[Webkit-unassigned] [Bug 94403] New: Crashing in WebCore::RenderScrollbarPart::layout()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=94403

           Summary: Crashing in WebCore::RenderScrollbarPart::layout()
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: scherkus at chromium.org
                CC: simon.fraser at apple.com


Verified by building Chromium @ r152151 and selectively reverting WebKit r124168

Repro (apologies for not having a smaller isolated test case!)
  1) Visit http://drive.google.com
  2) Create a new Google Spreadsheet
  3) File > Import
  4) *boom*

0x7f55fa4245f4     [chrome]     - third_party/WebKit/Source/WebCore/rendering/RenderTableCell.cpp:760]    WebCore::RenderTableCell::borderBottom
0x7f55fa416eec     [chrome]     - third_party/WebKit/Source/WebCore/rendering/RenderScrollbarPart.cpp:110]    WebCore::RenderScrollbarPart::computeScrollbarHeight
0x7f55fa417ad4     [chrome]     - third_party/WebKit/Source/WebCore/rendering/RenderScrollbarPart.cpp:53]    WebCore::RenderScrollbarPart::layout
0x7f55fa4162be     [chrome]     - third_party/WebKit/Source/WebCore/rendering/RenderScrollbar.cpp:56]    WebCore::RenderScrollbar::RenderScrollbar
0x7f55fa4163e0     [chrome]     - third_party/WebKit/Source/WebCore/rendering/RenderScrollbar.cpp:39]    WebCore::RenderScrollbar::createCustomScrollbar
0x7f55fa3c3b95     [chrome]     - third_party/WebKit/Source/WebCore/rendering/RenderLayer.cpp:2263]    WebCore::RenderLayer::createScrollbar
0x7f55fa3c3d6c     [chrome]     - third_party/WebKit/Source/WebCore/rendering/RenderLayer.cpp:2312]    WebCore::RenderLayer::setHasHorizontalScrollbar
0x7f55fa3c5c23     [chrome]     - third_party/WebKit/Source/WebCore/rendering/RenderLayer.cpp:4856]    WebCore::RenderLayer::updateScrollbarsAfterStyleChange
0x7f55fa3d1498     [chrome]     - third_party/WebKit/Source/WebCore/rendering/RenderLayer.cpp:4897]    WebCore::RenderLayer::styleChanged
0x7f55fa38f117     [chrome]     - third_party/WebKit/Source/WebCore/rendering/RenderBoxModelObject.cpp:445]    WebCore::RenderBoxModelObject::styleDidChange
0x7f55fa37d764     [chrome]     - third_party/WebKit/Source/WebCore/rendering/RenderBox.cpp:233]    WebCore::RenderBox::styleDidChange
0x7f55fa353685     [chrome]     - third_party/WebKit/Source/WebCore/rendering/RenderBlock.cpp:315]    WebCore::RenderBlock::styleDidChange
0x7f55fa425122     [chrome]     - third_party/WebKit/Source/WebCore/rendering/RenderTableCell.cpp:331]    WebCore::RenderTableCell::styleDidChange
0x7f55fa408893     [chrome]     - third_party/WebKit/Source/WebCore/rendering/RenderObject.cpp:1753]    WebCore::RenderObject::setStyle
0x7f55fa405d1e     [chrome]     - third_party/WebKit/Source/WebCore/rendering/RenderObject.cpp:1654]    WebCore::RenderObject::setAnimatableStyle
0x7f55f9af294e     [chrome]     - third_party/WebKit/Source/WebCore/dom/NodeRenderingContext.cpp:291]    WebCore::NodeRendererFactory::createRenderer
0x7f55f9af2e8f     [chrome]     - third_party/WebKit/Source/WebCore/dom/NodeRenderingContext.cpp:324]    WebCore::NodeRendererFactory::createRendererIfNeeded
0x7f55f9ae7927     [chrome]     - third_party/WebKit/Source/WebCore/dom/Node.cpp:1384]    WebCore::Node::createRendererIfNeeded
0x7f55f9ad093c     [chrome]     - third_party/WebKit/Source/WebCore/dom/Element.cpp:949]    WebCore::Element::attach
0x7f55f9a9b443     [chrome]     - third_party/WebKit/Source/WebCore/dom/ContainerNode.h:170]    WebCore::ContainerNode::attach
0x7f55f9ad0a81     [chrome]     - third_party/WebKit/Source/WebCore/dom/Element.cpp:964]    WebCore::Element::attach
0x7f55f9a9b443     [chrome]     - third_party/WebKit/Source/WebCore/dom/ContainerNode.h:170]    WebCore::ContainerNode::attach
0x7f55f9ad0a81     [chrome]     - third_party/WebKit/Source/WebCore/dom/Element.cpp:964]    WebCore::Element::attach
0x7f55f9a9b443     [chrome]     - third_party/WebKit/Source/WebCore/dom/ContainerNode.h:170]    WebCore::ContainerNode::attach
0x7f55f9ad0a81     [chrome]     - third_party/WebKit/Source/WebCore/dom/Element.cpp:964]    WebCore::Element::attach
0x7f55f9a9b443     [chrome]     - third_party/WebKit/Source/WebCore/dom/ContainerNode.h:170]    WebCore::ContainerNode::attach
0x7f55f9ad0a81     [chrome]     - third_party/WebKit/Source/WebCore/dom/Element.cpp:964]    WebCore::Element::attach
0x7f55f9ad28b3     [chrome]     - third_party/WebKit/Source/WebCore/dom/Node.h:867]    WebCore::Element::recalcStyle
0x7f55f9ad29a9     [chrome]     - third_party/WebKit/Source/WebCore/dom/Element.cpp:1166]    WebCore::Element::recalcStyle
0x7f55f9ad29a9     [chrome]     - third_party/WebKit/Source/WebCore/dom/Element.cpp:1166]    WebCore::Element::recalcStyle
0x7f55f9ab81a2     [chrome]     - third_party/WebKit/Source/WebCore/dom/Document.cpp:1845]    WebCore::Document::recalcStyle
0x7f55f9ab84fd     [chrome]     - third_party/WebKit/Source/WebCore/dom/Document.cpp:1893]    WebCore::Document::updateStyleIfNeeded
0x7f55f9aa7c36     [chrome]     - third_party/WebKit/Source/WebCore/dom/Document.cpp:1916]    WebCore::Document::updateLayout
0x7f55f9ab8d7f     [chrome]     - third_party/WebKit/Source/WebCore/dom/Document.cpp:1953]    WebCore::Document::updateLayoutIgnorePendingStylesheets
0x7f55f9ad2f4b     [chrome]     - third_party/WebKit/Source/WebCore/dom/Element.cpp:1572]    WebCore::Element::focus

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.