RESOLVED FIXED 45361
Assertion failure (m_refCount > 0): RenderStyle 
https://bugs.webkit.org/show_bug.cgi?id=45361
Summary Assertion failure (m_refCount > 0): RenderStyle
Ryosuke Niwa
Reported 2010-09-07 19:47:35 PDT
While investigating a crash for Netflix (http://crbug.com/40791), I encountered an assertion failure: m_refCount had an insane value of -21246 so this might be caused by some JSC bug. #0 0x1015698d8 in WTF::RefCountedBase::derefBase at RefCounted.h:83 #1 0x10147722f in WTF::RefCounted<WebCore::RenderStyle>::deref at RefCounted.h:138 #2 0x10156ae45 in WTF::derefIfNotNull<WebCore::RenderStyle> at PassRefPtr.h:58 #3 0x10161b658 in WTF::RefPtr<WebCore::RenderStyle>::~RefPtr at RefPtr.h:58 #4 0x101df3d98 in WebCore::RenderObject::~RenderObject at RenderObject.cpp:232 #5 0x101e469a4 in WebCore::RenderText::~RenderText at RenderText.cpp:122 #6 0x101decb61 in WebCore::RenderObject::arenaDelete at RenderObject.cpp:2204 #7 0x101decd24 in WebCore::RenderObject::destroy at RenderObject.cpp:2177 #8 0x101e4663c in WebCore::RenderText::destroy at RenderText.cpp:190 #9 0x101ccc257 in WebCore::Node::detach at Node.cpp:1220 #10 0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708 #11 0x101790817 in WebCore::Element::detach at Element.cpp:842 #12 0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708 #13 0x101790817 in WebCore::Element::detach at Element.cpp:842 #14 0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708 #15 0x101790817 in WebCore::Element::detach at Element.cpp:842 #16 0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708 #17 0x101790817 in WebCore::Element::detach at Element.cpp:842 #18 0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708 #19 0x101790817 in WebCore::Element::detach at Element.cpp:842 #20 0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708 #21 0x101790817 in WebCore::Element::detach at Element.cpp:842 #22 0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708 #23 0x101790817 in WebCore::Element::detach at Element.cpp:842 #24 0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708 #25 0x101790817 in WebCore::Element::detach at Element.cpp:842 #26 0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708 #27 0x101790817 in WebCore::Element::detach at Element.cpp:842 #28 0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708 #29 0x101790817 in WebCore::Element::detach at Element.cpp:842 #30 0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708 #31 0x101790817 in WebCore::Element::detach at Element.cpp:842 #32 0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708 #33 0x101790817 in WebCore::Element::detach at Element.cpp:842 #34 0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708 #35 0x101790817 in WebCore::Element::detach at Element.cpp:842 #36 0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708 #37 0x101790817 in WebCore::Element::detach at Element.cpp:842 #38 0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708 #39 0x101673312 in WebCore::Document::detach at Document.cpp:1727 #40 0x1017eac27 in WebCore::Frame::setView at Frame.cpp:238 #41 0x100ef9cc6 in WebFrameLoaderClient::transitionToCommittedForNewPage at WebFrameLoaderClient.mm:1212 #42 0x1017f9f9e in WebCore::FrameLoader::transitionToCommitted at FrameLoader.cpp:1972 #43 0x1017fa544 in WebCore::FrameLoader::commitProvisionalLoad at FrameLoader.cpp:1851 #44 0x1016a1d1d in WebCore::DocumentLoader::commitIfReady at DocumentLoader.cpp:259 #45 0x1016a1d49 in WebCore::DocumentLoader::commitLoad at DocumentLoader.cpp:279 #46 0x1016a1dca in WebCore::DocumentLoader::receivedData at DocumentLoader.cpp:293 #47 0x1017f42fd in WebCore::FrameLoader::receivedData at FrameLoader.cpp:1506 #48 0x101c8e152 in WebCore::MainResourceLoader::addData at MainResourceLoader.cpp:149 #49 0x101e86b98 in WebCore::ResourceLoader::didReceiveData at ResourceLoader.cpp:261 #50 0x101c8d8cd in WebCore::MainResourceLoader::didReceiveData at MainResourceLoader.cpp:420 #51 0x101e86275 in WebCore::ResourceLoader::didReceiveData at ResourceLoader.cpp:432 #52 0x101e80e58 in -[WebCoreResourceHandleAsDelegate connection:didReceiveData:lengthReceived:] at ResourceHandleMac.mm:877 #53 0x7fff889ac4af in _NSURLConnectionDidReceiveData
Attachments
Add attachment proposed patch, testcase, etc.
Ryosuke Niwa
Comment 1 2010-11-06 02:04:07 PDT
http://crbug.com/40791 has been fixed, closing the bug.
Note You need to log in before you can comment on or make changes to this bug.