Bug 176605 – Crash in HTMLDocument::isCaseSensitiveAttribute under SelectorCompiler::attributeSelectorCaseSensitivity

• Status: RESOLVED
• Resolution: CONFIGURATION CHANGED
• Component: CSS

[Michael Catanzaro]

Crash in WebCore::HTMLDocument::isCaseSensitiveAttribute:

#0  0x00007f205fd52e9b in WTF::HashTable<WTF::AtomicStringImpl*, WTF::AtomicStringImpl*, WTF::IdentityExtractor, WTF::PtrHash<WTF::AtomicStringImpl*>, WTF::HashTraits<WTF::AtomicStringImpl*>, WTF::HashTraits<WTF::AtomicStringImpl*> >::inlineLookup<WTF::IdentityHashTranslator<WTF::HashTraits<WTF::AtomicStringImpl*>, WTF::PtrHash<WTF::AtomicStringImpl*> >, WTF::AtomicStringImpl*>(WTF::AtomicStringImpl* const&) (key=<optimized out>, this=0x7f204c531fc0)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WTF/wtf/HashTable.h:629
        entry = 0x498495ad
        k = 0
        i = 154178996
        sizeMask = 4294967295
        table = 0xffffffffffffe80d
        htmlCaseInsensitiveAttributesSet = 0x7f204c531fc0
        isPossibleHTMLAttr = true
#1  0x00007f205fd52e9b in WTF::HashTable<WTF::AtomicStringImpl*, WTF::AtomicStringImpl*, WTF::IdentityExtractor, WTF::PtrHash<WTF::AtomicStringImpl*>, WTF::HashTraits<WTF::AtomicStringImpl*>, WTF::HashTraits<WTF::AtomicStringImpl*> >::lookup<WTF::IdentityHashTranslator<WTF::HashTraits<WTF::AtomicStringImpl*>, WTF::PtrHash<WTF::AtomicStringImpl*> >, WTF::AtomicStringImpl*>(WTF::AtomicStringImpl* const&) (this=0x7f204c531fc0, this=0x7f204c531fc0, key=<optimized out>)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WTF/wtf/HashTable.h:601
        htmlCaseInsensitiveAttributesSet = 0x7f204c531fc0
        isPossibleHTMLAttr = true
#2  0x00007f205fd52e9b in WTF::HashTable<WTF::AtomicStringImpl*, WTF::AtomicStringImpl*, WTF::IdentityExtractor, WTF::PtrHash<WTF::AtomicStringImpl*>, WTF::HashTraits<WTF::AtomicStringImpl*>, WTF::HashTraits<WTF::AtomicStringImpl*> >::contains<WTF::IdentityHashTranslator<WTF::HashTraits<WTF::AtomicStringImpl*>, WTF::PtrHash<WTF::AtomicStringImpl*> >, WTF::AtomicStringImpl*>(WTF::AtomicStringImpl* const&) const (key=<optimized out>, this=0x7f204c531fc0)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WTF/wtf/HashTable.h:1038
        htmlCaseInsensitiveAttributesSet = 0x7f204c531fc0
        isPossibleHTMLAttr = true
#3  0x00007f205fd52e9b in WTF::HashTable<WTF::AtomicStringImpl*, WTF::AtomicStringImpl*, WTF::IdentityExtractor, WTF::PtrHash<WTF::AtomicStringImpl*>, WTF::HashTraits<WTF::AtomicStringImpl*>, WTF::HashTraits<WTF::AtomicStringImpl*> >::contains(WTF::AtomicStringImpl* const&) const (key=<optimized out>, this=0x7f204c531fc0) at /usr/src/debug/webkitgtk-2.16.6/Source/WTF/wtf/HashTable.h:397
        htmlCaseInsensitiveAttributesSet = 0x7f204c531fc0
        isPossibleHTMLAttr = true
#4  0x00007f205fd52e9b in WTF::HashSet<WTF::AtomicStringImpl*, WTF::PtrHash<WTF::AtomicStringImpl*>, WTF::HashTraits<WTF::AtomicStringImpl*> >::contains(WTF::AtomicStringImpl* const&) const (value=<optimized out>, this=0x7f204c531fc0)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WTF/wtf/HashSet.h:197
        htmlCaseInsensitiveAttributesSet = 0x7f204c531fc0
        isPossibleHTMLAttr = true
#5  0x00007f205fd52e9b in WebCore::HTMLDocument::isCaseSensitiveAttribute(WebCore::QualifiedName const&) (attributeName=...)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WebCore/html/HTMLDocument.cpp:279
        htmlCaseInsensitiveAttributesSet = 0x7f204c531fc0
        isPossibleHTMLAttr = true
#6  0x00007f205fb5d8b9 in WebCore::SelectorCompiler::attributeSelectorCaseSensitivity(WebCore::CSSSelector const&) (selector=...)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WebCore/cssjit/SelectorCompiler.cpp:135
#7  0x00007f205fb6be98 in WebCore::SelectorCompiler::AttributeMatchingInfo::AttributeMatchingInfo(WebCore::CSSSelector const&) (selector=..., this=0x7fff33c2ea80)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WebCore/cssjit/SelectorCompiler.cpp:144
        selector = 0x7f1f8fb6fcf0
        relationToPreviousFragment = <optimized out>
        functionType = <optimized out>
        fragment = 0x7fff33c2f200
        specificity = 257
#8  0x00007f205fb6be98 in WebCore::SelectorCompiler::constructFragmentsInternal(WebCore::CSSSelector const*, WebCore::SelectorCompiler::SelectorContext, WebCore::SelectorCompiler::SelectorFragmentList&, WebCore::SelectorCompiler::FragmentsLevel, WebCore::SelectorCompiler::FragmentPositionInRootFragments, bool, WebCore::SelectorCompiler::VisitedMode&, WebCore::SelectorCompiler::PseudoElementMatchingBehavior) (rootSelector=<optimized out>, selectorContext=selectorContext@entry=WebCore::SelectorCompiler::SelectorContext::QuerySelector, selectorFragments=..., fragmentLevel=fragmentLevel@entry=WebCore::SelectorCompiler::FragmentsLevel::Root, positionInRootFragments=positionInRootFragments@entry=WebCore::SelectorCompiler::FragmentPositionInRootFragments::Rightmost, visitedMatchEnabled=false, visitedMode=<optimized out>, pseudoElementMatchingBehavior=WebCore::SelectorCompiler::PseudoElementMatchingBehavior::CanMatch)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WebCore/cssjit/SelectorCompiler.cpp:988
        selector = 0x7f1f8fb6fcf0
        relationToPreviousFragment = <optimized out>
        functionType = <optimized out>
        fragment = 0x7fff33c2f200
        specificity = 257
#9  0x00007f205fb6c44d in WebCore::SelectorCompiler::constructFragments(WebCore::CSSSelector const*, WebCore::SelectorCompiler::SelectorContext, WebCore::SelectorCompiler::SelectorFragmentList&, WebCore::SelectorCompiler::FragmentsLevel, WebCore::SelectorCompiler::FragmentPositionInRootFragments, bool, WebCore::SelectorCompiler::VisitedMode&, WebCore::SelectorCompiler::PseudoElementMatchingBehavior) (rootSelector=<optimized out>, selectorContext=selectorContext@entry=WebCore::SelectorCompiler::SelectorContext::QuerySelector, selectorFragments=..., fragmentLevel=fragmentLevel@entry=WebCore::SelectorCompiler::FragmentsLevel::Root, positionInRootFragments=positionInRootFragments@entry=WebCore::SelectorCompiler::FragmentPositionInRootFragments::Rightmost, visitedMatchEnabled=<optimized out>, visitedMode=@0x7fff33c2fa90: WebCore::SelectorCompiler::VisitedMode::None, pseudoElementMatchingBehavior=WebCore::SelectorCompiler::PseudoElementMatchingBehavior::CanMatch)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WebCore/cssjit/SelectorCompiler.cpp:1041
        functionType = <optimized out>
#10 0x00007f205fb6c804 in WebCore::SelectorCompiler::SelectorCodeGenerator::SelectorCodeGenerator(WebCore::CSSSelector const*, WebCore::SelectorCompiler::SelectorContext) (selectorContext=<optimized out>, rootSelector=<optimized out>, this=0x7fff33c2eda0)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WebCore/cssjit/SelectorCompiler.cpp:860
        visitedMatchEnabled = false
        codeGenerator = 
            {static returnRegister = JSC::X86Registers::eax, static elementAddressRegister = JSC::X86Registers::edi, static checkingContextRegister = JSC::X86Registers::esi, static callFrameRegister = JSC::X86Registers::ebp, m_macroAssemblerRegistersStackReferences = {<WTF::VectorBuffer<WebCore::StackAllocator::StackReference, 13>> = {<WTF::VectorBufferBase<WebCore::StackAllocator::StackReference>> = {m_buffer = 0x7fff33c2edb0, m_capacity = 13, m_size = 0}, m_inlineBuffer = {{__data = "0\371\302\063", __align = {<No data fields>}}, {__data = "\377\177\000", __align = {<No data fields>}}, {__data = "\000'ř", __align = {<No data fields>}}, {__data = "\037\177\000", __align = {<No data fields>}}, {__data = "\210sND", __align = {<No data fields>}}, {__data = " \177\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = " \177\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\350\355\302\063", __align = {<No data fields>}}, {__data = "\377\177\000", __align = {<No data fields>}}, {__data = "\020\000\000", __align = {<No data fields>}}}}, <No data fields>}, m_prologueStackReferences = {<WTF::VectorBuffer<WebCore::StackAllocator::StackReference, 13>> = {<WTF::VectorBufferBase<WebCore::StackAllocator::StackReference>> = {m_buffer = 0x7fff33c2edf8, m_capacity = 13, m_size = 0}, m_inlineBuffer = {{__data = "M\302\233_", __align = {<No data fields>}}, {__data = " \177\000", __align = {<No data fields>}}, {__data = "\320d\020\232", __align = {<No data fields>}}, {__data = "\037\177\000", __align = {<No data fields>}}, {__data = "\200N\234_", __align = {<No data fields>}}, {__data = " \177\000", __align = {<No data fields>}}, {__data = "\000\271z\216", __align = {<No data fields>}}, {__data = "\037\177\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\253\250?\200", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "8\356\302\063", __align = {<No data fields>}}}}, <No data fields>}, m_assembler = {<JSC::MacroAssemblerX86_64> = {<JSC::MacroAssemblerX86Common> = {<JSC::AbstractMacroAssembler<JSC::X86Assembler, JSC::MacroAssemblerX86Common>> = {m_assembler = {m_formatter = {static maxInstructionSize = 16, m_buffer = {m_storage = {static InlineCapacity = 128, m_buffer = 0x7fff33c2ee38 "[ȹ_ \177", m_inlineBuffer = "[ȹ_ \177\000\000 \004\024\231\037\177\000\000\315L\233_ \177\000\000\320d\020\232\037\177\000\000 \004\024\231\037\177\000\000\320d\020\232\037\177\000\000\030T\235_ \177\000\000 \004\024\231\037\177\000\000\060\302\232_ \177\000\000\000\337h\215\037\177\000\000T'\235_ \177\000\000\000\337h\215\037\177\000\000\201\376\036` \177\000\000\265\314F\234\005\000\000\000mM\233_ \177\000\000\006\000\000\000\006\000\000", m_capacity = 128}, m_index = 0}}, m_indexOfLastWatchpoint = -2147483648, m_indexOfTailOfLastWatchpoint = -2147483648}, m_randomSourceIsInitialized = false, m_randomSource = {m_seed = 0, m_low = 1, m_high = 8388672}, m_tempRegistersValidBits = 0, m_allowScratchRegister = true, m_linkTasks = {<WTF::VectorBuffer<WTF::RefPtr<WTF::SharedTask<void(JSC::LinkBuffer&)> >, 0>> = {<WTF::VectorBufferBase<WTF::RefPtr<WTF::SharedTask<void(JSC::LinkBuffer&)> > >> = {m_buffer = 0x0, m_capacity = 0, m_size = 0}, <No data fields>}, <No data fields>}}, static s_scratchRegister = JSC::X86Registers::r11, static DoubleConditionBitInvert = 16, static DoubleConditionBitSpecial = 32, static DoubleConditionBits = 48, static stackPointerRegister = JSC::X86Registers::esp, static framePointerRegister = JSC::X86Registers::ebp, static s_sse4_1CheckState = JSC::MacroAssemblerX86Common::CPUIDCheckState::Set, static s_avxCheckState = JSC::MacroAssemblerX86Common::CPUIDCheckState::Set, static s_bmi1CheckState = JSC::MacroAssemblerX86Common::CPUIDCheckState::NotChecked, static s_lzcntCheckState = JSC::MacroAssemblerX86Common::CPUIDCheckState::Set}, static numGPRs = 16, static numFPRs = 16, static ScalePtr = JSC::AbstractMacroAssembler<JSC::X86Assembler, JSC::MacroAssemblerX86Common>::TimesEight}, static twoToThe32 = 4294967296, static BlindingModulus = 64}, m_registerAllocator = {m_registers = {m_start = 0, m_end = 0, m_buffer = {<WTF::VectorBufferBase<JSC::X86Registers::RegisterID>> = {m_buffer = 0x7fff33c2ef28, m_capacity = 13, m_size = 0}, m_inlineBuffer = {{__data = "\001\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "8\330Ȇ", __align = {<No data fields>}}, {__data = "\037\177\000", __align = {<No data fields>}}, {__data = "\002\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\377\377\377\177", __align = {<No data fields>}}, {__data = "\377\177\000", __align = {<No data fields>}}, {__data = "\001\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\360\364\302\063", __align = {<No data fields>}}}}}, m_allocatedRegisters = {<WTF::VectorBuffer<JSC::X86Registers::RegisterID, 13>> = {<WTF::VectorBufferBase<JSC::X86Registers::RegisterID>> = {m_buffer = 0x7fff33c2ef70, m_capacity = 13, m_size = 0}, m_inlineBuffer = {{__data = "\200\357\302\063", __align = {<No data fields>}}, {__data = "\377\177\000", __align = {<No data fields>}}, {__data = "\020\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\037\177\000", __align = {<No data fields>}}, {__data = "\000\337h\215", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}}}, <No data fields>}, m_reservedCalleeSavedRegisters = {<WTF::VectorBuffer<JSC::X86Registers::RegisterID, 4>> = {<WTF::VectorBufferBase<JSC::X86Registers::RegisterID>> = {m_buffer = 0x7fff33c2efb8, m_capacity = 4, m_size = 0}, m_inlineBuffer = {{__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\377\177\000", __align = {<No data fields>}}, {__data = "\001\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}}}, <No data fields>}}, m_stackAllocator = {m_assembler = @0x7fff33c2ee30, m_offsetFromTop = 0, m_hasFunctionCallPadding = false}, m_functionCalls = {<WTF::VectorBuffer<std::pair<JSC::AbstractMacroAssembler<JSC::X86Assembler, JSC::MacroAssemblerX86Common>::Call, JSC::FunctionPtr>, 32>> = {<WTF::VectorBufferBase<std::pair<JSC::AbstractMacroAssembler<JSC::X86Assembler, JSC::MacroAssemblerX86Common>::Call, JSC::FunctionPtr> >> = {m_buffer = 0x7fff33c2efe8, m_capacity = 32, m_size = 0}, m_inlineBuffer = {{__data = "\300\360\302\063\377\177\000\000\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = " \rř\037\177\000\000\250\364\302\063\377\177\000", __align = {<No data fields>}}, {__data = "\000\000\000\000\000\000\000\000h\r\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\221\066{= \177\000\000\217\066{= \177\000", __align = {<No data fields>}}, {__data = "\v", '\000' <repeats 14 times>, __align = {<No data fields>}}, {__data = "\000\000\000\000\000\000\000\000P\360\302\063\377\177\000", __align = {<No data fields>}}, {__data = "\020\000\000\000\000\000\000\000\244\267\262Y\000\000\000", __align = {<No data fields>}}, {__data = "\000\064F\234\253\250?\200\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\320\362\302\063\377\177\000\000\330\362\302\063\377\177\000", __align = {<No data fields>}}, {__data = '\000' <repeats 15 times>, __align = {<No data fields>}}, {__data = "\000\000\000\000\000\000\000\000\240\360\302\063\377\177\000", __align = {<No data fields>}}, {__data = "\020\000\000\000\060\000\000\000P\367\302\063\377\177\000", __align = {<No data fields>}}, {__data = "\000\064F\234\253\250?\200\020\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "J\367\231\335\037\177\000\000\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000\000\000\000\000\000\222\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "@\330Ȇ\037\177\000\000\001\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "F\332\367O \177\000\000\002\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\202\217\n` \177\000\000\314\316G\272\037\177\000", __align = {<No data fields>}}, {__data = "\220\365\302\063\377\177\000\000F\367\231\335\037\177\000", __align = {<No data fields>}}, {__data = "\001", '\000' <repeats 14 times>, __align = {<No data fields>}}, {__data = "8\330Ȇ\037\177\000\000\002\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\000\005\247V \177\000\000\070\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\000\064F\234\253\250?\200\000\000\000\000\200U\000", __align = {<No data fields>}}, {__data = "\377\377\377\377\377\377\377\377p\361\302\063\377\177\000", __align = {<No data fields>}}, {__data = "\004\000\000\000\004\000\000\000\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = '\000' <repeats 15 times>, __align = {<No data fields>}}, {__data = '\000' <repeats 15 times>, __align = {<No data fields>}}, {__data = "\000\064F\234\253\250?\200\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\020\362\302\063\377\177\000\000@\f\303\063\377\177\000", __align = {<No data fields>}}, {__data = "\001\000\000\000\000\000\000\000\001\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "/", '\000' <repeats 14 times>, __align = {<No data fields>}}, {__data = "ד\n` \177\000\000\001\200\255\373\200U\000", __align = {<No data fields>}}}}, <No data fields>}, m_selectorContext = WebCore::SelectorCompiler::SelectorContext::QuerySelector, m_functionType = WebCore::SelectorCompiler::FunctionType::SimpleSelectorChecker, m_selectorFragments = {<WTF::Vector<WebCore::SelectorCompiler::SelectorFragment, 4, WTF::CrashOnOverflow, 16>> = {<WTF::VectorBuffer<WebCore::SelectorCompiler::SelectorFragment, 4>> = {<WTF::VectorBufferBase<WebCore::SelectorCompiler::SelectorFragment>> = {m_buffer = 0x7fff33c2f200, m_capacity = 4, m_size = 1}, m_inlineBuffer = {{__data = '\000' <repeats 25 times>, "\316G\272\377\377\377\377\377\377\377\377\000\000\000\000\377\377\377\377\377\377\377\377\000\000\000\000\000\000\000\000\340\374\266\217\037\177", '\000' <repeats 26 times>, "h\362\302\063\377\177\000\000\b\000\000\000\000\000\000\000\320\000\000\000\000\000\000\000`\276\317+\200U\000\000\202\261\326V \177\000\000\000`\020\232\037\177", '\000' <repeats 19 times>, "\064F\234\253\250?\200\377\377\377\377", '\000' <repeats 28 times>, "\320\362\302\063\377\177\000\000"..., __align = {<No data fields>}}, {__data = "P\364\302\063\377\177\000\000\200\365\302\063\377\177\000\000\000\000\000\000>\005\000\000H\364\302\063\377\177\000\000\002", '\000' <repeats 19 times>, "\377\177\000\000\000\064F\234\253\250?\200A\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000@\366\302\063\377\177\000\000\002\000\000\000\000\000\000\000Ω\363\\ \177\000\000\370\364\302\063\377\177\000\000k\222\365\\ \177\000\000\320\366\231\335!\000\000\000XB\325` \177\000\000yB\325` \177\000\000\270\375\302\063\377\177\000\000@\006\v,\200U\000\000\062\245\366\\ \177\000\000\000\000\000\000\000\000\000\000@\366\302\063\377\177\000\000\002\000\000\000\000\000\000\000P"..., __align = {<No data fields>}}, {__data = "\000\000\000\000\000\000\000\000\260\304\345+\200U\000\000\"\214\237S\000\000\000\000\356\020+S \177\000\000\000\000\000\000\000\000\000\000\240\346;\000\000\000\000\000`\351\277,\200U\000\000\000\064F\234\253\250?\200\000\000\000\000\000\000\000\000\260\304\345+\200U\000\000\266\000\000\000\000\000\000\000\"\214\237S", '\000' <repeats 12 times>, "NۧV \177\000\000 \031\343+\200U\000\000\061b\246V \177\000\000\260$\270\336\037\177\000\000\356\020+S \177\000\000\266\000\000\000\000\000\000\000 \031\343+\200U", '\000' <repeats 18 times>, "\266\000\000\000\000\000\000\000\273f\246V \177\000\000\000\000\000\000\000\000\000\000\201"..., __align = {<No data fields>}}, {__data = "\000\000\000\000\000\000\000\000`c\317+\200U\000\000\001\000\000\000\000\000\000\000\240\372\302\063\377\177\000\000\020\375z= \177\000\000\000\333\332+\200U\000\000@\372\302\063\377\177\000\000 \304\336+\200U\000\000p\022\202_ \177\000\000\330\022\202_ \177", '\000' <repeats 11 times>, "\333\332+\200U\000\000\003", '\000' <repeats 16 times>, "\333\332+\200U\000\000\r\003\325V \177\000\000@\372\302\063\377\177\000\000\000\000\000\000\000\000\000\000\002\000\000\000\200U\000\000\224m\246V \177\000\000\240\225\320+\200U\000\000 \304\336+\200U\000\000\030\000\000\000\060\000\000\000@\372\302\063\377\177\000\000\024\000\000\000\000\000\000\000"..., __align = {<No data fields>}}}}, <No data fields>}, registerRequirements = 4294967295, stackRequirements = 4294967295, staticSpecificity = 0, clobberElementAddressRegister = true}, m_visitedMode = WebCore::SelectorCompiler::VisitedMode::None, m_checkingContextStackReference = {m_offsetFromTop = 4294967295}, m_descendantBacktrackingStartInUse = false, m_descendantBacktrackingStart = 32543, m_backtrackingStack = {<WTF::VectorBuffer<WebCore::StackAllocator::StackReference, 13>> = {<WTF::VectorBufferBase<WebCore::StackAllocator::StackReference>> = {m_buffer = 0x7fff33c2fab0, m_capacity = 13, m_size = 0}, m_inlineBuffer = {{__data = "\000\r\307", <incomplete sequence \362>, __align = {<No data fields>}}, {__data = "\037\177\000", __align = {<No data fields>}}, {__data = " K\226\237", __align = {<No data fields>}}, {__data = "\037\177\000", __align = {<No data fields>}}, {__data = "\000\000\200", <incomplete sequence \363>, __align = {<No data fields>}}, {__data = "\037\177\000", __align = {<No data fields>}}, {__data = "7\364\333\\", __align = {<No data fields>}}, {__data = " \177\000", __align = {<No data fields>}}, {__data = "\317\372\302\063", __align = {<No data fields>}}, {__data = "\377\177\000", __align = {<No data fields>}}, {__data = "\240z_L", __align = {<No data fields>}}, {__data = " \177\000", __align = {<No data fields>}}, {__data = "H\373\302\063", __align = {<No data fields>}}}}, <No data fields>}, m_backtrackingLevels = {m_start = 0, m_end = 0, m_buffer = {<WTF::VectorBufferBase<WebCore::SelectorCompiler::BacktrackingLevel>> = {m_buffer = 0x7fff33c2fb08, m_capacity = 32, m_size = 0}, m_inlineBuffer = {{__data = "\020\004\303\063\377\177\000\000`@]L \177\000\000\062\245\366\\ \177\000\000\000\260\\L \177\000\000Ω\363\\ \177\000\000\230\373\302\063\377\177\000\000k\222\365\\ \177\000\000\240\372\302\063 \000\000\000\230A\325` \177\000\000\270A\325` \177\000", __align = {<No data fields>}}, {__data = "0w\027\232\037\177\000\000P\004\303\063\377\177\000\000\062\245\366\\ \177\000\000\060\240\245\321\037\177\000\000\234Bua \177\000\000\000\374\302\063\377\177\000\000\370\240ua\000\000\000\000@v\027\232\037\177\000\000\020\032b\214\037\177\000\000\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "0\375\302\063\377\177\000\000\257\373\302\063\377\177\000\000\000\064F\234\253\250?\200\020\374\302\063\377\177\000\000 \254\305\063\000\000\000\000P\374\302\063\377\177\000\000\001\000\000\000\001\000\000\000\210\061\035\205\037\177\000\000\021\220\333U \177\000\000\060\374\302\063\377\177\000", __align = {<No data fields>}}, {__data = "Y\220\333U \177\000\000\223\314\335U \177\000\000\001\000\000\000 \177\000\000\000^\a4\002\000\000\000\223\314\335U \177\000\000P\006\v,\200U\000\000O\001\000\000\000\000\000\000@\001\000\000\000\000\000\000\004[\251V \177\000\000\250\374\302\063\377\177\000", __align = {<No data fields>}}, {__data = "\200\003\215,\200U\000\000\001\000\000\000\000\000\000\000 \005\v,\200U\000\000@\006\v,\200U\000\000p\b\336+\200U", '\000' <repeats 11 times>, "\360O\204\037\177\000\000`@]L \177\000\000\031G\327V \177\000\000\260\374\302\063\377\177\000", __align = {<No data fields>}}, {__data = "\000\000\000\000\000\000\000\000\000E\362+\200U\000\000\200\343\371+\200U\000\000\001\020", '\000' <repeats 53 times>, __align = {<No data fields>}}, {__data = "P\006\v,\200U\000\000\000\000\000\000\000\000\000\000?åV \177\000\000@\006\v,\200U\000\000P\006\v,\200U\000\000\001\000\000\000\000\000\000\000H\006\v,\200U\000\000P\006\v,\200U\000\000~\274\245V \177\000\000@\006\v,\200U\000", __align = {<No data fields>}}, {__data = "\001\000\000\000\000\000\000\000H\006\v,\200U\000\000\000\064F\234\253\250?\200\200\061\035\205\037\177\000\000\200\061\035\205\037\177\000\000\200\061\035\205\037\177\000\000\000\061\035\205\037\177\000\000@\006\v,\200U\000\000\255\016\177_ \177\000\000\300\375\302\063\377\177\000", __align = {<No data fields>}}, {__data = "\355\004", '\000' <repeats 14 times>, "\310\327͒\037\177\000\000\000\032\226a \177\000\000\330%\226a", '\000' <repeats 12 times>, "\030v\027\232\037\177", '\000' <repeats 25 times>, __align = {<No data fields>}}, {__data = "\037", '\000' <repeats 59 times>, " \177\000\000\000\064F\234\253\250?\200\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\023\030\226a\005\000\000\000\b\000\000\000\b\000\000\000\b\000\000\000\032\000\000\000\032\000\000\000\060\000\000\000\067\000\000\000\067\000\000\000\067", '\000' <repeats 23 times>, "p\377\302\063", '\000' <repeats 11 times>, __align = {<No data fields>}}, {__data = '\000' <repeats 28 times>, "\377\177", '\000' <repeats 11 times>, "\061\035\205\037\177\000\000\b\000\000\000\a\000\000\000\001", '\000' <repeats 22 times>, __align = {<No data fields>}}, {__data = '\000' <repeats 36 times>, "\001\001\000\001\000\000\000\000\000\000\000\000\001", '\000' <repeats 23 times>, "\061\002\367\\\000\000\000", __align = {<No data fields>}}, {__data = "\b\000\000\000\000\000\000\000\037\377\302\063\377\177\000\000\264\065\367\\ \177\000\000`\247\027] \177\000\000\000\064F\234\253\250?\200\000\360O\204\037\177\000\000 \002\303\063\377\177\000\000\000\360O\204\037\177\000\000\000\000\000\000\000\000\000\000\020\331Q\205\037\177\000", __align = {<No data fields>}}, {__data = "?`\\_ \177\000\000\355\004\000\000\000\000\000\000 \304\336+\200U\000\000\000\000\000\000\000\000\000\000\200p_L \177\000\000\000\200^L \177\000\000\252\352\366\\ \177", '\000' <repeats 11 times>, "\064F\234\253\250?\200\000\240^L \177\000", __align = {<No data fields>}}, {__data = "\200p_L \177", '\000' <repeats 26 times>, "\364/G_ \177\000\000\340CQ\204\037\177\000\000>\253\363\\ \177\000\000\340CQ\204\037\177\000\000o\313H_ \177\000\000\"\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\360u\027\232\037\177\000\000H\000\303\063\377\177\000\000>\253\363\\ \177\000\000Pi\210a \177\000\000>\253\363\\ \177\000\000\340\234φ\037\177\000\000>\253\363\\ \177\000\000\000\000\000\000\000\000\000\000\260\313H_ \177\000\000\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "(\230\024] \177\000\000\240\000\303\063\377\177\000\000\b\000\000\000\000\000\000\000H\002\303\063\377\177\000\000\000\260\\L \177\000\000Pi\210a \177\000\000\234Bua \177\000\000@\227φ\037\177\000\000\370\240ua \177\000\000\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "M\031\323\\ \177\000\000\000\000\000\000\000\000\000\000(\230\024] \177\000\000\000\001\303\063\377\177\000\000\b\000\000\000\000\000\000\000Pi\210a \177\000\000\000\260\\L \177\000\000\260\253\245\321\037\177\000\000\234Bua \177\000\000\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\370\240ua \177\000\000\001\000\000\000\000\000\000\000(\230\024] \177\000\000P\001\303\063\377\177\000\000\b\000\000\000\000\000\000\000\370\002\303\063\377\177\000\000\000\260\\L \177\000\000\260\251\245\321\037\177\000\000\234Bua \177\000\000\300\227φ\037\177\000", __align = {<No data fields>}}, {__data = "\370\240ua \177\000\000\001\000\000\000\000\000\000\000M\031\323\\ \177\000\000Pi\210a \177\000\000\017\000\000\000\000\000\000\000o\001\303\063\377\177\000\000\000\064F\234\253\250?\200X\"\226a \177\000\000Y\006J_ \177\000\000\240\251\245\321\037\177\000", __align = {<No data fields>}}, {__data = "јK_ \177\000\000\360\001\303\063\377\177\000\000\300\227φ\037\177\000\000Pi\210a \177\000\000G\231K_ \177\000\000\000\260\\L \177\000\000\370\002\303\063\377\177\000\000\000\000\000\000\000\000\000\000\256*Z_ \177\000\000\200\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "(\230\024] \177\000\000\060\002\303\063\377\177\000\000\000\003\303\063\377\177\000\000\370\002\303\063\377\177\000\000\000\252\245\321\037\177\000\000\260\251\245\321\037\177\000\000\234Bua \177\000\000\240\002\303\063\377\177\000\000\370\240ua \177\000\000Xw\027\232\037\177\000", __align = {<No data fields>}}, {__data = "M\031\323\\ \177\000\000\200\002\303\063\377\177\000\000\320\003\303\063\377\177\000\000O\002\303\063\377\177\000\000\000\064F\234\253\250?\200\260\002\303\063\377\177\000\000 \254\305\063\377\177\000\000\360\002\303\063\377\177\000\000!\177K_\001\000\000\000\a\000\000\000;\215\370V", __align = {<No data fields>}}, {__data = "\001\000\000\000\000\000\000\000\320\002\303\063\377\177\000\000\000\200^L \177\000\000\060\002\367\\ \177\000\000\340\257H\227\037\177\000\000\360\002\303\063\377\177\000\000 \v\303\063\377\177\000\000\061#\270\336\037\177\000\000\001\000\000\000 \177\000\000\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "(\332a\214\037\177\000\000\002\000\000\000\000\000\000\000\000\a\247V \177\000\000\225\001\000\000\000\000\000\000v\244R.\000\000\000\000\001\000\000\000\000\000\000\000\305`\247V \177\000\000\210p_L \177\000\000\200p_L \177\000\000\000\200^L \177\000", __align = {<No data fields>}}, {__data = "\000\000\000\000 \177", '\000' <repeats 11 times>, "\064F\234\253\250?\200\000\240^L \177\000\000\200p_L \177\000\000\220\240^L \177\000\000Ω\363\\ \177\000\000\300&\303\063\377\177\000\000\aU\257_ \177\000\000\360\377\377\377\377\377\377\377", __align = {<No data fields>}}, {__data = "Ω\363\\ \177\000\000\340&\303\063\377\177\000\000\aU\257_ \177\000\000\360\377\377\377\377\377\377\377\360", '\377' <repeats 15 times>, "P\025\303\063\377\177\000\000@\025\303\063\377\177\000\000\063\376\261_ \177\000\000\240\205ԃ\000\000\000", __align = {<No data fields>}}, {__data = "\340&\303\063\377\177\000\000\360\003\303\063\377\177\000\000\360\003\303\063\377\177\000\000\000\000\000\000\000\000\000\000P\004\303\063\377\177", '\000' <repeats 34 times>, "\004\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = '\000' <repeats 56 times>, "`\004\303\063\377\177\000\000\000\001\000\000\001\000\000\000\004\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000\000\000\000\000\000\000\064F\234\253\250?\200\061\332a\214\037\177\000\000\020\000\000\000\000\000\000\000\230)\370O \177\000\000\003\000\000\000\000\000\000\000\000\064F\234\253\250?\200\000\272@\272\037\177\000\000 \v\303\063\377\177\000\000\061#\270\336\037\177\000", __align = {<No data fields>}}, {__data = "\001\000\000\000 \177\000\000\000\000\000\000\000\000\000\000(\332a\214\037\177\000\000\002\000\000\000\000\000\000\000\377\377\377\177\377\177\000\000\001\000\000\000\000\000\000\000\200\n\303\063\377\177\000\000\300\304^S \177\000\000\n:'S \177\000\000\btND \177\000", __align = {<No data fields>}}}}}, m_lastVisitedElement = {m_offsetFromTop = 4294967295}, m_startElement = {m_offsetFromTop = 4294967295}}
#11 0x00007f205fb6c804 in WebCore::SelectorCompiler::compileSelector(WebCore::CSSSelector const*, JSC::VM*, WebCore::SelectorCompiler::SelectorContext, JSC::MacroAssemblerCodeRef&) (lastSelector=<optimized out>, vm=0x7f1ff3800000, selectorContext=selectorContext@entry=WebCore::SelectorCompiler::SelectorContext::QuerySelector, codeRef=...)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WebCore/cssjit/SelectorCompiler.cpp:397
        codeGenerator = 
            {static returnRegister = JSC::X86Registers::eax, static elementAddressRegister = JSC::X86Registers::edi, static checkingContextRegister = JSC::X86Registers::esi, static callFrameRegister = JSC::X86Registers::ebp, m_macroAssemblerRegistersStackReferences = {<WTF::VectorBuffer<WebCore::StackAllocator::StackReference, 13>> = {<WTF::VectorBufferBase<WebCore::StackAllocator::StackReference>> = {m_buffer = 0x7fff33c2edb0, m_capacity = 13, m_size = 0}, m_inlineBuffer = {{__data = "0\371\302\063", __align = {<No data fields>}}, {__data = "\377\177\000", __align = {<No data fields>}}, {__data = "\000'ř", __align = {<No data fields>}}, {__data = "\037\177\000", __align = {<No data fields>}}, {__data = "\210sND", __align = {<No data fields>}}, {__data = " \177\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = " \177\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\350\355\302\063", __align = {<No data fields>}}, {__data = "\377\177\000", __align = {<No data fields>}}, {__data = "\020\000\000", __align = {<No data fields>}}}}, <No data fields>}, m_prologueStackReferences = {<WTF::VectorBuffer<WebCore::StackAllocator::StackReference, 13>> = {<WTF::VectorBufferBase<WebCore::StackAllocator::StackReference>> = {m_buffer = 0x7fff33c2edf8, m_capacity = 13, m_size = 0}, m_inlineBuffer = {{__data = "M\302\233_", __align = {<No data fields>}}, {__data = " \177\000", __align = {<No data fields>}}, {__data = "\320d\020\232", __align = {<No data fields>}}, {__data = "\037\177\000", __align = {<No data fields>}}, {__data = "\200N\234_", __align = {<No data fields>}}, {__data = " \177\000", __align = {<No data fields>}}, {__data = "\000\271z\216", __align = {<No data fields>}}, {__data = "\037\177\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\253\250?\200", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "8\356\302\063", __align = {<No data fields>}}}}, <No data fields>}, m_assembler = {<JSC::MacroAssemblerX86_64> = {<JSC::MacroAssemblerX86Common> = {<JSC::AbstractMacroAssembler<JSC::X86Assembler, JSC::MacroAssemblerX86Common>> = {m_assembler = {m_formatter = {static maxInstructionSize = 16, m_buffer = {m_storage = {static InlineCapacity = 128, m_buffer = 0x7fff33c2ee38 "[ȹ_ \177", m_inlineBuffer = "[ȹ_ \177\000\000 \004\024\231\037\177\000\000\315L\233_ \177\000\000\320d\020\232\037\177\000\000 \004\024\231\037\177\000\000\320d\020\232\037\177\000\000\030T\235_ \177\000\000 \004\024\231\037\177\000\000\060\302\232_ \177\000\000\000\337h\215\037\177\000\000T'\235_ \177\000\000\000\337h\215\037\177\000\000\201\376\036` \177\000\000\265\314F\234\005\000\000\000mM\233_ \177\000\000\006\000\000\000\006\000\000", m_capacity = 128}, m_index = 0}}, m_indexOfLastWatchpoint = -2147483648, m_indexOfTailOfLastWatchpoint = -2147483648}, m_randomSourceIsInitialized = false, m_randomSource = {m_seed = 0, m_low = 1, m_high = 8388672}, m_tempRegistersValidBits = 0, m_allowScratchRegister = true, m_linkTasks = {<WTF::VectorBuffer<WTF::RefPtr<WTF::SharedTask<void(JSC::LinkBuffer&)> >, 0>> = {<WTF::VectorBufferBase<WTF::RefPtr<WTF::SharedTask<void(JSC::LinkBuffer&)> > >> = {m_buffer = 0x0, m_capacity = 0, m_size = 0}, <No data fields>}, <No data fields>}}, static s_scratchRegister = JSC::X86Registers::r11, static DoubleConditionBitInvert = 16, static DoubleConditionBitSpecial = 32, static DoubleConditionBits = 48, static stackPointerRegister = JSC::X86Registers::esp, static framePointerRegister = JSC::X86Registers::ebp, static s_sse4_1CheckState = JSC::MacroAssemblerX86Common::CPUIDCheckState::Set, static s_avxCheckState = JSC::MacroAssemblerX86Common::CPUIDCheckState::Set, static s_bmi1CheckState = JSC::MacroAssemblerX86Common::CPUIDCheckState::NotChecked, static s_lzcntCheckState = JSC::MacroAssemblerX86Common::CPUIDCheckState::Set}, static numGPRs = 16, static numFPRs = 16, static ScalePtr = JSC::AbstractMacroAssembler<JSC::X86Assembler, JSC::MacroAssemblerX86Common>::TimesEight}, static twoToThe32 = 4294967296, static BlindingModulus = 64}, m_registerAllocator = {m_registers = {m_start = 0, m_end = 0, m_buffer = {<WTF::VectorBufferBase<JSC::X86Registers::RegisterID>> = {m_buffer = 0x7fff33c2ef28, m_capacity = 13, m_size = 0}, m_inlineBuffer = {{__data = "\001\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "8\330Ȇ", __align = {<No data fields>}}, {__data = "\037\177\000", __align = {<No data fields>}}, {__data = "\002\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\377\377\377\177", __align = {<No data fields>}}, {__data = "\377\177\000", __align = {<No data fields>}}, {__data = "\001\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\360\364\302\063", __align = {<No data fields>}}}}}, m_allocatedRegisters = {<WTF::VectorBuffer<JSC::X86Registers::RegisterID, 13>> = {<WTF::VectorBufferBase<JSC::X86Registers::RegisterID>> = {m_buffer = 0x7fff33c2ef70, m_capacity = 13, m_size = 0}, m_inlineBuffer = {{__data = "\200\357\302\063", __align = {<No data fields>}}, {__data = "\377\177\000", __align = {<No data fields>}}, {__data = "\020\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\037\177\000", __align = {<No data fields>}}, {__data = "\000\337h\215", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}}}, <No data fields>}, m_reservedCalleeSavedRegisters = {<WTF::VectorBuffer<JSC::X86Registers::RegisterID, 4>> = {<WTF::VectorBufferBase<JSC::X86Registers::RegisterID>> = {m_buffer = 0x7fff33c2efb8, m_capacity = 4, m_size = 0}, m_inlineBuffer = {{__data = "\000\000\000", __align = {<No data fields>}}, {__data = "\377\177\000", __align = {<No data fields>}}, {__data = "\001\000\000", __align = {<No data fields>}}, {__data = "\000\000\000", __align = {<No data fields>}}}}, <No data fields>}}, m_stackAllocator = {m_assembler = @0x7fff33c2ee30, m_offsetFromTop = 0, m_hasFunctionCallPadding = false}, m_functionCalls = {<WTF::VectorBuffer<std::pair<JSC::AbstractMacroAssembler<JSC::X86Assembler, JSC::MacroAssemblerX86Common>::Call, JSC::FunctionPtr>, 32>> = {<WTF::VectorBufferBase<std::pair<JSC::AbstractMacroAssembler<JSC::X86Assembler, JSC::MacroAssemblerX86Common>::Call, JSC::FunctionPtr> >> = {m_buffer = 0x7fff33c2efe8, m_capacity = 32, m_size = 0}, m_inlineBuffer = {{__data = "\300\360\302\063\377\177\000\000\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = " \rř\037\177\000\000\250\364\302\063\377\177\000", __align = {<No data fields>}}, {__data = "\000\000\000\000\000\000\000\000h\r\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\221\066{= \177\000\000\217\066{= \177\000", __align = {<No data fields>}}, {__data = "\v", '\000' <repeats 14 times>, __align = {<No data fields>}}, {__data = "\000\000\000\000\000\000\000\000P\360\302\063\377\177\000", __align = {<No data fields>}}, {__data = "\020\000\000\000\000\000\000\000\244\267\262Y\000\000\000", __align = {<No data fields>}}, {__data = "\000\064F\234\253\250?\200\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\320\362\302\063\377\177\000\000\330\362\302\063\377\177\000", __align = {<No data fields>}}, {__data = '\000' <repeats 15 times>, __align = {<No data fields>}}, {__data = "\000\000\000\000\000\000\000\000\240\360\302\063\377\177\000", __align = {<No data fields>}}, {__data = "\020\000\000\000\060\000\000\000P\367\302\063\377\177\000", __align = {<No data fields>}}, {__data = "\000\064F\234\253\250?\200\020\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "J\367\231\335\037\177\000\000\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000\000\000\000\000\000\222\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "@\330Ȇ\037\177\000\000\001\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "F\332\367O \177\000\000\002\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\202\217\n` \177\000\000\314\316G\272\037\177\000", __align = {<No data fields>}}, {__data = "\220\365\302\063\377\177\000\000F\367\231\335\037\177\000", __align = {<No data fields>}}, {__data = "\001", '\000' <repeats 14 times>, __align = {<No data fields>}}, {__data = "8\330Ȇ\037\177\000\000\002\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\000\005\247V \177\000\000\070\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\000\064F\234\253\250?\200\000\000\000\000\200U\000", __align = {<No data fields>}}, {__data = "\377\377\377\377\377\377\377\377p\361\302\063\377\177\000", __align = {<No data fields>}}, {__data = "\004\000\000\000\004\000\000\000\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = '\000' <repeats 15 times>, __align = {<No data fields>}}, {__data = '\000' <repeats 15 times>, __align = {<No data fields>}}, {__data = "\000\064F\234\253\250?\200\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\020\362\302\063\377\177\000\000@\f\303\063\377\177\000", __align = {<No data fields>}}, {__data = "\001\000\000\000\000\000\000\000\001\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "/", '\000' <repeats 14 times>, __align = {<No data fields>}}, {__data = "ד\n` \177\000\000\001\200\255\373\200U\000", __align = {<No data fields>}}}}, <No data fields>}, m_selectorContext = WebCore::SelectorCompiler::SelectorContext::QuerySelector, m_functionType = WebCore::SelectorCompiler::FunctionType::SimpleSelectorChecker, m_selectorFragments = {<WTF::Vector<WebCore::SelectorCompiler::SelectorFragment, 4, WTF::CrashOnOverflow, 16>> = {<WTF::VectorBuffer<WebCore::SelectorCompiler::SelectorFragment, 4>> = {<WTF::VectorBufferBase<WebCore::SelectorCompiler::SelectorFragment>> = {m_buffer = 0x7fff33c2f200, m_capacity = 4, m_size = 1}, m_inlineBuffer = {{__data = '\000' <repeats 25 times>, "\316G\272\377\377\377\377\377\377\377\377\000\000\000\000\377\377\377\377\377\377\377\377\000\000\000\000\000\000\000\000\340\374\266\217\037\177", '\000' <repeats 26 times>, "h\362\302\063\377\177\000\000\b\000\000\000\000\000\000\000\320\000\000\000\000\000\000\000`\276\317+\200U\000\000\202\261\326V \177\000\000\000`\020\232\037\177", '\000' <repeats 19 times>, "\064F\234\253\250?\200\377\377\377\377", '\000' <repeats 28 times>, "\320\362\302\063\377\177\000\000"..., __align = {<No data fields>}}, {__data = "P\364\302\063\377\177\000\000\200\365\302\063\377\177\000\000\000\000\000\000>\005\000\000H\364\302\063\377\177\000\000\002", '\000' <repeats 19 times>, "\377\177\000\000\000\064F\234\253\250?\200A\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000@\366\302\063\377\177\000\000\002\000\000\000\000\000\000\000Ω\363\\ \177\000\000\370\364\302\063\377\177\000\000k\222\365\\ \177\000\000\320\366\231\335!\000\000\000XB\325` \177\000\000yB\325` \177\000\000\270\375\302\063\377\177\000\000@\006\v,\200U\000\000\062\245\366\\ \177\000\000\000\000\000\000\000\000\000\000@\366\302\063\377\177\000\000\002\000\000\000\000\000\000\000P"..., __align = {<No data fields>}}, {__data = "\000\000\000\000\000\000\000\000\260\304\345+\200U\000\000\"\214\237S\000\000\000\000\356\020+S \177\000\000\000\000\000\000\000\000\000\000\240\346;\000\000\000\000\000`\351\277,\200U\000\000\000\064F\234\253\250?\200\000\000\000\000\000\000\000\000\260\304\345+\200U\000\000\266\000\000\000\000\000\000\000\"\214\237S", '\000' <repeats 12 times>, "NۧV \177\000\000 \031\343+\200U\000\000\061b\246V \177\000\000\260$\270\336\037\177\000\000\356\020+S \177\000\000\266\000\000\000\000\000\000\000 \031\343+\200U", '\000' <repeats 18 times>, "\266\000\000\000\000\000\000\000\273f\246V \177\000\000\000\000\000\000\000\000\000\000\201"..., __align = {<No data fields>}}, {__data = "\000\000\000\000\000\000\000\000`c\317+\200U\000\000\001\000\000\000\000\000\000\000\240\372\302\063\377\177\000\000\020\375z= \177\000\000\000\333\332+\200U\000\000@\372\302\063\377\177\000\000 \304\336+\200U\000\000p\022\202_ \177\000\000\330\022\202_ \177", '\000' <repeats 11 times>, "\333\332+\200U\000\000\003", '\000' <repeats 16 times>, "\333\332+\200U\000\000\r\003\325V \177\000\000@\372\302\063\377\177\000\000\000\000\000\000\000\000\000\000\002\000\000\000\200U\000\000\224m\246V \177\000\000\240\225\320+\200U\000\000 \304\336+\200U\000\000\030\000\000\000\060\000\000\000@\372\302\063\377\177\000\000\024\000\000\000\000\000\000\000"..., __align = {<No data fields>}}}}, <No data fields>}, registerRequirements = 4294967295, stackRequirements = 4294967295, staticSpecificity = 0, clobberElementAddressRegister = true}, m_visitedMode = WebCore::SelectorCompiler::VisitedMode::None, m_checkingContextStackReference = {m_offsetFromTop = 4294967295}, m_descendantBacktrackingStartInUse = false, m_descendantBacktrackingStart = 32543, m_backtrackingStack = {<WTF::VectorBuffer<WebCore::StackAllocator::StackReference, 13>> = {<WTF::VectorBufferBase<WebCore::StackAllocator::StackReference>> = {m_buffer = 0x7fff33c2fab0, m_capacity = 13, m_size = 0}, m_inlineBuffer = {{__data = "\000\r\307", <incomplete sequence \362>, __align = {<No data fields>}}, {__data = "\037\177\000", __align = {<No data fields>}}, {__data = " K\226\237", __align = {<No data fields>}}, {__data = "\037\177\000", __align = {<No data fields>}}, {__data = "\000\000\200", <incomplete sequence \363>, __align = {<No data fields>}}, {__data = "\037\177\000", __align = {<No data fields>}}, {__data = "7\364\333\\", __align = {<No data fields>}}, {__data = " \177\000", __align = {<No data fields>}}, {__data = "\317\372\302\063", __align = {<No data fields>}}, {__data = "\377\177\000", __align = {<No data fields>}}, {__data = "\240z_L", __align = {<No data fields>}}, {__data = " \177\000", __align = {<No data fields>}}, {__data = "H\373\302\063", __align = {<No data fields>}}}}, <No data fields>}, m_backtrackingLevels = {m_start = 0, m_end = 0, m_buffer = {<WTF::VectorBufferBase<WebCore::SelectorCompiler::BacktrackingLevel>> = {m_buffer = 0x7fff33c2fb08, m_capacity = 32, m_size = 0}, m_inlineBuffer = {{__data = "\020\004\303\063\377\177\000\000`@]L \177\000\000\062\245\366\\ \177\000\000\000\260\\L \177\000\000Ω\363\\ \177\000\000\230\373\302\063\377\177\000\000k\222\365\\ \177\000\000\240\372\302\063 \000\000\000\230A\325` \177\000\000\270A\325` \177\000", __align = {<No data fields>}}, {__data = "0w\027\232\037\177\000\000P\004\303\063\377\177\000\000\062\245\366\\ \177\000\000\060\240\245\321\037\177\000\000\234Bua \177\000\000\000\374\302\063\377\177\000\000\370\240ua\000\000\000\000@v\027\232\037\177\000\000\020\032b\214\037\177\000\000\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "0\375\302\063\377\177\000\000\257\373\302\063\377\177\000\000\000\064F\234\253\250?\200\020\374\302\063\377\177\000\000 \254\305\063\000\000\000\000P\374\302\063\377\177\000\000\001\000\000\000\001\000\000\000\210\061\035\205\037\177\000\000\021\220\333U \177\000\000\060\374\302\063\377\177\000", __align = {<No data fields>}}, {__data = "Y\220\333U \177\000\000\223\314\335U \177\000\000\001\000\000\000 \177\000\000\000^\a4\002\000\000\000\223\314\335U \177\000\000P\006\v,\200U\000\000O\001\000\000\000\000\000\000@\001\000\000\000\000\000\000\004[\251V \177\000\000\250\374\302\063\377\177\000", __align = {<No data fields>}}, {__data = "\200\003\215,\200U\000\000\001\000\000\000\000\000\000\000 \005\v,\200U\000\000@\006\v,\200U\000\000p\b\336+\200U", '\000' <repeats 11 times>, "\360O\204\037\177\000\000`@]L \177\000\000\031G\327V \177\000\000\260\374\302\063\377\177\000", __align = {<No data fields>}}, {__data = "\000\000\000\000\000\000\000\000\000E\362+\200U\000\000\200\343\371+\200U\000\000\001\020", '\000' <repeats 53 times>, __align = {<No data fields>}}, {__data = "P\006\v,\200U\000\000\000\000\000\000\000\000\000\000?åV \177\000\000@\006\v,\200U\000\000P\006\v,\200U\000\000\001\000\000\000\000\000\000\000H\006\v,\200U\000\000P\006\v,\200U\000\000~\274\245V \177\000\000@\006\v,\200U\000", __align = {<No data fields>}}, {__data = "\001\000\000\000\000\000\000\000H\006\v,\200U\000\000\000\064F\234\253\250?\200\200\061\035\205\037\177\000\000\200\061\035\205\037\177\000\000\200\061\035\205\037\177\000\000\000\061\035\205\037\177\000\000@\006\v,\200U\000\000\255\016\177_ \177\000\000\300\375\302\063\377\177\000", __align = {<No data fields>}}, {__data = "\355\004", '\000' <repeats 14 times>, "\310\327͒\037\177\000\000\000\032\226a \177\000\000\330%\226a", '\000' <repeats 12 times>, "\030v\027\232\037\177", '\000' <repeats 25 times>, __align = {<No data fields>}}, {__data = "\037", '\000' <repeats 59 times>, " \177\000\000\000\064F\234\253\250?\200\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\023\030\226a\005\000\000\000\b\000\000\000\b\000\000\000\b\000\000\000\032\000\000\000\032\000\000\000\060\000\000\000\067\000\000\000\067\000\000\000\067", '\000' <repeats 23 times>, "p\377\302\063", '\000' <repeats 11 times>, __align = {<No data fields>}}, {__data = '\000' <repeats 28 times>, "\377\177", '\000' <repeats 11 times>, "\061\035\205\037\177\000\000\b\000\000\000\a\000\000\000\001", '\000' <repeats 22 times>, __align = {<No data fields>}}, {__data = '\000' <repeats 36 times>, "\001\001\000\001\000\000\000\000\000\000\000\000\001", '\000' <repeats 23 times>, "\061\002\367\\\000\000\000", __align = {<No data fields>}}, {__data = "\b\000\000\000\000\000\000\000\037\377\302\063\377\177\000\000\264\065\367\\ \177\000\000`\247\027] \177\000\000\000\064F\234\253\250?\200\000\360O\204\037\177\000\000 \002\303\063\377\177\000\000\000\360O\204\037\177\000\000\000\000\000\000\000\000\000\000\020\331Q\205\037\177\000", __align = {<No data fields>}}, {__data = "?`\\_ \177\000\000\355\004\000\000\000\000\000\000 \304\336+\200U\000\000\000\000\000\000\000\000\000\000\200p_L \177\000\000\000\200^L \177\000\000\252\352\366\\ \177", '\000' <repeats 11 times>, "\064F\234\253\250?\200\000\240^L \177\000", __align = {<No data fields>}}, {__data = "\200p_L \177", '\000' <repeats 26 times>, "\364/G_ \177\000\000\340CQ\204\037\177\000\000>\253\363\\ \177\000\000\340CQ\204\037\177\000\000o\313H_ \177\000\000\"\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\360u\027\232\037\177\000\000H\000\303\063\377\177\000\000>\253\363\\ \177\000\000Pi\210a \177\000\000>\253\363\\ \177\000\000\340\234φ\037\177\000\000>\253\363\\ \177\000\000\000\000\000\000\000\000\000\000\260\313H_ \177\000\000\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "(\230\024] \177\000\000\240\000\303\063\377\177\000\000\b\000\000\000\000\000\000\000H\002\303\063\377\177\000\000\000\260\\L \177\000\000Pi\210a \177\000\000\234Bua \177\000\000@\227φ\037\177\000\000\370\240ua \177\000\000\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "M\031\323\\ \177\000\000\000\000\000\000\000\000\000\000(\230\024] \177\000\000\000\001\303\063\377\177\000\000\b\000\000\000\000\000\000\000Pi\210a \177\000\000\000\260\\L \177\000\000\260\253\245\321\037\177\000\000\234Bua \177\000\000\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\370\240ua \177\000\000\001\000\000\000\000\000\000\000(\230\024] \177\000\000P\001\303\063\377\177\000\000\b\000\000\000\000\000\000\000\370\002\303\063\377\177\000\000\000\260\\L \177\000\000\260\251\245\321\037\177\000\000\234Bua \177\000\000\300\227φ\037\177\000", __align = {<No data fields>}}, {__data = "\370\240ua \177\000\000\001\000\000\000\000\000\000\000M\031\323\\ \177\000\000Pi\210a \177\000\000\017\000\000\000\000\000\000\000o\001\303\063\377\177\000\000\000\064F\234\253\250?\200X\"\226a \177\000\000Y\006J_ \177\000\000\240\251\245\321\037\177\000", __align = {<No data fields>}}, {__data = "јK_ \177\000\000\360\001\303\063\377\177\000\000\300\227φ\037\177\000\000Pi\210a \177\000\000G\231K_ \177\000\000\000\260\\L \177\000\000\370\002\303\063\377\177\000\000\000\000\000\000\000\000\000\000\256*Z_ \177\000\000\200\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "(\230\024] \177\000\000\060\002\303\063\377\177\000\000\000\003\303\063\377\177\000\000\370\002\303\063\377\177\000\000\000\252\245\321\037\177\000\000\260\251\245\321\037\177\000\000\234Bua \177\000\000\240\002\303\063\377\177\000\000\370\240ua \177\000\000Xw\027\232\037\177\000", __align = {<No data fields>}}, {__data = "M\031\323\\ \177\000\000\200\002\303\063\377\177\000\000\320\003\303\063\377\177\000\000O\002\303\063\377\177\000\000\000\064F\234\253\250?\200\260\002\303\063\377\177\000\000 \254\305\063\377\177\000\000\360\002\303\063\377\177\000\000!\177K_\001\000\000\000\a\000\000\000;\215\370V", __align = {<No data fields>}}, {__data = "\001\000\000\000\000\000\000\000\320\002\303\063\377\177\000\000\000\200^L \177\000\000\060\002\367\\ \177\000\000\340\257H\227\037\177\000\000\360\002\303\063\377\177\000\000 \v\303\063\377\177\000\000\061#\270\336\037\177\000\000\001\000\000\000 \177\000\000\000\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "(\332a\214\037\177\000\000\002\000\000\000\000\000\000\000\000\a\247V \177\000\000\225\001\000\000\000\000\000\000v\244R.\000\000\000\000\001\000\000\000\000\000\000\000\305`\247V \177\000\000\210p_L \177\000\000\200p_L \177\000\000\000\200^L \177\000", __align = {<No data fields>}}, {__data = "\000\000\000\000 \177", '\000' <repeats 11 times>, "\064F\234\253\250?\200\000\240^L \177\000\000\200p_L \177\000\000\220\240^L \177\000\000Ω\363\\ \177\000\000\300&\303\063\377\177\000\000\aU\257_ \177\000\000\360\377\377\377\377\377\377\377", __align = {<No data fields>}}, {__data = "Ω\363\\ \177\000\000\340&\303\063\377\177\000\000\aU\257_ \177\000\000\360\377\377\377\377\377\377\377\360", '\377' <repeats 15 times>, "P\025\303\063\377\177\000\000@\025\303\063\377\177\000\000\063\376\261_ \177\000\000\240\205ԃ\000\000\000", __align = {<No data fields>}}, {__data = "\340&\303\063\377\177\000\000\360\003\303\063\377\177\000\000\360\003\303\063\377\177\000\000\000\000\000\000\000\000\000\000P\004\303\063\377\177", '\000' <repeats 34 times>, "\004\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = '\000' <repeats 56 times>, "`\004\303\063\377\177\000\000\000\001\000\000\001\000\000\000\004\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\000\000\000\000\000\000\000\000\000\064F\234\253\250?\200\061\332a\214\037\177\000\000\020\000\000\000\000\000\000\000\230)\370O \177\000\000\003\000\000\000\000\000\000\000\000\064F\234\253\250?\200\000\272@\272\037\177\000\000 \v\303\063\377\177\000\000\061#\270\336\037\177\000", __align = {<No data fields>}}, {__data = "\001\000\000\000 \177\000\000\000\000\000\000\000\000\000\000(\332a\214\037\177\000\000\002\000\000\000\000\000\000\000\377\377\377\177\377\177\000\000\001\000\000\000\000\000\000\000\200\n\303\063\377\177\000\000\300\304^S \177\000\000\n:'S \177\000\000\btND \177\000", __align = {<No data fields>}}}}}, m_lastVisitedElement = {m_offsetFromTop = 4294967295}, m_startElement = {m_offsetFromTop = 4294967295}}
#12 0x00007f205fc247ed in WebCore::SelectorDataList::compileSelector(WebCore::SelectorDataList::SelectorData const&, WebCore::ContainerNode const&) (selectorData=..., rootNode=...)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WebCore/dom/SelectorQuery.cpp:483
        vm = <optimized out>
        rootNode = <optimized out>
        selectorData = 
            @0x7f1f8fb6f820: {selector = 0x7f1f8fb6fce0, compiledSelectorCodeRef = {m_codePtr = {m_value = 0x0}, m_executableMemory = {static isRefPtr = <optimized out>, m_ptr = 0x0}}, compilationStatus = {m_status = WebCore::SelectorCompilationStatus::NotCompiled}}
#13 0x00007f205fc25de5 in WebCore::SelectorDataList::execute<WebCore::AllElementExtractorSelectorQueryTrait>(WebCore::ContainerNode&, WebCore::AllElementExtractorSelectorQueryTrait::OutputType&) const (this=0x7f1f8fb6f808, rootNode=..., output=...)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WebCore/dom/SelectorQuery.cpp:517
        searchRootNode = 0x7f1fd2775400
#14 0x00007f205fc24857 in WebCore::SelectorDataList::queryAll(WebCore::ContainerNode&) const (this=<optimized out>, rootNode=...)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WebCore/dom/SelectorQuery.cpp:175
        result = 
              {<WTF::VectorBuffer<WTF::Ref<WebCore::Element>, 0>> = {<WTF::VectorBufferBase<WTF::Ref<WebCore::Element> >> = {m_buffer = 0x0, m_capacity = 0, m_size = 0}, <No data fields>}, <No data fields>}
#15 0x00007f205fb8456e in WebCore::SelectorQuery::queryAll(WebCore::ContainerNode&) const (rootNode=..., this=<optimized out>)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WebCore/dom/SelectorQuery.h:147
        query = 
                {m_value = {m_value = {<WTF::ExpectedDetail::Base<WebCore::SelectorQuery*, WebCore::Exception>> = {s = {dummy = 0 '\000', val = 0x7f1f8fb6f800, err = {m_code = -1883834368, m_message = {m_impl = {static isRefPtr = <optimized out>, m_ptr = 0x803fa8ab9c463400}}}}, has = true}, <No data fields>}}}
#16 0x00007f205fb8456e in WebCore::ContainerNode::querySelectorAll(WTF::String const&) (this=this@entry=0x7f1fd2775400, selectors=...)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WebCore/dom/ContainerNode.cpp:893
        query = 
                {m_value = {m_value = {<WTF::ExpectedDetail::Base<WebCore::SelectorQuery*, WebCore::Exception>> = {s = {dummy = 0 '\000', val = 0x7f1f8fb6f800, err = {m_code = -1883834368, m_message = {m_impl = {static isRefPtr = <optimized out>, m_ptr = 0x803fa8ab9c463400}}}}, has = true}, <No data fields>}}}
#17 0x00007f20607bc116 in WebCore::jsDocumentPrototypeFunctionQuerySelectorAllCaller (throwScope=..., castedThis=0x7f1f9f927fa0, state=0x7fff33c313f0)
    at /usr/src/debug/webkitgtk-2.16.6/x86_64-redhat-linux-gnu/DerivedSources/WebCore/JSDocument.cpp:5674
        selectors = 
            {m_impl = {static isRefPtr = <optimized out>, m_ptr = 0x7f1f90e98938}}
        throwScope = 
    {<JSC::ExceptionScope> = {m_vm = @0x7f1ff3800000}, <No data fields>}
#18 0x00007f20607bc116 in WebCore::BindingCaller<WebCore::JSDocument>::callOperation<WebCore::jsDocumentPrototypeFunctionQuerySelectorAllCaller> (operationName=0x7f2060d3490c "querySelectorAll", state=0x7fff33c313f0)
    at /usr/src/debug/webkitgtk-2.16.6/Source/WebCore/bindings/js/JSDOMBindingCaller.h:71
        throwScope = 
            {<JSC::ExceptionScope> = {m_vm = @0x7f1ff3800000}, <No data fields>}
#19 0x00007f20607bc116 in WebCore::jsDocumentPrototypeFunctionQuerySelectorAll(JSC::ExecState*) (state=0x7fff33c313f0)
    at /usr/src/debug/webkitgtk-2.16.6/x86_64-redhat-linux-gnu/DerivedSources/WebCore/JSDocument.cpp:5662
#20 0x00007f1ff3fff028 in  ()
#21 0x00007fff33c31490 in  ()
#22 0x00007f205cbb756e in llint_entry ()
    at /lib64/libjavascriptcoregtk-4.0.so.18

[Anne van Kesteren]

This code has changed quite a bit. If you can still reproduce this please do reopen though.