[Webkit-unassigned] [Bug 106214] New: [EFL][WK2][INSPECTOR] Crash when going m.blog.naver.com with inspector window

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=106214

           Summary: [EFL][WK2][INSPECTOR] Crash when going
                    m.blog.naver.com with inspector window
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit EFL
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: gyuyoung.kim at samsung.com
                CC: demarchi at webkit.org


When I go m.blog.naver.com with inspector window, MiniBrowser comes to crash.

Show Inspector (Ctrl+i) was pressed.
ASSERTION FAILED: m_repaintRect == renderer()->clippedOverflowRectForRepaint(renderer()->containerForRepaint())
/home/gyuyoung/webkit/WebKit/Source/WebCore/rendering/RenderLayer.cpp(759) : void WebCore::RenderLayer::updateLayerPositionsAfterScroll(WebCore::RenderGeometryMap*, WebCore::RenderLayer::UpdateLayerPositionsAfterScrollFlags)
1   0x7f7d71d26a84 WebCore::RenderLayer::updateLayerPositionsAfterScroll(WebCore::RenderGeometryMap*, unsigned int)
2   0x7f7d71d26b5f WebCore::RenderLayer::updateLayerPositionsAfterScroll(WebCore::RenderGeometryMap*, unsigned int)
3   0x7f7d71d26b5f WebCore::RenderLayer::updateLayerPositionsAfterScroll(WebCore::RenderGeometryMap*, unsigned int)
4   0x7f7d71d26b5f WebCore::RenderLayer::updateLayerPositionsAfterScroll(WebCore::RenderGeometryMap*, unsigned int)
5   0x7f7d71d2688c WebCore::RenderLayer::updateLayerPositionsAfterOverflowScroll()
6   0x7f7d71d2b320 WebCore::RenderLayer::scrollTo(int, int)
7   0x7f7d71d2db63 WebCore::RenderLayer::setScrollOffset(WebCore::IntPoint const&)
8   0x7f7d71ab97da WebCore::ScrollableArea::scrollPositionChanged(WebCore::IntPoint const&)
9   0x7f7d71ab9a75 WebCore::ScrollableArea::setScrollOffsetFromAnimation(WebCore::IntPoint const&)
10  0x7f7d71ab912d WebCore::ScrollAnimator::notifyPositionChanged()
11  0x7f7d71ab8b61 WebCore::ScrollAnimator::scrollToOffsetWithoutAnimation(WebCore::FloatPoint const&)
12  0x7f7d71ab9670 WebCore::ScrollableArea::scrollToOffsetWithoutAnimation(WebCore::FloatPoint const&)
13  0x7f7d71d2b153 WebCore::RenderLayer::scrollToOffset(WebCore::IntSize const&, WebCore::RenderLayer::ScrollOffsetClamping)
14  0x7f7d71cbcef9 WebCore::RenderLayer::scrollToYOffset(int, WebCore::RenderLayer::ScrollOffsetClamping)
15  0x7f7d71ca29c5 WebCore::RenderBox::setScrollTop(int)
16  0x7f7d714aef1d WebCore::Element::setScrollTop(int)
17  0x7f7d721f0c21 WebCore::setJSElementScrollTop(JSC::ExecState*, JSC::JSObject*, JSC::JSValue)
18  0x7f7d721f9756 bool JSC::lookupPut<WebCore::JSElement>(JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::HashTable const*, WebCore::JSElement*, bool)
19  0x7f7d721f911c void JSC::lookupPut<WebCore::JSElement, WebCore::JSNode>(JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::HashTable const*, WebCore::JSElement*, JSC::PutPropertySlot&)
20  0x7f7d721f0b49 WebCore::JSElement::put(JSC::JSCell*, JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&)
21  0x7f7d72294890 void JSC::lookupPut<WebCore::JSHTMLElement, WebCore::JSElement>(JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::HashTable const*, WebCore::JSHTMLElement*, JSC::PutPropertySlot&)
22  0x7f7d72292aaf WebCore::JSHTMLElement::put(JSC::JSCell*, JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&)
23  0x7f7d7228ce83 void JSC::lookupPut<WebCore::JSHTMLDivElement, WebCore::JSHTMLElement>(JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::HashTable const*, WebCore::JSHTMLDivElement*, JSC::PutPropertySlot&)
24  0x7f7d7228c43d WebCore::JSHTMLDivElement::put(JSC::JSCell*, JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&)
25  0x7f7d6b3c7c89 JSC::JSValue::put(JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&)
26  0x7f7d6b63a665
27  0x7f7d6b6438cf
ERR<26034>:elementary els_tooltip.c:892 elm_object_tooltip_unset() Object does not have tooltip: obj
Segmentation fault (core dumped)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.