Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ASSERTION FAILED: !root->needsLayout() in WebCore::FrameView::doLayoutWithFrameFlattening #19

Open
renatahodovan opened this issue Jul 15, 2013 · 0 comments

Comments

@renatahodovan
Copy link

The following test crashes on the assertion above:

<html>
   <div style="-webkit-writing-mode: vertical-rl;">
      <blockquote/>
      <button autofocus="autofocus"></button>
      <iframe></iframe>
      <button autofocus="autofocus"></button>
      <iframe></iframe>
   </div>
</html>

The backtrace:

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff4d6a339 in WTFCrash ()
at /home/reni/Data/REPOS/webkitnix/Source/WTF/wtf/Assertions.cpp:339
339 *(int *)(uintptr_t)0xbbadbeef = 0;
(gdb) bt
#0 0x00007ffff4d6a339 in WTFCrash ()

at /home/reni/Data/REPOS/webkitnix/Source/WTF/wtf/Assertions.cpp:339

#1 0x00007ffff3b58a58 in WebCore::FrameView::doLayoutWithFrameFlattening (

this=0x8f28e0, allowSubtree=true)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/page/FrameView.cpp:3485

#2 0x00007ffff3b50019 in WebCore::FrameView::layout (this=0x8f28e0,

allowSubtree=true)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/page/FrameView.cpp:1157

#3 0x00007ffff3b54146 in WebCore::FrameView::visibleContentsResized (

this=0x8f28e0)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/page/FrameView.cpp:2220

#4 0x00007ffff3bf73cc in WebCore::ScrollView::updateScrollbars (

this=0x8f28e0, desiredOffset=...)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/platform/ScrollView.cpp:486

#5 0x00007ffff3bf9693 in WebCore::ScrollView::setFrameRect (this=0x8f28e0,

newRect=...)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/platform/ScrollView.cpp:891

#6 0x00007ffff3b4e1da in WebCore::FrameView::setFrameRect (this=0x8f28e0,

newRect=...)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/page/FrameView.cpp:472

#7 0x00007ffff3f73fab in WebCore::RenderWidget::setWidgetGeometry (

---Type to continue, or q to quit---
this=0x68a708, frame=...)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/rendering/RenderWidget.cpp:158
#8 0x00007ffff3f74203 in WebCore::RenderWidget::updateWidgetGeometry (

this=0x68a708)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/rendering/RenderWidget.cpp:180

#9 0x00007ffff3f75164 in WebCore::RenderWidget::updateWidgetPosition (

this=0x68a708)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/rendering/RenderWidget.cpp:348

#10 0x00007ffff3f6b29d in WebCore::RenderView::updateWidgetPositions (

this=0x736748)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/rendering/RenderView.cpp:915

#11 0x00007ffff3b5609a in WebCore::FrameView::performPostLayoutTasks (

this=0x7368e0)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/page/FrameView.cpp:2804

#12 0x00007ffff3b502c4 in WebCore::FrameView::layout (this=0x7368e0,

allowSubtree=true)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/page/FrameView.cpp:1198

#13 0x00007ffff3647cb4 in WebCore::Document::implicitClose (this=0x67ec00)

at /home/reni/Data/REPOS/webkitnix/Source/WebCore/dom/Document.cpp:2454

---Type to continue, or q to quit---
#14 0x00007ffff3a56a0d in WebCore::FrameLoader::checkCallImplicitClose (

this=0x904478)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/loader/FrameLoader.cpp:843

#15 0x00007ffff3a56778 in WebCore::FrameLoader::checkCompleted (this=0x904478)

at /home/reni/Data/REPOS/webkitnix/Source/WebCore/loader/FrameLoader.cpp:786

#16 0x00007ffff3a564b6 in WebCore::FrameLoader::finishedParsing (this=0x904478)

at /home/reni/Data/REPOS/webkitnix/Source/WebCore/loader/FrameLoader.cpp:719

#17 0x00007ffff364ed9b in WebCore::Document::finishedParsing (this=0x67ec00)

at /home/reni/Data/REPOS/webkitnix/Source/WebCore/dom/Document.cpp:4417

#18 0x00007ffff38eba1b in WebCore::HTMLConstructionSite::finishedParsing (

this=0x711b88)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/html/parser/HTMLConstructionSite.cpp:348

#19 0x00007ffff391d78b in WebCore::HTMLTreeBuilder::finished (this=0x711b70)

at /home/reni/Data/REPOS/webkitnix/Source/WebCore/html/parser/HTMLTreeBuilder.cpp:2926

#20 0x00007ffff38f26f8 in WebCore::HTMLDocumentParser::end (this=0x711e50)

at /home/reni/Data/REPOS/webkitnix/Source/WebCore/html/parser/HTMLDocumentParser.cpp:756

#21 0x00007ffff38f27e5 in WebCore::HTMLDocumentParser::attemptToRunDeferredScrip---Type to continue, or q to quit---

tsAndEnd (this=0x711e50)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/html/parser/HTMLDocumentParser.cpp:767
#22 0x00007ffff38f1418 in WebCore::HTMLDocumentParser::prepareToStopParsing (

this=0x711e50)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/html/parser/HTMLDocumentParser.cpp:211

#23 0x00007ffff38f2828 in WebCore::HTMLDocumentParser::attemptToEnd (

this=0x711e50)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/html/parser/HTMLDocumentParser.cpp:779

#24 0x00007ffff38f28df in WebCore::HTMLDocumentParser::finish (this=0x711e50)

at /home/reni/Data/REPOS/webkitnix/Source/WebCore/html/parser/HTMLDocumentParser.cpp:828

#25 0x00007ffff3a48ad3 in WebCore::DocumentWriter::end (this=0x7d7d50)

at /home/reni/Data/REPOS/webkitnix/Source/WebCore/loader/DocumentWriter.cpp:248

#26 0x00007ffff3a37d80 in WebCore::DocumentLoader::finishedLoading (

this=0x7d7cb0, finishTime=0)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/loader/DocumentLoader.cpp:402

#27 0x00007ffff3a37aee in WebCore::DocumentLoader::notifyFinished (

this=0x7d7cb0, resource=0x6cea80)

---Type to continue, or q to quit---
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/loader/DocumentLoader.cpp:344
#28 0x00007ffff3ac0f2c in WebCore::CachedResource::checkNotify (this=0x6cea80)

at /home/reni/Data/REPOS/webkitnix/Source/WebCore/loader/cache/CachedResource.cpp:369

#29 0x00007ffff3ac1002 in WebCore::CachedResource::finishLoading (

this=0x6cea80)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/loader/cache/CachedResource.cpp:385

#30 0x00007ffff3abdec4 in WebCore::CachedRawResource::finishLoading (

this=0x6cea80, data=0x73aa40)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/loader/cache/CachedRawResource.cpp:94

#31 0x00007ffff3a86438 in WebCore::SubresourceLoader::didFinishLoading (

this=0x70f7c0, finishTime=0)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/loader/SubresourceLoader.cpp:282

#32 0x00007ffff3a826cf in WebCore::ResourceLoader::didFinishLoading (

this=0x70f7c0, finishTime=0)
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/loader/ResourceLoader.cpp:488

#33 0x00007ffff470c0f0 in WebCore::readCallback (asyncResult=0x85f9a0,

data=0x754b90)

---Type to continue, or q to quit---
at /home/reni/Data/REPOS/webkitnix/Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:1335
#34 0x00007ffff0ca102a in async_ready_callback_wrapper (

source_object=0x83fb60, res=0x85f9a0, user_data=0x754b90)
at ginputstream.c:530

#35 0x00007ffff0cc05bb in g_task_return_now (task=0x85f9a0) at gtask.c:1105
#36 0x00007ffff0cc05d9 in complete_in_idle_cb (task=0x85f9a0) at gtask.c:1114
#37 0x00007ffff0fe9f56 in g_main_dispatch (context=0x610770) at gmain.c:3054
#38 g_main_context_dispatch (context=context@entry=0x610770) at gmain.c:3630
#39 0x00007ffff0fea2a8 in g_main_context_iterate (context=0x610770,

block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>)
at gmain.c:3701

#40 0x00007ffff0fea6aa in g_main_loop_run (loop=0x6108d0) at gmain.c:3895
#41 0x00007ffff46b6fc2 in WebCore::RunLoop::run ()

at /home/reni/Data/REPOS/webkitnix/Source/WebCore/platform/nix/RunLoopNix.cpp:60

#42 0x00007ffff4d1e0b2 in WebKit::WebProcessMainNix (argc=2,

argv=0x7fffffffdb68)
at /home/reni/Data/REPOS/webkitnix/Source/WebKit2/WebProcess/nix/WebProcessMainNix.cpp:88

#43 0x000000000040084d in main (argc=2, argv=0x7fffffffdb68)

at /home/reni/Data/REPOS/webkitnix/Source/WebKit2/nix/MainNix.cpp:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant