On debug build, open the attached file
(taken from http://trac.webkit.org/browser/trunk/LayoutTests/fast/shadow-dom/css-scoping-shadow-slot-style.html)
and drag mouse on the rendered HTML.

You see the following crash:
SHOULD NEVER BE REACHED
../../third_party/WebKit/Source/core/editing/EditingUtilities.cpp(178) : int blink::comparePositions(blink::Node *, int, blink::Node *, int, bool *) [Traversal = blink::FlatTreeTraversal]
1   0x7fdcab752608
2   0x7fdcab751ee1
3   0x7fdcab7790c4
4   0x7fdcab77d77d blink::PositionTemplate<blink::EditingAlgorithm<blink::FlatTreeTraversal> >::compareTo(blink::PositionTemplate<blink::EditingAlgorithm<blink::FlatTreeTraversal> > const&) const
5   0x7fdcab76c6a6 blink::FrameSelection::contains(blink::LayoutPoint const&)
6   0x7fdcab786964
7   0x7fdcab27efa0 blink::EventHandler::handleMousePressEvent(blink::EventWithHitTestResults<blink::PlatformMouseEvent> const&)
8   0x7fdcab282c91 blink::EventHandler::handleMousePressEvent(blink::PlatformMouseEvent const&)
9   0x7fdcb661453d blink::PageWidgetEventHandler::handleMouseDown(blink::LocalFrame&, blink::WebMouseEvent const&)
10  0x7fdcb66f19cd blink::WebViewImpl::handleMouseDown(blink::LocalFrame&, blink::WebMouseEvent const&)
11  0x7fdcb66142b3
12  0x7fdcb66f4f69 blink::WebViewImpl::handleInputEvent(blink::WebInputEvent const&)
13  0x7fdcbd77724c content::RenderWidgetInputHandler::HandleInputEvent(blink::WebInputEvent const&, ui::LatencyInfo const&, content::InputEventDispatchType)
14  0x7fdcbd8e0980 content::RenderWidget::OnHandleInputEvent(blink::WebInputEvent const*, ui::LatencyInfo const&, content::InputEventDispatchType)
15  0x7fdcbd75d5bd
16  0x7fdcbd8efe35
17  0x7fdcbd8efddf
18  0x7fdcbd8e97f9
19  0x7fdcbd8df976 content::RenderWidget::OnMessageReceived(IPC::Message const&)
20  0x7fdcbd8b48bb content::RenderViewImpl::OnMessageReceived(IPC::Message const&)
21  0x7fdcba805b1b IPC::MessageRouter::RouteMessage(IPC::Message const&)
22  0x7fdcbb8601e8 content::ChildThreadImpl::ChildThreadMessageRouter::RouteMessage(IPC::Message const&)
23  0x7fdcba805a9e IPC::MessageRouter::OnMessageReceived(IPC::Message const&)
24  0x7fdcbb863814 content::ChildThreadImpl::OnMessageReceived(IPC::Message const&)
25  0x7fdcbc1bd611
26  0x7fdcbd8aa8f9
27  0x7fdcbd8aa87d
28  0x7fdcbb870286
29  0x7fdcbd8aa491
30  0x7fdcbb92b511
31  0x7fdcbb92b465
Received signal 11 SEGV_MAPERR 0000fbadbeef
#0 0x7fdcc29df56e base::debug::StackTrace::StackTrace()
#1 0x7fdcc29df0af base::debug::(anonymous namespace)::StackDumpSignalHandler()
#2 0x7fdcb0782340 <unknown>
#3 0x7fdcab75260f blink::comparePositions<>()
#4 0x7fdcab751ee1 blink::comparePositionsInFlatTree()
#5 0x7fdcab7790c4 blink::comparePositions()
#6 0x7fdcab77d77d blink::PositionTemplate<>::compareTo()
#7 0x7fdcab76c6a6 blink::FrameSelection::contains()
#8 0x7fdcab786964 blink::SelectionController::handleMousePressEventSingleClick()
#9 0x7fdcab27efa0 blink::EventHandler::handleMousePressEvent()
#10 0x7fdcab282c91 blink::EventHandler::handleMousePressEvent()
#11 0x7fdcb661453d blink::PageWidgetEventHandler::handleMouseDown()
#12 0x7fdcb66f19cd blink::WebViewImpl::handleMouseDown()
#13 0x7fdcb66142b3 blink::PageWidgetDelegate::handleInputEvent()
#14 0x7fdcb66f4f69 blink::WebViewImpl::handleInputEvent()
#15 0x7fdcbd77724c content::RenderWidgetInputHandler::HandleInputEvent()
#16 0x7fdcbd8e0980 content::RenderWidget::OnHandleInputEvent()
#17 0x7fdcbd75d5bd _ZN4base20DispatchToMethodImplIPN7content16IdleUserDetectorEMS2_FvPKN5blink13WebInputEventERKN2ui11LatencyInfoENS1_22InputEventDispatchTypeEEJS7_S9_SC_EJLm0ELm1ELm2EEEEvRKT_T0_RKSt5tupleIJDpT1_EENS_13IndexSequenceIJXspT2_EEEE
#18 0x7fdcbd8efe35 _ZN4base16DispatchToMethodIPN7content12RenderWidgetEMS2_FvPKN5blink13WebInputEventERKN2ui11LatencyInfoENS1_22InputEventDispatchTypeEEJS7_S9_SC_EEEvRKT_T0_RKSt5tupleIJDpT1_EE
#19 0x7fdcbd8efddf _ZN3IPC16DispatchToMethodIN7content12RenderWidgetEMS2_FvPKN5blink13WebInputEventERKN2ui11LatencyInfoENS1_22InputEventDispatchTypeEEvSt5tupleIJS6_S8_SB_EEEEvPT_T0_PT1_RKT2_
#20 0x7fdcbd8e97f9 _ZN3IPC8MessageTI30InputMsg_HandleInputEvent_MetaSt5tupleIJPKN5blink13WebInputEventEN2ui11LatencyInfoEN7content22InputEventDispatchTypeEEEvE8DispatchINS9_12RenderWidgetESE_vMSE_FvS6_RKS8_SA_EEEbPKNS_7MessageEPT_PT0_PT1_T2_
#21 0x7fdcbd8df976 content::RenderWidget::OnMessageReceived()
#22 0x7fdcbd8b48bb content::RenderViewImpl::OnMessageReceived()
#23 0x7fdcba805b1b IPC::MessageRouter::RouteMessage()
#24 0x7fdcbb8601e8 content::ChildThreadImpl::ChildThreadMessageRouter::RouteMessage()
#25 0x7fdcba805a9e IPC::MessageRouter::OnMessageReceived()
#26 0x7fdcbb863814 content::ChildThreadImpl::OnMessageReceived()
#27 0x7fdcbc1bd611 _ZN4base8internal15RunnableAdapterIMN7content8devtools4page11ColorPickerEFbRKN5blink13WebMouseEventEEE3RunIJS9_EEEbPS5_DpOT_
#28 0x7fdcbd8aa8f9 _ZN4base8internal12InvokeHelperILb0EvNS0_15RunnableAdapterIMN7content15ChildThreadImplEFbRKN3IPC7MessageEEEEE8MakeItSoIJPNS3_16RenderThreadImplES8_EEEvSB_DpOT_
#29 0x7fdcbd8aa87d _ZN4base8internal7InvokerINS_13IndexSequenceIJLm0EEEENS0_9BindStateINS0_15RunnableAdapterIMN7content15ChildThreadImplEFbRKN3IPC7MessageEEEEFvPS7_SB_EJNS0_17UnretainedWrapperINS6_16RenderThreadImplEEEEEENS0_12InvokeHelperILb0EvSE_EEFvSB_EE3RunEPNS0_13BindStateBaseESB_
#30 0x7fdcbb870286 base::Callback<>::Run()
#31 0x7fdcbd8aa491 base::CancelableCallback<>::Forward()
#32 0x7fdcbb92b511 _ZN4base8internal15RunnableAdapterIMN7content24ResourceSchedulingFilterEFvRKN3IPC7MessageEEE3RunIJS7_EEEvPS3_DpOT_
#33 0x7fdcbb92b465 _ZN4base8internal12InvokeHelperILb1EvNS0_15RunnableAdapterIMN7content24ResourceSchedulingFilterEFvRKN3IPC7MessageEEEEE8MakeItSoINS_7WeakPtrIS4_EEJS8_EEEvSB_T_DpOT0_
#34 0x7fdcbd8aa6cd _ZN4base8internal7InvokerINS_13IndexSequenceIJLm0EEEENS0_9BindStateINS0_15RunnableAdapterIMNS_18CancelableCallbackIFvRKN3IPC7MessageEEEEKFvSA_EEEFvPKSC_SA_EJNS_7WeakPtrISC_EEEEENS0_12InvokeHelperILb1EvSF_EESB_E3RunEPNS0_13BindStateBaseESA_
#35 0x7fdcbb870286 base::Callback<>::Run()
#36 0x7fdcbc170ac8 _ZN4base8internal12InvokeHelperILb0EvNS_8CallbackIFvRKNSt7__debug3setI4GURLSt4lessIS5_ESaIS5_EEEELNS0_8CopyModeE1EEEE8MakeItSoIJSB_EEEvSE_DpOT_
#37 0x7fdcbd769a64 _ZN4base8internal7InvokerINS_13IndexSequenceIJLm0EEEENS0_9BindStateINS_8CallbackIFvRKN3IPC7MessageEELNS0_8CopyModeE1EEESA_JRS7_EEENS0_12InvokeHelperILb0EvSC_EEFvvEE3RunEPNS0_13BindStateBaseE
#38 0x7fdcc29bf82e base::Callback<>::Run()
#39 0x7fdcc29e4fbe base::debug::TaskAnnotator::RunTask()
#40 0x7fdcae76dde4 scheduler::TaskQueueManager::ProcessTaskFromWorkQueue()
#41 0x7fdcae76bd22 scheduler::TaskQueueManager::DoWork()
#42 0x7fdcae77357e _ZN4base8internal15RunnableAdapterIMN9scheduler16TaskQueueManagerEFvNS_9TimeTicksEbEE3RunIJRKS4_RKbEEEvPS3_DpOT_
#43 0x7fdcae77347a _ZN4base8internal12InvokeHelperILb1EvNS0_15RunnableAdapterIMN9scheduler16TaskQueueManagerEFvNS_9TimeTicksEbEEEE8MakeItSoINS_7WeakPtrIS4_EEJRKS5_RKbEEEvS8_T_DpOT0_
#44 0x7fdcae7733f8 _ZN4base8internal7InvokerINS_13IndexSequenceIJLm0ELm1ELm2EEEENS0_9BindStateINS0_15RunnableAdapterIMN9scheduler16TaskQueueManagerEFvNS_9TimeTicksEbEEEFvPS7_S8_bEJNS_7WeakPtrIS7_EERS8_bEEENS0_12InvokeHelperILb1EvSB_EEFvvEE3RunEPNS0_13BindStateBaseE
#45 0x7fdcc29bf82e base::Callback<>::Run()
#46 0x7fdcc29e4fbe base::debug::TaskAnnotator::RunTask()
#47 0x7fdcc2a5d2fc base::MessageLoop::RunTask()
#48 0x7fdcc2a5d598 base::MessageLoop::DeferOrRunPendingTask()
#49 0x7fdcc2a5d762 base::MessageLoop::DoWork()
#50 0x7fdcc2a6f1d3 base::MessagePumpDefault::Run()
#51 0x7fdcc2a5ccef base::MessageLoop::RunHandler()
#52 0x7fdcc2b045c4 base::RunLoop::Run()
#53 0x7fdcc2a5bd64 base::MessageLoop::Run()
#54 0x7fdcbd909a28 content::RendererMain()
#55 0x7fdcbdc64fb6 content::RunZygote()
#56 0x7fdcbdc65260 content::RunNamedProcessTypeMain()
#57 0x7fdcbdc66e79 content::ContentMainRunnerImpl::Run()
#58 0x7fdcbdc64672 content::ContentMain()
#59 0x7fdcc35cb8f2 ChromeMain
#60 0x7fdcc35cb8a2 main
#61 0x7fdcaea48ec5 __libc_start_main
  r8: 00007fdca5328a00  r9: 00007fdcbb7b0e2f r10: 00007fdcaede3be0 r11: 0000000000000000
 r12: 00007fdcc35cb77c r13: 00007ffd16151aa0 r14: 0000000000000000 r15: 0000000000000000
  di: 0000000000000000  si: 00000000efcdab90  bp: 00007ffd1614a880  bx: 0000000000000000
  dx: 0000000000000000  ax: 00000000fbadbeef  cx: 00000000fbadbeef  sp: 00007ffd1614a4d0
  ip: 00007fdcab75260f efl: 0000000000010246 cgf: 0000000000000033 erf: 0000000000000006
 trp: 000000000000000e msk: 0000000000000000 cr2: 00000000fbadbeef
[end of stack trace]

 

Deleted: css-scoping-shadow-slot-style.html 1.4 KB

css-scoping-shadow-slot-style.html 1.4 KB View Download