Bug 171928 - ASSERTION FAILED in WebCore::HTMLFormControlElement::isValidFormControlElement()
Summary: ASSERTION FAILED in WebCore::HTMLFormControlElement::isValidFormControlElement()
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: Accessibility (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2017-05-10 09:46 PDT by zalan
Modified: 2024-01-17 16:07 PST (History)
6 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description zalan 2017-05-10 09:46:25 PDT
ASSERT(m_isValid == isValid())
run-webkit-test
  fast/forms/number/number-validity-badinput.html
  imported/w3c/web-platform-tests/html/semantics/selectors/pseudo-classes/valid-invalid.html
with AX on.
Comment 1 Radar WebKit Bug Importer 2017-05-10 09:46:48 PDT
<rdar://problem/32109829>
Comment 2 zalan 2017-05-10 09:51:48 PDT
0   com.apple.JavaScriptCore      	0x000000011f776234 WTFCrash + 36 (Assertions.cpp:292)
1   com.apple.WebCore             	0x0000000114206fa0 WebCore::HTMLFormControlElement::isValidFormControlElement() const + 128 (HTMLFormControlElement.cpp:528)
2   com.apple.WebCore             	0x00000001142077b6 WebCore::HTMLFormControlElement::matchesValidPseudoClass() const + 54 (HTMLFormControlElement.cpp:389)
3   com.apple.WebCore             	0x0000000115c0e7e9 WebCore::isValid(WebCore::Element const&) + 25 (SelectorCheckerTestFunctions.h:117)
4   ???                           	0x00004c21fe2276d4 0 + 83708881303252
5   com.apple.WebCore             	0x0000000113de35a1 WebCore::ElementRuleCollector::collectMatchingRulesForList(WTF::Vector<WebCore::RuleData, 1ul, WTF::CrashOnOverflow, 16ul> const*, WebCore::MatchRequest const&, WebCore::StyleResolver::RuleRange&) + 353 (ElementRuleCollector.cpp:498)
6   com.apple.WebCore             	0x0000000113de3294 WebCore::ElementRuleCollector::collectMatchingRules(WebCore::MatchRequest const&, WebCore::StyleResolver::RuleRange&) + 756 (ElementRuleCollector.cpp:164)
7   com.apple.WebCore             	0x0000000113de3f65 WebCore::ElementRuleCollector::matchAuthorRules(bool) + 149 (ElementRuleCollector.cpp:209)
8   com.apple.WebCore             	0x0000000113de5c8e WebCore::ElementRuleCollector::matchAllRules(bool, bool) + 334 (ElementRuleCollector.cpp:550)
9   com.apple.WebCore             	0x0000000115e103fc WebCore::StyleResolver::styleForElement(WebCore::Element const&, WebCore::RenderStyle const*, WebCore::RenderStyle const*, WebCore::RuleMatchingBehavior, WebCore::RenderRegion const*, WebCore::SelectorFilter const*) + 1724 (StyleResolver.cpp:415)
10  com.apple.WebCore             	0x0000000115e5c581 WebCore::Style::TreeResolver::styleForElement(WebCore::Element&, WebCore::RenderStyle const&) + 2241 (StyleTreeResolver.cpp:124)
11  com.apple.WebCore             	0x0000000115e5cc85 WebCore::Style::TreeResolver::resolveElement(WebCore::Element&) + 229 (StyleTreeResolver.cpp:176)
12  com.apple.WebCore             	0x0000000115e5f81e WebCore::Style::TreeResolver::resolveComposedTree() + 1262 (StyleTreeResolver.cpp:424)
13  com.apple.WebCore             	0x0000000115e606ed WebCore::Style::TreeResolver::resolve() + 1885 (StyleTreeResolver.cpp:486)
14  com.apple.WebCore             	0x0000000113c33d76 WebCore::Document::resolveStyle(WebCore::Document::ResolveStyleType) + 918 (Document.cpp:1747)
15  com.apple.WebCore             	0x0000000113c26db1 WebCore::Document::updateStyleIfNeeded() + 273 (Document.cpp:1834)
16  com.apple.WebCore             	0x0000000113c304d8 WebCore::Document::updateLayout() + 232 (Document.cpp:1852)
17  com.apple.WebCore             	0x0000000113c34f9e WebCore::Document::updateLayoutIgnorePendingStylesheets(WebCore::Document::RunPostLayoutTasks) + 94 (Document.cpp:1874)
18  com.apple.WebCore             	0x000000011617991b WebCore::VisiblePosition::canonicalPosition(WebCore::Position const&) + 187 (VisiblePosition.cpp:560)
19  com.apple.WebCore             	0x0000000116179771 WebCore::VisiblePosition::init(WebCore::Position const&, WebCore::EAffinity) + 49 (VisiblePosition.cpp:60)
20  com.apple.WebCore             	0x0000000116179733 WebCore::VisiblePosition::VisiblePosition(WebCore::Position const&, WebCore::EAffinity) + 51 (VisiblePosition.cpp:54)
21  com.apple.WebCore             	0x0000000116179853 WebCore::VisiblePosition::VisiblePosition(WebCore::Position const&, WebCore::EAffinity) + 35 (VisiblePosition.cpp:54)
22  com.apple.WebCore             	0x00000001142eb48c WebCore::HTMLTextFormControlElement::setInnerTextValue(WTF::String const&) + 572 (HTMLTextFormControlElement.cpp:580)
23  com.apple.WebCore             	0x0000000115ffb18c WebCore::TextFieldInputType::updateInnerTextValue() + 108 (TextFieldInputType.cpp:576)
24  com.apple.WebCore             	0x000000011422bd2c WebCore::HTMLInputElement::updateType() + 1804 (HTMLInputElement.cpp:519)
25  com.apple.WebCore             	0x000000011422cecb WebCore::HTMLInputElement::parseAttribute(WebCore::QualifiedName const&, WTF::AtomicString const&) + 587 (HTMLInputElement.cpp:693)
26  com.apple.WebCore             	0x0000000113dc77c9 WebCore::Element::attributeChanged(WebCore::QualifiedName const&, WTF::AtomicString const&, WTF::AtomicString const&, WebCore::Element::AttributeModificationReason) + 793 (Element.cpp:1335)
27  com.apple.WebCore             	0x0000000115dec07f WebCore::StyledElement::attributeChanged(WebCore::QualifiedName const&, WTF::AtomicString const&, WTF::AtomicString const&, WebCore::Element::AttributeModificationReason) + 223 (StyledElement.cpp:91)
28  com.apple.WebCore             	0x0000000113dd3664 WebCore::Element::didModifyAttribute(WebCore::QualifiedName const&, WTF::AtomicString const&, WTF::AtomicString const&) + 84 (Element.cpp:3374)
29  com.apple.WebCore             	0x0000000113dc7390 WebCore::Element::setAttributeInternal(unsigned int, WebCore::QualifiedName const&, WTF::AtomicString const&, WebCore::Element::SynchronizationOfLazyAttribute) + 432 (Element.cpp:1290)
30  com.apple.WebCore             	0x0000000113dc7425 WebCore::Element::setAttributeWithoutSynchronization(WebCore::QualifiedName const&, WTF::AtomicString const&) + 117 (Element.cpp:1246)
31  com.apple.WebCore             	0x000000011422b61a WebCore::HTMLInputElement::setType(WTF::AtomicString const&) + 42 (HTMLInputElement.cpp:479)
32  com.apple.WebCore             	0x0000000114aef429 WebCore::setJSHTMLInputElementTypeFunction(JSC::ExecState&, WebCore::JSHTMLInputElement&, JSC::JSValue, JSC::ThrowScope&) + 169 (JSHTMLInputElement.cpp:1675)
33  com.apple.WebCore             	0x0000000114ae883c bool WebCore::BindingCaller<WebCore::JSHTMLInputElement>::setAttribute<&(WebCore::setJSHTMLInputElementTypeFunction(JSC::ExecState&, WebCore::JSHTMLInputElement&, JSC::JSValue, JSC::ThrowScope&)), (WebCore::CastedThisErrorBehavior)0>(JSC::ExecState*, long long, long long, char const*) + 348 (JSDOMBindingCaller.h:82)
34  com.apple.WebCore             	0x0000000114ae86cc WebCore::setJSHTMLInputElementType(JSC::ExecState*, long long, long long) + 44 (JSHTMLInputElement.cpp:1665)
35  com.apple.JavaScriptCore      	0x000000011e8e12ad JSC::callCustomSetter(JSC::ExecState*, bool (*)(JSC::ExecState*, long long, long long), bool, JSC::JSValue, JSC::JSValue) + 157 (CustomGetterSetter.cpp:41)
36  com.apple.JavaScriptCore      	0x000000011e8e1383 JSC::callCustomSetter(JSC::ExecState*, JSC::JSValue, bool, JSC::JSObject*, JSC::JSValue, JSC::JSValue) + 163 (CustomGetterSetter.cpp:58)
37  com.apple.JavaScriptCore      	0x000000011f1afc0a JSC::JSObject::putInlineSlow(JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&) + 1034 (JSObject.cpp:779)
38  com.apple.JavaScriptCore      	0x000000011e8be5c8 JSC::JSObject::putInline(JSC::JSCell*, JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&) + 1160 (JSObjectInlines.h:221)
39  com.apple.JavaScriptCore      	0x000000011e8b8314 JSC::JSValue::putInline(JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&) + 260 (JSCJSValueInlines.h:883)
40  com.apple.JavaScriptCore      	0x000000011f2c12a5 llint_slow_path_put_by_id + 645 (LLIntSlowPaths.cpp:727)
41  com.apple.JavaScriptCore      	0x000000011f2d261b llint_entry + 14103 (LowLevelInterpreter64.asm:307)
42  com.apple.JavaScriptCore      	0x000000011f2cecee vmEntryToJavaScript + 334 (LowLevelInterpreter64.asm:256)
43  com.apple.JavaScriptCore      	0x000000011f0a22ce JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) + 350 (JITCode.cpp:81)
44  com.apple.JavaScriptCore      	0x000000011f0527a5 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 1269 (Interpreter.cpp:955)
45  com.apple.JavaScriptCore      	0x000000011e8046d8 JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 184 (CallData.cpp:39)
46  com.apple.JavaScriptCore      	0x000000011f0fefa2 JSC::boundFunctionCall(JSC::ExecState*) + 514 (JSBoundFunction.cpp:75)
47  ???                           	0x00004c21fe201028 0 + 83708881145896
48  com.apple.JavaScriptCore      	0x000000011f2d6879 llint_entry + 31093 (LowLevelInterpreter.asm:761)
49  com.apple.JavaScriptCore      	0x000000011f2d63b7 llint_entry + 29875 (LowLevelInterpreter.asm:761)
50  com.apple.JavaScriptCore      	0x000000011f2d6431 llint_entry + 29997 (LowLevelInterpreter.asm:761)
51  com.apple.JavaScriptCore      	0x000000011f2cecee vmEntryToJavaScript + 334 (LowLevelInterpreter64.asm:256)
52  com.apple.JavaScriptCore      	0x000000011f0a22ce JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) + 350 (JITCode.cpp:81)
53  com.apple.JavaScriptCore      	0x000000011f051bdd JSC::Interpreter::executeProgram(JSC::SourceCode const&, JSC::ExecState*, JSC::JSObject*) + 5181 (Interpreter.cpp:896)
54  com.apple.JavaScriptCore      	0x000000011e8c1b38 JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) + 472 (Completion.cpp:102)
55  com.apple.JavaScriptCore      	0x000000011e8c1d00 JSC::profiledEvaluate(JSC::ExecState*, JSC::ProfilingReason, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) + 80 (Completion.cpp:117)
56  com.apple.WebCore             	0x0000000115b5a31b WebCore::JSMainThreadExecState::profiledEvaluate(JSC::ExecState*, JSC::ProfilingReason, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) + 75 (JSMainThreadExecState.h:77)
57  com.apple.WebCore             	0x0000000115b5a108 WebCore::ScriptController::evaluateInWorld(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld&, WebCore::ExceptionDetails*) + 312 (ScriptController.cpp:173)
58  com.apple.WebCore             	0x0000000115b5a3fd WebCore::ScriptController::evaluate(WebCore::ScriptSourceCode const&, WebCore::ExceptionDetails*) + 61 (ScriptController.cpp:189)
59  com.apple.WebCore             	0x0000000115b700e2 WebCore::ScriptElement::executeClassicScript(WebCore::ScriptSourceCode const&) + 786 (ScriptElement.cpp:393)
60  com.apple.WebCore             	0x0000000115b6e4bf WebCore::ScriptElement::prepareScript(WTF::TextPosition const&, WebCore::ScriptElement::LegacyTypeSupport) + 2383 (ScriptElement.cpp:279)
61  com.apple.WebCore             	0x00000001142bbf20 WebCore::HTMLScriptRunner::runScript(WebCore::ScriptElement&, WTF::TextPosition const&) + 272 (HTMLScriptRunner.cpp:252)
62  com.apple.WebCore             	0x00000001142bbd8f WebCore::HTMLScriptRunner::execute(WTF::Ref<WebCore::ScriptElement>&&, WTF::TextPosition const&) + 79 (HTMLScriptRunner.cpp:142)
63  com.apple.WebCore             	0x00000001141db7d2 WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder() + 1362 (HTMLDocumentParser.cpp:209)
64  com.apple.WebCore             	0x00000001141dbd33 WebCore::HTMLDocumentParser::pumpTokenizerLoop(WebCore::HTMLDocumentParser::SynchronousMode, bool, WebCore::PumpSession&) + 211 (HTMLDocumentParser.cpp:230)
65  com.apple.WebCore             	0x00000001141daa78 WebCore::HTMLDocumentParser::pumpTokenizer(WebCore::HTMLDocumentParser::SynchronousMode) + 424 (HTMLDocumentParser.cpp:278)
66  com.apple.WebCore             	0x00000001141da5cb WebCore::HTMLDocumentParser::pumpTokenizerIfPossible(WebCore::HTMLDocumentParser::SynchronousMode) + 171 (HTMLDocumentParser.cpp:170)
67  com.apple.WebCore             	0x00000001141dd749 WebCore::HTMLDocumentParser::resumeParsingAfterScriptExecution() + 377 (HTMLDocumentParser.cpp:495)
68  com.apple.WebCore             	0x00000001141ddb5e WebCore::HTMLDocumentParser::notifyFinished(WebCore::PendingScript&) + 366 (HTMLDocumentParser.cpp:539)
69  com.apple.WebCore             	0x00000001141ddbbf non-virtual thunk to WebCore::HTMLDocumentParser::notifyFinished(WebCore::PendingScript&) + 47 (HTMLDocumentParser.cpp:519)
70  com.apple.WebCore             	0x00000001156256c7 WebCore::PendingScript::notifyClientFinished() + 71 (PendingScript.cpp:69)
71  com.apple.WebCore             	0x0000000115625729 WebCore::PendingScript::notifyFinished(WebCore::LoadableScript&) + 25 (PendingScript.cpp:75)
72  com.apple.WebCore             	0x00000001152d7a79 WebCore::LoadableScript::notifyClientFinished() + 329 (LoadableScript.cpp:59)
73  com.apple.WebCore             	0x00000001152d4b70 WebCore::LoadableClassicScript::notifyFinished(WebCore::CachedResource&) + 960 (LoadableClassicScript.cpp:108)
74  com.apple.WebCore             	0x00000001152d4c9c non-virtual thunk to WebCore::LoadableClassicScript::notifyFinished(WebCore::CachedResource&) + 44 (LoadableClassicScript.cpp:72)
75  com.apple.WebCore             	0x000000011374f1fd WebCore::CachedResource::checkNotify() + 125 (CachedResource.cpp:302)
76  com.apple.WebCore             	0x000000011374f471 WebCore::CachedResource::finishLoading(WebCore::SharedBuffer*) + 49 (CachedResource.cpp:320)
77  com.apple.WebCore             	0x00000001137724ab WebCore::CachedScript::finishLoading(WebCore::SharedBuffer*) + 123 (CachedScript.cpp:106)
78  com.apple.WebCore             	0x0000000115e747a9 WebCore::SubresourceLoader::didFinishLoading(WebCore::NetworkLoadMetrics const&) + 697 (SubresourceLoader.cpp:564)
79  com.apple.WebKit              	0x00000001108e088d WebKit::WebResourceLoader::didFinishResourceLoad(WebCore::NetworkLoadMetrics const&) + 413 (WebResourceLoader.cpp:151)
80  com.apple.WebKit              	0x00000001108e5526 void IPC::callMemberFunctionImpl<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&), std::__1::tuple<WebCore::NetworkLoadMetrics>, 0ul>(WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&), std::__1::tuple<WebCore::NetworkLoadMetrics>&&, std::__1::integer_sequence<unsigned long, 0ul>) + 150 (HandleMessage.h:41)
81  com.apple.WebKit              	0x00000001108e5398 void IPC::callMemberFunction<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&), std::__1::tuple<WebCore::NetworkLoadMetrics>, std::__1::integer_sequence<unsigned long, 0ul> >(std::__1::tuple<WebCore::NetworkLoadMetrics>&&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&)) + 88 (HandleMessage.h:47)
82  com.apple.WebKit              	0x00000001108e4672 void IPC::handleMessage<Messages::WebResourceLoader::DidFinishResourceLoad, WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&)>(IPC::Decoder&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&)) + 258 (HandleMessage.h:127)
83  com.apple.WebKit              	0x00000001108e3dac WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&, IPC::Decoder&) + 636 (WebResourceLoaderMessageReceiver.cpp:66)
84  com.apple.WebKit              	0x00000001100d4509 WebKit::NetworkProcessConnection::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 169 (NetworkProcessConnection.cpp:66)
85  com.apple.WebKit              	0x000000010fe25da3 IPC::Connection::dispatchMessage(IPC::Decoder&) + 51 (Connection.cpp:902)
86  com.apple.WebKit              	0x000000010fe1b468 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >) + 712 (Connection.cpp:930)
87  com.apple.WebKit              	0x000000010fe263a0 IPC::Connection::dispatchOneMessage() + 1520 (Connection.cpp:959)
88  com.apple.WebKit              	0x000000010fe3efad IPC::Connection::enqueueIncomingMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >)::$_14::operator()() + 29 (Connection.cpp:896)
89  com.apple.WebKit              	0x000000010fe3ef09 WTF::Function<void ()>::CallableWrapper<IPC::Connection::enqueueIncomingMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >)::$_14>::call() + 25 (Function.h:89)
90  com.apple.JavaScriptCore      	0x000000011f7a60be WTF::Function<void ()>::operator()() const + 94 (Function.h:50)
91  com.apple.JavaScriptCore      	0x000000011f7c465d WTF::RunLoop::performWork() + 445 (RunLoop.cpp:124)
92  com.apple.JavaScriptCore      	0x000000011f7c4d44 WTF::RunLoop::performWork(void*) + 36 (RunLoopCF.cpp:38)
93  com.apple.CoreFoundation      	0x00007fff8ccc53b1 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
94  com.apple.CoreFoundation      	0x00007fff8cca663c __CFRunLoopDoSources0 + 556
95  com.apple.CoreFoundation      	0x00007fff8cca5b26 __CFRunLoopRun + 934
96  com.apple.CoreFoundation      	0x00007fff8cca5524 CFRunLoopRunSpecific + 420
97  com.apple.HIToolbox           	0x00007fff8c205ebc RunCurrentEventLoopInMode + 240
98  com.apple.HIToolbox           	0x00007fff8c205cf1 ReceiveNextEventCommon + 432
99  com.apple.HIToolbox           	0x00007fff8c205b26 _BlockUntilNextEventMatchingListInModeWithFilter + 71
100 com.apple.AppKit              	0x00007fff8a7a0e24 _DPSNextEvent + 1120
101 com.apple.AppKit              	0x00007fff8af1c85e -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 2796
102 com.apple.AppKit              	0x00007fff8a7957ab -[NSApplication run] + 926
103 com.apple.AppKit              	0x00007fff8a7601de NSApplicationMain + 1237
104 libxpc.dylib                  	0x00007fffa2aa88c7 _xpc_objc_main + 775
105 libxpc.dylib                  	0x00007fffa2aa72e4 xpc_main + 494
106 com.apple.WebKit.WebContent   	0x000000010cd7e115 main + 1189 (XPCServiceMain.mm:148)
107 libdyld.dylib                 	0x00007fffa284f235 start + 1
Comment 3 Ahmad Saleem 2024-01-17 16:07:56 PST
Potentially? - https://src.chromium.org/viewvc/blink?view=revision&revision=181422