Application Specific Information: CRASHING TEST: media/restore-from-page-cache.html Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.JavaScriptCore 0x0000000106a8c3e4 WTFCrash + 36 (Assertions.cpp:323) 1 com.apple.WebCore 0x000000010de5593c WebCore::AnimationController::cancelAnimations(WebCore::RenderElement&) + 188 (AnimationController.cpp:591) 2 com.apple.WebCore 0x000000010fe4cb2b WebCore::RenderElement::willBeDestroyed() + 43 (RenderElement.cpp:1128) 3 com.apple.WebCore 0x000000010fe16a9a WebCore::RenderBoxModelObject::willBeDestroyed() + 170 (RenderBoxModelObject.cpp:198) 4 com.apple.WebCore 0x000000010fd67dd8 WebCore::RenderBlock::willBeDestroyed() + 120 (RenderBlock.cpp:354) 5 com.apple.WebCore 0x000000010ffa00c0 WebCore::RenderObject::destroy() + 64 (RenderObject.cpp:1547) 6 com.apple.WebCore 0x000000010ff9ff1f WebCore::RenderObject::destroyAndCleanupAnonymousWrappers() + 47 (RenderObject.cpp:1512) 7 com.apple.WebCore 0x00000001100d89b8 WebCore::RenderTreeUpdater::tearDownRenderers(WebCore::Element&, WebCore::RenderTreeUpdater::TeardownType)::$_2::operator()(unsigned int) const + 136 (RenderTreeUpdater.cpp:546) 8 com.apple.WebCore 0x00000001100d6fe5 WebCore::RenderTreeUpdater::tearDownRenderers(WebCore::Element&, WebCore::RenderTreeUpdater::TeardownType) + 229 (RenderTreeUpdater.cpp:558) 9 com.apple.WebCore 0x000000010e4d1e99 WebCore::Document::destroyRenderTree() + 377 (Document.cpp:2248) 10 com.apple.WebCore 0x000000010e4e1a84 WebCore::Document::setPageCacheState(WebCore::Document::PageCacheState) + 84 (Document.cpp:4531)
Created attachment 297854 [details] Patch
I rolled out r210206, so I'm just gonna fold this fix in when relanding eventually.