[Webkit-unassigned] [Bug 123337] New: ASSERT_NOT_REACHED() is touched in WebCore::valueForLength

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Oct 25 06:37:53 PDT 2013


https://bugs.webkit.org/show_bug.cgi?id=123337

           Summary: ASSERT_NOT_REACHED() is touched in
                    WebCore::valueForLength
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: CSS
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: reni at webkit.org
            Blocks: 116980


Created an attachment (id=215171)
 --> (https://bugs.webkit.org/attachment.cgi?id=215171&action=review)
Test case

The following test fails on ToTT WebKit:


<body style="-webkit-writing-mode: vertical-rl;" >
    <table> 
        <td style="width: -webkit-fit-content;"> </td>
    </table>           
</body> 


The backtrace:

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff5d23529 in WTFCrash () at /home/reni/Data/REPOS/webkit_sec/Source/WTF/wtf/Assertions.cpp:342
342        *(int *)(uintptr_t)0xbbadbeef = 0;
(gdb) bt
#0  0x00007ffff5d23529 in WTFCrash () at /home/reni/Data/REPOS/webkit_sec/Source/WTF/wtf/Assertions.cpp:342
#1  0x00007ffff1317c81 in WebCore::valueForLength (length=..., maximumValue=..., renderView=0x93bea0, roundPercentages=false)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/css/LengthFunctions.cpp:113
#2  0x00007ffff1c309e9 in WebCore::RenderElement::valueForLength (this=0x11da740, length=..., maximumValue=..., roundPercentages=false)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderElement.h:201
#3  0x00007ffff1d573ea in WebCore::RenderTableCell::logicalHeightForRowSizing (this=0x11da740)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderTableCell.h:102
#4  0x00007ffff1d4fef5 in WebCore::RenderTableSection::calcRowLogicalHeight (this=0x11d6aa0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderTableSection.cpp:345
#5  0x00007ffff1d3cfcc in WebCore::RenderTable::layout (this=0x11d8510) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderTable.cpp:458
#6  0x00007ffff1be82ed in WebCore::RenderBlockFlow::layoutBlockChild (this=0x1183020, child=..., marginInfo=..., previousFloatLogicalBottom=..., 
    maxFloatLogicalBottom=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlockFlow.cpp:596
#7  0x00007ffff1be7de4 in WebCore::RenderBlockFlow::layoutBlockChildren (this=0x1183020, relayoutChildren=true, maxFloatLogicalBottom=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlockFlow.cpp:515
#8  0x00007ffff1be723b in WebCore::RenderBlockFlow::layoutBlock (this=0x1183020, relayoutChildren=true, pageLogicalHeight=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlockFlow.cpp:362
#9  0x00007ffff1bb895d in WebCore::RenderBlock::layout (this=0x1183020) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlock.cpp:1292
#10 0x00007ffff1be82ed in WebCore::RenderBlockFlow::layoutBlockChild (this=0x1182380, child=..., marginInfo=..., previousFloatLogicalBottom=..., 
    maxFloatLogicalBottom=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlockFlow.cpp:596
#11 0x00007ffff1be7de4 in WebCore::RenderBlockFlow::layoutBlockChildren (this=0x1182380, relayoutChildren=true, maxFloatLogicalBottom=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlockFlow.cpp:515
#12 0x00007ffff1be723b in WebCore::RenderBlockFlow::layoutBlock (this=0x1182380, relayoutChildren=true, pageLogicalHeight=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlockFlow.cpp:362
#13 0x00007ffff1bb895d in WebCore::RenderBlock::layout (this=0x1182380) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlock.cpp:1292
#14 0x00007ffff1be82ed in WebCore::RenderBlockFlow::layoutBlockChild (this=0x93bea0, child=..., marginInfo=..., previousFloatLogicalBottom=..., 
    maxFloatLogicalBottom=...) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlockFlow.cpp:596
#15 0x00007ffff1be7de4 in WebCore::RenderBlockFlow::layoutBlockChildren (this=0x93bea0, relayoutChildren=true, maxFloatLogicalBottom=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlockFlow.cpp:515
#16 0x00007ffff1be723b in WebCore::RenderBlockFlow::layoutBlock (this=0x93bea0, relayoutChildren=true, pageLogicalHeight=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlockFlow.cpp:362
#17 0x00007ffff1bb895d in WebCore::RenderBlock::layout (this=0x93bea0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderBlock.cpp:1292
#18 0x00007ffff1d7cb87 in WebCore::RenderView::layoutContent (this=0x93bea0, state=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderView.cpp:151
#19 0x00007ffff1d7d742 in WebCore::RenderView::layout (this=0x93bea0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/rendering/RenderView.cpp:337
#20 0x00007ffff19381fb in WebCore::FrameView::layout (this=0x8cdab0, allowSubtree=true)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/page/FrameView.cpp:1255
#21 0x00007ffff13bcce5 in WebCore::Document::implicitClose (this=0x11f1010) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:2414
#22 0x00007ffff1826245 in WebCore::FrameLoader::checkCallImplicitClose (this=0x934538)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:850
#23 0x00007ffff1825fd9 in WebCore::FrameLoader::checkCompleted (this=0x934538) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:793
#24 0x00007ffff1825d34 in WebCore::FrameLoader::finishedParsing (this=0x934538)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/FrameLoader.cpp:726
---Type <return> to continue, or q <return> to quit---
#25 0x00007ffff13c40e3 in WebCore::Document::finishedParsing (this=0x11f1010) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/dom/Document.cpp:4374
#26 0x00007ffff16a0801 in WebCore::HTMLConstructionSite::finishedParsing (this=0x8d8308)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLConstructionSite.cpp:352
#27 0x00007ffff16d8ddc in WebCore::HTMLTreeBuilder::finished (this=0x8d82f0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLTreeBuilder.cpp:2908
#28 0x00007ffff16a7a5e in WebCore::HTMLDocumentParser::end (this=0x11299d0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:758
#29 0x00007ffff16a7b49 in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x11299d0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:769
#30 0x00007ffff16a6791 in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x11299d0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:212
#31 0x00007ffff16a7b8e in WebCore::HTMLDocumentParser::attemptToEnd (this=0x11299d0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:781
#32 0x00007ffff16a7c47 in WebCore::HTMLDocumentParser::finish (this=0x11299d0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/html/parser/HTMLDocumentParser.cpp:830
#33 0x00007ffff1818a58 in WebCore::DocumentWriter::end (this=0x1163da0) at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentWriter.cpp:245
#34 0x00007ffff18062be in WebCore::DocumentLoader::finishedLoading (this=0x1163d00, finishTime=0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:408
#35 0x00007ffff180602c in WebCore::DocumentLoader::notifyFinished (this=0x1163d00, resource=0x1179d50)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/DocumentLoader.cpp:345
#36 0x00007ffff189c526 in WebCore::CachedResource::checkNotify (this=0x1179d50)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedResource.cpp:369
#37 0x00007ffff189c600 in WebCore::CachedResource::finishLoading (this=0x1179d50)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedResource.cpp:385
#38 0x00007ffff189905a in WebCore::CachedRawResource::finishLoading (this=0x1179d50, data=0x8fea10)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/cache/CachedRawResource.cpp:94
#39 0x00007ffff1856e64 in WebCore::SubresourceLoader::didFinishLoading (this=0x117a2c0, finishTime=0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/SubresourceLoader.cpp:283
#40 0x00007ffff1853005 in WebCore::ResourceLoader::didFinishLoading (this=0x117a2c0, finishTime=0)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/loader/ResourceLoader.cpp:487
#41 0x00007ffff2528c7a in WebCore::readCallback (asyncResult=0x117f1b0, data=0x117ab80)
    at /home/reni/Data/REPOS/webkit_sec/Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:1328
#42 0x00007fffe898abc9 in async_ready_callback_wrapper (source_object=0x670980, res=0x117f1b0, user_data=0x117ab80) at ginputstream.c:530
#43 0x00007fffe89acccb in g_task_return_now (task=0x117f1b0) at gtask.c:1105
#44 complete_in_idle_cb (task=<optimized out>) at gtask.c:1114
#45 0x00007fffee09a473 in g_main_dispatch (context=0x117ee30) at gmain.c:3054
#46 g_main_context_dispatch (context=0x117ee30) at gmain.c:3630
#47 0x00007ffff75c8aee in _ecore_glib_select__locked (ecore_timeout=0x117ee30, efds=<optimized out>, wfds=<optimized out>, rfds=<optimized out>, 
    ecore_fds=1, ctx=<optimized out>) at ecore_glib.c:171
#48 _ecore_glib_select (ecore_fds=1, rfds=<optimized out>, wfds=<optimized out>, efds=<optimized out>, ecore_timeout=0x117ee30) at ecore_glib.c:205
#49 0x00007ffff75c2cb9 in _ecore_main_select (timeout=<optimized out>) at ecore_main.c:1466
#50 0x00007ffff75c3789 in _ecore_main_loop_iterate_internal (once_only=0) at ecore_main.c:1860
---Type <return> to continue, or q <return> to quit---
#51 0x00007ffff75c3b47 in ecore_main_loop_begin () at ecore_main.c:956
#52 0x0000000000406dfa in main (argc=2, argv=0x7fffffffdbd8) at /home/reni/Data/REPOS/webkit_sec/Tools/EWebLauncher/main.c:1044

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.


More information about the webkit-unassigned mailing list