<WTF::FunctionWrapper<void (IPC::Connection::*)()>, void (IPC::Connection*)>::operator()() + 53 (Functional.h:496) 78 com.apple.WebKit 0x000000010e32a212 WTF::Function<void ()>::operator()() const + 114 (Functional.h:704) 79 com.apple.WebKit 0x000000010e32a18c std::__1::__function::__func<WTF::Function<void ()>, std::__1::allocator<WTF::Function<void ()> >, void ()>::operator()() + 60 (functional:1370) 80 com.apple.JavaScriptCore 0x000000011154609a std::__1::function<void ()>::operator()() const + 26 (functional:1755) 81 com.apple.JavaScriptCore 0x0000000111555b74 WTF::RunLoop::performWork() + 276 (RunLoop.cpp:106) 82 com.apple.JavaScriptCore 0x0000000111557054 WTF::RunLoop::performWork(void*) + 36 (RunLoopCF.cpp:38) 83 com.apple.CoreFoundation 0x00007fff868105b1 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17 84 com.apple.CoreFoundation 0x00007fff86801c62 __CFRunLoopDoSources0 + 242 85 com.apple.CoreFoundation 0x00007fff868013ef __CFRunLoopRun + 831 86 com.apple.CoreFoundation 0x00007fff86800e75 CFRunLoopRunSpecific + 309 87 com.apple.HIToolbox 0x00007fff89aaca0d RunCurrentEventLoopInMode + 226 88 com.apple.HIToolbox 0x00007fff89aac7b7 ReceiveNextEventCommon + 479 89 com.apple.HIToolbox 0x00007fff89aac5bc _BlockUntilNextEventMatchingListInModeWithFilter + 65 90 com.apple.AppKit 0x00007fff922f124e _DPSNextEvent + 1434 91 com.apple.AppKit 0x00007fff922f089b -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 122 92 com.apple.AppKit 0x00007fff922e499c -[NSApplication run] + 553 93 com.apple.AppKit 0x00007fff922cf783 NSApplicationMain + 940 94 com.apple.XPCService 0x00007fff91cf1c0f _xpc_main + 385 95 libxpc.dylib 0x00007fff92fa9bde xpc_main + 399 96 com.apple.WebKit.WebContent.Development 0x000000010a728135 main + 37 97 libdyld.dylib 0x00007fff89dd45fd start + 1
Attachments
Add attachment proposed patch, testcase, etc.
Beth Dakin
Comment 1 2014-10-01 15:01:43 PDT
Marked as crash-flaky: http://trac.webkit.org/changeset/174176
Alexey Proskuryakov
Comment 2 2014-11-17 12:49:27 PST
<rdar://problem/19005378>
Alexey Proskuryakov
Comment 3 2014-11-17 12:59:17 PST
Skipped in r176222.
David Kilzer (:ddkilzer)
Comment 4 2015-02-03 15:49:39 PST
Fixed in r175641. <http://trac.webkit.org/changeset/175641> *** This bug has been marked as a duplicate of bug 137273 ***
Alexey Proskuryakov
Comment 5 2015-08-12 22:31:23 PDT
Unskipped in r188376.
Note You need to log in before you can comment on or make changes to this bug.