[Webkit-unassigned] [Bug 148956] New: [GTK] ASSERTION FAILED: !m_inUpdateBackingStoreState in DrawingAreaImpl::display() after DrawingAreaImpl::forceRepaint()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=148956

            Bug ID: 148956
           Summary: [GTK] ASSERTION FAILED: !m_inUpdateBackingStoreState
                    in DrawingAreaImpl::display() after
                    DrawingAreaImpl::forceRepaint()
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit Gtk
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: clopez at igalia.com
                CC: cgarcia at igalia.com, pnormand at igalia.com,
                    svillar at igalia.com, yoon at igalia.com,
                    zan at falconsigh.net

The following tests are crashing on the Debug build of WebKitGTK+ because of a failed assertion:

Regressions: Unexpected crashes (9)
  css3/viewport-percentage-lengths/viewport-percentage-lengths-anonymous-block.html [ Crash ]
  css3/viewport-percentage-lengths/viewport-percentage-lengths-percent-size-child.html [ Crash ]
  css3/viewport-percentage-lengths/viewport-percentage-lengths-relative-font-size.html [ Crash ]
  css3/viewport-percentage-lengths/viewport-percentage-lengths-resize.html [ Crash ]
  fast/css-grid-layout/flex-content-sized-columns-resize.html [ Crash ]
  fast/dom/Window/window-resize-contents.html [ Crash ]
  fast/dom/rtl-scroll-to-leftmost-and-resize.html [ Crash ]
  fast/dynamic/window-resize-scrollbars-test.html [ Crash ]
  fast/fixed-layout/fixed-layout.html [ Crash ]


Backtrace (for fast/css-grid-layout/flex-content-sized-columns-resize.html):
(gdb) bt
#0  WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:321
#1  0x00007f2b8aba22e1 in WebKit::DrawingAreaImpl::display (this=0x1752720) at ../../Source/WebKit2/WebProcess/WebPage/DrawingAreaImpl.cpp:564
#2  0x00007f2b8aba2084 in WebKit::DrawingAreaImpl::forceRepaint (this=0x1752720) at ../../Source/WebKit2/WebProcess/WebPage/DrawingAreaImpl.cpp:220
#3  0x00007f2b8a9f397d in WebKit::WebPage::forceRepaintWithoutCallback() () at ../../Source/WebKit2/WebProcess/WebPage/WebPage.cpp:2625
#4  0x00007f2b8a8bdf6d in WKBundlePageForceRepaint (page=0x7f2b730054c0) at ../../Source/WebKit2/WebProcess/InjectedBundle/API/c/WKBundlePage.cpp:471
#5  0x00007f2b302a491c in WTR::InjectedBundlePage::dump (this=0x186f520) at ../../Tools/WebKitTestRunner/InjectedBundle/InjectedBundlePage.cpp:851
#6  0x00007f2b302b47b7 in WTR::TestRunner::notifyDone (this=0x7f2b732f0348) at ../../Tools/WebKitTestRunner/InjectedBundle/TestRunner.cpp:163
#7  0x00007f2b302cab3a in WTR::JSTestRunner::notifyDone (context=0x7fff9730d3d0, thisObject=0x7f2b730d3080, argumentCount=0, arguments=0x7fff9730cf40, 
    exception=0x7fff9730cf08) at DerivedSources/InjectedBundle/JSTestRunner.cpp:249
#8  0x00007f2b85293169 in JSC::APICallbackFunction::call<JSC::JSCallbackFunction> (exec=0x7fff9730d3d0) at ../../Source/JavaScriptCore/API/APICallbackFunction.h:61
#9  0x00007f2b85c50e66 in JSC::LLInt::handleHostCall (execCallee=0x7fff9730d3d0, pc=0x7f2b732e7a70, callee=..., kind=JSC::CodeForCall)
    at ../../Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:1064
#10 0x00007f2b85c51e4a in JSC::LLInt::setUpCall (execCallee=0x7fff9730d3d0, pc=0x7f2b732e7a70, kind=JSC::CodeForCall, calleeAsValue=..., callLinkInfo=0x7f2b7334f6b8)
    at ../../Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:1110
[...]

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150908/6f888ef1/attachment.html>