[Webkit-unassigned] [Bug 133537] New: ASSERTION FAILED: innerStyle->refCount() == 1 in WebCore::RenderButton::setupInnerStyle

Thu Jun 5 00:48:46 PDT 2014

https://bugs.webkit.org/show_bug.cgi?id=133537

           Summary: ASSERTION FAILED: innerStyle->refCount() == 1 in
                    WebCore::RenderButton::setupInnerStyle
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: rhodovan.u-szeged at partner.samsung.com
                CC: darin at apple.com, akling at apple.com, stavila at adobe.com
            Blocks: 116980

Created an attachment (id=232526)
 --> (https://bugs.webkit.org/attachment.cgi?id=232526&action=review)
Test case

Assertion failure happens when loading the following test (r169529):

<style>

 :first-letter {    
    widows:inherit;
}

button {
    outline-width:0vmax;
    max-width:inherit;
 }

</style>
<button>a

ASSERTION FAILED: innerStyle->refCount() == 1
../../Source/WebCore/rendering/RenderButton.cpp(129) : void WebCore::RenderButton::setupInnerStyle(WebCore::RenderStyle*)

...

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fff9732a700 (LWP 5429)]
0x00007ffff30ac8ec in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:333
333        *(int *)(uintptr_t)0xbbadbeef = 0;
(gdb) bt
#0  0x00007ffff30ac8ec in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:333
#1  0x00007ffff3e50015 in WebCore::RenderButton::setupInnerStyle (this=0x8d4670, innerStyle=0x7e3550)
    at ../../Source/WebCore/rendering/RenderButton.cpp:129
#2  0x00007ffff3e4fe6a in WebCore::RenderButton::styleDidChange (this=0x8d4670, diff=WebCore::StyleDifferenceEqual, oldStyle=0x809f60)
    at ../../Source/WebCore/rendering/RenderButton.cpp:114
#3  0x00007ffff3e63eba in WebCore::RenderElement::setStyle (this=0x8d4670, style=...) at ../../Source/WebCore/rendering/RenderElement.cpp:430
#4  0x00007ffff3e640c2 in WebCore::RenderElement::setAnimatableStyle (this=0x8d4670, style=...)
    at ../../Source/WebCore/rendering/RenderElement.cpp:468
#5  0x00007ffff40845ae in WebCore::Style::resolveLocal (current=..., renderingParentNode=..., renderTreePosition=..., 
    inheritedChange=WebCore::Style::NoChange) at ../../Source/WebCore/style/StyleResolveTree.cpp:737
#6  0x00007ffff4084b27 in WebCore::Style::resolveTree (current=..., renderingParentNode=..., renderTreePosition=..., change=WebCore::Style::NoChange)
    at ../../Source/WebCore/style/StyleResolveTree.cpp:887
#7  0x00007ffff4084d68 in WebCore::Style::resolveTree (current=..., renderingParentNode=..., renderTreePosition=..., change=WebCore::Style::NoChange)
    at ../../Source/WebCore/style/StyleResolveTree.cpp:922
#8  0x00007ffff4084d68 in WebCore::Style::resolveTree (current=..., renderingParentNode=..., renderTreePosition=..., change=WebCore::Style::NoChange)
    at ../../Source/WebCore/style/StyleResolveTree.cpp:922
#9  0x00007ffff4085023 in WebCore::Style::resolveTree (document=..., change=WebCore::Style::NoChange)
    at ../../Source/WebCore/style/StyleResolveTree.cpp:964
#10 0x00007ffff35c0ea6 in WebCore::Document::recalcStyle (this=0x843f20, change=WebCore::Style::NoChange)
    at ../../Source/WebCore/dom/Document.cpp:1750
#11 0x00007ffff35c1157 in WebCore::Document::updateStyleIfNeeded (this=0x843f20) at ../../Source/WebCore/dom/Document.cpp:1795
#12 0x00007ffff3b539cb in WebCore::FrameView::layout (this=0x878530, allowSubtree=true) at ../../Source/WebCore/page/FrameView.cpp:1159
#13 0x00007ffff3b574e5 in WebCore::FrameView::visibleContentsResized (this=0x878530) at ../../Source/WebCore/page/FrameView.cpp:2239
#14 0x00007ffff3c01385 in WebCore::ScrollView::updateScrollbars (this=0x878530, desiredOffset=...) at ../../Source/WebCore/platform/ScrollView.cpp:660
#15 0x00007ffff3bffd77 in WebCore::ScrollView::setContentsSize (this=0x878530, newSize=...) at ../../Source/WebCore/platform/ScrollView.cpp:389
#16 0x00007ffff3b51ffe in WebCore::FrameView::setContentsSize (this=0x878530, size=...) at ../../Source/WebCore/page/FrameView.cpp:538
#17 0x00007ffff3b52218 in WebCore::FrameView::adjustViewSize (this=0x878530) at ../../Source/WebCore/page/FrameView.cpp:568
#18 0x00007ffff3b542a9 in WebCore::FrameView::layout (this=0x878530, allowSubtree=true) at ../../Source/WebCore/page/FrameView.cpp:1305
#19 0x00007ffff35c3165 in WebCore::Document::implicitClose (this=0x843f20) at ../../Source/WebCore/dom/Document.cpp:2432
#20 0x00007ffff3a24337 in WebCore::FrameLoader::checkCallImplicitClose (this=0x988898) at ../../Source/WebCore/loader/FrameLoader.cpp:895
#21 0x00007ffff3a240e2 in WebCore::FrameLoader::checkCompleted (this=0x988898) at ../../Source/WebCore/loader/FrameLoader.cpp:841
#22 0x00007ffff3a23e6a in WebCore::FrameLoader::finishedParsing (this=0x988898) at ../../Source/WebCore/loader/FrameLoader.cpp:761
#23 0x00007ffff35cab8d in WebCore::Document::finishedParsing (this=0x843f20) at ../../Source/WebCore/dom/Document.cpp:4489
#24 0x00007ffff38c2133 in WebCore::HTMLConstructionSite::finishedParsing (this=0x843688)
    at ../../Source/WebCore/html/parser/HTMLConstructionSite.cpp:395
#25 0x00007ffff38fac8f in WebCore::HTMLTreeBuilder::finished (this=0x843670) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:2997
#26 0x00007ffff38c9bbe in WebCore::HTMLDocumentParser::end (this=0x809630) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:439
#27 0x00007ffff38c9ca9 in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x809630)
    at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:450
#28 0x00007ffff38c88f3 in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x809630)
    at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:165
#29 0x00007ffff38c9cec in WebCore::HTMLDocumentParser::attemptToEnd (this=0x809630) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:462
#30 0x00007ffff38c9da3 in WebCore::HTMLDocumentParser::finish (this=0x809630) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:490
#31 0x00007ffff3a17053 in WebCore::DocumentWriter::end (this=0x99c000) at ../../Source/WebCore/loader/DocumentWriter.cpp:248
#32 0x00007ffff3a04423 in WebCore::DocumentLoader::finishedLoading (this=0x99bf60, finishTime=0) at ../../Source/WebCore/loader/DocumentLoader.cpp:440
#33 0x00007ffff3a0418c in WebCore::DocumentLoader::notifyFinished (this=0x99bf60, resource=0x84e400)
    at ../../Source/WebCore/loader/DocumentLoader.cpp:374
#34 0x00007ffff3aaabc2 in WebCore::CachedResource::checkNotify (this=0x84e400) at ../../Source/WebCore/loader/cache/CachedResource.cpp:332
#35 0x00007ffff3aaaca0 in WebCore::CachedResource::finishLoading (this=0x84e400) at ../../Source/WebCore/loader/cache/CachedResource.cpp:348
#36 0x00007ffff3aa7a14 in WebCore::CachedRawResource::finishLoading (this=0x84e400, data=0x78b0a0)
    at ../../Source/WebCore/loader/cache/CachedRawResource.cpp:97
#37 0x00007ffff3a5e3b4 in WebCore::SubresourceLoader::didFinishLoading (this=0x825c00, finishTime=0)
    at ../../Source/WebCore/loader/SubresourceLoader.cpp:310
#38 0x00007ffff3a5a8d7 in WebCore::ResourceLoader::didFinishLoading (this=0x825c00, finishTime=0)
    at ../../Source/WebCore/loader/ResourceLoader.cpp:517
#39 0x00007ffff43071e9 in WebCore::readCallback (asyncResult=0x8419b0, data=0x827100)
---Type <return> to continue, or q <return> to quit---
    at ../../Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:1288
#40 0x00007fffec2c02ea in async_ready_callback_wrapper (source_object=0x98cb30, res=0x8419b0, user_data=0x827100) at ginputstream.c:519
#41 0x00007fffec2dfceb in g_task_return_now (task=0x8419b0) at gtask.c:1108
#42 0x00007fffec2dfd09 in complete_in_idle_cb (task=0x8419b0) at gtask.c:1117
#43 0x00007fffeb5362e6 in g_main_dispatch (context=0x677bb0) at gmain.c:3065
#44 g_main_context_dispatch (context=context at entry=0x677bb0) at gmain.c:3641
#45 0x00007fffeb536638 in g_main_context_iterate (context=0x677bb0, block=block at entry=1, dispatch=dispatch at entry=1, self=<optimized out>)
    at gmain.c:3712
#46 0x00007fffeb536a3a in g_main_loop_run (loop=0x913eb0) at gmain.c:3906
#47 0x00007ffff30fd900 in WTF::RunLoop::run () at ../../Source/WTF/wtf/gtk/RunLoopGtk.cpp:59
#48 0x00007ffff303a194 in WebKit::ChildProcessMain<WebKit::WebProcess, WebKit::WebProcessMain> (argc=2, argv=0x7fffffffda58)
    at ../../Source/WebKit2/Shared/unix/ChildProcessMain.h:61
#49 0x00007ffff3039ff9 in WebKit::WebProcessMainUnix (argc=2, argv=0x7fffffffda58) at ../../Source/WebKit2/WebProcess/gtk/WebProcessMainGtk.cpp:73
#50 0x000000000040085d in main (argc=2, argv=0x7fffffffda58) at ../../Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp:32

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.