[Webkit-unassigned] [Bug 101791] New: REGRESSION(r130643): ASSERTION FAILED:!isDeletedBucket(*(lookupForWriting(Extractor::extract(entry)).first)) when running DRT in debug mode

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Nov 9 13:31:30 PST 2012


https://bugs.webkit.org/show_bug.cgi?id=101791

           Summary: REGRESSION(r130643): ASSERTION
                    FAILED:!isDeletedBucket(*(lookupForWriting(Extractor::
                    extract(entry)).first)) when running DRT in debug mode
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: CSS
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: roger_fong at apple.com
                CC: kling at webkit.org


The problem occurs when calling WebKitCreateInstance.

The associated hashtable tries to resize and the reinsert objects but one of the object's values is CLSID_NULL for some reason which indicates that it has been deleted already, and the !isDeletedBucket assertion fails.

Here is the stack trace:

>	WebKit.dll!WTF::HashTable<_GUID,WTF::KeyValuePair<_GUID,COMPtr<IClassFactory> >,WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<_GUID,COMPtr<IClassFactory> > >,CLSIDHash,WTF::HashMapValueTraits<CLSIDHashTraits,WTF::HashTraits<COMPtr<IClassFactory> > >,CLSIDHashTraits>::reinsert(WTF::KeyValuePair<_GUID,COMPtr<IClassFactory> > & entry={...})  Line 953 + 0x51 bytes	C++
     WebKit.dll!WTF::HashTable<_GUID,WTF::KeyValuePair<_GUID,COMPtr<IClassFactory> >,WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<_GUID,COMPtr<IClassFactory> > >,CLSIDHash,WTF::HashMapValueTraits<CLSIDHashTraits,WTF::HashTraits<COMPtr<IClassFactory> > >,CLSIDHashTraits>::rehash(int newTableSize=16)  Line 1135    C++
     WebKit.dll!WTF::HashTable<_GUID,WTF::KeyValuePair<_GUID,COMPtr<IClassFactory> >,WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<_GUID,COMPtr<IClassFactory> > >,CLSIDHash,WTF::HashMapValueTraits<CLSIDHashTraits,WTF::HashTraits<COMPtr<IClassFactory> > >,CLSIDHashTraits>::expand()  Line 1107    C++
     WebKit.dll!WTF::HashTable<_GUID,WTF::KeyValuePair<_GUID,COMPtr<IClassFactory> >,WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<_GUID,COMPtr<IClassFactory> > >,CLSIDHash,WTF::HashMapValueTraits<CLSIDHashTraits,WTF::HashTraits<COMPtr<IClassFactory> > >,CLSIDHashTraits>::add<WTF::HashMapTranslator<WTF::HashMapValueTraits<CLSIDHashTraits,WTF::HashTraits<COMPtr<IClassFactory> > >,CLSIDHash>,_GUID,COMPtr<IClassFactory> >(const _GUID & key={...}, const COMPtr<IClassFactory> & extra={...})  Line 893    C++
     WebKit.dll!WTF::HashMap<_GUID,COMPtr<IClassFactory>,CLSIDHash,CLSIDHashTraits,WTF::HashTraits<COMPtr<IClassFactory> > >::inlineAdd(const _GUID & key={...}, const COMPtr<IClassFactory> & mapped={...})  Line 334 + 0x14 bytes    C++
     WebKit.dll!WTF::HashMap<_GUID,COMPtr<IClassFactory>,CLSIDHash,CLSIDHashTraits,WTF::HashTraits<COMPtr<IClassFactory> > >::add(const _GUID & key={...}, const COMPtr<IClassFactory> & mapped={...})  Line 361 + 0x14 bytes    C++
     WebKit.dll!classFactory(const _GUID & clsid={...})  Line 54 + 0x21 bytes    C++
     WebKit.dll!WebKitCreateInstance(const _GUID & rclsid={...}, IUnknown * pUnkOuter=0x00000000, const _GUID & riid={...}, void * * ppvObject=0x002efb64)  Line 64 + 0xd bytes    C++
     DumpRenderTree.dll!dllLauncherEntryPoint(int argc=2, const char * * argv=0x00141ba0)  Line 1392 + 0x1a bytes    C++
     DumpRenderTree.exe!main(int argc=2, const char * * argv=0x00141ba0)  Line 206 + 0x10 bytes    C++
     DumpRenderTree.exe!__tmainCRTStartup()  Line 597 + 0x17 bytes    C

Work around: 
Following http://trac.webkit.org/changeset/132302, by reverting the minimum hash table size back to 64 this problem can be avoided temporarily.
As with the r132302 this will need a proper fix at some point.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.


More information about the webkit-unassigned mailing list