[Webkit-unassigned] [Bug 12052] New: Assertion failure in WebCore::RenderHTMLCanvas::layout

Sun Dec 31 16:32:08 PST 2006

http://bugs.webkit.org/show_bug.cgi?id=12052

           Summary: Assertion failure in WebCore::RenderHTMLCanvas::layout
           Product: WebKit
           Version: 420+ (nightly)
          Platform: Macintosh
        OS/Version: Mac OS X 10.4
            Status: NEW
          Severity: Major
          Priority: P2
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: bdash at webkit.org


<html>
<head>
    <title>Test HTML Page</title>
    <style type="text/css">
    canvas { display: run-in; }
    </style>
</head>
<body>
    <canvas>canvas</canvas>

    <p>Die when canvas isn't last tag in the document.</p>
</body>
</html>


Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_INVALID_ADDRESS at address: 0xbbadbeef
0x01169cd2 in WebCore::RenderHTMLCanvas::layout (this=0x1705e76c) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderHTMLCanvas.cpp:81
81          ASSERT(minMaxKnown());
(gdb) bt
#0  0x01169cd2 in WebCore::RenderHTMLCanvas::layout (this=0x1705e76c) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderHTMLCanvas.cpp:81
#1  0x015093dd in WebCore::RenderObject::layoutIfNeeded (this=0x1705e76c) at
RenderObject.h:509
#2  0x011499b6 in WebCore::RenderBlock::layoutInlineChildren (this=0x1705de1c,
relayoutChildren=true) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/bidi.cpp:1529
#3  0x0115c454 in WebCore::RenderBlock::layoutBlock (this=0x1705de1c,
relayoutChildren=true) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:493
#4  0x01150ac2 in WebCore::RenderBlock::layout (this=0x1705de1c) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:421
#5  0x015093dd in WebCore::RenderObject::layoutIfNeeded (this=0x1705de1c) at
RenderObject.h:509
#6  0x0115bb94 in WebCore::RenderBlock::layoutBlockChildren (this=0x1706327c,
relayoutChildren=true) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:1102
#7  0x0115c493 in WebCore::RenderBlock::layoutBlock (this=0x1706327c,
relayoutChildren=true) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:495
#8  0x01150ac2 in WebCore::RenderBlock::layout (this=0x1706327c) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:421
#9  0x015093dd in WebCore::RenderObject::layoutIfNeeded (this=0x1706327c) at
RenderObject.h:509
#10 0x0115bb94 in WebCore::RenderBlock::layoutBlockChildren (this=0x17060f8c,
relayoutChildren=true) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:1102
#11 0x0115c493 in WebCore::RenderBlock::layoutBlock (this=0x17060f8c,
relayoutChildren=true) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:495
#12 0x01150ac2 in WebCore::RenderBlock::layout (this=0x17060f8c) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:421
#13 0x015093dd in WebCore::RenderObject::layoutIfNeeded (this=0x17060f8c) at
RenderObject.h:509
#14 0x0115bb94 in WebCore::RenderBlock::layoutBlockChildren (this=0x1704cb2c,
relayoutChildren=true) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:1102
#15 0x0115c493 in WebCore::RenderBlock::layoutBlock (this=0x1704cb2c,
relayoutChildren=true) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:495
#16 0x01150ac2 in WebCore::RenderBlock::layout (this=0x1704cb2c) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderBlock.cpp:421
#17 0x011674ab in WebCore::RenderView::layout (this=0x1704cb2c) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/rendering/RenderView.cpp:111
#18 0x010eb87b in WebCore::FrameView::layout (this=0x17035d00,
allowSubtree=true) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/page/FrameView.cpp:424
#19 0x010f2d63 in WebCore::Document::implicitClose (this=0x20c8c00) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/dom/Document.cpp:1359
#20 0x01394669 in WebCore::FrameLoader::checkEmitLoadEvent (this=0x2043800) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/loader/FrameLoader.cpp:1074
#21 0x01397fb9 in WebCore::FrameLoader::checkCompleted (this=0x2043800) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/loader/FrameLoader.cpp:1042
#22 0x013980bb in WebCore::FrameLoader::loadDone (this=0x2043800) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/loader/FrameLoader.cpp:1016
#23 0x0110b4ee in WebCore::DocLoader::setLoadInProgress (this=0x17044e90,
load=false) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/loader/DocLoader.cpp:176
#24 0x0110cd7d in WebCore::Loader::receivedAllData (this=0x1640bb8,
loader=0x17058480, allData=0x17061760) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/loader/loader.cpp:110
#25 0x0137c65c in WebCore::SubresourceLoader::didFinishLoading
(this=0x17058480) at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/loader/mac/SubresourceLoaderMac.mm:195
#26 0x0137859c in WebCore::ResourceLoader::didFinishLoading (this=0x17058480)
at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/loader/mac/ResourceLoaderMac.mm:446
#27 0x013878e3 in -[WebCoreResourceHandleAsDelegate
connectionDidFinishLoading:] (self=0x17058df0, _cmd=0x90a9d160, con=0x17058e00)
at
/Users/mrowe/Documents/Source/SVN/WebKit-Nightlies/WebCore/platform/network/mac/ResourceHandleMac.mm:295
#28 0x9265be00 in -[NSURLConnection(NSURLConnectionInternal)
_sendDidFinishLoadingCallback] ()
#29 0x92659ea5 in -[NSURLConnection(NSURLConnectionInternal) _sendCallbacks] ()
#30 0x92659b41 in _sendCallbacks ()
#31 0x90829379 in CFRunLoopRunSpecific ()
#32 0x90828eb5 in CFRunLoopRunInMode ()
#33 0x92dcdb90 in RunCurrentEventLoopInMode ()
#34 0x92dcd297 in ReceiveNextEventCommon ()
#35 0x92dcd0ee in BlockUntilNextEventMatchingListInMode ()
#36 0x9326f465 in _DPSNextEvent ()
#37 0x9326f056 in -[NSApplication
nextEventMatchingMask:untilDate:inMode:dequeue:] ()
#38 0x00006f96 in ?? ()
#39 0x93268ddb in -[NSApplication run] ()
#40 0x9325cd2f in NSApplicationMain ()
#41 0x0005f7de in ?? ()
#42 0x0005f6f9 in ?? ()
(gdb)


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.