<html>
    <head>
      <base href="https://bugs.webkit.org/" />
    </head>
    <body><span class="vcard"><a class="email" href="mailto:simon.fraser&#64;apple.com" title="Simon Fraser (smfr) &lt;simon.fraser&#64;apple.com&gt;"> <span class="fn">Simon Fraser (smfr)</span></a>
</span> changed
              <a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Absolute positioning -webkit-search-cancel-button crashes Safari"
   href="https://bugs.webkit.org/show_bug.cgi?id=152847">bug 152847</a>
        <br>
             <table border="1" cellspacing="0" cellpadding="8">
          <tr>
            <th>What</th>
            <th>Removed</th>
            <th>Added</th>
          </tr>

         <tr>
           <td style="text-align:right;">CC</td>
           <td>
               &nbsp;
           </td>
           <td>webkit-bug-importer&#64;group.apple.com
           </td>
         </tr></table>
      <p>
        <div>
            <b><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Absolute positioning -webkit-search-cancel-button crashes Safari"
   href="https://bugs.webkit.org/show_bug.cgi?id=152847#c4">Comment # 4</a>
              on <a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Absolute positioning -webkit-search-cancel-button crashes Safari"
   href="https://bugs.webkit.org/show_bug.cgi?id=152847">bug 152847</a>
              from <span class="vcard"><a class="email" href="mailto:simon.fraser&#64;apple.com" title="Simon Fraser (smfr) &lt;simon.fraser&#64;apple.com&gt;"> <span class="fn">Simon Fraser (smfr)</span></a>
</span></b>
        <pre>I can reproduce with r194567. Click in the input, then type:

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore                 0x000000010cb003b7 WebCore::RenderBox::offsetFromContainer(WebCore::RenderElement&amp;, WebCore::LayoutPoint const&amp;, bool*) const + 135
1   com.apple.WebCore                 0x000000010cbeade3 WebCore::RenderThemeMac::convertToPaintingRect(WebCore::RenderObject const&amp;, WebCore::RenderObject const&amp;, WebCore::FloatRect const&amp;, WebCore::IntRect const&amp;) const + 131
2   com.apple.WebCore                 0x000000010cbef558 WebCore::RenderThemeMac::paintSearchFieldCancelButton(WebCore::RenderObject const&amp;, WebCore::PaintInfo const&amp;, WebCore::IntRect const&amp;) + 1096
3   com.apple.WebCore                 0x000000010cbe740c WebCore::RenderTheme::paint(WebCore::RenderBox const&amp;, WebCore::ControlStates&amp;, WebCore::PaintInfo const&amp;, WebCore::LayoutRect const&amp;) + 1516
4   com.apple.WebCore                 0x000000010bed579d WebCore::RenderBox::paintBoxDecorations(WebCore::PaintInfo&amp;, WebCore::LayoutPoint const&amp;) + 541
5   com.apple.WebCore                 0x000000010bed2db5 WebCore::RenderBlock::paintObject(WebCore::PaintInfo&amp;, WebCore::LayoutPoint const&amp;) + 277
6   com.apple.WebCore                 0x000000010bed5126 WebCore::RenderBlock::paint(WebCore::PaintInfo&amp;, WebCore::LayoutPoint const&amp;) + 326
7   com.apple.WebCore                 0x000000010cb57871 WebCore::RenderLayer::paintBackgroundForFragments(WTF::Vector&lt;WebCore::LayerFragment, 1ul, WTF::CrashOnOverflow, 16ul&gt; const&amp;, WebCore::GraphicsContext&amp;, WebCore::GraphicsContext&amp;, WebCore::LayoutRect const&amp;, bool, WebCore::RenderLayer::LayerPaintingInfo const&amp;, unsigned int, WebCore::RenderObject*) + 385
8   com.apple.WebCore                 0x000000010cb546ea WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&amp;, WebCore::RenderLayer::LayerPaintingInfo const&amp;, unsigned int) + 2650
9   com.apple.WebCore                 0x000000010cb54988 WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&amp;, WebCore::RenderLayer::LayerPaintingInfo const&amp;, unsigned int) + 3320
10  com.apple.WebCore                 0x000000010cb54988 WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&amp;, WebCore::RenderLayer::LayerPaintingInfo const&amp;, unsigned int) + 3320
11  com.apple.WebCore                 0x000000010cb52677 WebCore::RenderLayer::paint(WebCore::GraphicsContext&amp;, WebCore::LayoutRect const&amp;, WebCore::LayoutSize const&amp;, unsigned int, WebCore::RenderObject*, unsigned int) + 263
12  com.apple.WebCore                 0x000000010c43cd12 WebCore::FrameView::paintContents(WebCore::GraphicsContext&amp;, WebCore::IntRect const&amp;) + 514
13  com.apple.WebCore                 0x000000010cc58630 WebCore::ScrollView::paint(WebCore::GraphicsContext&amp;, WebCore::IntRect const&amp;) + 416
14  com.apple.WebCore                 0x000000010bfa174d WebCore::RenderWidget::paintContents(WebCore::PaintInfo&amp;, WebCore::LayoutPoint const&amp;) + 909
15  com.apple.WebCore                 0x000000010bfa10e3 WebCore::RenderWidget::paint(WebCore::PaintInfo&amp;, WebCore::LayoutPoint const&amp;) + 787
16  com.apple.WebCore                 0x000000010cb5abba WebCore::RenderLayer::paintForegroundForFragmentsWithPhase(WebCore::PaintPhase, WTF::Vector&lt;WebCore::LayerFragment, 1ul, WTF::CrashOnOverflow, 16ul&gt; const&amp;, WebCore::GraphicsContext&amp;, WebCore::RenderLayer::LayerPaintingInfo const&amp;, unsigned int, WebCore::RenderObject*) + 394
17  com.apple.WebCore                 0x000000010cb57b40 WebCore::RenderLayer::paintForegroundForFragments(WTF::Vector&lt;WebCore::LayerFragment, 1ul, WTF::CrashOnOverflow, 16ul&gt; const&amp;, WebCore::GraphicsContext&amp;, WebCore::GraphicsContext&amp;, WebCore::LayoutRect const&amp;, bool, WebCore::RenderLayer::LayerPaintingInfo const&amp;, unsigned int, WebCore::RenderObject*, bool) + 496
18  com.apple.WebCore                 0x000000010cb54840 WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&amp;, WebCore::RenderLayer::LayerPaintingInfo const&amp;, unsigned int) + 2992
19  com.apple.WebCore                 0x000000010cb54988 WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&amp;, WebCore::RenderLayer::LayerPaintingInfo const&amp;, unsigned int) + 3320
20  com.apple.WebCore                 0x000000010cb54988 WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&amp;, WebCore::RenderLayer::LayerPaintingInfo const&amp;, unsigned int) + 3320
21  com.apple.WebCore                 0x000000010cb52677 WebCore::RenderLayer::paint(WebCore::GraphicsContext&amp;, WebCore::LayoutRect const&amp;, WebCore::LayoutSize const&amp;, unsigned int, WebCore::RenderObject*, unsigned int) + 263
22  com.apple.WebCore                 0x000000010c43cd12 WebCore::FrameView::paintContents(WebCore::GraphicsContext&amp;, WebCore::IntRect const&amp;) + 514
23  com.apple.WebCore                 0x000000010cc58630 WebCore::ScrollView::paint(WebCore::GraphicsContext&amp;, WebCore::IntRect const&amp;) + 416
24  com.apple.WebCore                 0x000000010bfa174d WebCore::RenderWidget::paintContents(WebCore::PaintInfo&amp;, WebCore::LayoutPoint const&amp;) + 909
25  com.apple.WebCore                 0x000000010bfa10e3 WebCore::RenderWidget::paint(WebCore::PaintInfo&amp;, WebCore::LayoutPoint const&amp;) + 787
26  com.apple.WebCore                 0x000000010cb5abba WebCore::RenderLayer::paintForegroundForFragmentsWithPhase(WebCore::PaintPhase, WTF::Vector&lt;WebCore::LayerFragment, 1ul, WTF::CrashOnOverflow, 16ul&gt; const&amp;, WebCore::GraphicsContext&amp;, WebCore::RenderLayer::LayerPaintingInfo const&amp;, unsigned int, WebCore::RenderObject*) + 394
27  com.apple.WebCore                 0x000000010cb57b40 WebCore::RenderLayer::paintForegroundForFragments(WTF::Vector&lt;WebCore::LayerFragment, 1ul, WTF::CrashOnOverflow, 16ul&gt; const&amp;, WebCore::GraphicsContext&amp;, WebCore::GraphicsContext&amp;, WebCore::LayoutRect const&amp;, bool, WebCore::RenderLayer::LayerPaintingInfo const&amp;, unsigned int, WebCore::RenderObject*, bool) + 496
28  com.apple.WebCore                 0x000000010cb54840 WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&amp;, WebCore::RenderLayer::LayerPaintingInfo const&amp;, unsigned int) + 2992
29  com.apple.WebCore                 0x000000010cb54988 WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&amp;, WebCore::RenderLayer::LayerPaintingInfo const&amp;, unsigned int) + 3320
30  com.apple.WebCore                 0x000000010cb54988 WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&amp;, WebCore::RenderLayer::LayerPaintingInfo const&amp;, unsigned int) + 3320
31  com.apple.WebCore                 0x000000010cb54988 WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&amp;, WebCore::RenderLayer::LayerPaintingInfo const&amp;, unsigned int) + 3320
32  com.apple.WebCore                 0x000000010cb54988 WebCore::RenderLayer::paintLayerContents(WebCore::GraphicsContext&amp;, WebCore::RenderLayer::LayerPaintingInfo const&amp;, unsigned int) + 3320
33  com.apple.WebCore                 0x000000010cb65bcc WebCore::RenderLayerBacking::paintIntoLayer(WebCore::GraphicsLayer const*, WebCore::GraphicsContext&amp;, WebCore::IntRect const&amp;, unsigned int, unsigned int) + 524
34  com.apple.WebCore                 0x000000010cb65e70 WebCore::RenderLayerBacking::paintContents(WebCore::GraphicsLayer const*, WebCore::GraphicsContext&amp;, unsigned int, WebCore::FloatRect const&amp;) + 528
35  com.apple.WebCore                 0x000000010c469977 WebCore::GraphicsLayer::paintGraphicsLayerContents(WebCore::GraphicsContext&amp;, WebCore::FloatRect const&amp;) + 135
36  com.apple.WebCore                 0x000000010caa18c9 WebCore::PlatformCALayer::drawLayerContents(CGContext*, WebCore::PlatformCALayer*, WTF::Vector&lt;WebCore::FloatRect, 5ul, WTF::CrashOnOverflow, 16ul&gt;&amp;) + 345
37  com.apple.WebCore                 0x000000010ce1e533 WebCore::TileGrid::platformCALayerPaintContents(WebCore::PlatformCALayer*, WebCore::GraphicsContext&amp;, WebCore::FloatRect const&amp;) + 163
38  com.apple.WebCore                 0x000000010cec34ac -[WebSimpleLayer drawInContext:] + 172</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>