Bug 31429 - crash when a transition is performed on a transform in GC
Summary: crash when a transition is performed on a transform in GC
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: CSS (show other bugs)
Version: 420+
Hardware: Macintosh OS X 10.6
: P2 Normal
Assignee: Simon Fraser (smfr)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-11-12 13:11 PST by Isaiah
Modified: 2009-11-12 16:45 PST (History)
2 users (show)

See Also:


Attachments
a project that demonstrates this crash. (2.35 MB, application/zip)
2009-11-12 13:11 PST, Isaiah
no flags Details
Crash log (29.59 KB, text/plain)
2009-11-12 14:43 PST, Mark Rowe (bdash)
no flags Details
Patch (1.68 KB, patch)
2009-11-12 16:22 PST, Simon Fraser (smfr)
darin: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Isaiah 2009-11-12 13:11:57 PST
Created attachment 43092 [details]
a project that demonstrates this crash.

Crash when a CSS transition is run on a CSS transform in a GC supported or GC required build.
Comment 1 Mark Rowe (bdash) 2009-11-12 14:43:57 PST
Created attachment 43101 [details]
Crash log

Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   com.apple.CoreFoundation      	0x00007fff8399a788 CFRetain + 200
1   com.apple.QuartzCore          	0x00007fff81c01a98 -[CALayer setSublayers:] + 486
2   com.apple.WebCore             	0x0000000100acfcc1 WebCore::GraphicsLayerCA::updateSublayerList() + 433 (GraphicsLayerCA.mm:894)
3   com.apple.WebCore             	0x0000000100ad61e8 WebCore::GraphicsLayerCA::commitLayerChanges() + 904 (GraphicsLayerCA.mm:805)
Comment 2 Simon Fraser (smfr) 2009-11-12 16:13:04 PST
The workaround is to turn off GC in your app, for now.
Comment 3 Simon Fraser (smfr) 2009-11-12 16:13:18 PST
<rdar://problem/7390716>
Comment 4 Simon Fraser (smfr) 2009-11-12 16:22:09 PST
Created attachment 43113 [details]
Patch
Comment 5 Darin Adler 2009-11-12 16:33:19 PST
Comment on attachment 43113 [details]
Patch

I think it would be nice to be a little more explicit about what the bug is in the comment. Specifically, say that setSublayers:nil causes a crash.
Comment 6 Simon Fraser (smfr) 2009-11-12 16:45:11 PST
http://trac.webkit.org/changeset/50918