[Webkit-unassigned] [Bug 45361] New: Assertion failure (m_refCount > 0): RenderStyle

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=45361

           Summary: Assertion failure (m_refCount > 0): RenderStyle
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Normal
          Priority: P1
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: rniwa at webkit.org
                CC: hyatt at apple.com, mitz at webkit.org, jamesr at chromium.org


While investigating a crash for Netflix (http://crbug.com/40791), I encountered an assertion failure:
m_refCount had an insane value of -21246 so this might be caused by some JSC bug.

#0    0x1015698d8 in WTF::RefCountedBase::derefBase at RefCounted.h:83
#1    0x10147722f in WTF::RefCounted<WebCore::RenderStyle>::deref at RefCounted.h:138
#2    0x10156ae45 in WTF::derefIfNotNull<WebCore::RenderStyle> at PassRefPtr.h:58
#3    0x10161b658 in WTF::RefPtr<WebCore::RenderStyle>::~RefPtr at RefPtr.h:58
#4    0x101df3d98 in WebCore::RenderObject::~RenderObject at RenderObject.cpp:232
#5    0x101e469a4 in WebCore::RenderText::~RenderText at RenderText.cpp:122
#6    0x101decb61 in WebCore::RenderObject::arenaDelete at RenderObject.cpp:2204
#7    0x101decd24 in WebCore::RenderObject::destroy at RenderObject.cpp:2177
#8    0x101e4663c in WebCore::RenderText::destroy at RenderText.cpp:190
#9    0x101ccc257 in WebCore::Node::detach at Node.cpp:1220
#10    0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708
#11    0x101790817 in WebCore::Element::detach at Element.cpp:842
#12    0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708
#13    0x101790817 in WebCore::Element::detach at Element.cpp:842
#14    0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708
#15    0x101790817 in WebCore::Element::detach at Element.cpp:842
#16    0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708
#17    0x101790817 in WebCore::Element::detach at Element.cpp:842
#18    0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708
#19    0x101790817 in WebCore::Element::detach at Element.cpp:842
#20    0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708
#21    0x101790817 in WebCore::Element::detach at Element.cpp:842
#22    0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708
#23    0x101790817 in WebCore::Element::detach at Element.cpp:842
#24    0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708
#25    0x101790817 in WebCore::Element::detach at Element.cpp:842
#26    0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708
#27    0x101790817 in WebCore::Element::detach at Element.cpp:842
#28    0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708
#29    0x101790817 in WebCore::Element::detach at Element.cpp:842
#30    0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708
#31    0x101790817 in WebCore::Element::detach at Element.cpp:842
#32    0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708
#33    0x101790817 in WebCore::Element::detach at Element.cpp:842
#34    0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708
#35    0x101790817 in WebCore::Element::detach at Element.cpp:842
#36    0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708
#37    0x101790817 in WebCore::Element::detach at Element.cpp:842
#38    0x10153e9ee in WebCore::ContainerNode::detach at ContainerNode.cpp:708
#39    0x101673312 in WebCore::Document::detach at Document.cpp:1727
#40    0x1017eac27 in WebCore::Frame::setView at Frame.cpp:238
#41    0x100ef9cc6 in WebFrameLoaderClient::transitionToCommittedForNewPage at WebFrameLoaderClient.mm:1212
#42    0x1017f9f9e in WebCore::FrameLoader::transitionToCommitted at FrameLoader.cpp:1972
#43    0x1017fa544 in WebCore::FrameLoader::commitProvisionalLoad at FrameLoader.cpp:1851
#44    0x1016a1d1d in WebCore::DocumentLoader::commitIfReady at DocumentLoader.cpp:259
#45    0x1016a1d49 in WebCore::DocumentLoader::commitLoad at DocumentLoader.cpp:279
#46    0x1016a1dca in WebCore::DocumentLoader::receivedData at DocumentLoader.cpp:293
#47    0x1017f42fd in WebCore::FrameLoader::receivedData at FrameLoader.cpp:1506
#48    0x101c8e152 in WebCore::MainResourceLoader::addData at MainResourceLoader.cpp:149
#49    0x101e86b98 in WebCore::ResourceLoader::didReceiveData at ResourceLoader.cpp:261
#50    0x101c8d8cd in WebCore::MainResourceLoader::didReceiveData at MainResourceLoader.cpp:420
#51    0x101e86275 in WebCore::ResourceLoader::didReceiveData at ResourceLoader.cpp:432
#52    0x101e80e58 in -[WebCoreResourceHandleAsDelegate connection:didReceiveData:lengthReceived:] at ResourceHandleMac.mm:877
#53    0x7fff889ac4af in _NSURLConnectionDidReceiveData

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.