[Webkit-unassigned] [Bug 65702] New: [GTK] editing/undo/replace-text-in-node-preserving-markers-crash.html crashes

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Aug 4 10:22:31 PDT 2011 

https://bugs.webkit.org/show_bug.cgi?id=65702

           Summary: [GTK]
                    editing/undo/replace-text-in-node-preserving-markers-c
                    rash.html crashes
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit Gtk
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: pnormand at igalia.com


This assert is hit on the Debug GTK bots:

#0  0x00002ad0eeebd90c in WebCore::VisiblePosition::previous (this=0x7fffb557fdb0, rule=WebCore::CanCrossEditingBoundary) at ../../Source/WebCore/editing/VisiblePosition.cpp:96
96            ASSERT(inSameLine(temp, prev));

Thread 1 (Thread 14270):
#0  0x00002ad0eeebd90c in WebCore::VisiblePosition::previous (this=0x7fffb557fdb0, rule=WebCore::CanCrossEditingBoundary) at ../../Source/WebCore/editing/VisiblePosition.cpp:96
#1  0x00002ad0efa54932 in objectAndOffsetUnignored (coreObject=0x337467c0, offset=@0x7fffb557fecc, ignoreLinks=true) at ../../Source/WebCore/accessibility/gtk/AccessibilityObjectWrapperAtk.cpp:2746
#2  0x00002ad0efa57ad9 in WebCore::FrameSelection::notifyAccessibilityForSelectionChange (this=0xdfe670) at ../../Source/WebCore/editing/gtk/FrameSelectionGtk.cpp:96
#3  0x00002ad0eee788e2 in WebCore::FrameSelection::setSelection (this=0xdfe670, newSelection=..., options=0, align=WebCore::FrameSelection::AlignCursorOnScrollIfNeeded, granularity=WebCore::CharacterGranularity) at ../../Source/WebCore/editing/FrameSelection.cpp:228
#4  0x00002ad0eee79563 in WebCore::FrameSelection::textWillBeReplaced (this=0xdfe670, node=0x3382d500, offset=4, oldLength=0, newLength=1) at ../../Source/WebCore/editing/FrameSelection.cpp:363
#5  0x00002ad0eed40d4c in WebCore::CharacterData::setDataAndUpdate (this=0x3382d500, newData=..., offsetOfReplacedData=4, oldLength=0, newLength=1) at ../../Source/WebCore/dom/CharacterData.cpp:176
#6  0x00002ad0eed408e8 in WebCore::CharacterData::insertData (this=0x3382d500, offset=4, data=UnicodeEncodeError: 'ascii' codec can't encode character u'\xa0' in position 0: ordinal not in range(128)
, ec=@0x7fffb55802fc) at ../../Source/WebCore/dom/CharacterData.cpp:110
#7  0x00002ad0eee88c15 in WebCore::InsertIntoTextNodeCommand::doApply (this=0x33661c70) at ../../Source/WebCore/editing/InsertIntoTextNodeCommand.cpp:52
#8  0x00002ad0eee554ad in WebCore::EditCommand::apply (this=0x33661c70) at ../../Source/WebCore/editing/EditCommand.cpp:92
#9  0x00002ad0eee3f5c7 in WebCore::CompositeEditCommand::applyCommandToComposite (this=0x335d9600, cmd=...) at ../../Source/WebCore/editing/CompositeEditCommand.cpp:102
#10 0x00002ad0eee40fb5 in WebCore::CompositeEditCommand::replaceTextInNode (this=0x335d9600, node=..., offset=4, count=1, replacementText=UnicodeEncodeError: 'ascii' codec can't encode character u'\xa0' in position 0: ordinal not in range(128)
) at ../../Source/WebCore/editing/CompositeEditCommand.cpp:324
#11 0x00002ad0eee41434 in WebCore::CompositeEditCommand::replaceTextInNodePreservingMarkers (this=0x335d9600, prpNode=..., offset=4, count=1, replacementText=UnicodeEncodeError: 'ascii' codec can't encode character u'\xa0' in position 0: ordinal not in range(128)
) at ../../Source/WebCore/editing/CompositeEditCommand.cpp:354
#12 0x00002ad0eee527e8 in WebCore::DeleteSelectionCommand::fixupWhitespace (this=0x335d9600) at ../../Source/WebCore/editing/DeleteSelectionCommand.cpp:563
#13 0x00002ad0eee544a7 in WebCore::DeleteSelectionCommand::doApply (this=0x335d9600) at ../../Source/WebCore/editing/DeleteSelectionCommand.cpp:832
#14 0x00002ad0eee554ad in WebCore::EditCommand::apply (this=0x335d9600) at ../../Source/WebCore/editing/EditCommand.cpp:92
#15 0x00002ad0eee3f5c7 in WebCore::CompositeEditCommand::applyCommandToComposite (this=0x33747400, cmd=...) at ../../Source/WebCore/editing/CompositeEditCommand.cpp:102
#16 0x00002ad0eee41a2c in WebCore::CompositeEditCommand::deleteSelection (this=0x33747400, selection=..., smartDelete=false, mergeBlocksAfterDelete=true, replace=false, expandForSpecialElements=true) at ../../Source/WebCore/editing/CompositeEditCommand.cpp:409
#17 0x00002ad0eeebc026 in WebCore::TypingCommand::deleteKeyPressed (this=0x33747400, granularity=WebCore::CharacterGranularity, killRing=false) at ../../Source/WebCore/editing/TypingCommand.cpp:548
#18 0x00002ad0eeeb9b91 in WebCore::TypingCommand::deleteKeyPressed (document=0x32c27ef0, options=0, granularity=WebCore::CharacterGranularity) at ../../Source/WebCore/editing/TypingCommand.cpp:113
#19 0x00002ad0eee5f751 in WebCore::executeDelete (frame=0xdfe000, source=WebCore::CommandFromDOM) at ../../Source/WebCore/editing/EditorCommand.cpp:321
#20 0x00002ad0eee6379a in WebCore::Editor::Command::execute (this=0x7fffb5580e00, parameter="(null)", triggeringEvent=0x0) at ../../Source/WebCore/editing/EditorCommand.cpp:1648
#21 0x00002ad0eed6bfd3 in WebCore::Document::execCommand (this=0x32c27ef0, commandName="Delete", userInterface=false, value="(null)") at ../../Source/WebCore/dom/Document.cpp:3944
#22 0x00002ad0ef73d394 in WebCore::jsDocumentPrototypeFunctionExecCommand (exec=0x2ad144004198) at DerivedSources/WebCore/JSDocument.cpp:2430
#23 0x00002ad1040011e8 in ?? ()
#24 0x00007fffb5580fb0 in ?? ()
#25 0x00002ad104016cd9 in ?? ()
#26 0x00007fffb5580f40 in ?? ()
#27 0x00002ad14440c960 in ?? ()
#28 0x00000000337011a0 in ?? ()
#29 0x00002ad100000001 in ?? ()
#30 0x00002ad14440f360 in ?? ()
#31 0x00007fffb5580f60 in ?? ()
#32 0x00007fffb5580f70 in ?? ()
#33 0x00000000004395b7 in JSC::JSValue::decode (ptr=0x2ad0f3ccbc10) at ../../Source/JavaScriptCore/runtime/JSValueInlineMethods.h:363
#34 0x00002ad0edc8f6f3 in JSC::JITCode::execute (this=0x2ad1523b4838, registerFile=0xe274d8, callFrame=0x2ad144004038, globalData=0xe24940) at ../../Source/JavaScriptCore/jit/JITCode.h:80
#35 0x00002ad0edc8b737 in JSC::Interpreter::execute (this=0xe274c0, program=0x2ad1523b4820, callFrame=0x2ad1444178a8, scopeChain=0x2ad14440f360, thisObj=0x2ad14440ffa0) at ../../Source/JavaScriptCore/interpreter/Interpreter.cpp:891
#36 0x00002ad0edd2c64b in JSC::evaluate (exec=0x2ad1444178a8, scopeChain=0x2ad14440f360, source=..., thisValue=...) at ../../Source/JavaScriptCore/runtime/Completion.cpp:66
#37 0x00002ad0eeb985b3 in WebCore::JSMainThreadExecState::evaluate (exec=0x2ad1444178a8, chain=0x2ad14440f360, source=..., thisValue=...) at ../../Source/WebCore/bindings/js/JSMainThreadExecState.h:57
#38 0x00002ad0eebcf6c6 in WebCore::ScriptController::evaluateInWorld (this=0xdfe4f0, sourceCode=..., world=0x1458df0) at ../../Source/WebCore/bindings/js/ScriptController.cpp:141
#39 0x00002ad0eebcf886 in WebCore::ScriptController::evaluate (this=0xdfe4f0, sourceCode=...) at ../../Source/WebCore/bindings/js/ScriptController.cpp:164
#40 0x00002ad0eee07496 in WebCore::ScriptElement::executeScript (this=0x338dc870, sourceCode=...) at ../../Source/WebCore/dom/ScriptElement.cpp:286
#41 0x00002ad0eee0708f in WebCore::ScriptElement::prepareScript (this=0x338dc870, scriptStartPosition=..., supportLegacyTypes=WebCore::ScriptElement::DisallowLegacyTypeInTypeAttribute) at ../../Source/WebCore/dom/ScriptElement.cpp:242
#42 0x00002ad0eef9c56b in WebCore::HTMLScriptRunner::runScript (this=0x3371c3d0, script=0x338dc7f0, scriptStartPosition=...) at ../../Source/WebCore/html/parser/HTMLScriptRunner.cpp:296
#43 0x00002ad0eef9bbdc in WebCore::HTMLScriptRunner::execute (this=0x3371c3d0, scriptElement=..., scriptStartPosition=...) at ../../Source/WebCore/html/parser/HTMLScriptRunner.cpp:170
#44 0x00002ad0eef8e891 in WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder (this=0x33689690) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:205
#45 0x00002ad0eef8e94d in WebCore::HTMLDocumentParser::canTakeNextToken (this=0x33689690, mode=WebCore::HTMLDocumentParser::AllowYield, session=...) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:223
#46 0x00002ad0eef8ed2c in WebCore::HTMLDocumentParser::pumpTokenizer (this=0x33689690, mode=WebCore::HTMLDocumentParser::AllowYield) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:261
#47 0x00002ad0eef8e6e6 in WebCore::HTMLDocumentParser::pumpTokenizerIfPossible (this=0x33689690, mode=WebCore::HTMLDocumentParser::AllowYield) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:175
#48 0x00002ad0eef8f234 in WebCore::HTMLDocumentParser::append (this=0x33689690, source=...) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:367
#49 0x00002ad0eed4f2c2 in WebCore::DecodedDataDocumentParser::flush (this=0x33689690, writer=0x335fe280) at ../../Source/WebCore/dom/DecodedDataDocumentParser.cpp:60
#50 0x00002ad0ef0d0ef3 in WebCore::DocumentWriter::endIfNotLoadingMainResource (this=0x335fe280) at ../../Source/WebCore/loader/DocumentWriter.cpp:227
#51 0x00002ad0ef0d0e3d in WebCore::DocumentWriter::end (this=0x335fe280) at ../../Source/WebCore/loader/DocumentWriter.cpp:209
#52 0x00002ad0ef0c4b73 in WebCore::DocumentLoader::finishedLoading (this=0x335fe160) at ../../Source/WebCore/loader/DocumentLoader.cpp:289
#53 0x00002ad0ef0dc8d5 in WebCore::FrameLoader::finishedLoading (this=0xdfe0b8) at ../../Source/WebCore/loader/FrameLoader.cpp:2048
#54 0x00002ad0ef1114fc in WebCore::MainResourceLoader::didFinishLoading (this=0x335d9a60, finishTime=0) at ../../Source/WebCore/loader/MainResourceLoader.cpp:485
#55 0x00002ad0ef11e23b in WebCore::ResourceLoader::didFinishLoading (this=0x335d9a60, finishTime=0) at ../../Source/WebCore/loader/ResourceLoader.cpp:474
#56 0x00002ad0ef2b3fbc in WebCore::readCallback (source=0xa6bf400, asyncResult=0x2fa01e0, data=0x0) at ../../Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:792
#57 0x00002ad0f2ea3b59 in async_ready_callback_wrapper (source_object=0xa6bf400, res=0x2fa01e0, user_data=0x0) at /tmp/buildd/glib2.0-2.28.6/./gio/ginputstream.c:470
#58 0x00002ad0f2eb3a68 in complete_in_idle_cb_for_thread (_data=0x33659780) at /tmp/buildd/glib2.0-2.28.6/./gio/gsimpleasyncresult.c:812
#59 0x00002ad0f3a214a3 in g_main_dispatch (context=0xd89660) at /tmp/buildd/glib2.0-2.28.6/./glib/gmain.c:2440
#60 g_main_context_dispatch (context=0xd89660) at /tmp/buildd/glib2.0-2.28.6/./glib/gmain.c:3013
#61 0x00002ad0f3a21c80 in g_main_context_iterate (context=0xd89660, block=1, dispatch=1, self=<value optimized out>) at /tmp/buildd/glib2.0-2.28.6/./glib/gmain.c:3091
#62 0x00002ad0f3a222f2 in g_main_loop_run (loop=0x33728d30) at /tmp/buildd/glib2.0-2.28.6/./glib/gmain.c:3299
#63 0x00002ad0f195d2b7 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#64 0x000000000042e9a8 in runTest (testPathOrURL=...) at ../../Tools/DumpRenderTree/gtk/DumpRenderTree.cpp:708
#65 0x000000000042e045 in runTestingServerLoop () at ../../Tools/DumpRenderTree/gtk/DumpRenderTree.cpp:500
#66 0x00000000004302d1 in main (argc=2, argv=0x7fffb55831b8) at ../../Tools/DumpRenderTree/gtk/DumpRenderTree.cpp:1187

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

More information about the webkit-unassigned mailing list