[Webkit-unassigned] [Bug 167295] New: Crash in WebCore::RenderObject::repaintSlowRepaintObject()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=167295

            Bug ID: 167295
           Summary: Crash in
                    WebCore::RenderObject::repaintSlowRepaintObject()
    Classification: Unclassified
           Product: WebKit
           Version: Safari Technology Preview
          Hardware: Unspecified
               URL: http://sonnreich.at
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: dieter at komendera.com

Created attachment 299486
  --> https://bugs.webkit.org/attachment.cgi?id=299486&action=review
crash log

I can almost reliably reproduce this crash:

1) go to http://sonnreich.at
2) click a link at the bottom of the page, i.e "WOHNEN"
3) use the back button to navigate back
4) scroll down

Sometimes it crashes at 3), sometimes at 4) and sometimes not at all.

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore                 0x000000010fb3a670 WebCore::RenderObject::repaintSlowRepaintObject() const + 32
1   com.apple.WebCore                 0x000000010ee85a19 WebCore::FrameView::scrollContentsSlowPath(WebCore::IntRect const&) + 121
2   com.apple.WebCore                 0x000000010edf682a WebCore::ScrollView::scrollContents(WebCore::IntSize const&) + 362
3   com.apple.WebCore                 0x000000010fc16cf6 WebCore::ScrollView::scrollTo(WebCore::IntPoint const&) + 150
4   com.apple.WebCore                 0x000000010f26d635 WebCore::FrameView::scrollTo(WebCore::IntPoint const&) + 53

Release 21 (Safari 10.2, WebKit 12604.1.2)
macOS 10.12.2 (16C67)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170122/4e5624a5/attachment.html>