[Webkit-unassigned] [Bug 57221] New: REGRESSION(r81992): Assertion failure: ASSERT(!m_hasBadParent)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=57221

           Summary: REGRESSION(r81992): Assertion failure:
                    ASSERT(!m_hasBadParent)
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Major
          Priority: P1
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: yutak at chromium.org
                CC: hyatt at apple.com, mitz at webkit.org


If you access http://mbl.is/, the browser crashes with the following assertion failure. This happens on revisions after r81992.


ASSERTION FAILED: !m_hasBadParent
/Users/yutak/WebKit/Source/WebCore/rendering/InlineBox.h(214) : WebCore::InlineFlowBox* WebCore::InlineBox::parent() const
1   WebCore::InlineBox::parent() const
2   WebCore::InlineTextBox::paint(WebCore::PaintInfo&, int, int)
3   WebCore::InlineFlowBox::paint(WebCore::PaintInfo&, int, int)
4   WebCore::InlineFlowBox::paint(WebCore::PaintInfo&, int, int)
5   WebCore::RootInlineBox::paint(WebCore::PaintInfo&, int, int)
6   WebCore::RenderLineBoxList::paint(WebCore::RenderBoxModelObject*, WebCore::PaintInfo&, int, int) const
7   WebCore::RenderBlock::paintContents(WebCore::PaintInfo&, int, int)
8   WebCore::RenderBlock::paintObject(WebCore::PaintInfo&, int, int)
9   WebCore::RenderBlock::paint(WebCore::PaintInfo&, int, int)
10  WebCore::RenderListItem::paint(WebCore::PaintInfo&, int, int)
11  WebCore::RenderLayer::paintLayer(WebCore::RenderLayer*, WebCore::GraphicsContext*, WebCore::IntRect const&, unsigned int, WebCore::RenderObject*, WTF::HashMap<WebCore::OverlapTestRequestClient*, WebCore::IntRect, WTF::PtrHash<WebCore::OverlapTestRequestClient*>, WTF::HashTraits<WebCore::OverlapTestRequestClient*>, WTF::HashTraits<WebCore::IntRect> >*, unsigned int)
12  WebCore::RenderLayer::paintList(WTF::Vector<WebCore::RenderLayer*, 0ul>*, WebCore::RenderLayer*, WebCore::GraphicsContext*, WebCore::IntRect const&, unsigned int, WebCore::RenderObject*, WTF::HashMap<WebCore::OverlapTestRequestClient*, WebCore::IntRect, WTF::PtrHash<WebCore::OverlapTestRequestClient*>, WTF::HashTraits<WebCore::OverlapTestRequestClient*>, WTF::HashTraits<WebCore::IntRect> >*, unsigned int)
13  WebCore::RenderLayer::paintLayer(WebCore::RenderLayer*, WebCore::GraphicsContext*, WebCore::IntRect const&, unsigned int, WebCore::RenderObject*, WTF::HashMap<WebCore::OverlapTestRequestClient*, WebCore::IntRect, WTF::PtrHash<WebCore::OverlapTestRequestClient*>, WTF::HashTraits<WebCore::OverlapTestRequestClient*>, WTF::HashTraits<WebCore::IntRect> >*, unsigned int)
14  WebCore::RenderLayer::paintList(WTF::Vector<WebCore::RenderLayer*, 0ul>*, WebCore::RenderLayer*, WebCore::GraphicsContext*, WebCore::IntRect const&, unsigned int, WebCore::RenderObject*, WTF::HashMap<WebCore::OverlapTestRequestClient*, WebCore::IntRect, WTF::PtrHash<WebCore::OverlapTestRequestClient*>, WTF::HashTraits<WebCore::OverlapTestRequestClient*>, WTF::HashTraits<WebCore::IntRect> >*, unsigned int)
15  WebCore::RenderLayer::paintLayer(WebCore::RenderLayer*, WebCore::GraphicsContext*, WebCore::IntRect const&, unsigned int, WebCore::RenderObject*, WTF::HashMap<WebCore::OverlapTestRequestClient*, WebCore::IntRect, WTF::PtrHash<WebCore::OverlapTestRequestClient*>, WTF::HashTraits<WebCore::OverlapTestRequestClient*>, WTF::HashTraits<WebCore::IntRect> >*, unsigned int)
16  WebCore::RenderLayer::paint(WebCore::GraphicsContext*, WebCore::IntRect const&, unsigned int, WebCore::RenderObject*)
17  WebCore::FrameView::paintContents(WebCore::GraphicsContext*, WebCore::IntRect const&)
18  -[WebFrame(WebInternal) _drawRect:contentsOnly:]
19  -[WebHTMLView drawSingleRect:]
20  -[WebHTMLView drawRect:]
21  -[NSView _drawRect:clip:]
22  -[NSView _recursiveDisplayAllDirtyWithLockFocus:visRect:]
23  -[WebHTMLView(WebPrivate) _recursiveDisplayAllDirtyWithLockFocus:visRect:]
24  -[NSView _recursiveDisplayAllDirtyWithLockFocus:visRect:]
25  -[NSView _recursiveDisplayAllDirtyWithLockFocus:visRect:]
26  -[NSView _recursiveDisplayAllDirtyWithLockFocus:visRect:]
27  -[NSView _recursiveDisplayAllDirtyWithLockFocus:visRect:]
28  -[NSView _recursiveDisplayAllDirtyWithLockFocus:visRect:]
29  -[NSView _recursiveDisplayAllDirtyWithLockFocus:visRect:]
30  -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:]
31  -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:]

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_INVALID_ADDRESS at address: 0x00000000bbadbeef
0x000000010212987d in WebCore::InlineBox::parent (this=0x11902dbd8) at InlineBox.h:214
214            ASSERT(!m_hasBadParent);

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.