Bug 183385 – Invalid innerTextRenderer in RenderTextControlSingleLine::styleDidChange()

• Status: RESOLVED
• Resolution: FIXED
• Component: DOM

[alan]

frame #1: 0x0000000113a1fc24 WebCore`WebCore::RenderTextControlSingleLine::styleDidChange(this=0x0000000126000120, diff=StyleDifferenceLayout, oldStyle=0x00007ffee8a2dad8) at RenderTextControlSingleLine.cpp:233
    frame #2: 0x000000011382768b WebCore`WebCore::RenderElement::setStyle(this=0x0000000126000120, style=0x00007ffee8a2dca8, minimalStyleDifference=StyleDifferenceEqual) at RenderElement.cpp:420
    frame #3: 0x0000000113c0e1d3 WebCore`WebCore::RenderTreeUpdater::updateRendererStyle(this=0x00007ffee8a30c80, renderer=0x0000000126000120, newStyle=0x00007ffee8a2dca8, minimalStyleDifference=StyleDifferenceEqual) at RenderTreeUpdater.cpp:300
    frame #4: 0x0000000113c0dd20 WebCore`WebCore::RenderTreeUpdater::updateElementRenderer(this=0x00007ffee8a30c80, element=0x0000000123fe2e80, update=0x0000000123f6c9b8) at RenderTreeUpdater.cpp:357
    frame #5: 0x0000000113c0d14e WebCore`WebCore::RenderTreeUpdater::updateRenderTree(this=0x00007ffee8a30c80, root=0x0000000123feba90) at RenderTreeUpdater.cpp:198
    frame #6: 0x0000000113c0ca09 WebCore`WebCore::RenderTreeUpdater::commit(this=0x00007ffee8a30c80, styleUpdate=unique_ptr<const WebCore::Style::Update, std::__1::default_delete<const WebCore::Style::Update> > @ 0x00007ffee8a30c78) at RenderTreeUpdater.cpp:130
    frame #7: 0x000000011284599c WebCore`WebCore::Document::resolveStyle(this=0x0000000123f65000, type=Normal) at Document.cpp:1867
    frame #8: 0x0000000112847149 WebCore`WebCore::Document::updateStyleIfNeeded(this=0x0000000123f65000) at Document.cpp:1971
    frame #9: 0x0000000112847c00 WebCore`WebCore::Document::updateLayoutIfDimensionsOutOfDate(this=0x0000000123f65000, element=0x0000000123feba90, dimensionsCheck=HeightDimensionsCheck) at Document.cpp:2072
    frame #10: 0x00000001128e9390 WebCore`WebCore::Element::offsetHeight(this=0x0000000123feba90) at Element.cpp:842
    frame #11: 0x000000011138e15d WebCore`WebCore::jsHTMLElementOffsetHeightGetter(state=0x00007ffee8a31ce0, thisObject=0x0000000124804030, throwScope=0x00007ffee8a317c8) at JSHTMLElement.cpp:976
    frame #12: 0x000000011134bdd0 WebCore`long long WebCore::IDLAttribute<WebCore::JSHTMLElement>::get<&(state=0x00007ffee8a31ce0, thisValue=4907352112, attributeName="offsetHeight")), (WebCore::CastedThisErrorBehavior)3>(JSC::ExecState&, long long, char const*) at JSDOMAttribute.h:69
    frame #13: 0x000000011134bcdb WebCore`WebCore::jsHTMLElementOffsetHeight(state=0x00007ffee8a31ce0, thisValue=4907352112, (null)=PropertyName @ 0x00007ffee8a31838) at JSHTMLElement.cpp:982
    frame #14: 0x000000011f9942bd JavaScriptCore`JSC::PropertySlot::customGetter(this=0x00007ffee8a31b80, exec=0x00007ffee8a31ce0, propertyName=PropertyName @ 0x00007ffee8a31930) const at PropertySlot.cpp:50
    frame #15: 0x000000011e8109c2 JavaScriptCore`JSC::PropertySlot::getValue(this=0x00007ffee8a31b80, exec=0x00007ffee8a31ce0, propertyName=PropertyName @ 0x00007ffee8a31980) const at PropertySlot.h:408
    frame #16: 0x000000011effbf1f JavaScriptCore`JSC::JSValue::get(this=0x00007ffee8a31bd0, exec=0x00007ffee8a31ce0, propertyName=PropertyName @ 0x00007ffee8a31a50, slot=0x00007ffee8a31b80) const at JSCJSValueInlines.h:812
    frame #17: 0x000000011f5cf9a4 JavaScriptCore`::llint_slow_path_get_by_id(exec=0x00007ffee8a31ce0, pc=0x0000000123fc7910) at LLIntSlowPaths.cpp:660
    frame #18: 0x000000011e7dcb0d JavaScriptCore`llint_entry at LowLevelInterpreter64.asm:58
    frame #19: 0x000000011e7d9402 JavaScriptCore`vmEntryToJavaScript at LowLevelInterpreter64.asm:257
    frame #20: 0x000000011f565b8e JavaScriptCore`JSC::JITCode::execute(this=0x0000000125fefaa0, vm=0x0000000124500000, protoCallFrame=0x00007ffee8a31eb8) at JITCode.cpp:81
    frame #21: 0x000000011f50b6b5 JavaScriptCore`JSC::Interpreter::executeCall(this=0x0000000123ffc338, callFrame=0x00000001248dc058, function=0x0000000124834000, callType=JS, callData=0x00007ffee8a32500, thisValue=JSValue @ 0x00007ffee8a31fe0, args=0x00007ffee8a323d0) at Interpreter.cpp:1028
    frame #22: 0x000000011f7745ea JavaScriptCore`JSC::call(exec=0x00000001248dc058, functionObject=JSValue @ 0x00007ffee8a32060, callType=JS, callData=0x00007ffee8a32500, thisValue=JSValue @ 0x00007ffee8a32058, args=0x00007ffee8a323d0) at CallData.cpp:41
    frame #23: 0x000000011f7746c9 JavaScriptCore`JSC::call(exec=0x00000001248dc058, functionObject=JSValue @ 0x00007ffee8a32150, callType=JS, callData=0x00007ffee8a32500, thisValue=JSValue @ 0x00007ffee8a32148, args=0x00007ffee8a323d0, returnedException=0x00007ffee8a323f8) at CallData.cpp:48
    frame #24: 0x000000011f77496d JavaScriptCore`JSC::profiledCall(exec=0x00000001248dc058, reason=Other, functionObject=JSValue @ 0x00007ffee8a321e0, callType=JS, callData=0x00007ffee8a32500, thisValue=JSValue @ 0x00007ffee8a321d8, args=0x00007ffee8a323d0, returnedException=0x00007ffee8a323f8) at CallData.cpp:67
    frame #25: 0x00000001123689bb WebCore`WebCore::JSMainThreadExecState::profiledCall(exec=0x00000001248dc058, reason=Other, functionObject=JSValue @ 0x00007ffee8a32270, callType=JS, callData=0x00007ffee8a32500, thisValue=JSValue @ 0x00007ffee8a32268, args=0x00007ffee8a323d0, returnedException=0x00007ffee8a323f8) at JSMainThreadExecState.h:72
    frame #26: 0x00000001123a69c2 WebCore`WebCore::JSEventListener::handleEvent(this=0x0000000123fb3d90, scriptExecutionContext=0x0000000123f65000, event=0x0000000125ff0800) at JSEventListener.cpp:169
    frame #27: 0x0000000112915792 WebCore`WebCore::EventTarget::fireEventListeners(this=0x0000000123fe2e80, event=0x0000000125ff0800, listeners={ size = 1, capacity = 0 }) at EventTarget.cpp:290
    frame #28: 0x000000011290cc6a WebCore`WebCore::EventTarget::fireEventListeners(this=0x0000000123fe2e80, event=0x0000000125ff0800) at EventTarget.cpp:232
    frame #29: 0x0000000112970524 WebCore`WebCore::Node::handleLocalEvents(this=0x0000000123fe2e80, event=0x0000000125ff0800) at Node.cpp:2317
    frame #30: 0x000000011290cafd WebCore`WebCore::EventContext::handleLocalEvents(this=0x0000000123f0bfe0, event=0x0000000125ff0800) const at EventContext.cpp:54
    frame #31: 0x000000011290d836 WebCore`WebCore::dispatchEventInDOM(event=0x0000000125ff0800, path=0x00007ffee8a328f0) at EventDispatcher.cpp:91
    frame #32: 0x000000011290d361 WebCore`WebCore::EventDispatcher::dispatchEvent(node=0x0000000123fe2e80, event=0x0000000125ff0800) at EventDispatcher.cpp:159
    frame #33: 0x000000011297057d WebCore`WebCore::Node::dispatchEvent(this=0x0000000123fe2e80, event=0x0000000125ff0800) at Node.cpp:2327
    frame #34: 0x000000011299ecb4 WebCore`WebCore::ScopedEventQueue::dispatchEvent(this=0x00000001154e21b0, event=0x0000000125ff0800) const at ScopedEventQueue.cpp:57
    frame #35: 0x000000011299ec5f WebCore`WebCore::ScopedEventQueue::enqueueEvent(this=0x00000001154e21b0, event=0x00007ffee8a32ae0) at ScopedEventQueue.cpp:52
    frame #36: 0x000000011290d029 WebCore`WebCore::EventDispatcher::dispatchScopedEvent(node=0x0000000123fe2e80, event=0x0000000125ff0800) at EventDispatcher.cpp:52
    frame #37: 0x000000011297054d WebCore`WebCore::Node::dispatchScopedEvent(this=0x0000000123fe2e80, event=0x0000000125ff0800) at Node.cpp:2322
    frame #38: 0x00000001129706d5 WebCore`WebCore::Node::dispatchSubtreeModifiedEvent(this=0x0000000123fe2e80) at Node.cpp:2343
    frame #39: 0x00000001128f32a8 WebCore`WebCore::Element::didAddAttribute(this=0x0000000123fe2e80, name=0x00000001154f0cc8, value={ length = 6, contents = 'foobar' }) at Element.cpp:3325
    frame #40: 0x00000001128f31b3 WebCore`WebCore::Element::addAttributeInternal(this=0x0000000123fe2e80, name=0x00000001154f0cc8, value={ length = 6, contents = 'foobar' }, inSynchronizationOfLazyAttribute=NotInSynchronizationOfLazyAttribute) at Element.cpp:2354
    frame #41: 0x00000001128ec371 WebCore`WebCore::Element::setAttributeInternal(this=0x0000000123fe2e80, index=4294967295, name=0x00000001154f0cc8, newValue={ length = 6, contents = 'foobar' }, inSynchronizationOfLazyAttribute=NotInSynchronizationOfLazyAttribute) at Element.cpp:1314
    frame #42: 0x00000001128ec515 WebCore`WebCore::Element::setAttributeWithoutSynchronization(this=0x0000000123fe2e80, name=0x00000001154f0cc8, value={ length = 6, contents = 'foobar' }) at Element.cpp:1296
    frame #43: 0x0000000112bc56a3 WebCore`WebCore::HTMLInputElement::updateType(this=0x0000000123fe2e80) at HTMLInputElement.cpp:509
    frame #44: 0x0000000112bc6b49 WebCore`WebCore::HTMLInputElement::parseAttribute(this=0x0000000123fe2e80, name=0x00000001154f0c88, value={ length = 6, contents = 'button' }) at HTMLInputElement.cpp:694
    frame #45: 0x00000001128ec927 WebCore`WebCore::Element::attributeChanged(this=0x0000000123fe2e80, name=0x00000001154f0c88, oldValue={ length = 0, contents = '' }, newValue={ length = 6, contents = 'button' }, (null)=ModifiedDirectly) at Element.cpp:1377
    frame #46: 0x00000001129ec5ef WebCore`WebCore::StyledElement::attributeChanged(this=0x0000000123fe2e80, name=0x00000001154f0c88, oldValue={ length = 0, contents = '' }, newValue={ length = 6, contents = 'button' }, reason=ModifiedDirectly) at StyledElement.cpp:90
    frame #47: 0x00000001128f326f WebCore`WebCore::Element::didAddAttribute(this=0x0000000123fe2e80, name=0x00000001154f0c88, value={ length = 6, contents = 'button' }) at Element.cpp:3323
    frame #48: 0x00000001128f31b3 WebCore`WebCore::Element::addAttributeInternal(this=0x0000000123fe2e80, name=0x00000001154f0c88, value={ length = 6, contents = 'button' }, inSynchronizationOfLazyAttribute=NotInSynchronizationOfLazyAttribute) at Element.cpp:2354
    frame #49: 0x00000001128ec371 WebCore`WebCore::Element::setAttributeInternal(this=0x0000000123fe2e80, index=4294967295, name=0x00000001154f0c88, newValue={ length = 6, contents = 'button' }, inSynchronizationOfLazyAttribute=NotInSynchronizationOfLazyAttribute) at Element.cpp:1314
    frame #50: 0x00000001128ec515 WebCore`WebCore::Element::setAttributeWithoutSynchronization(this=0x0000000123fe2e80, name=0x00000001154f0c88, value={ length = 6, contents = 'button' }) at Element.cpp:1296
    frame #51: 0x0000000112bc50d7 WebCore`WebCore::HTMLInputElement::setType(this=0x0000000123fe2e80, type={ length = 6, contents = 'button' }) at HTMLInputElement.cpp:480
    frame #52: 0x00000001113f9089 WebCore`WebCore::setJSHTMLInputElementTypeSetter(this=0x00007ffee8a33738)::'lambda'()::operator()() const at JSHTMLInputElement.cpp:1318
    frame #53: 0x00000001113f903d WebCore`std::__1::enable_if<std::is_same<void, decltype(fp1())>::value, void>::type WebCore::AttributeSetter::call<WebCore::setJSHTMLInputElementTypeSetter((null)=0x00007ffee8a34140, (null)=0x00007ffee8a33808, functor=0x00007ffee8a33738)::'lambda'()>(JSC::ExecState&, JSC::ThrowScope&, WebCore::setJSHTMLInputElementTypeSetter(JSC::ExecState&, WebCore::JSHTMLInputElement&, JSC::JSValue, JSC::ThrowScope&)::'lambda'()&&) at JSDOMAttribute.h:97
    frame #54: 0x00000001113f8ff0 WebCore`WebCore::setJSHTMLInputElementTypeSetter(state=0x00007ffee8a34140, thisObject=0x0000000124804000, value=JSValue @ 0x00007ffee8a33780, throwScope=0x00007ffee8a33808) at JSHTMLInputElement.cpp:1317
    frame #55: 0x00000001113e59d8 WebCore`bool WebCore::IDLAttribute<WebCore::JSHTMLInputElement>::set<&(state=0x00007ffee8a34140, thisValue=4907352064, encodedValue=4907647072, attributeName="type")), (WebCore::CastedThisErrorBehavior)0>(JSC::ExecState&, long long, long long, char const*) at JSDOMAttribute.h:50
    frame #56: 0x00000001113e589c WebCore`WebCore::setJSHTMLInputElementType(state=0x00007ffee8a34140, thisValue=4907352064, encodedValue=4907647072) at JSHTMLInputElement.cpp:1325
    frame #57: 0x000000011f7c713d JavaScriptCore`JSC::callCustomSetter(exec=0x00007ffee8a34140, setter=(WebCore`WebCore::setJSHTMLInputElementType(JSC::ExecState*, long long, long long) at JSHTMLInputElement.cpp:1324), isAccessor=true, thisValue=JSValue @ 0x00007ffee8a338f0, value=JSValue @ 0x00007ffee8a338e8)(JSC::ExecState*, long long, long long), bool, JSC::JSValue, JSC::JSValue) at CustomGetterSetter.cpp:41
    frame #58: 0x000000011f7c7213 JavaScriptCore`JSC::callCustomSetter(exec=0x00007ffee8a34140, customGetterSetter=JSValue @ 0x00007ffee8a33960, isAccessor=true, base=0x0000000124838060, thisValue=JSValue @ 0x00007ffee8a33958, value=JSValue @ 0x00007ffee8a33950) at CustomGetterSetter.cpp:58
    frame #59: 0x000000011f8c7550 JavaScriptCore`JSC::JSObject::putInlineSlow(this=0x0000000124804000, exec=0x00007ffee8a34140, propertyName=PropertyName @ 0x00007ffee8a33bb0, value=JSValue @ 0x00007ffee8a33ba8, slot=0x00007ffee8a33fe8) at JSObject.cpp:794
    frame #60: 0x000000011f0775a0 JavaScriptCore`JSC::JSObject::putInlineForJSObject(cell=0x0000000124804000, exec=0x00007ffee8a34140, propertyName=PropertyName @ 0x00007ffee8a33d40, value=JSValue @ 0x00007ffee8a33d38, slot=0x00007ffee8a33fe8) at JSObjectInlines.h:229
    frame #61: 0x000000011f0770c8 JavaScriptCore`JSC::JSCell::putInline(this=0x0000000124804000, exec=0x00007ffee8a34140, propertyName=PropertyName @ 0x00007ffee8a33db0, value=JSValue @ 0x00007ffee8a33da8, slot=0x00007ffee8a33fe8) at JSCellInlines.h:375
    frame #62: 0x000000011f078933 JavaScriptCore`JSC::JSValue::putInline(this=0x00007ffee8a34010, exec=0x00007ffee8a34140, propertyName=PropertyName @ 0x00007ffee8a33e20, value=JSValue @ 0x00007ffee8a33e18, slot=0x00007ffee8a33fe8) at JSCJSValueInlines.h:911
    frame #63: 0x000000011f5d0b62 JavaScriptCore`::llint_slow_path_put_by_id(exec=0x00007ffee8a34140, pc=0x00000001244fb150) at LLIntSlowPaths.cpp:749
    frame #64: 0x000000011e7dd1b1 JavaScriptCore`llint_entry at LowLevelInterpreter64.asm:58
    frame #65: 0x000000011e7d9402 JavaScriptCore`vmEntryToJavaScript at LowLevelInterpreter64.asm:257
    frame #66: 0x000000011f565b8e JavaScriptCore`JSC::JITCode::execute(this=0x0000000123f26758, vm=0x0000000124500000, protoCallFrame=0x00007ffee8a34448) at JITCode.cpp:81
    frame #67: 0x000000011f50a7a3 JavaScriptCore`JSC::Interpreter::executeProgram(this=0x0000000123ffc338, source=0x00007ffee8a35cf8, callFrame=0x00000001248dc058, thisObj=0x00000001248f4000) at Interpreter.cpp:969
    frame #68: 0x000000011f7bf127 JavaScriptCore`JSC::evaluate(exec=0x00000001248dc058, source=0x00007ffee8a35cf8, thisValue=JSValue @ 0x00007ffee8a359c0, returnedException=0x00007ffee8a35af8) at Completion.cpp:103
    frame #69: 0x000000011f7bf2b0 JavaScriptCore`JSC::profiledEvaluate(exec=0x00000001248dc058, reason=Other, source=0x00007ffee8a35cf8, thisValue=JSValue @ 0x00007ffee8a35a30, returnedException=0x00007ffee8a35af8) at Completion.cpp:118
    frame #70: 0x00000001123e338b WebCore`WebCore::JSMainThreadExecState::profiledEvaluate(exec=0x00000001248dc058, reason=Other, source=0x00007ffee8a35cf8, thisValue=JSValue @ 0x00007ffee8a35a90, returnedException=0x00007ffee8a35af8) at JSMainThreadExecState.h:78
    frame #71: 0x00000001123e3178 WebCore`WebCore::ScriptController::evaluateInWorld(this=0x0000000123ff2f68, sourceCode=0x00007ffee8a35cf0, world=0x0000000123feb208, exceptionDetails=0x0000000000000000) at ScriptController.cpp:177
    frame #72: 0x00000001123e346d WebCore`WebCore::ScriptController::evaluate(this=0x0000000123ff2f68, sourceCode=0x00007ffee8a35cf0, exceptionDetails=0x0000000000000000) at ScriptController.cpp:193
    frame #73: 0x00000001129a150d WebCore`WebCore::ScriptElement::executeClassicScript(this=0x0000000123ff95e8, sourceCode=0x00007ffee8a35cf0) at ScriptElement.cpp:387
    frame #74: 0x000000011299f9e9 WebCore`WebCore::ScriptElement::prepareScript(this=0x0000000123ff95e8, scriptStartPosition=0x00007ffee8a36000, supportLegacyTypes=DisallowLegacyTypeInTypeAttribute) at ScriptElement.cpp:267
    frame #75: 0x0000000112d29900 WebCore`WebCore::HTMLScriptRunner::runScript(this=0x0000000123ff7730, scriptElement=0x0000000123ff95e8, scriptStartPosition=0x00007ffee8a36000) at HTMLScriptRunner.cpp:250
    frame #76: 0x0000000112d2976f WebCore`WebCore::HTMLScriptRunner::execute(this=0x0000000123ff7730, element=0x00007ffee8a35ff0, scriptStartPosition=0x00007ffee8a36000) at HTMLScriptRunner.cpp:140
    frame #77: 0x0000000112d0bff5 WebCore`WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder(this=0x0000000123f64000) at HTMLDocumentParser.cpp:212
    frame #78: 0x0000000112d0c4b3 WebCore`WebCore::HTMLDocumentParser::pumpTokenizerLoop(this=0x0000000123f64000, mode=AllowYield, parsingFragment=false, session=0x00007ffee8a363e8) at HTMLDocumentParser.cpp:231
    frame #79: 0x0000000112d0b1f8 WebCore`WebCore::HTMLDocumentParser::pumpTokenizer(this=0x0000000123f64000, mode=AllowYield) at HTMLDocumentParser.cpp:281
    frame #80: 0x0000000112d0ad6b WebCore`WebCore::HTMLDocumentParser::pumpTokenizerIfPossible(this=0x0000000123f64000, mode=AllowYield) at HTMLDocumentParser.cpp:172
    frame #81: 0x0000000112d0d7aa WebCore`WebCore::HTMLDocumentParser::append(this=0x0000000123f64000, inputSource=0x00007ffee8a36908) at HTMLDocumentParser.cpp:395
    frame #82: 0x000000011282b182 WebCore`WebCore::DecodedDataDocumentParser::flush(this=0x0000000123f64000, writer=0x00000001246f36b0) at DecodedDataDocumentParser.cpp:60
    frame #83: 0x0000000112f41e7c WebCore`WebCore::DocumentWriter::end(this=0x00000001246f36b0) at DocumentWriter.cpp:274
    frame #84: 0x0000000112f0554f WebCore`WebCore::DocumentLoader::finishedLoading(this=0x00000001246f3600) at DocumentLoader.cpp:429
    frame #85: 0x0000000112f052ed WebCore`WebCore::DocumentLoader::notifyFinished(this=0x00000001246f3600, resource=0x0000000123f69000) at DocumentLoader.cpp:379
    frame #86: 0x0000000112f056dc WebCore`non-virtual thunk to WebCore::DocumentLoader::notifyFinished(this=0x00000001246f3600, resource=0x0000000123f69000) at DocumentLoader.cpp:0
    frame #87: 0x000000011302f52d WebCore`WebCore::CachedResource::checkNotify(this=0x0000000123f69000) at CachedResource.cpp:347
    frame #88: 0x0000000113021ee1 WebCore`WebCore::CachedResource::finishLoading(this=0x0000000123f69000, (null)=0x0000000123fa4340) at CachedResource.cpp:363
    frame #89: 0x000000011302c396 WebCore`WebCore::CachedRawResource::finishLoading(this=0x0000000123f69000, data=0x0000000123fa4340) at CachedRawResource.cpp:117
    frame #90: 0x0000000112fc6429 WebCore`WebCore::SubresourceLoader::didFinishLoading(this=0x0000000123fb9000, networkLoadMetrics=0x00007ffee8a36d60) at SubresourceLoader.cpp:619
    frame #91: 0x0000000112fb2cf5 WebCore`WebCore::ResourceLoader::didFinishLoading(this=0x0000000123fb9000, (null)=0x0000000123f6d348) at ResourceLoader.cpp:680
    frame #92: 0x00000001116eb9d4 WebCore`-[WebCoreResourceHandleAsOperationQueueDelegate connectionDidFinishLoading:]::$_7::operator(this=0x0000000123f66008)() at WebCoreResourceHandleAsOperationQueueDelegate.mm:320
    frame #93: 0x00000001116eb8b9 WebCore`WTF::Function<void ()>::CallableWrapper<-[WebCoreResourceHandleAsOperationQueueDelegate connectionDidFinishLoading:]::$_7>::call(this=0x0000000123f66000) at Function.h:101
    frame #94: 0x000000011fcd029b JavaScriptCore`WTF::Function<void ()>::operator(this=0x00007ffee8a36f80)() const at Function.h:56
    frame #95: 0x000000011fcf346b JavaScriptCore`WTF::dispatchFunctionsFromMainThread() at MainThread.cpp:129
    frame #96: 0x000000011fcf60f5 JavaScriptCore`::-[JSWTFMainThreadCaller call](self=0x00007fbee3026e40, _cmd="call") at MainThreadMac.mm:55
    frame #97: 0x00007fff4b1c42b5 Foundation`__NSThreadPerformPerform + 334
    frame #98: 0x00007fff4909ba61 CoreFoundation`__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
    frame #99: 0x00007fff4915547c CoreFoundation`__CFRunLoopDoSource0 + 108
    frame #100: 0x00007fff4907e4c0 CoreFoundation`__CFRunLoopDoSources0 + 208
    frame #101: 0x00007fff4907d93d CoreFoundation`__CFRunLoopRun + 1293
    frame #102: 0x00007fff4907d1a3 CoreFoundation`CFRunLoopRunSpecific + 483
    frame #103: 0x00007fff48366d66 HIToolbox`RunCurrentEventLoopInMode + 286
    frame #104: 0x00007fff48366ad6 HIToolbox`ReceiveNextEventCommon + 613
    frame #105: 0x00007fff48366854 HIToolbox`_BlockUntilNextEventMatchingListInModeWithFilter + 64
    frame #106: 0x00007fff465ebb63 AppKit`_DPSNextEvent + 2085
    frame #107: 0x00007fff46d81eb0 AppKit`-[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 3044
    frame #108: 0x00007fff465e0975 AppKit`-[NSApplication run] + 764
    frame #109: 0x00007fff465afb4e AppKit`NSApplicationMain + 804
    frame #110: 0x00000001071cc119 MiniBrowser`main(argc=1, argv=0x00007ffee8a38780) at main.m:32
    frame #111: 0x00007fff7153c015 libdyld.dylib`start + 1

[alan]

<rdar://problem/38085397>

[alan]

Created attachment 335151 [details]
Patch

[alan]

Not sure if changing the order here has any side effect.

[WebKit Commit Bot]

Comment on attachment 335151 [details]
Patch

Clearing flags on attachment: 335151

Committed r229393: <https://trac.webkit.org/changeset/229393>

[WebKit Commit Bot]

All reviewed patches have been landed.  Closing bug.