[Webkit-unassigned] [Bug 166568] [GTK] ASSERTION FAILED: !source || is<Target>(*source) in CoordinatedGraphicsLayer::removeFromParent

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Nov 30 18:46:55 PST 2017


https://bugs.webkit.org/show_bug.cgi?id=166568

Michael Catanzaro <mcatanzaro at igalia.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mcatanzaro at igalia.com
            Summary|[GTK] ASSERTION FAILED:     |[GTK] ASSERTION FAILED:
                   |!source ||                  |!source ||
                   |is<Target>(*source) on      |is<Target>(*source) in
                   |talkgadget.google.com       |CoordinatedGraphicsLayer::r
                   |                            |emoveFromParent

--- Comment #1 from Michael Catanzaro <mcatanzaro at igalia.com> ---
This is 100% reproducible by playing any YouTube video and clicking on the settings button.

ASSERTION FAILED: !source || is<Target>(*source)
../../Source/WTF/wtf/TypeCasts.h(89) : typename WTF::match_constness<Source, Target>::type* WTF::downcast(Source*) [with Target = WebCore::CoordinatedGraphicsLayer; Source = WebCore::GraphicsLayer; typename WTF::match_constness<Source, Target>::type = WebCore::CoordinatedGraphicsLayer]

#0  0x00007f2a7fd59e87 in WTFCrash ()
    at ../../Source/WTF/wtf/Assertions.cpp:273
No locals.
#1  0x00007f2a7fd59e98 in WTFCrashWithSecurityImplication ()
    at ../../Source/WTF/wtf/Assertions.cpp:294
No locals.
#2  0x00007f2a89845859 in WTF::downcast<WebCore::CoordinatedGraphicsLayer, WebCore::GraphicsLayer> (source=0x7f2a10478900)
    at ../../Source/WTF/wtf/TypeCasts.h:89
        __PRETTY_FUNCTION__ = "typename WTF::match_constness<Source, Target>::type* WTF::downcast(Source*) [with Target = WebCore::CoordinatedGraphicsLayer; Source = WebCore::GraphicsLayer; typename WTF::match_constness<Source, Tar"...
#3  0x00007f2a89840250 in WebCore::CoordinatedGraphicsLayer::removeFromParent (
    this=0x7f29f41e7000)
    at ../../Source/WebCore/platform/graphics/texmap/coordinated/CoordinatedGraphicsLayer.cpp:206
        parentLayer = 0x7f29f4f33840
#4  0x00007f2a8afb099a in WebCore::GraphicsLayer::willBeDestroyed (
    this=0x7f29f41e7000)
    at ../../Source/WebCore/platform/graphics/GraphicsLayer.cpp:170
No locals.
#5  0x00007f2a8983ffc5 in WebCore::CoordinatedGraphicsLayer::~CoordinatedGraphicsLayer (this=0x7f29f41e7000, __in_chrg=<optimized out>)
    at ../../Source/WebCore/platform/graphics/texmap/coordinated/CoordinatedGraphicsLayer.cpp:159
No locals.
#6  0x00007f2a8984009a in WebCore::CoordinatedGraphicsLayer::~CoordinatedGraphicsLayer (this=0x7f29f41e7000, __in_chrg=<optimized out>)
    at ../../Source/WebCore/platform/graphics/texmap/coordinated/CoordinatedGraphicsLayer.cpp:160
No locals.
#7  0x00007f2a8943b2b6 in std::default_delete<WebCore::GraphicsLayer>::operator() (this=0x7f29f4f33888, __ptr=0x7f29f41e7000)
    at /usr/include/c++/7/bits/unique_ptr.h:78
No locals.
#8  0x00007f2a8970f823 in std::unique_ptr<WebCore::GraphicsLayer, std::default_delete<WebCore::GraphicsLayer> >::reset (this=0x7f29f4f33888, 
    __p=0x7f29f41e7000) at /usr/include/c++/7/bits/unique_ptr.h:376
No locals.
#9  0x00007f2a8970daeb in std::unique_ptr<WebCore::GraphicsLayer, std::default_delete<WebCore::GraphicsLayer> >::operator=(decltype(nullptr)) (
    this=0x7f29f4f33888) at /usr/include/c++/7/bits/unique_ptr.h:312
No locals.
#10 0x00007f2a8b2a479c in WebCore::RenderLayerBacking::updateChildClippingStrategy (this=0x7f29f4f33840, needsDescendantsClippingLayer=false)
    at ../../Source/WebCore/rendering/RenderLayerBacking.cpp:1704
No locals.
#11 0x00007f2a8b29e958 in WebCore::RenderLayerBacking::updateConfiguration (
    this=0x7f29f4f33840)
    at ../../Source/WebCore/rendering/RenderLayerBacking.cpp:708
        layerConfigChanged = true
        needsDescendantsClippingLayer = false
        contentsInfo = {m_backing = @0x7ffee4fa8810, 
          m_boxDecorations = -1960043926, m_content = 32554, 
          m_subpixelAntialiasedText = 1828332384, m_contentsType = 32554}
#12 0x00007f2a8b2aeaa4 in WebCore::RenderLayerCompositor::rebuildCompositingLayerTree (this=0x7f2a6cfa44f8, layer=..., childLayersOfEnclosingLayer=..., 
    depth=2) at ../../Source/WebCore/rendering/RenderLayerCompositor.cpp:1538
        layerBacking = 0x7f29f4f33840
        layerChildren = {<WTF::VectorBuffer<WebCore::GraphicsLayer*, 0, WTF::FastMalloc>> = {<WTF::VectorBufferBase<WebCore::GraphicsLayer*, WTF::FastMalloc>> = {m_buffer = 0x0, m_capacity = 0, 
              m_size = 0}, <No data fields>}, <No data fields>}
        childList = @0x7ffee4fa8890: {<WTF::VectorBuffer<WebCore::GraphicsLayer*, 0, WTF::FastMalloc>> = {<WTF::VectorBufferBase<WebCore::GraphicsLayer*, WTF::FastMalloc>> = {m_buffer = 0x0, m_capacity = 0, 
              m_size = 0}, <No data fields>}, <No data fields>}
        mutationChecker = {m_layer = 0x7f2a0fed8120, 
          m_previousMutationAllowedState = true}
#13 0x00007f2a8b2aed64 in WebCore::RenderLayerCompositor::rebuildCompositingLayerTree (this=0x7f2a6cfa44f8, layer=..., childLayersOfEnclosingLayer=..., 
    depth=1) at ../../Source/WebCore/rendering/RenderLayerCompositor.cpp:1580
        renderLayer = 0x7f29dd93e7e0
        __for_range = @0x7f2a113ea420: {<WTF::VectorBuffer<WebCore::RenderLayer*, 0, WTF::FastMalloc>> = {<WTF::VectorBufferBase<WebCore::RenderLayer*, WTF::FastMalloc>> = {m_buffer = 0x7f29ea271000, m_capacity = 214, 
              m_size = 188}, <No data fields>}, <No data fields>}
        __for_begin = 0x7f29ea271548
        __for_end = 0x7f29ea2715e0
        posZOrderList = 0x7f2a113ea420
        layerBacking = 0x0
        layerChildren = {<WTF::VectorBuffer<WebCore::GraphicsLayer*, 0, WTF::FastMalloc>> = {<WTF::VectorBufferBase<WebCore::GraphicsLayer*, WTF::FastMalloc>> = {m_buffer = 0x0, m_capacity = 0, 
              m_size = 0}, <No data fields>}, <No data fields>}
        childList = @0x7ffee4fa8ad0: {<WTF::VectorBuffer<WebCore::GraphicsLayer*, 0, WTF::FastMalloc>> = {<WTF::VectorBufferBase<WebCore::GraphicsLayer*, WTF::FastMalloc>> = {m_buffer = 0x7f2a0f481680, m_capacity = 16, 
              m_size = 11}, <No data fields>}, <No data fields>}
        mutationChecker = {m_layer = 0x7f2a6cfa2b40, 
          m_previousMutationAllowedState = true}
#14 0x00007f2a8b2aed64 in WebCore::RenderLayerCompositor::rebuildCompositingLayerTree (this=0x7f2a6cfa44f8, layer=..., childLayersOfEnclosingLayer=..., 
    depth=0) at ../../Source/WebCore/rendering/RenderLayerCompositor.cpp:1580
        renderLayer = 0x7f2a6cfa2b40
        __for_range = @0x7f2a1b2965e0: {<WTF::VectorBuffer<WebCore::RenderLayer*, 0, WTF::FastMalloc>> = {<WTF::VectorBufferBase<WebCore::RenderLayer*, WTF::FastMalloc>> = {m_buffer = 0x7f2a1b26d980, m_capacity = 16, 
              m_size = 1}, <No data fields>}, <No data fields>}
        __for_begin = 0x7f2a1b26d980
        __for_end = 0x7f2a1b26d988
        posZOrderList = 0x7f2a1b2965e0
        layerBacking = 0x7f2a0f40e8f0
        layerChildren = {<WTF::VectorBuffer<WebCore::GraphicsLayer*, 0, WTF::FastMalloc>> = {<WTF::VectorBufferBase<WebCore::GraphicsLayer*, WTF::FastMalloc>> = {m_buffer = 0x7f2a0f481680, m_capacity = 16, 
              m_size = 11}, <No data fields>}, <No data fields>}
        childList = @0x7ffee4fa8ad0: {<WTF::VectorBuffer<WebCore::GraphicsLayer*, 0, WTF::FastMalloc>> = {<WTF::VectorBufferBase<WebCore::GraphicsLayer*, WTF::FastMalloc>> = {m_buffer = 0x7f2a0f481680, m_capacity = 16, 
              m_size = 11}, <No data fields>}, <No data fields>}
        mutationChecker = {m_layer = 0x7f2a6cfa2360, 
          m_previousMutationAllowedState = true}
#15 0x00007f2a8b2abc5b in WebCore::RenderLayerCompositor::updateCompositingLayers (this=0x7f2a6cfa44f8, 
    updateType=WebCore::CompositingUpdateType::AfterLayout, 
    updateRoot=0x7f2a6cfa2360)
    at ../../Source/WebCore/rendering/RenderLayerCompositor.cpp:735
        childList = {<WTF::VectorBuffer<WebCore::GraphicsLayer*, 0, WTF::FastMalloc>> = {<WTF::VectorBufferBase<WebCore::GraphicsLayer*, WTF::FastMalloc>> = {
              m_buffer = 0x0, m_capacity = 0, 
              m_size = 0}, <No data fields>}, <No data fields>}
        __PRETTY_FUNCTION__ = "bool WebCore::RenderLayerCompositor::updateCompositingLayers(WebCore::CompositingUpdateType, WebCore::RenderLayer*)"
        animationUpdateBlock = {m_animationController = 0x7f2a6cfff938}
        postLayoutChange = {m_scopedVariable = @0x7f2a6cfa4567, 
          m_originalValue = false}
        checkForHierarchyUpdate = true
        needGeometryUpdate = false
        needHierarchyUpdate = true
        isFullUpdate = true
        startTime = {static clockType = WTF::ClockType::Monotonic, m_value = 0}
#16 0x00007f2a8ada47ad in WebCore::FrameView::updateCompositingLayersAfterLayout (this=0x7f2a228f4900) at ../../Source/WebCore/page/FrameView.cpp:802
        renderView = 0x7f2a1c2004f0
#17 0x00007f2a8ada5d24 in WebCore::FrameView::didLayout (this=0x7f2a228f4900, 
    layoutRoot=...) at ../../Source/WebCore/page/FrameView.cpp:1270
        layoutRootEnclosingLayer = 0x7f2a6cfa2360
#18 0x00007f2a8adb59fa in WebCore::LayoutContext::layout (this=0x7f2a228f4c80)
    at ../../Source/WebCore/page/LayoutContext.cpp:206
        layoutPhase = {m_scopedVariable = @0x7f2a228f4d10, 
          m_originalValue = WebCore::LayoutContext::LayoutPhase::OutsideLayout}
        __PRETTY_FUNCTION__ = "void WebCore::LayoutContext::layout()"
        protectView = {static isRef = <optimized out>, m_ptr = 0x7f2a228f4900}
        layoutScope = {m_view = @0x7f2a228f4900, m_nestedState = {
            m_scopedVariable = @0x7f2a228f4d14, 
            m_originalValue = WebCore::LayoutContext::LayoutNestedState::NotInLayout}, m_schedulingIsEnabled = {m_scopedVariable = @0x7f2a228f4d08, 
            m_originalValue = true}, m_inProgrammaticScroll = false}
        tracingScope = {m_exitCode = LayoutEnd}
        inspectorLayoutScope = {m_instrumentingAgents = {
            static isRefPtr = <optimized out>, m_ptr = 0x0}, 
          m_timelineAgentId = 0}
        animationUpdateBlock = {m_animationController = 0x7f2a6cfff938}
        layoutRoot = {m_ref = {static isRefPtr = <optimized out>, 
            m_ptr = 0x7f2a1b2a3dc0}}
#19 0x00007f2a8a725e45 in WebCore::Document::updateLayout (this=0x7f2a6cf8a000)
    at ../../Source/WebCore/dom/Document.cpp:1985
        __PRETTY_FUNCTION__ = "void WebCore::Document::updateLayout()"
        frameView = {static isRefPtr = <optimized out>, m_ptr = 0x7f2a228f4900}
        repaintRegionAccumulator = {m_rootView = {m_ref = {
              static isRefPtr = <optimized out>, m_ptr = 0x7f2a1b2a3dc0}}, 
          m_wasAccumulatingRepaintRegion = false}
        layoutCheckPoint = {<No data fields>}
#20 0x00007f2a8a725ec2 in WebCore::Document::updateLayoutIgnorePendingStylesheets (this=0x7f2a6cf8a000, 
    runPostLayoutTasks=WebCore::Document::RunPostLayoutTasks::Asynchronously)
    at ../../Source/WebCore/dom/Document.cpp:1999
        oldIgnore = false
#21 0x00007f2a8a79e093 in WebCore::Element::boundingClientRect (
    this=0x7f2a1b2f9f70) at ../../Source/WebCore/dom/Element.cpp:1222
        renderer = 0x7f2a89310c40
     <WebCore::JSDOMWrapper<WebCore::EventTarget>::wrapped() const+28>
        quads = {<WTF::VectorBuffer<WebCore::FloatQuad, 0, WTF::FastMalloc>> = {<WTF::VectorBufferBase<WebCore::FloatQuad, WTF::FastMalloc>> = {
              m_buffer = 0x7ffee4fa93c0, m_capacity = 2301712372, 
              m_size = 32554}, <No data fields>}, <No data fields>}
        result = {m_location = {m_x = -3.69786963e+22, m_y = 4.64544454e-41}, 
          m_size = {m_width = 1.27056962e-21, m_height = 4.56178702e-41}}
#22 0x00007f2a8a79e422 in WebCore::Element::getBoundingClientRect (
    this=0x7f2a1b2f9f70) at ../../Source/WebCore/dom/Element.cpp:1251
No locals.
#23 0x00007f2a8996d57d in WebCore::jsElementPrototypeFunctionGetBoundingClientRectBody (state=0x7ffee4fa95e0, castedThis=0x7f29eda89ca0, throwScope=...)
    at DerivedSources/WebCore/JSElement.cpp:2251
        impl = 
    @0x7f2a1b2f9f70: {<WebCore::ContainerNode> = {<WebCore::Node> = {<No data fields>}, m_firstChild = 0x7f29ed643cd0, m_lastChild = 0x7f29ef9c9b40}, 
          m_tagName = {m_impl = {static isRefPtr = <optimized out>, 
              m_ptr = 0x7f29f3785e70}}, m_elementData = {
            static isRefPtr = <optimized out>, m_ptr = 0x7f29efe16100}}
#24 0x00007f2a8997bac7 in WebCore::IDLOperation<WebCore::JSElement>::call<WebCore::jsElementPrototypeFunctionGetBoundingClientRectBody> (state=..., 
    operationName=0x7f2a8c216088 "getBoundingClientRect")
    at ../../Source/WebCore/bindings/js/JSDOMOperation.h:53
        __PRETTY_FUNCTION__ = "static JSC::EncodedJSValue WebCore::IDLOperation<JSClass>::call(JSC::ExecState&, const char*) [with JSC::EncodedJSValue (* operation)(JSC::ExecState*, WebCore::IDLOperation<JSClass>::ClassParameter, J"...
        __FUNCTION__ = "call"
        throwScope = {<JSC::ExceptionScope> = {m_vm = @0x7f2a1cc00000, 
            m_previousScope = 0x7ffee4fa9b50, m_location = {
              functionName = 0x7f2a8c225abc <long WebCore::IDLOperation<WebCore::JSElement>::call<&WebCore::jsElementPrototypeFunctionGetBoundingClientRectBody, (WebCore::CastedThisErrorBehavior)0>(JSC::ExecState&, char const*)::__FUNCTION__> "call", 
              file = 0x7f2a8c216ba0 "../../Source/WebCore/bindings/js/JSDOMOperation.h", line = 43}, m_recursionDepth = 4}, m_isReleased = false}
        thisObject = 0x7f29eda89ca0
#25 0x00007f2a8996d5df in WebCore::jsElementPrototypeFunctionGetBoundingClientRect (state=0x7ffee4fa95e0) at DerivedSources/WebCore/JSElement.cpp:2256
No locals.
#26 0x00007f2a2490a168 in ?? ()
No symbol table info available.
#27 0x00007ffee4fa9790 in ?? ()
No symbol table info available.
#28 0x00007f2a249c0fe2 in ?? ()
No symbol table info available.
#29 0x0000000000000000 in ?? ()
No symbol table info available.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20171201/ac2e115c/attachment-0001.html>


More information about the webkit-unassigned mailing list