Bug 92893 – [EFL] Crash at WebCore::toRenderSlider

• Status: RESOLVED
• Resolution: FIXED
• Component: WebKit EFL

[Mikhail Pozdnyakov]

Got following crash executing 

fast/forms/range/slider-appearance-crash.html

0x00007ffff2b78ced in WebCore::toRenderSlider (object=0x5f9828) at /media/ssd/WebKit/Source/WebCore/rendering/RenderSlider.h:51
51	        ASSERT(!object || object->isSlider());
(gdb) bt
#0  0x00007ffff2b78ced in WebCore::toRenderSlider (object=0x5f9828)
    at /media/ssd/WebKit/Source/WebCore/rendering/RenderSlider.h:51
#1  0x00007ffff374d99f in WebCore::RenderThemeEfl::paintThemePart (this=0x48a8a0, object=0x5f9828, 
    type=WebCore::SliderHorizontal, info=..., rect=...) at /media/ssd/WebKit/Source/WebCore/platform/efl/RenderThemeEfl.cpp:329
#2  0x00007ffff374f6c1 in WebCore::RenderThemeEfl::paintSliderTrack (this=0x48a8a0, object=0x5f9828, info=..., rect=...)
    at /media/ssd/WebKit/Source/WebCore/platform/efl/RenderThemeEfl.cpp:747
#3  0x00007ffff308e760 in WebCore::RenderTheme::paint (this=0x48a8a0, o=0x5f9828, paintInfo=..., r=...)
    at /media/ssd/WebKit/Source/WebCore/rendering/RenderTheme.cpp:323
#4  0x00007ffff2f81216 in WebCore::RenderBox::paintBoxDecorations (this=0x5f9828, paintInfo=..., paintOffset=...)
    at /media/ssd/WebKit/Source/WebCore/rendering/RenderBox.cpp:849
#5  0x00007ffff30a5857 in WebCore::RenderWidget::paint (this=0x5f9828, paintInfo=..., paintOffset=...)
    at /media/ssd/WebKit/Source/WebCore/rendering/RenderWidget.cpp:255
#6  0x00007ffff2efa88d in WebCore::InlineBox::paint (this=0x625a88, paintInfo=..., paintOffset=...)
    at /media/ssd/WebKit/Source/WebCore/rendering/InlineBox.cpp:239
#7  0x00007ffff2f00915 in WebCore::InlineFlowBox::paint (this=0x600b28, paintInfo=..., paintOffset=..., lineTop=..., 
    lineBottom=...) at /media/ssd/WebKit/Source/WebCore/rendering/InlineFlowBox.cpp:1086
#8  0x00007ffff30abcfb in WebCore::RootInlineBox::paint (this=0x600b28, paintInfo=..., paintOffset=..., lineTop=..., 
    lineBottom=...) at /media/ssd/WebKit/Source/WebCore/rendering/RootInlineBox.cpp:211
#9  0x00007ffff3018b1e in WebCore::RenderLineBoxList::paint (this=0x5ac258, renderer=0x5ac1b8, paintInfo=..., paintOffset=...)
    at /media/ssd/WebKit/Source/WebCore/rendering/RenderLineBoxList.cpp:262
#10 0x00007ffff2f2522b in WebCore::RenderBlock::paintContents (this=0x5ac1b8, paintInfo=..., paintOffset=...)
    at /media/ssd/WebKit/Source/WebCore/rendering/RenderBlock.cpp:2854
#11 0x00007ffff2f25db6 in WebCore::RenderBlock::paintObject (this=0x5ac1b8, paintInfo=..., paintOffset=...)

[Mikhail Pozdnyakov]

Created attachment 155856 [details]
patch

[WebKit Review Bot]

Comment on attachment 155856 [details]
patch

Clearing flags on attachment: 155856

Committed r124399: <http://trac.webkit.org/changeset/124399>

[WebKit Review Bot]

All reviewed patches have been landed.  Closing bug.