RESOLVED FIXED 17729
REGRESSION(2.0.4-3.0): <style>:first-letter{position:fixed}</style>! --> crash 
https://bugs.webkit.org/show_bug.cgi?id=17729
Summary REGRESSION(2.0.4-3.0): <style>:first-letter{position:fixed}</style>! --> crash
David Bloom
Reported 2008-03-08 18:10:49 PST
data:text/html;charset=utf-8,<style>:first-letter{position:fixed}</style>! Regressed since Safari 2.0.4.
Attachments
Add attachment proposed patch, testcase, etc.
Matt Lilek
Comment 1 2008-03-08 18:21:38 PST
ASSERTION FAILED: !view() || !view()->layoutState() || isCompact() || isRunIn() (/Users/matt/Code/WebKit/WebCore/rendering/RenderFlow.cpp:486 virtual WebCore::IntRect WebCore::RenderFlow::absoluteClippedOverflowRect()) Thread 0 Crashed: 0 com.apple.WebCore 0x01e3b07b WebCore::RenderFlow::absoluteClippedOverflowRect() + 199 (RenderFlow.cpp:486) 1 com.apple.WebCore 0x01e62ce9 WebCore::RenderObject::repaint(bool) + 147 (RenderObject.cpp:1768) 2 com.apple.WebCore 0x01e6895d WebCore::RenderObject::setStyle(WebCore::RenderStyle*) + 1865 (RenderObject.cpp:2162) 3 com.apple.WebCore 0x01e2ab49 WebCore::RenderBox::setStyle(WebCore::RenderStyle*) + 91 (RenderBox.cpp:86) 4 com.apple.WebCore 0x01e4321f WebCore::RenderInline::setStyle(WebCore::RenderStyle*) + 25 (RenderInline.cpp:47) 5 com.apple.WebCore 0x01e0e6be WebCore::RenderBlock::updateFirstLetter() + 700 (RenderBlock.cpp:4109) 6 com.apple.WebCore 0x01e0b82a WebCore::RenderBlock::layout() + 26 (RenderBlock.cpp:491) 7 com.apple.WebCore 0x01e1b03f WebCore::RenderBlock::layoutBlockChildren(bool, int&) + 1515 (RenderBlock.cpp:1233) 8 com.apple.WebCore 0x01e1c1cd WebCore::RenderBlock::layoutBlock(bool) + 1353 (RenderBlock.cpp:586) 9 com.apple.WebCore 0x01e0b846 WebCore::RenderBlock::layout() + 54 (RenderBlock.cpp:494) 10 com.apple.WebCore 0x01e1b03f WebCore::RenderBlock::layoutBlockChildren(bool, int&) + 1515 (RenderBlock.cpp:1233) 11 com.apple.WebCore 0x01e1c1cd WebCore::RenderBlock::layoutBlock(bool) + 1353 (RenderBlock.cpp:586) 12 com.apple.WebCore 0x01e0b846 WebCore::RenderBlock::layout() + 54 (RenderBlock.cpp:494) 13 com.apple.WebCore 0x01eb9c46 WebCore::RenderView::layout() + 310 (RenderView.cpp:114) 14 com.apple.WebCore 0x01c0ee38 WebCore::FrameView::layout(bool) + 2194 (FrameView.cpp:479) 15 com.apple.WebCore 0x01beaaf9 WebCore::Frame::forceLayout(bool) + 57 (Frame.cpp:1386) 16 com.apple.WebCore 0x01fe7f24 -[WebCoreFrameBridge forceLayoutAdjustingViewSize:] + 40 (WebCoreFrameBridge.mm:358) 17 com.apple.WebKit 0x001cae5c -[WebHTMLView layoutToMinimumPageWidth:maximumPageWidth:adjustingViewSize:] + 234 (WebHTMLView.mm:2726) 18 com.apple.WebKit 0x001caf6c -[WebHTMLView layout] + 68 (WebHTMLView.mm:2740) 19 com.apple.WebKit 0x001a724a -[WebDynamicScrollBarsView updateScrollers] + 363 (WebDynamicScrollBarsView.m:99) 20 com.apple.WebKit 0x001a7603 -[WebDynamicScrollBarsView reflectScrolledClipView:] + 134 (WebDynamicScrollBarsView.m:157) 21 com.apple.AppKit 0x9174be31 -[NSClipView _reflectDocumentViewFrameChange] + 126 22 com.apple.AppKit 0x91647964 -[NSView _postFrameChangeNotification] + 140 23 com.apple.AppKit 0x9164d806 -[NSView setFrameSize:] + 788 24 com.apple.AppKit 0x91643a6a -[NSControl setFrameSize:] + 125 25 com.apple.WebCore 0x01fab311 WebCore::ScrollView::resizeContents(int, int) + 657 (ScrollViewMac.mm:338) 26 com.apple.WebCore 0x01c0bd15 WebCore::FrameView::adjustViewSize() + 215 (FrameView.cpp:258) 27 com.apple.WebCore 0x01c0eec8 WebCore::FrameView::layout(bool) + 2338 (FrameView.cpp:492) 28 com.apple.WebCore 0x01b8014d WebCore::Document::implicitClose() + 1057 (Document.cpp:1525) 29 com.apple.WebCore 0x01bf2ee6 WebCore::FrameLoader::checkCallImplicitClose() + 226 (FrameLoader.cpp:1313) 30 com.apple.WebCore 0x01bfed58 WebCore::FrameLoader::checkCompleted() + 268 (FrameLoader.cpp:1269) 31 com.apple.WebCore 0x01c0173e WebCore::FrameLoader::finishedParsing() + 90 (FrameLoader.cpp:1217) 32 com.apple.WebCore 0x01b7e908 WebCore::Document::finishedParsing() + 204 (Document.cpp:3525) 33 com.apple.WebCore 0x01c6c4b9 WebCore::HTMLParser::finished() + 205 (HTMLParser.cpp:1446) 34 com.apple.WebCore 0x01c835e5 WebCore::HTMLTokenizer::end() + 301 (HTMLTokenizer.cpp:1797) 35 com.apple.WebCore 0x01c8398d WebCore::HTMLTokenizer::finish() + 911 (HTMLTokenizer.cpp:1838) 36 com.apple.WebCore 0x01b79e3c WebCore::Document::finishParsing() + 40 (Document.cpp:1620) 37 com.apple.WebCore 0x01bfef20 WebCore::FrameLoader::endIfNotLoadingMainResource() + 122 (FrameLoader.cpp:1041) 38 com.apple.WebCore 0x01bfefa5 WebCore::FrameLoader::end() + 27 (FrameLoader.cpp:1026) 39 com.apple.WebCore 0x01b95b7c WebCore::DocumentLoader::finishedLoading() + 76 (DocumentLoader.cpp:324) 40 com.apple.WebCore 0x01bfa188 WebCore::FrameLoader::finishedLoading() + 72 (FrameLoader.cpp:2798) 41 com.apple.WebCore 0x01dcd787 WebCore::MainResourceLoader::didFinishLoading() + 181 (MainResourceLoader.cpp:311) 42 com.apple.WebCore 0x01ec9768 WebCore::ResourceLoader::didFinishLoading(WebCore::ResourceHandle*) + 24 (ResourceLoader.cpp:373) 43 com.apple.WebCore 0x01ec6f23 -[WebCoreResourceHandleAsDelegate connectionDidFinishLoading:] + 101 (ResourceHandleMac.mm:521) 44 com.apple.Foundation 0x913a38b7 -[NSURLConnection(NSURLConnectionReallyInternal) sendDidFinishLoading] + 87 45 com.apple.Foundation 0x913a3844 _NSURLConnectionDidFinishLoading + 68 46 com.apple.CFNetwork 0x947177f3 sendDidFinishLoadingCallback + 148 47 com.apple.CFNetwork 0x94714920 _CFURLConnectionSendCallbacks + 1994 48 com.apple.CFNetwork 0x947140d9 muxerSourcePerform + 283 49 com.apple.CoreFoundation 0x9526562e CFRunLoopRunSpecific + 3166 50 com.apple.CoreFoundation 0x95265d18 CFRunLoopRunInMode + 88 51 com.apple.HIToolbox 0x92df06a0 RunCurrentEventLoopInMode + 283 52 com.apple.HIToolbox 0x92df03f2 ReceiveNextEventCommon + 175 53 com.apple.HIToolbox 0x92df032d BlockUntilNextEventMatchingListInMode + 106 54 com.apple.AppKit 0x916647d9 _DPSNextEvent + 657 55 com.apple.AppKit 0x9166408e -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 128 56 com.apple.Safari 0x0000806e 0x1000 + 28782 57 com.apple.AppKit 0x9165d0c5 -[NSApplication run] + 795 58 com.apple.AppKit 0x9162a30a NSApplicationMain + 574 59 com.apple.Safari 0x000b9a76 0x1000 + 756342
Mark Rowe (bdash)
Comment 2 2008-03-17 15:20:24 PDT
<rdar://problem/5803696>
mitz
Comment 3 2010-01-14 00:14:47 PST
No longer crashes in TOT.
Note You need to log in before you can comment on or make changes to this bug.