[Webkit-unassigned] [Bug 39295] New: Crash (preceded by assertion) in WKCACFLayerRenderer::setNeedsDisplay when computer wakes from sleep on particular page

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=39295

           Summary: Crash (preceded by assertion) in
                    WKCACFLayerRenderer::setNeedsDisplay when computer
                    wakes from sleep on particular page
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Keywords: InRadar, PlatformOnly
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: aroben at apple.com
                CC: sullivan at apple.com, sfalken at apple.com,
                    simon.fraser at apple.com, cmarrin at apple.com,
                    enrica at apple.com


Created an attachment (id=56382)
 --> (https://bugs.webkit.org/attachment.cgi?id=56382)
testcase (just an auto-reloading version of poster-circle.html)

To reproduce:

1. Load the attached testcase
2. Put your computer to sleep
3. Wake your computer up

You'll crash inside WKCACFLayerRenderer::setNeedsDisplay due to m_rootLayer being null. Here's a partial backtrace:

WKCACFLayerRenderer::setNeedsDisplay(void)+0xf
WebView::repaint(class WebCore::IntRect * windowRect = 0x7fb4ad20, bool contentChanged = true, bool immediate = false, bool repaintContentOnly = false)+0x29
WebChromeClient::invalidateContentsAndWindow(class WebCore::IntRect * windowRect = 0x68407b51, bool immediate = false)+0x16
WebCore::ScrollView::repaintContentRectangle(class WebCore::IntRect * rect = 0x7c2ff300, bool now = false)+0x9b
WebCore::FrameView::doDeferredRepaints(void)+0x81
WebCore::FrameView::endDeferredRepaints(void)+0x78
WebCore::FrameView::layout(bool allowSubtree = true)+0x5a2
WebCore::Timer<WebCore::MediaPlayerPrivate>::fired(void)+0xe
WebCore::ThreadTimers::sharedTimerFiredInternal(void)+0xef
WebCore::ThreadTimers::sharedTimerFired(void)+0xe

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.