150232 – Should never be reached failure in WebCore::backgroundRectForBox

RESOLVED FIXED 150232

Should never be reached failure in WebCore::backgroundRectForBox

https://bugs.webkit.org/show_bug.cgi?id=150232

Summary Should never be reached failure in WebCore::backgroundRectForBox

Renata Hodovan

Reported 2015-10-16 08:54:05 PDT

Created attachment 263271 [details] Test Load the following test with debug WebKit: <!DOCTYPE html> <style> * { -webkit-transform: translateZ(-100px); -webkit-background-clip: text; } </style> Backtrace: SHOULD NEVER BE REACHED ../../Source/WebCore/rendering/RenderLayerBacking.cpp(2111) : WebCore::LayoutRect WebCore::backgroundRectForBox(const WebCore::RenderBox&) Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007f950e1d3eda in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:321 321 *(int *)(uintptr_t)0xbbadbeef = 0; (gdb) bt #0 0x00007f950e1d3eda in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:321 #1 0x00007f951510923a in WebCore::backgroundRectForBox (box=...) at ../../Source/WebCore/rendering/RenderLayerBacking.cpp:2111 #2 0x00007f95151092b9 in WebCore::RenderLayerBacking::backgroundBoxForPainting (this=0x7f94f77df7e0) at ../../Source/WebCore/rendering/RenderLayerBacking.cpp:2120 #3 0x00007f95151079c3 in WebCore::RenderLayerBacking::updateDirectlyCompositedBackgroundColor (this=0x7f94f77df7e0, isSimpleContainer=true, didUpdateContentsRect=@0x7ffe76b963d3: false) at ../../Source/WebCore/rendering/RenderLayerBacking.cpp:1721 #4 0x00007f9515104850 in WebCore::RenderLayerBacking::updateDirectlyCompositedContents (this=0x7f94f77df7e0, isSimpleContainer=true, didUpdateContentsRect=@0x7ffe76b963d3: false) at ../../Source/WebCore/rendering/RenderLayerBacking.cpp:1125 #5 0x00007f9515101359 in WebCore::RenderLayerBacking::updateConfiguration (this=0x7f94f77df7e0) at ../../Source/WebCore/rendering/RenderLayerBacking.cpp:617 #6 0x00007f95151126d9 in WebCore::RenderLayerCompositor::updateLayerCompositingState (this=0x7f94f76e6460, layer=..., shouldRepaint=WebCore::RenderLayerCompositor::CompositingChangeRepaintNow) at ../../Source/WebCore/rendering/RenderLayerCompositor.cpp:1118 #7 0x00007f9515111f51 in WebCore::RenderLayerCompositor::layerStyleChanged (this=0x7f94f76e6460, diff=WebCore::StyleDifferenceNewStyle, layer=..., oldStyle=0x0) at ../../Source/WebCore/rendering/RenderLayerCompositor.cpp:969 #8 0x00007f95150efe2e in WebCore::RenderLayer::styleChanged (this=0x7f94f76f87e0, diff=WebCore::StyleDifferenceNewStyle, oldStyle=0x0) at ../../Source/WebCore/rendering/RenderLayer.cpp:6742 #9 0x00007f9515127251 in WebCore::RenderLayerModelObject::styleDidChange (this=0x7f94f77bf450, diff=WebCore::StyleDifferenceNewStyle, oldStyle=0x0) at ../../Source/WebCore/rendering/RenderLayerModelObject.cpp:173 #10 0x00007f95150159ca in WebCore::RenderBox::styleDidChange (this=0x7f94f77bf450, diff=WebCore::StyleDifferenceNewStyle, oldStyle=0x0) at ../../Source/WebCore/rendering/RenderBox.cpp:335 #11 0x00007f9514fb25ad in WebCore::RenderBlock::styleDidChange (this=0x7f94f77bf450, diff=WebCore::StyleDifferenceNewStyle, oldStyle=0x0) at ../../Source/WebCore/rendering/RenderBlock.cpp:295 #12 0x00007f9514fe89d7 in WebCore::RenderBlockFlow::styleDidChange (this=0x7f94f77bf450, diff=WebCore::StyleDifferenceNewStyle, oldStyle=0x0) at ../../Source/WebCore/rendering/RenderBlockFlow.cpp:1997 #13 0x00007f9515065868 in WebCore::RenderElement::initializeStyle (this=0x7f94f77bf450) at ../../Source/WebCore/rendering/RenderElement.cpp:404 #14 0x00007f95152dbacb in WebCore::Style::createRendererIfNeeded (element=..., inheritedStyle=..., renderTreePosition=..., resolvedStyle=...) at ../../Source/WebCore/style/StyleResolveTree.cpp:209 #15 0x00007f95152dce26 in WebCore::Style::attachRenderTree (current=..., inheritedStyle=..., renderTreePosition=..., resolvedStyle=...) at ../../Source/WebCore/style/StyleResolveTree.cpp:480 #16 0x00007f95152dc4cf in WebCore::Style::attachChildren (current=..., inheritedStyle=..., renderTreePosition=...) at ../../Source/WebCore/style/StyleResolveTree.cpp:356 #17 0x00007f95152dcf13 in WebCore::Style::attachRenderTree (current=..., inheritedStyle=..., renderTreePosition=..., resolvedStyle=...) at ../../Source/WebCore/style/StyleResolveTree.cpp:497 #18 0x00007f95152dd86a in WebCore::Style::resolveLocal (current=..., inheritedStyle=..., renderTreePosition=..., inheritedChange=WebCore::Style::Force) at ../../Source/WebCore/style/StyleResolveTree.cpp:629 #19 0x00007f95152de446 in WebCore::Style::resolveTree (current=..., inheritedStyle=..., renderTreePosition=..., change=WebCore::Style::Force) at ../../Source/WebCore/style/StyleResolveTree.cpp:850 #20 0x00007f95152de808 in WebCore::Style::resolveTree (document=..., change=WebCore::Style::Force) at ../../Source/WebCore/style/StyleResolveTree.cpp:910 #21 0x00007f951460f7b0 in WebCore::Document::recalcStyle (this=0x7f94f7426980, change=WebCore::Style::Force) at ../../Source/WebCore/dom/Document.cpp:1841 #22 0x00007f951460faf1 in WebCore::Document::updateStyleIfNeeded (this=0x7f94f7426980) at ../../Source/WebCore/dom/Document.cpp:1892 #23 0x00007f951461ca0e in WebCore::Document::finishedParsing (this=0x7f94f7426980) at ../../Source/WebCore/dom/Document.cpp:4895 #24 0x00007f95149cc211 in WebCore::HTMLConstructionSite::finishedParsing (this=0x7f94f76f85c0) at ../../Source/WebCore/html/parser/HTMLConstructionSite.cpp:403 #25 0x00007f9514a0baf8 in WebCore::HTMLTreeBuilder::finished (this=0x7f94f76f85a0) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:2937 #26 0x00007f95149d536e in WebCore::HTMLDocumentParser::end (this=0x7f94f741ea00) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:402 #27 0x00007f95149d543c in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x7f94f741ea00) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:411 #28 0x00007f95149d4059 in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x7f94f741ea00) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:132 #29 0x00007f95149d5473 in WebCore::HTMLDocumentParser::attemptToEnd (this=0x7f94f741ea00) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:423 #30 0x00007f95149d5521 in WebCore::HTMLDocumentParser::finish (this=0x7f94f741ea00) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:451 #31 0x00007f9514b64342 in WebCore::DocumentWriter::end (this=0x7f94f744dda0) at ../../Source/WebCore/loader/DocumentWriter.cpp:247 #32 0x00007f9514b4de3a in WebCore::DocumentLoader::finishedLoading (this=0x7f94f744dd00, finishTime=0) at ../../Source/WebCore/loader/DocumentLoader.cpp:437 #33 0x00007f9514b4db98 in WebCore::DocumentLoader::notifyFinished (this=0x7f94f744dd00, resource=0x7f94f7450d00) at ../../Source/WebCore/loader/DocumentLoader.cpp:384 #34 0x00007f9514c0c183 in WebCore::CachedResource::checkNotify (this=0x7f94f7450d00) at ../../Source/WebCore/loader/cache/CachedResource.cpp:297 #35 0x00007f9514c0c292 in WebCore::CachedResource::finishLoading (this=0x7f94f7450d00) at ../../Source/WebCore/loader/cache/CachedResource.cpp:313 #36 0x00007f9514c08490 in WebCore::CachedRawResource::finishLoading (this=0x7f94f7450d00, data=0x7f94f77bac40) at ../../Source/WebCore/loader/cache/CachedRawResource.cpp:103 #37 0x00007f9514bb8ece in WebCore::SubresourceLoader::didFinishLoading (this=0x7f94f7440000, finishTime=0) at ../../Source/WebCore/loader/SubresourceLoader.cpp:372 #38 0x00007f9514bb3ad3 in WebCore::ResourceLoader::didFinishLoading (this=0x7f94f7440000, finishTime=0) at ../../Source/WebCore/loader/ResourceLoader.cpp:631 #39 0x00007f95155eb082 in WebCore::readCallback (asyncResult=0x1d80420, data=0x7f94f77b0b40) at ../../Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:1340 #40 0x00007f950af1f95a in async_ready_callback_wrapper (source_object=0x1c66d50, res=0x1d80420, user_data=0x7f94f77b0b40) at ginputstream.c:529 #41 0x00007f950af45433 in g_task_return_now (task=0x1d80420) at gtask.c:1088 #42 0x00007f950af45469 in complete_in_idle_cb (task=0x1d80420) at gtask.c:1102 #43 0x00007f950a97fd9d in g_main_dispatch (context=0x16758d0) at gmain.c:3122 #44 g_main_context_dispatch (context=context@entry=0x16758d0) at gmain.c:3737 #45 0x00007f950a980170 in g_main_context_iterate (context=0x16758d0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3808 #46 0x00007f950a980492 in g_main_loop_run (loop=0x1b76490) at gmain.c:4002 #47 0x00007f950e22eda3 in WTF::RunLoop::run () at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:67 #48 0x00007f9513faf00d in WebKit::ChildProcessMain<WebKit::WebProcess, WebKit::WebProcessMain> (argc=2, argv=0x7ffe76b97448) at ../../Source/WebKit2/Shared/unix/ChildProcessMain.h:61 #49 0x00007f9513faee6a in WebKit::WebProcessMainUnix (argc=2, argv=0x7ffe76b97448) at ../../Source/WebKit2/WebProcess/gtk/WebProcessMainGtk.cpp:77 #50 0x00000000004008fa in main (argc=2, argv=0x7ffe76b97448) at ../../Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp:44

Attachments
Test (116 bytes, text/html) 2015-10-16 08:54 PDT, Renata Hodovan	no flags	Details
Patch (4.30 KB, patch) 2015-10-27 15:54 PDT, zalan	no flags	Details Formatted Diff Diff
Archive of layout-test-results from ews101 for mac-mavericks (308.51 KB, application/zip) 2015-10-27 16:06 PDT, Build Bot	no flags	Details
Patch (6.79 KB, patch) 2015-10-28 10:18 PDT, zalan	no flags	Details Formatted Diff Diff
Show Obsolete (2) View All Add attachment proposed patch, testcase, etc.

zalan

Comment 1 2015-10-27 15:54:20 PDT

Created attachment 264168 [details] Patch

Build Bot

Comment 2 2015-10-27 16:06:19 PDT

Comment on attachment 264168 [details] Patch Attachment 264168 [details] did not pass mac-ews (mac): Output: http://webkit-queues.webkit.org/results/346079 Number of test failures exceeded the failure limit.

Build Bot

Comment 3 2015-10-27 16:06:23 PDT

Created attachment 264169 [details] Archive of layout-test-results from ews101 for mac-mavericks The attached test failures were seen while running run-webkit-tests on the mac-ews. Bot: ews101 Port: mac-mavericks Platform: Mac OS X 10.9.5

zalan

Comment 4 2015-10-28 10:18:08 PDT

Created attachment 264225 [details] Patch

WebKit Commit Bot

Comment 5 2015-10-28 11:07:57 PDT

Comment on attachment 264225 [details] Patch Clearing flags on attachment: 264225 Committed r191680: <http://trac.webkit.org/changeset/191680>

WebKit Commit Bot

Comment 6 2015-10-28 11:08:02 PDT

All reviewed patches have been landed. Closing bug.

Note You need to log in before you can comment on or make changes to this bug.

Status RESOLVED

Resolution FIXED

Priority P2

Severity Normal

Classification Unclassified

Version WebKit Local Build

Hardware Unspecified

OS Unspecified

Product WebKit

Component Layout and Rendering

Assignee

zalan

Reported

2015-10-16 08:54 PDT

Modified

2015-10-28 11:08 PDT History

CC List

8 users Show

URL

Keywords

Depends on

Blocks

116980

Dependencies

tree graph