[Webkit-unassigned] [Bug 33149] New: WebCore::RenderObject crash when showing QWebView

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=33149

           Summary: WebCore::RenderObject crash when showing QWebView
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Windows Vista
            Status: UNCONFIRMED
          Severity: Critical
          Priority: P2
         Component: WebKit Qt
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: pete.usergroups at googlemail.com


The following crash is semi-reproducible and seems to happen we show a webpage
which contains an embedded QT widget.
It is possible that the widget is being torn down by the javascript on the
page.

The crash occurs in the webkit version shipped with QT4.5.2 Sorry, I was unable
to work out what this was.

QtWebKitd4.dll!WebCore::RenderObject::clientHeight() Line 608 + 0x3 bytes   
C++
QtWebKitd4.dll!WebCore::RenderObject::contentHeight() Line 571 + 0x10 bytes   
C++
QtWebKitd4.dll!WebCore::RenderObject::containingBlockHeight() Line 860    C++
QtWebKitd4.dll!WebCore::RenderBox::relativePositionOffsetY() Line 1306 + 0x12
bytes    C++
QtWebKitd4.dll!WebCore::RenderLayer::updateLayerPosition() Line 407 + 0xb bytes
   C++
QtWebKitd4.dll!WebCore::MouseRelatedEvent::receivedTarget() Line 153    C++
QtWebKitd4.dll!WebCore::Event::setTarget(WTF::PassRefPtr<WebCore::EventTarget>
target={...}) Line 175    C++
QtWebKitd4.dll!WebCore::EventTargetNode::dispatchEvent(WTF::PassRefPtr<WebCore::Event>
e={...}, int & ec=0) Line 272    C++
QtWebKitd4.dll!WebCore::EventTargetNode::dispatchMouseEvent(const
WebCore::AtomicString & eventType={...}, int button=-1, int detail=0, int
pageX=420, int pageY=270, int screenX=446, int screenY=329, bool ctrlKey=false,
bool altKey=false, bool shiftKey=false, bool metaKey=false, bool
isSimulated=false, WebCore::Node * relatedTargetArg=0x0f4f6a90,
WTF::PassRefPtr<WebCore::Event> underlyingEvent={...}) Line 581 C++
QtWebKitd4.dll!WebCore::EventTargetNode::dispatchMouseEvent(const
WebCore::PlatformMouseEvent & event={...}, const WebCore::AtomicString &
eventType={...}, int detail=0, WebCore::Node * relatedTarget=0x0f4f6a90) Line
489 + 0x93 bytes    C++
QtWebKitd4.dll!WebCore::EventHandler::updateMouseEventTargetNode(WebCore::Node
* targetNode=0x0f536670, const WebCore::PlatformMouseEvent & mouseEvent={...},
bool fireMouseOverOut=true) Line 1512    C++
QtWebKitd4.dll!WebCore::EventHandler::dispatchMouseEvent(const
WebCore::AtomicString & eventType={...}, WebCore::Node * targetNode=0x0f536670,
bool __formal=false, int clickCount=0, const WebCore::PlatformMouseEvent &
mouseEvent={...}, bool setUnder=true) Line 1526    C++
QtWebKitd4.dll!WebCore::EventHandler::handleMouseMoveEvent(const
WebCore::PlatformMouseEvent & mouseEvent={...}, WebCore::HitTestResult *
hoveredNode=0x000f9b4c) Line 1246 + 0x29 bytes    C++
QtWebKitd4.dll!WebCore::EventHandler::mouseMoved(const
WebCore::PlatformMouseEvent & event={...}) Line 1149 + 0x10 bytes    C++
QtWebKitd4.dll!QWebPagePrivate::mouseMoveEvent(QMouseEvent * ev=0x000fa268)
Line 555 + 0x1e bytes    C++
QtWebKitd4.dll!QWebPage::event(QEvent * ev=0x000fa268) Line 1872    C++
QtWebKitd4.dll!QWebView::mouseMoveEvent(QMouseEvent * ev=0x000fa268) Line 711  
 C++
QtGuid4.dll!QWidget::event(QEvent * event=0x000fa268) Line 7535    C++
QtWebKitd4.dll!QWebView::event(QEvent * e=0x000fa268) Line 590    C++
QtGuid4.dll!QApplicationPrivate::notify_helper(QObject * receiver=0x09c3d100,
QEvent * e=0x000fa268) Line 4056 + 0x11 bytes    C++
QtGuid4.dll!QApplication::notify(QObject * receiver=0x09c3d100, QEvent *
e=0x000fa268) Line 3758 + 0x2f bytes    C++
ccApp.dll!CCApplication::notify(QObject * receiver=0x09c3d100, QEvent *
event=0x000fa268) Line 17 + 0x11 bytes    C++
QtCored4.dll!QCoreApplication::notifyInternal(QObject * receiver=0x09c3d100,
QEvent * event=0x000fa268) Line 610 + 0x15 bytes    C++
QtCored4.dll!QCoreApplication::sendSpontaneousEvent(QObject *
receiver=0x09c3d100, QEvent * event=0x000fa268) Line 216 + 0x38 bytes C++
QtGuid4.dll!QApplicationPrivate::sendMouseEvent(QWidget * receiver=0x09c3d100,
QMouseEvent * event=0x000fa268, QWidget * alienWidget=0x00000000, QWidget *
nativeWidget=0x000ff6ec, QWidget * * buttonDown=0x65af57d4, QPointer<QWidget> &
lastMouseReceiver={...}) Line 2924 + 0xe bytes    C++
QtGuid4.dll!QApplicationPrivate::sendSyntheticEnterLeave(QWidget *
widget=0x0f6f3b70) Line 3006 + 0x1f bytes    C++
QtGuid4.dll!QWidgetPrivate::hideChildren(bool spontaneous=false) Line 7096   
C++
QtGuid4.dll!QWidgetPrivate::hideChildren(bool spontaneous=false) Line 7080   
C++
QtGuid4.dll!QWidgetPrivate::hideChildren(bool spontaneous=false) Line 7080   
C++
QtGuid4.dll!QWidgetPrivate::hideChildren(bool spontaneous=false) Line 7080   
C++
QtGuid4.dll!QWidgetPrivate::hide_helper() Line 6847    C++
QtGuid4.dll!QWidget::setVisible(bool visible=false) Line 7015    C++
QtGuid4.dll!QWidget::hide() Line 477 + 0x16 bytes    C++
QtWebKitd4.dll!WebCore::Widget::hide() Line 99    C++
QtWebKitd4.dll!WebCore::ScrollView::platformRemoveChild(WebCore::Widget *
child=0x10044110) Line 58    C++
QtWebKitd4.dll!WebCore::ScrollView::removeChild(WebCore::Widget *
child=0x10044110) Line 78    C++
QtWebKitd4.dll!WebCore::RenderWidget::destroy() Line 86    C++
QtWebKitd4.dll!WebCore::Node::detach() Line 1061    C++
QtWebKitd4.dll!WebCore::ContainerNode::detach() Line 596    C++
QtWebKitd4.dll!WebCore::Element::detach() Line 664    C++
QtWebKitd4.dll!WebCore::HTMLPlugInElement::detach() Line 72    C++
QtWebKitd4.dll!WebCore::HTMLObjectElement::detach() Line 186    C++
QtWebKitd4.dll!WebCore::ContainerNode::detach() Line 593 + 0x10 bytes    C++
QtWebKitd4.dll!WebCore::Element::detach() Line 664    C++
QtWebKitd4.dll!WebCore::Element::recalcStyle(WebCore::Node::StyleChange
change=NoChange) Line 688    C++
QtWebKitd4.dll!WebCore::Element::recalcStyle(WebCore::Node::StyleChange
change=NoChange) Line 748    C++
QtWebKitd4.dll!WebCore::Element::recalcStyle(WebCore::Node::StyleChange
change=NoChange) Line 748    C++
QtWebKitd4.dll!WebCore::Element::recalcStyle(WebCore::Node::StyleChange
change=NoChange) Line 748    C++
QtWebKitd4.dll!WebCore::Element::recalcStyle(WebCore::Node::StyleChange
change=NoChange) Line 748    C++
QtWebKitd4.dll!WebCore::Element::recalcStyle(WebCore::Node::StyleChange
change=NoChange) Line 748    C++
QtWebKitd4.dll!WebCore::Element::recalcStyle(WebCore::Node::StyleChange
change=NoChange) Line 748    C++
QtWebKitd4.dll!WebCore::Document::recalcStyle(WebCore::Node::StyleChange
change=NoChange) Line 1165    C++
QtWebKitd4.dll!WebCore::FrameView::layout(bool allowSubtree=true) Line 490   
C++
QtWebKitd4.dll!WebCore::FrameView::layoutIfNeededRecursive() Line 1291    C++
QtWebKitd4.dll!QWebFrame::render(QPainter * painter=0x000faa0c, const QRegion &
clip={...}) Line 765    C++
QtWebKitd4.dll!QWebView::paintEvent(QPaintEvent * ev=0x000fb108) Line 690   
C++
QtGuid4.dll!QWidget::event(QEvent * event=0x000fb108) Line 7688    C++
QtWebKitd4.dll!QWebView::event(QEvent * e=0x000fb108) Line 590    C++
QtGuid4.dll!QApplicationPrivate::notify_helper(QObject * receiver=0x09c3d100,
QEvent * e=0x000fb108) Line 4056 + 0x11 bytes    C++
QtGuid4.dll!QApplication::notify(QObject * receiver=0x09c3d100, QEvent *
e=0x000fb108) Line 4021 + 0x10 bytes    C++
ccApp.dll!CCApplication::notify(QObject * receiver=0x09c3d100, QEvent *
event=0x000fb108) Line 17 + 0x11 bytes    C++
QtCored4.dll!QCoreApplication::notifyInternal(QObject * receiver=0x09c3d100,
QEvent * event=0x000fb108) Line 610 + 0x15 bytes    C++
QtCored4.dll!QCoreApplication::sendSpontaneousEvent(QObject *
receiver=0x09c3d100, QEvent * event=0x000fb108) Line 216 + 0x38 bytes C++
QtGuid4.dll!QWidgetPrivate::drawWidget(QPaintDevice * pdev=0x0f450d50, const
QRegion & rgn={...}, const QPoint & offset={...}, int flags=4, QPainter *
sharedPainter=0x00000000, QWidgetBackingStore * backingStore=0x09c3bf10) Line
5079 + 0xe bytes    C++
QtGuid4.dll!QWidgetPrivate::paintSiblingsRecursive(QPaintDevice *
pdev=0x0f450d50, const QList<QObject *> & siblings={...}, int index=0, const
QRegion & rgn={...}, const QPoint & offset={...}, int flags=4, QPainter *
sharedPainter=0x00000000, QWidgetBackingStore * backingStore=0x09c3bf10) Line
5190    C++
QtGuid4.dll!QWidgetPrivate::drawWidget(QPaintDevice * pdev=0x0f450d50, const
QRegion & rgn={...}, const QPoint & offset={...}, int flags=4, QPainter *
sharedPainter=0x00000000, QWidgetBackingStore * backingStore=0x09c3bf10) Line
5130    C++
QtGuid4.dll!QWidgetPrivate::paintSiblingsRecursive(QPaintDevice *
pdev=0x0f450d50, const QList<QObject *> & siblings={...}, int index=2, const
QRegion & rgn={...}, const QPoint & offset={...}, int flags=4, QPainter *
sharedPainter=0x00000000, QWidgetBackingStore * backingStore=0x09c3bf10) Line
5190    C++
QtGuid4.dll!QWidgetPrivate::drawWidget(QPaintDevice * pdev=0x0f450d50, const
QRegion & rgn={...}, const QPoint & offset={...}, int flags=4, QPainter *
sharedPainter=0x00000000, QWidgetBackingStore * backingStore=0x09c3bf10) Line
5130    C++
QtGuid4.dll!QWidgetPrivate::paintSiblingsRecursive(QPaintDevice *
pdev=0x0f450d50, const QList<QObject *> & siblings={...}, int index=1, const
QRegion & rgn={...}, const QPoint & offset={...}, int flags=4, QPainter *
sharedPainter=0x00000000, QWidgetBackingStore * backingStore=0x09c3bf10) Line
5190    C++
QtGuid4.dll!QWidgetPrivate::drawWidget(QPaintDevice * pdev=0x0f450d50, const
QRegion & rgn={...}, const QPoint & offset={...}, int flags=5, QPainter *
sharedPainter=0x00000000, QWidgetBackingStore * backingStore=0x09c3bf10) Line
5130    C++
QtGuid4.dll!QWidgetBackingStore::sync() Line 1272    C++
QtGuid4.dll!QWidgetBackingStore::sync(QWidget * exposedWidget=0x09c47b60, const
QRegion & exposedRegion={...}) Line 1075    C++
QtGuid4.dll!QWidgetPrivate::syncBackingStore(const QRegion & region={...}) Line
1613    C++
QtGuid4.dll!QETWidget::translatePaintEvent(const tagMSG & msg={...}) Line 3635
+ 0x4f bytes    C++
QtGuid4.dll!QtWndProc(HWND__ * hwnd=0x0006115c, unsigned int message=15,
unsigned int wParam=0, long lParam=0) Line 2031 + 0xc bytes    C++
user32.dll!7e418734()

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.