190974 – Layout Test imported/blink/fast/forms/datalist/slider-appearance-with-ticks-crash.html is Crashing on macOS WK2 and iOS WK2

NEW 190974

Layout Test imported/blink/fast/forms/datalist/slider-appearance-with-ticks-crash.html is Crashing on macOS WK2 and iOS WK2

https://bugs.webkit.org/show_bug.cgi?id=190974

Summary Layout Test imported/blink/fast/forms/datalist/slider-appearance-with-ticks-c...

Dawei Fenton (:realdawei)

Reported 2018-10-26 15:04:23 PDT

Created attachment 353207 [details] Crash Log The following layout test is Crashing on [insert platform] imported/blink/fast/forms/datalist/slider-appearance-with-ticks-crash.html Flakiness Dashboard: https://webkit-test-results.webkit.org/dashboards/flakiness_dashboard.html#showAllRuns=true&tests=imported%2Fblink%2Ffast%2Fforms%2Fdatalist%2Fslider-appearance-with-ticks-crash.html Crashed Thread: 0 Dispatch queue: com.apple.main-thread Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000015 Exception Note: EXC_CORPSE_NOTIFY Termination Signal: Segmentation fault: 11 Termination Reason: Namespace SIGNAL, Code 0xb Terminating Process: exc handler [19209] VM Regions Near 0x15: --> __TEXT 000000010e991000-000000010e993000 [ 8K] r-x/rwx SM=COW /Volumes/VOLUME/*/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent.Development Application Specific Information: CRASHING TEST: imported/blink/fast/forms/datalist/slider-appearance-with-ticks-crash.html Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.WebCore 0x00000001112f51a9 WebCore::RenderTheme::paintSliderTicks(WebCore::RenderObject const&, WebCore::PaintInfo const&, WebCore::IntRect const&) + 329 (RenderTheme.cpp:1088) 1 com.apple.WebCore 0x0000000110291369 WebCore::RenderThemeMac::paintSliderTrack(WebCore::RenderObject const&, WebCore::PaintInfo const&, WebCore::IntRect const&) + 281 (RenderThemeMac.mm:1852) 2 com.apple.WebCore 0x00000001112f3357 WebCore::RenderTheme::paint(WebCore::RenderBox const&, WebCore::ControlStates&, WebCore::PaintInfo const&, WebCore::LayoutRect const&) + 887 (RenderTheme.cpp:362) 3 com.apple.WebCore 0x00000001111d656f WebCore::RenderBox::paintBoxDecorations(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 943 (RenderBox.cpp:1290) 4 com.apple.WebCore 0x000000011119e80b WebCore::RenderBlock::paintObject(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 75 (RenderBlock.cpp:1228) 5 com.apple.WebCore 0x000000011119e174 WebCore::RenderBlock::paint(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 244 (RenderBlock.cpp:1105) 6 com.apple.WebCore 0x000000011120cc04 WebCore::RenderElement::paintAsInlineBlock(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 116 (RenderElement.cpp:999) 7 com.apple.WebCore 0x0000000111185b05 WebCore::InlineElementBox::paint(WebCore::PaintInfo&, WebCore::LayoutPoint const&, WebCore::LayoutUnit, WebCore::LayoutUnit) + 117 (InlineElementBox.cpp:82) 8 com.apple.WebCore 0x000000011118bbf0 WebCore::InlineFlowBox::paint(WebCore::PaintInfo&, WebCore::LayoutPoint const&, WebCore::LayoutUnit, WebCore::LayoutUnit) + 1040 9 com.apple.WebCore 0x0000000111309002 WebCore::RootInlineBox::paint(WebCore::PaintInfo&, WebCore::LayoutPoint const&, WebCore::LayoutUnit, WebCore::LayoutUnit) + 34 (RootInlineBox.cpp:169) 10 com.apple.WebCore 0x00000001112875d6 WebCore::RenderLineBoxList::paint(WebCore::RenderBoxModelObject*, WebCore::PaintInfo&, WebCore::LayoutPoint const&) const + 902 (RenderLineBoxList.cpp:260) 11 com.apple.WebCore 0x000000011119e9f5 WebCore::RenderBlock::paintObject(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 565 (RenderBlock.cpp:1125) 12 com.apple.WebCore 0x000000011119e174 WebCore::RenderBlock::paint(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 244 (RenderBlock.cpp:1105) 13 com.apple.WebCore 0x000000011119e5a1 WebCore::RenderBlock::paintChild(WebCore::RenderBox&, WebCore::PaintInfo&, WebCore::LayoutPoint const&, WebCore::PaintInfo&, bool, WebCore::RenderBlock::PaintBlockType) + 641 (RenderBlock.cpp:1185) 14 com.apple.WebCore 0x000000011119e2ef WebCore::RenderBlock::paintChildren(WebCore::PaintInfo&, WebCore::LayoutPoint const&, WebCore::PaintInfo&, bool) + 95 (RenderBlock.cpp:1145) 15 com.apple.WebCore 0x000000011119ea18 WebCore::RenderBlock::paintObject(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 600 (RenderBlock.cpp:1265) 16 com.apple.WebCore 0x000000011119e174 WebCore::RenderBlock::paint(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 244 (RenderBlock.cpp:1105) 17 com.apple.WebCore 0x000000011119e5a1 WebCore::RenderBlock::paintChild(WebCore::RenderBox&, WebCore::PaintInfo&, WebCore::LayoutPoint const&, WebCore::PaintInfo&, bool, WebCore::RenderBlock::PaintBlockType) + 641 (RenderBlock.cpp:1185) 18 com.apple.WebCore 0x000000011119e2ef WebCore::RenderBlock::paintChildren(WebCore::PaintInfo&, WebCore::LayoutPoint const&, WebCore::PaintInfo&, bool) + 95 (RenderBlock.cpp:1145) 19 com.apple.WebCore 0x000000011119ea18 WebCore::RenderBlock::paintObject(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 600 (RenderBlock.cpp:1265) 20 com.apple.WebCore 0x000000011119e174 WebCore::RenderBlock::paint(WebCore::PaintInfo&, WebCore::LayoutPoint const&) + 244 (RenderBlock.cpp:1105) 21 com.apple.WebCore 0x0000000111260566 WebCore::RenderLayer::paintForegroundForFragmentsWithPhase(WebCore::PaintPhase, WTF::Vector<WebCore::LayerFragment, 1ul, WTF::CrashOnOverflow, 16ul> const&, WebCore::GraphicsContext&, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::PaintBehavior>, WebCore::RenderObject*) + 406 (RenderLayer.cpp:4714) 22 com.apple.WebCore 0x000000011125e33f WebCore::RenderLayer::paintForegroundForFragments(WTF::Vector<WebCore::LayerFragment, 1ul, WTF::CrashOnOverflow, 16ul> const&, WebCore::GraphicsContext&, WebCore::GraphicsContext&, WebCore::LayoutRect const&, bool, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::PaintBehavior>, WebCore::RenderObject*) + 415 (RenderLayer.cpp:4690) 23 com.apple.WebCore 0x000000011125b43c WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::RenderLayer::PaintLayerFlag>) + 3164 (RenderLayer.cpp:4297) 24 com.apple.WebCore 0x000000011125b525 WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&, WebCore::RenderLayer::LayerPaintingInfo const&, WTF::OptionSet<WebCore::RenderLayer::PaintLayerFlag>) + 3397 (RenderLayer.cpp:4310) 25 com.apple.WebCore 0x0000000111271a70 WebCore::RenderLayerBacking::paintIntoLayer(WebCore::GraphicsLayer const*, WebCore::GraphicsContext&, WebCore::IntRect const&, WTF::OptionSet<WebCore::PaintBehavior>, unsigned char) + 592 (RenderLayerBacking.cpp:2525) 26 com.apple.WebCore 0x0000000111271dff WebCore::RenderLayerBacking::paintContents(WebCore::GraphicsLayer const*, WebCore::GraphicsContext&, unsigned char, WebCore::FloatRect const&, unsigned int) + 639 (RenderLayerBacking.cpp:2576) 27 com.apple.WebCore 0x0000000111048b08 WebCore::GraphicsLayer::paintGraphicsLayerContents(WebCore::GraphicsContext&, WebCore::FloatRect const&, unsigned int) + 152 (GraphicsLayer.cpp:484) 28 com.apple.WebCore 0x000000011005617a WebCore::PlatformCALayer::drawLayerContents(CGContext*, WebCore::PlatformCALayer*, WTF::Vector<WebCore::FloatRect, 5ul, WTF::CrashOnOverflow, 16ul>&, unsigned int) + 362 (PlatformCALayerCocoa.mm:1186) 29 com.apple.WebCore 0x0000000111092038 WebCore::TileGrid::platformCALayerPaintContents(WebCore::PlatformCALayer*, WebCore::GraphicsContext&, WebCore::FloatRect const&, unsigned int) + 200 (TileGrid.cpp:734) 30 com.apple.WebCore 0x0000000110135a6f -[WebSimpleLayer drawInContext:] + 191 31 com.apple.QuartzCore 0x00007fff3be46d4f CABackingStoreUpdate_ + 577 32 com.apple.QuartzCore 0x00007fff3bea7a5d invocation function for block in CA::Layer::display_() + 53 33 com.apple.QuartzCore 0x00007fff3be45f48 -[CALayer _display] + 1839 34 com.apple.WebCore 0x000000011013597b -[WebSimpleLayer display] + 43 (WebLayer.mm:118) 35 com.apple.QuartzCore 0x00007fff3be45474 CA::Layer::display_if_needed(CA::Transaction*) + 634 36 com.apple.QuartzCore 0x00007fff3be336cb CA::Context::commit_transaction(CA::Transaction*) + 319 37 com.apple.QuartzCore 0x00007fff3be32f9c CA::Transaction::commit() + 576 38 com.apple.WebKit 0x000000010ec8868c WebKit::TiledCoreAnimationDrawingArea::forceRepaint() + 150 (TiledCoreAnimationDrawingArea.mm:152) 39 com.apple.WebKitTestRunner.InjectedBundle 0x00000001b2799d1c WTR::InjectedBundlePage::dump() + 36 (InjectedBundlePage.cpp:897) 40 com.apple.WebKit 0x000000010ecdb5ea WebKit::InjectedBundlePageLoaderClient::didFinishLoadForFrame(WebKit::WebPage&, WebKit::WebFrame&, WTF::RefPtr<API::Object, WTF::DumbPtrTraits<API::Object> >&) + 82 (InjectedBundlePageLoaderClient.cpp:141) 41 com.apple.WebKit 0x000000010ed18190 WebKit::WebFrameLoaderClient::dispatchDidFinishLoad() + 102 (WebFrameLoaderClient.cpp:612) 42 com.apple.WebCore 0x0000000110e4115d WebCore::FrameLoader::checkLoadCompleteForThisFrame() + 2413 (FrameLoader.cpp:2512) 43 com.apple.WebCore 0x0000000110e38dab WebCore::FrameLoader::checkLoadComplete() + 427 (iterator:712) 44 com.apple.WebCore 0x0000000110e17fe1 WebCore::DocumentLoader::finishedLoading() + 689 (DocumentLoader.cpp:442) 45 com.apple.WebCore 0x0000000110ea064c WebCore::CachedResource::checkNotify() + 332 (CachedResource.cpp:348) 46 com.apple.WebCore 0x0000000110e9be42 WebCore::CachedRawResource::finishLoading(WebCore::SharedBuffer*) + 594 (CachedRawResource.cpp:121) 47 com.apple.WebCore 0x0000000110e6f6da WebCore::SubresourceLoader::didFinishLoading(WebCore::NetworkLoadMetrics const&) + 506 (SubresourceLoader.cpp:636) 48 com.apple.WebKit 0x000000010eceeef5 WebKit::WebResourceLoader::didFinishResourceLoad(WebCore::NetworkLoadMetrics const&) + 211 (WebResourceLoader.cpp:162) 49 com.apple.WebKit 0x000000010edc7915 WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&, IPC::Decoder&) + 749 (NetworkLoadMetrics.h:49) 50 com.apple.WebKit 0x000000010ece8e33 WebKit::NetworkProcessConnection::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 625 (NetworkProcessConnection.cpp:78) 51 com.apple.WebKit 0x000000010e9ab3c2 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >) + 108 (Connection.cpp:1007) 52 com.apple.WebKit 0x000000010e9aeac4 IPC::Connection::dispatchOneIncomingMessage() + 180 (Connection.cpp:1074) 53 com.apple.JavaScriptCore 0x000000011422dda7 WTF::RunLoop::performWork() + 231 (RunLoop.cpp:106) 54 com.apple.JavaScriptCore 0x000000011422e032 WTF::RunLoop::performWork(void*) + 34 (RunLoopCF.cpp:39) 55 com.apple.CoreFoundation 0x00007fff309aaf39 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17 56 com.apple.CoreFoundation 0x00007fff309aaedf __CFRunLoopDoSource0 + 108 57 com.apple.CoreFoundation 0x00007fff3098ed8c __CFRunLoopDoSources0 + 195 58 com.apple.CoreFoundation 0x00007fff3098e333 __CFRunLoopRun + 1226 59 com.apple.CoreFoundation 0x00007fff3098dc16 CFRunLoopRunSpecific + 467 60 com.apple.Foundation 0x00007fff32dd16ba -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 280 61 com.apple.Foundation 0x00007fff32dd158f -[NSRunLoop(NSRunLoop) run] + 76 62 libxpc.dylib 0x00007fff5e35dee6 _xpc_objc_main + 555 63 libxpc.dylib 0x00007fff5e35d9e5 xpc_main + 433 64 com.apple.WebKit.WebContent 0x000000010e992636 WebKit::XPCServiceMain(int, char const**) + 547 65 com.apple.WebKit.WebContent 0x000000010e9927bb main + 9 66 libdyld.dylib 0x00007fff5e1270a5 start + 1

Attachments
Crash Log (86.38 KB, text/plain) 2018-10-26 15:04 PDT, Dawei Fenton (:realdawei)	no flags	Details
View All Add attachment proposed patch, testcase, etc.

Dawei Fenton (:realdawei)

Comment 1 2018-10-26 15:05:58 PDT

Crashing on macOS WK2 and iOS WK2

Radar WebKit Bug Importer

Comment 2 2018-10-26 15:08:16 PDT

<rdar://problem/45600902>

Note You need to log in before you can comment on or make changes to this bug.

Status NEW

Resolution

Priority P2

Severity Normal

Classification Unclassified

Version Other

Hardware Unspecified

OS Unspecified

Product WebKit

Component Tools / Tests

Assignee

Nobody

Reported

2018-10-26 15:04 PDT

Modified

2018-10-26 17:00 PDT History

CC List

5 users Show

URL

Keywords InRadar

Depends on

Blocks