<html>
<head>
<base href="https://bugs.webkit.org/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - REGRESSION(r156846): Crashes with guard malloc"
href="https://bugs.webkit.org/show_bug.cgi?id=156984">156984</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>REGRESSION(r156846): Crashes with guard malloc
</td>
</tr>
<tr>
<th>Classification</th>
<td>Unclassified
</td>
</tr>
<tr>
<th>Product</th>
<td>WebKit
</td>
</tr>
<tr>
<th>Version</th>
<td>WebKit Nightly Build
</td>
</tr>
<tr>
<th>Hardware</th>
<td>Unspecified
</td>
</tr>
<tr>
<th>OS</th>
<td>Unspecified
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>Normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>P2
</td>
</tr>
<tr>
<th>Component</th>
<td>Layout and Rendering
</td>
</tr>
<tr>
<th>Assignee</th>
<td>webkit-unassigned@lists.webkit.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>koivisto@iki.fi
</td>
</tr>
<tr>
<th>CC</th>
<td>simon.fraser@apple.com
</td>
</tr></table>
<p>
<div>
<pre>Accessing deleted RenderStyle.
CRASHING TEST: css1/pseudo/firstline.html
Global Trace Buffer (reverse chronological seconds):
3.899656 CFNetwork 0x00007fff86a88553 TCP Conn 0x1836f6e00 event 1. err: 0
3.918368 CFNetwork 0x00007fff869f8f4b TCP Conn 0x1836f6e00 started
5.136279 CFNetwork 0x00007fff86b86ed7 Explicitly setting CF cookie storage singleton
5.138031 CFNetwork 0x00007fff86bbd8ad Explicitly setting cookie storage singleton
Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0 com.apple.WebCore 0x000000010428a251 WebCore::RenderBlock::minLineHeightForReplacedRenderer(bool, WebCore::LayoutUnit) const + 65
1 com.apple.WebCore 0x000000010364669c WebCore::LineWidth::updateAvailableWidth(WebCore::LayoutUnit) + 60
2 com.apple.WebCore 0x000000010415deff WebCore::LineBreaker::nextLineBreak(WebCore::BidiResolverWithIsolate<WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun>&, WebCore::LineInfo&, WebCore::LineLayoutState&, WebCore::RenderTextInfo&, WebCore::FloatingObject*, unsigned int, WTF::Vector<WebCore::WordMeasurement, 64ul, WTF::CrashOnOverflow, 16ul>&) + 207
3 com.apple.WebCore 0x00000001042a674e WebCore::RenderBlockFlow::layoutRunsAndFloatsInRange(WebCore::LineLayoutState&, WebCore::BidiResolverWithIsolate<WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun>&, WebCore::InlineIterator const&, WebCore::BidiStatus const&, unsigned int) + 862
4 com.apple.WebCore 0x00000001042a4cc0 WebCore::RenderBlockFlow::layoutRunsAndFloats(WebCore::LineLayoutState&, bool) + 1200
5 com.apple.WebCore 0x00000001042a9485 WebCore::RenderBlockFlow::layoutLineBoxes(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&) + 1845
6 com.apple.WebCore 0x0000000104294c12 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 946
7 com.apple.WebCore 0x00000001035e2346 WebCore::RenderBlock::layout() + 54
8 com.apple.WebCore 0x00000001042969d3 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) + 883
9 com.apple.WebCore 0x00000001042958ec WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) + 508
10 com.apple.WebCore 0x0000000104294bfa WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 922
11 com.apple.WebCore 0x00000001035e2346 WebCore::RenderBlock::layout() + 54
12 com.apple.WebCore 0x00000001042969d3 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) + 883
13 com.apple.WebCore 0x00000001042958ec WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) + 508
14 com.apple.WebCore 0x0000000104294bfa WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 922
15 com.apple.WebCore 0x00000001035e2346 WebCore::RenderBlock::layout() + 54
16 com.apple.WebCore 0x00000001042969d3 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) + 883
17 com.apple.WebCore 0x00000001042958ec WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) + 508
18 com.apple.WebCore 0x0000000104294bfa WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) + 922
19 com.apple.WebCore 0x00000001035e2346 WebCore::RenderBlock::layout() + 54
20 com.apple.WebCore 0x00000001035e21bd WebCore::RenderView::layout() + 765
21 com.apple.WebCore 0x00000001035df781 WebCore::FrameView::layout(bool) + 2993
22 com.apple.WebCore 0x00000001035de49a WebCore::Document::implicitClose() + 874
23 com.apple.WebCore 0x00000001035ddcd3 WebCore::FrameLoader::checkCompleted() + 275
24 com.apple.WebCore 0x00000001035dc9cb WebCore::FrameLoader::finishedParsing() + 123
25 com.apple.WebCore 0x00000001035db7a6 WebCore::Document::finishedParsing() + 390
26 com.apple.WebCore 0x00000001035b3f72 WebCore::HTMLDocumentParser::prepareToStopParsing() + 162
27 com.apple.WebCore 0x00000001035b2d2a WebCore::DocumentWriter::end() + 58
28 com.apple.WebCore 0x00000001035a490c WebCore::DocumentLoader::finishedLoading(double) + 268
29 com.apple.WebCore 0x000000010363a159 WebCore::CachedResource::checkNotify() + 153
30 com.apple.WebCore 0x00000001038f79c3 WebCore::CachedRawResource::finishLoading(WebCore::SharedBuffer*) + 227
31 com.apple.WebCore 0x0000000103639feb WebCore::SubresourceLoader::didFinishLoading(double) + 1163
32 com.apple.WebKit 0x00000001020a1af8 WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&, IPC::MessageDecoder&) + 460
33 com.apple.WebKit 0x0000000101ef382d IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::MessageDecoder, std::__1::default_delete<IPC::MessageDecoder> >) + 127
34 com.apple.WebKit 0x0000000101ef6196 IPC::Connection::dispatchOneMessage() + 126
35 com.apple.JavaScriptCore 0x0000000103285535 WTF::RunLoop::performWork() + 437
36 com.apple.JavaScriptCore 0x00000001032858e2 WTF::RunLoop::performWork(void*) + 34
37 com.apple.CoreFoundation 0x00007fff894d7881 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
38 com.apple.CoreFoundation 0x00007fff894b6fbc __CFRunLoopDoSources0 + 556
39 com.apple.CoreFoundation 0x00007fff894b64df __CFRunLoopRun + 927
40 com.apple.CoreFoundation 0x00007fff894b5ed8 CFRunLoopRunSpecific + 296
41 com.apple.HIToolbox 0x00007fff8f6e1935 RunCurrentEventLoopInMode + 235
42 com.apple.HIToolbox 0x00007fff8f6e176f ReceiveNextEventCommon + 432
43 com.apple.HIToolbox 0x00007fff8f6e15af _BlockUntilNextEventMatchingListInModeWithFilter + 71
44 com.apple.AppKit 0x00007fff973b9efa _DPSNextEvent + 1067
45 com.apple.AppKit 0x00007fff973b932a -[NSApplication _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 454
46 com.apple.AppKit 0x00007fff973ade84 -[NSApplication run] + 682
47 com.apple.AppKit 0x00007fff9737746c NSApplicationMain + 1176
48 libxpc.dylib 0x00007fff90afa194 _xpc_objc_main + 795
49 libxpc.dylib 0x00007fff90af8bbe xpc_main + 494
50 com.apple.WebKit.WebContent 0x0000000101e377df 0x101e36000 + 6111
51 libdyld.dylib 0x00007fff82be85ad start + 1</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>