[Webkit-unassigned] [Bug 70719] New: Crash in WebCore::RenderLayer::updateLayerPositionsAfterScroll(bool) due to assert failure

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=70719

           Summary: Crash in
                    WebCore::RenderLayer::updateLayerPositionsAfterScroll(
                    bool) due to assert failure
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh Intel
        OS/Version: Mac OS X 10.7
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: rex_4539 at yahoo.com


Created an attachment (id=112176)
 --> (https://bugs.webkit.org/attachment.cgi?id=112176&action=review)
Crash log.

r98218

Reproducibility: once

Steps:
1. I opened an issue in JIRA 4.3
2. I scrolled to the bottom (as there were several comments) and clicked on "Comment" button to add a new comment.

What happened:
Assert failure and crash.

ASSERTION FAILED: !m_visibleContentStatusDirty
/Users/rex/WebKit/Source/WebCore/rendering/RenderLayer.cpp(428) : void WebCore::RenderLayer::updateLayerPositionsAfterScroll(bool)
1   0x10bdfafb4 WebCore::RenderLayer::updateLayerPositionsAfterScroll(bool)
2   0x10bdfb09a WebCore::RenderLayer::updateLayerPositionsAfterScroll(bool)
3   0x10bdfb09a WebCore::RenderLayer::updateLayerPositionsAfterScroll(bool)
4   0x10bdfb09a WebCore::RenderLayer::updateLayerPositionsAfterScroll(bool)
5   0x10bdfb09a WebCore::RenderLayer::updateLayerPositionsAfterScroll(bool)
6   0x10bdfb09a WebCore::RenderLayer::updateLayerPositionsAfterScroll(bool)
7   0x10bdfb09a WebCore::RenderLayer::updateLayerPositionsAfterScroll(bool)
8   0x10b3a33a3 WebCore::FrameView::repaintFixedElementsAfterScrolling()
9   0x10bfdd95e WebCore::ScrollView::scrollTo(WebCore::IntSize const&)
10  0x10b3a5634 WebCore::FrameView::scrollTo(WebCore::IntSize const&)
11  0x10bfdd865 WebCore::ScrollView::setScrollOffset(WebCore::IntPoint const&)
12  0x10bfdd89f non-virtual thunk to WebCore::ScrollView::setScrollOffset(WebCore::IntPoint const&)
13  0x10bfc7d83 WebCore::ScrollableArea::setScrollOffsetFromAnimation(WebCore::IntPoint const&)
14  0x10bfc96ef WebCore::ScrollAnimator::notifyPositionChanged()
15  0x10bfcda0d WebCore::ScrollAnimatorMac::notifyPositionChanged()
16  0x10bfcd4e8 WebCore::ScrollAnimatorMac::immediateScrollToPoint(WebCore::FloatPoint const&)
17  0x10bfcc826 WebCore::ScrollAnimatorMac::snapRubberBandTimerFired(WebCore::Timer<WebCore::ScrollAnimatorMac>*)
18  0x10bfd0aa3 WebCore::Timer<WebCore::ScrollAnimatorMac>::fired()
19  0x10c1ea807 WebCore::ThreadTimers::sharedTimerFiredInternal()
20  0x10c1ea5d9 WebCore::ThreadTimers::sharedTimerFired()
21  0x10c014223 _ZN7WebCoreL10timerFiredEP16__CFRunLoopTimerPv
22  0x108b57f84 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__
23  0x108b57ad6 __CFRunLoopDoTimer
24  0x108b38471 __CFRunLoopRun
25  0x108b37ae6 CFRunLoopRunSpecific
26  0x1147f83d3 RunCurrentEventLoopInMode
27  0x1147ff63d ReceiveNextEventCommon
28  0x1147ff4ca BlockUntilNextEventMatchingListInMode
29  0x11040e3f1 _DPSNextEvent
30  0x11040dcf5 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:]
31  0x11040a62d -[NSApplication run]

Expected result:
No assert failure, no crash.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.