[Webkit-unassigned] [Bug 159452] [GTK][EFL] SIGSEGV in AccessibilityRenderObject::remoteSVGRootElement

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=159452

--- Comment #5 from Fujii Hironori <Hironori.Fujii at sony.com> ---
fast/history/page-cache-geolocation-active-oneshot.html is not needed to reproduce.

> ./Tools/Scripts/run-webkit-tests --gtk --release --iteration=2 fast/history/page-cache-destroy-document.html

In debug build, some assertions fail.

> ./Tools/Scripts/run-webkit-tests --gtk --debug --iteration=2 fast/history/page-cache-destroy-document.html


> ASSERTION FAILED: !m_frame.document() || !m_frame.document()->inPageCache()
> ../../Source/WebCore/loader/FrameLoader.cpp(1600) : void WebCore::FrameLoader::stopAllLoaders(WebCore::ClearProvisionalItemPolicy)
> 1   0x7f7a03e871dc /home/fujii/work/webkit/w1/WebKitBuild/Debug/lib/libjavascriptcoregtk-4.0.so.18(WTFCrash+0x1e) [0x7f7a03e871dc]
> 2   0x7f7a0add51af /home/fujii/work/webkit/w1/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(WebCore::FrameLoader::stopAllLoaders(WebCore::ClearProvisionalItemPolicy)+0x73) [0x7f7a0add51af]
> 3   0x7f7a0add8c04 /home/fujii/work/webkit/w1/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(WebCore::FrameLoader::frameDetached()+0x34) [0x7f7a0add8c04]
> 4   0x7f7a0ab36f97 /home/fujii/work/webkit/w1/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(WebCore::HTMLFrameOwnerElement::disconnectContentFrame()+0x4b) [0x7f7a0ab36f97]
> 5   0x7f7a0a87769a /home/fujii/work/webkit/w1/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(WebCore::disconnectSubframes(WebCore::ContainerNode&, WebCore::SubframeDisconnectPolicy)+0x145) [0x7f7a0a87769a]
> 6   0x7f7a0a86e14f /home/fujii/work/webkit/w1/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(WebCore::disconnectSubframesIfNeeded(WebCore::ContainerNode&, WebCore::SubframeDisconnectPolicy)+0x35) [0x7f7a0a86e14f]
> 7   0x7f7a0a86b6e8 /home/fujii/work/webkit/w1/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(+0x57e16e8) [0x7f7a0a86b6e8]
> 8   0x7f7a0a86b9ee /home/fujii/work/webkit/w1/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(WebCore::ContainerNode::removeChild(WebCore::Node&, int&)+0x116) [0x7f7a0a86b9ee]
> 9   0x7f7a0a9567c2 /home/fujii/work/webkit/w1/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(WebCore::Node::removeChild(WebCore::Node&, int&)+0x5a) [0x7f7a0a9567c2]
> 10  0x7f7a0a5be726 /home/fujii/work/webkit/w1/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(WebCore::JSNode::removeChild(JSC::ExecState&)+0xa8) [0x7f7a0a5be726]
> 11  0x7f7a0bb759a1 /home/fujii/work/webkit/w1/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(WebCore::jsNodePrototypeFunctionRemoveChild(JSC::ExecState*)+0x141) [0x7f7a0bb759a1]
> 12  0x7f79ab688028 [0x7f79ab688028]

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160706/f2d900a7/attachment.html>