[Webkit-unassigned] [Bug 172514] New: ASSERTION FAILED: !renderer() in WebCore::Text::~Text

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=172514

            Bug ID: 172514
           Summary: ASSERTION FAILED: !renderer() in  WebCore::Text::~Text
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ryanhaddad at apple.com

This assertion failure is seen with LayoutTest imported/w3c/web-platform-tests/innerText/getter.html

https://build.webkit.org/results/Apple%20El%20Capitan%20Debug%20WK2%20(Tests)/r217275%20(1295)/results.html

ASSERTION FAILED: !renderer()
/Volumes/Data/slave/elcapitan-debug/build/Source/WebCore/dom/Text.cpp(57) : virtual WebCore::Text::~Text()
1   0x113da9380 WTFCrash
2   0x1091f2f2d WebCore::Text::~Text()
3   0x1091f2f65 WebCore::Text::~Text()
4   0x1091f2f89 WebCore::Text::~Text()
5   0x1069d38a8 WebCore::removeDetachedChildrenInContainer(WebCore::ContainerNode&)
6   0x1069c07fe WebCore::ContainerNode::removeDetachedChildren()
7   0x1069c11d0 WebCore::ContainerNode::~ContainerNode()
8   0x106f3029f WebCore::Element::~Element()
9   0x1090012c7 WebCore::StyledElement::~StyledElement()
10  0x1067c9d75 WebCore::HTMLElement::~HTMLElement()
11  0x1067c9d55 WebCore::HTMLDivElement::~HTMLDivElement()
12  0x10734c255 WebCore::HTMLDivElement::~HTMLDivElement()
13  0x10734c279 WebCore::HTMLDivElement::~HTMLDivElement()
14  0x10875e5bd WebCore::Node::removedLastRef()
15  0x10663b25e WebCore::Node::deref()
16  0x108756f05 WebCore::Node::derefEventTarget()
17  0x106deedc9 WebCore::EventTarget::deref()
18  0x106ec2ccd WTF::Ref<WebCore::EventTarget>::~Ref()
19  0x106eb5115 WTF::Ref<WebCore::EventTarget>::~Ref()
20  0x107b1078c WebCore::JSDOMWrapper<WebCore::EventTarget>::~JSDOMWrapper()
21  0x107b10765 WebCore::JSEventTarget::~JSEventTarget()
22  0x107b100a5 WebCore::JSEventTarget::~JSEventTarget()
23  0x107b0e47d WebCore::JSEventTarget::destroy(JSC::JSCell*)
24  0x11373ea6a JSC::(anonymous namespace)::DestroyFunc::operator()(JSC::VM&, JSC::JSCell*) const
25  0x11374070b JSC::FreeList JSC::MarkedBlock::Handle::specializedSweep<false, (JSC::MarkedBlock::Handle::EmptyMode)0, (JSC::MarkedBlock::Handle::SweepMode)0, (JSC::MarkedBlock::Handle::SweepDestructionMode)0, (JSC::MarkedBlock::Handle::ScribbleMode)0, (JSC::MarkedBlock::Handle::NewlyAllocatedMode)0, (JSC::MarkedBlock::Handle::MarksMode)0, JSC::(anonymous namespace)::DestroyFunc>(JSC::MarkedBlock::Handle::EmptyMode, JSC::MarkedBlock::Handle::SweepMode, JSC::MarkedBlock::Handle::SweepDestructionMode, JSC::MarkedBlock::Handle::ScribbleMode, JSC::MarkedBlock::Handle::NewlyAllocatedMode, JSC::MarkedBlock::Handle::MarksMode, JSC::(anonymous namespace)::DestroyFunc const&)::'lambda'(unsigned long)::operator()(unsigned long) const
26  0x11373f0df JSC::FreeList JSC::MarkedBlock::Handle::specializedSweep<false, (JSC::MarkedBlock::Handle::EmptyMode)0, (JSC::MarkedBlock::Handle::SweepMode)0, (JSC::MarkedBlock::Handle::SweepDestructionMode)0, (JSC::MarkedBlock::Handle::ScribbleMode)0, (JSC::MarkedBlock::Handle::NewlyAllocatedMode)0, (JSC::MarkedBlock::Handle::MarksMode)0, JSC::(anonymous namespace)::DestroyFunc>(JSC::MarkedBlock::Handle::EmptyMode, JSC::MarkedBlock::Handle::SweepMode, JSC::MarkedBlock::Handle::SweepDestructionMode, JSC::MarkedBlock::Handle::ScribbleMode, JSC::MarkedBlock::Handle::NewlyAllocatedMode, JSC::MarkedBlock::Handle::MarksMode, JSC::(anonymous namespace)::DestroyFunc const&)
27  0x11373e9ef JSC::FreeList JSC::MarkedBlock::Handle::finishSweepKnowingSubspace<JSC::(anonymous namespace)::DestroyFunc>(JSC::MarkedBlock::Handle::SweepMode, JSC::(anonymous namespace)::DestroyFunc const&)
28  0x11373e86d JSC::JSDestructibleObjectSubspace::finishSweep(JSC::MarkedBlock::Handle&, JSC::MarkedBlock::Handle::SweepMode)
29  0x11390310f JSC::MarkedBlock::Handle::sweep(JSC::MarkedBlock::Handle::SweepMode)
30  0x1138fe1c5 JSC::MarkedAllocator::tryAllocateIn(JSC::MarkedBlock::Handle*)
31  0x1138fe035 JSC::MarkedAllocator::tryAllocateWithoutCollecting()

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170523/fda11fce/attachment.html>