RESOLVED FIXED181666
REGRESSION(STP47): Can't view Chase credit card transactions due to a crash in RenderTreeBuilder::insertChild 
https://bugs.webkit.org/show_bug.cgi?id=181666
Summary REGRESSION(STP47): Can't view Chase credit card transactions due to a crash i...
Ryosuke Niwa
Reported 2018-01-15 21:56:33 PST
Viewing the transaction history of a credit card on chase.com is impossible due to the following crash on STP47. I was not reproducing this issue on STP46. Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.WebCore 0x0000000108ce4461 WebCore::RenderTreeBuilder::insertChild(WebCore::RenderElement&, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderObject*) + 1025 1 com.apple.WebCore 0x0000000107a55596 WebCore::RenderButton::setText(WTF::String const&) + 342 2 com.apple.WebCore 0x0000000107a17121 WebCore::RenderButton::updateFromElement() + 65 3 com.apple.WebCore 0x0000000108cf99aa WebCore::Style::PostResolutionCallbackDisabler::~PostResolutionCallbackDisabler() + 74 4 com.apple.WebCore 0x00000001085ce1be WebCore::Document::resolveStyle(WebCore::Document::ResolveStyleType) + 1198 5 com.apple.WebCore 0x000000010793e73a WebCore::Document::updateStyleIfNeeded() + 282 6 com.apple.WebCore 0x0000000108972a21 WebCore::CSSAnimationControllerPrivate::updateAnimations(WebCore::SetChanged) + 433 7 com.apple.WebCore 0x0000000108972b5c WebCore::CSSAnimationControllerPrivate::updateAnimationTimer(WebCore::SetChanged) + 28 8 com.apple.WebCore 0x0000000108971b50 WebCore::CSSAnimationControllerPrivate::animationTimerFired() + 128 9 com.apple.WebCore 0x000000010791b760 WebCore::ThreadTimers::sharedTimerFiredInternal() + 176 10 com.apple.WebCore 0x000000010791b69f WebCore::timerFired(__CFRunLoopTimer*, void*) + 31 11 com.apple.CoreFoundation 0x00007fff94feee04 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20 12 com.apple.CoreFoundation 0x00007fff94feea93 __CFRunLoopDoTimer + 1075 13 com.apple.CoreFoundation 0x00007fff94fee5ea __CFRunLoopDoTimers + 298 14 com.apple.CoreFoundation 0x00007fff94fe5fc1 __CFRunLoopRun + 2081 15 com.apple.CoreFoundation 0x00007fff94fe5544 CFRunLoopRunSpecific + 420 16 com.apple.HIToolbox 0x00007fff94544ebc RunCurrentEventLoopInMode + 240 17 com.apple.HIToolbox 0x00007fff94544cf1 ReceiveNextEventCommon + 432 18 com.apple.HIToolbox 0x00007fff94544b26 _BlockUntilNextEventMatchingListInModeWithFilter + 71 19 com.apple.AppKit 0x00007fff92adba54 _DPSNextEvent + 1120 20 com.apple.AppKit 0x00007fff932577ee -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 2796 21 com.apple.AppKit 0x00007fff92ad03db -[NSApplication run] + 926 22 com.apple.AppKit 0x00007fff92a9ae0e NSApplicationMain + 1237 23 libxpc.dylib 0x00007fffaaf878c7 _xpc_objc_main + 775 24 libxpc.dylib 0x00007fffaaf862e4 xpc_main + 494 25 com.apple.WebKit.WebContent 0x00000001063f8695 0x1063f7000 + 5781 26 libdyld.dylib 0x0000000107554235 start + 1
Attachments
Add attachment proposed patch, testcase, etc.
alan
Comment 1 2018-01-15 21:59:02 PST
fixed in r226797
Note You need to log in before you can comment on or make changes to this bug.