[Webkit-unassigned] [Bug 78695] ASSERT in WebCore::RenderTableCell::col - m_column != unsetColumnIndex

Fri Mar 23 13:08:21 PDT 2012

https://bugs.webkit.org/show_bug.cgi?id=78695

Rick Byers <rbyers at chromium.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|ASSERT in                   |ASSERT in
                   |WebCore::RenderTableCell::c |WebCore::RenderTableCell::c
                   |ol editing a wiki table     |ol - m_column !=
                   |                            |unsetColumnIndex
                 CC|                            |rbyers at chromium.org

--- Comment #3 from Rick Byers <rbyers at chromium.org>  2012-03-23 13:08:22 PST ---
I'm also seeing this assert any time I try to drop a file into GMail.  Repro steps:
- Go to gmail.com, sign in
- Compose a new message
- Drag a file from desktop to the compose window, drop on the area indicated for attachments

Saw this in Chromium build r128227 on Linux, WebKit 536.4 trunk/Source/WebCore/Configurations at 111590.

Here's the callstack in my case.  At quick glance it seems the same as the previous report.

Program received signal SIGSEGV, Segmentation fault.
0x00007ff1d15ee4e2 in WebCore::RenderTableCell::col (this=0x7ff1c0cf9978) at ../../third_party/WebKit/Source/WebCore/rendering/RenderTableCell.h:64
64            ASSERT(m_column != unsetColumnIndex);
(gdb) bt
#0  0x00007ff1d15ee4e2 in WebCore::RenderTableCell::col (this=0x7ff1c0cf9978)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderTableCell.h:64
#1  0x00007ff1d176f486 in WebCore::RenderTableCell::computeCollapsedStartBorder (this=0x7ff1c0cf9978, includeColor=WebCore::DoNotIncludeBorderColor)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderTableCell.cpp:425
#2  0x00007ff1d176f3fc in WebCore::RenderTableCell::collapsedStartBorder (this=0x7ff1c0cf9978, includeColor=WebCore::DoNotIncludeBorderColor)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderTableCell.cpp:416
#3  0x00007ff1d1771c60 in WebCore::RenderTableCell::borderHalfStart (this=0x7ff1c0cf9978, outer=false)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderTableCell.cpp:826
#4  0x00007ff1d17719e9 in WebCore::RenderTableCell::borderHalfLeft (this=0x7ff1c0cf9978, outer=false)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderTableCell.cpp:796
#5  0x00007ff1d1771793 in WebCore::RenderTableCell::borderLeft (this=0x7ff1c0cf9978)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderTableCell.cpp:752
#6  0x00007ff1d167faf2 in WebCore::RenderBox::clientWidth (this=0x7ff1c0cf9978)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderBox.cpp:480
#7  0x00007ff1d161e942 in WebCore::RenderBox::contentWidth (this=0x7ff1c0cf9978, paddingOption=WebCore::ExcludeIntrinsicPadding)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderBox.h:188
#8  0x00007ff1d161ea32 in WebCore::RenderBox::contentLogicalWidth (this=0x7ff1c0cf9978, paddingOption=WebCore::ExcludeIntrinsicPadding)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderBox.h:190
#9  0x00007ff1d161eb93 in WebCore::RenderBox::availableLogicalWidth (this=0x7ff1c0cf9978)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderBox.h:356
#10 0x00007ff1d163695e in WebCore::RenderBlock::availableLogicalWidth (this=0x7ff1c0cf9978)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderBlock.cpp:4886
#11 0x00007ff1d1684087 in WebCore::RenderBox::containingBlockLogicalWidthForContent (this=0x7ff1c0cfc558)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderBox.cpp:1364
#12 0x00007ff1d16840be in WebCore::RenderBox::containingBlockLogicalWidthForContentInRegion (this=0x7ff1c0cfc558, region=0x0, 
    offsetFromLogicalTopOfFirstPage=0) at ../../third_party/WebKit/Source/WebCore/rendering/RenderBox.cpp:1370
#13 0x00007ff1d1685e89 in WebCore::RenderBox::computeLogicalWidthInRegion (this=0x7ff1c0cfc558, region=0x0, offsetFromLogicalTopOfFirstPage=0)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderBox.cpp:1774
#14 0x00007ff1d1685bf2 in WebCore::RenderBox::computeLogicalWidth (this=0x7ff1c0cfc558)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderBox.cpp:1739
#15 0x00007ff1d16e98a1 in WebCore::RenderImage::imageDimensionsChanged (this=0x7ff1c0cfc558, imageSizeChanged=false, rect=0x0)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderImage.cpp:201
#16 0x00007ff1d16e96be in WebCore::RenderImage::imageChanged (this=0x7ff1c0cfc558, newImage=0x7ff1c19e9c00, rect=0x0)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderImage.cpp:175
#17 0x00007ff1d174a59b in WebCore::RenderObject::imageChanged (this=0x7ff1c0cfc558, image=0x7ff1c19e9c00, rect=0x0)
---Type <return> to continue, or q <return> to quit---
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderObject.cpp:2728
#18 0x00007ff1d2408158 in WebCore::CachedImage::didAddClient (this=0x7ff1c19e9c00, c=0x7ff1c0cfc558)
    at ../../third_party/WebKit/Source/WebCore/loader/cache/CachedImage.cpp:114
#19 0x00007ff1d240d2ad in WebCore::CachedResource::addClient (this=0x7ff1c19e9c00, client=0x7ff1c0cfc558)
    at ../../third_party/WebKit/Source/WebCore/loader/cache/CachedResource.cpp:378
#20 0x00007ff1d16ec521 in WebCore::RenderImageResource::setCachedImage (this=0x7ff1c0452580, newImage=0x7ff1c19e9c00)
    at ../../third_party/WebKit/Source/WebCore/rendering/RenderImageResource.cpp:73
#21 0x00007ff1d25cd838 in WebCore::HTMLImageElement::attach (this=0x7ff1c0d960c0)
    at ../../third_party/WebKit/Source/WebCore/html/HTMLImageElement.cpp:162
#22 0x00007ff1d17fed23 in WebCore::ContainerNode::attachChildren (this=0x7ff1c0423000)
    at ../../third_party/WebKit/Source/WebCore/dom/ContainerNode.h:165
#23 0x00007ff1d17fcc6c in WebCore::ContainerNode::attach (this=0x7ff1c0423000) at ../../third_party/WebKit/Source/WebCore/dom/ContainerNode.cpp:741
#24 0x00007ff1d1869212 in WebCore::Element::attach (this=0x7ff1c0423000) at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:962
#25 0x00007ff1d17fed23 in WebCore::ContainerNode::attachChildren (this=0x7ff1c2cebf80)
    at ../../third_party/WebKit/Source/WebCore/dom/ContainerNode.h:165
#26 0x00007ff1d17fcc6c in WebCore::ContainerNode::attach (this=0x7ff1c2cebf80) at ../../third_party/WebKit/Source/WebCore/dom/ContainerNode.cpp:741
#27 0x00007ff1d1869212 in WebCore::Element::attach (this=0x7ff1c2cebf80) at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:962
#28 0x00007ff1d17eab0e in WebCore::Node::reattach (this=0x7ff1c2cebf80) at ../../third_party/WebKit/Source/WebCore/dom/Node.h:818
#29 0x00007ff1d1869994 in WebCore::Element::recalcStyle (this=0x7ff1c2cebf80, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1069
#30 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c0de6000, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#31 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c079cd20, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#32 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c0ddb300, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#33 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c24f1100, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#34 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c24f1480, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#35 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c24f1280, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#36 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c0c2e480, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#37 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c0423480, change=WebCore::Node::NoChange)
---Type <return> to continue, or q <return> to quit---
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#38 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c0423400, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#39 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c0423500, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#40 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c104a200, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#41 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c1a6d200, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#42 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c1a6d280, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#43 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c1a6d300, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#44 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c1a6d400, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#45 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c1a6d500, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#46 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c131a800, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#47 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c131a780, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#48 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c131a400, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#49 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c131a380, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#50 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c1a6d080, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#51 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c1385000, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#52 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c12d4900, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#53 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c1d3ce80, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
#54 0x00007ff1d186a02b in WebCore::Element::recalcStyle (this=0x7ff1c1d3cf80, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Element.cpp:1146
---Type <return> to continue, or q <return> to quit---
#55 0x00007ff1d181aac9 in WebCore::Document::recalcStyle (this=0x7ff1c1c4e600, change=WebCore::Node::NoChange)
    at ../../third_party/WebKit/Source/WebCore/dom/Document.cpp:1627
#56 0x00007ff1d181adb8 in WebCore::Document::updateStyleIfNeeded (this=0x7ff1c1c4e600)
    at ../../third_party/WebKit/Source/WebCore/dom/Document.cpp:1677
#57 0x00007ff1d181a6c5 in WebCore::Document::styleRecalcTimerFired (this=0x7ff1c1c4e600)
    at ../../third_party/WebKit/Source/WebCore/dom/Document.cpp:1571
#58 0x00007ff1d1851c72 in WebCore::Timer<WebCore::Document>::fired (this=0x7ff1c1c4ef40)
    at ../../third_party/WebKit/Source/WebCore/platform/Timer.h:100
#59 0x00007ff1d1cfd660 in WebCore::ThreadTimers::sharedTimerFiredInternal (this=0x7ff1c2d6c690)
    at ../../third_party/WebKit/Source/WebCore/platform/ThreadTimers.cpp:115
#60 0x00007ff1d1cfd597 in WebCore::ThreadTimers::sharedTimerFired () at ../../third_party/WebKit/Source/WebCore/platform/ThreadTimers.cpp:93
#61 0x00007ff1d563c6b0 in webkit_glue::WebKitPlatformSupportImpl::DoTimeout (this=0x7ff1c56f3460)
    at ../../webkit/glue/webkitplatformsupport_impl.h:147
#62 0x00007ff1d563cf23 in base::BaseTimer<webkit_glue::WebKitPlatformSupportImpl, false>::TimerTask::Run (this=0x7ff1c0d5e720)
    at ../../base/timer.h:174
#63 0x00007ff1d66b19ad in base::internal::RunnableAdapter<void (base::BaseTimer_Helper::TimerTask::*)()>::Run (this=0x7ffffd020da0, object=
    0x7ff1c0d5e720) at ../../base/bind_internal.h:132
#64 0x00007ff1d66b1931 in base::internal::InvokeHelper<false, void, base::internal::RunnableAdapter<void (base::BaseTimer_Helper::TimerTask::*)()>, void (base::BaseTimer_Helper::TimerTask*)>::MakeItSo(base::internal::RunnableAdapter<void (base::BaseTimer_Helper::TimerTask::*)()>, base::BaseTimer_Helper::TimerTask*) (runnable=..., a1=0x7ff1c0d5e720) at ../../base/bind_internal.h:868
#65 0x00007ff1d66b18dd in base::internal::Invoker<1, base::internal::BindState<base::internal::RunnableAdapter<void (base::BaseTimer_Helper::TimerTask::*)()>, void (base::BaseTimer_Helper::TimerTask*), void (base::internal::OwnedWrapper<base::BaseTimer_Helper::TimerTask>)>, void (base::BaseTimer_Helper::TimerTask*)>::Run(base::internal::BindStateBase*) (base=0x7ff1c04f80c0) at ../../base/bind_internal.h:1170
#66 0x00007ff1d6608bdf in base::Callback<void ()>::Run() const (this=0x7ffffd0210c8) at ../../base/callback.h:272
#67 0x00007ff1d6646dc0 in MessageLoop::RunTask (this=0x7ffffd0219f0, pending_task=...) at ../../base/message_loop.cc:458
#68 0x00007ff1d6646ed7 in MessageLoop::DeferOrRunPendingTask (this=0x7ffffd0219f0, pending_task=...) at ../../base/message_loop.cc:470
#69 0x00007ff1d664790f in MessageLoop::DoDelayedWork (this=0x7ffffd0219f0, next_delayed_work_time=0x7ff1c5715618) at ../../base/message_loop.cc:698
#70 0x00007ff1d664fb54 in base::MessagePumpDefault::Run (this=0x7ff1c5715600, delegate=0x7ffffd0219f0) at ../../base/message_pump_default.cc:32
#71 0x00007ff1d6646a87 in MessageLoop::RunInternal (this=0x7ffffd0219f0) at ../../base/message_loop.cc:417
#72 0x00007ff1d664693a in MessageLoop::RunHandler (this=0x7ffffd0219f0) at ../../base/message_loop.cc:390
#73 0x00007ff1d664626f in MessageLoop::Run (this=0x7ffffd0219f0) at ../../base/message_loop.cc:300
#74 0x00007ff1d954a04a in RendererMain (parameters=...) at ../../content/renderer/renderer_main.cc:241
#75 0x00007ff1d8f45a29 in (anonymous namespace)::RunZygote (main_function_params=..., delegate=0x7ffffd022450)
    at ../../content/app/content_main_runner.cc:245
#76 0x00007ff1d8f45c4e in (anonymous namespace)::RunNamedProcessTypeMain (process_type="zygote", main_function_params=..., delegate=0x7ffffd022450)
---Type <return> to continue, or q <return> to quit---
    at ../../content/app/content_main_runner.cc:290
#77 0x00007ff1d8f46474 in (anonymous namespace)::ContentMainRunnerImpl::Run (this=0x7ff1c56fa660) at ../../content/app/content_main_runner.cc:511
#78 0x00007ff1d8f45389 in content::ContentMain (argc=4, argv=0x7ffffd0225b8, delegate=0x7ffffd022450) at ../../content/app/content_main.cc:35
#79 0x00007ff1db32135d in ChromeMain (argc=4, argv=0x7ffffd0225b8) at ../../chrome/app/chrome_main.cc:32
#80 0x00007ff1db32131c in main (argc=4, argv=0x7ffffd0225b8) at ../../chrome/app/chrome_exe_main_gtk.cc:18

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.