remainingOuterLogicalHeight > 0 in MultiColumnFragmentainerGroup.cpp
Reported by
hodovan....@gmail.com,
Feb 9 2017
|
||
Issue description
Chrome Version: 58.0.3008.0
OS: Ubuntu 16.04.1 LTS, x86_64
What steps will reproduce the problem?
(1) Load the attached test case with debug content_shell:
<style>
* {
margin-bottom: -2203825588;
-webkit-columns: 37373;
-webkit-padding-before :761370995mm;
}
</style>
<a></a>
What is the expected result?
Run the test without any failure.
Backtrace:
[1:1:0208/235718.384110:207169286358:FATAL:MultiColumnFragmentainerGroup.cpp(316)] Check failed: remainingOuterLogicalHeight > 0.
#0 0x7fa3da4e7086 base::debug::StackTrace::StackTrace()
#1 0x7fa3da4e5195 base::debug::StackTrace::StackTrace()
#2 0x7fa3da54642d logging::LogMessage::~LogMessage()
#3 0x7fa3ce406d35 blink::MultiColumnFragmentainerGroup::calculateMaxColumnHeight()
#4 0x7fa3ce405d85 blink::MultiColumnFragmentainerGroup::resetColumnHeight()
#5 0x7fa3ce367f06 blink::LayoutMultiColumnSet::resetColumnHeight()
#6 0x7fa3ce360635 blink::LayoutMultiColumnFlowThread::layoutColumns()
#7 0x7fa3ce28e3d3 blink::LayoutBlockFlow::layoutSpecialExcludedChild()
#8 0x7fa3ce292d02 blink::LayoutBlockFlow::layoutBlockChildren()
#9 0x7fa3ce28f9dd blink::LayoutBlockFlow::layoutChildren()
#10 0x7fa3ce28f342 blink::LayoutBlockFlow::layoutBlock()
#11 0x7fa3ce27573d blink::LayoutBlock::layout()
#12 0x7fa3ce290533 blink::LayoutBlockFlow::positionAndLayoutOnceIfNeeded()
#13 0x7fa3ce2907f9 blink::LayoutBlockFlow::layoutBlockChild()
#14 0x7fa3ce2930d0 blink::LayoutBlockFlow::layoutBlockChildren()
#15 0x7fa3ce28f9dd blink::LayoutBlockFlow::layoutChildren()
#16 0x7fa3ce28f342 blink::LayoutBlockFlow::layoutBlock()
#17 0x7fa3ce27573d blink::LayoutBlock::layout()
#18 0x7fa3ce3246e8 blink::LayoutFlowThread::layout()
#19 0x7fa3ce363a84 blink::LayoutMultiColumnFlowThread::layout()
#20 0x7fa3ce36069b blink::LayoutMultiColumnFlowThread::layoutColumns()
#21 0x7fa3ce28e3d3 blink::LayoutBlockFlow::layoutSpecialExcludedChild()
#22 0x7fa3ce292d02 blink::LayoutBlockFlow::layoutBlockChildren()
#23 0x7fa3ce28f9dd blink::LayoutBlockFlow::layoutChildren()
#24 0x7fa3ce28f342 blink::LayoutBlockFlow::layoutBlock()
#25 0x7fa3ce27573d blink::LayoutBlock::layout()
#26 0x7fa3ce290533 blink::LayoutBlockFlow::positionAndLayoutOnceIfNeeded()
#27 0x7fa3ce2907f9 blink::LayoutBlockFlow::layoutBlockChild()
#28 0x7fa3ce2930d0 blink::LayoutBlockFlow::layoutBlockChildren()
#29 0x7fa3ce28f9dd blink::LayoutBlockFlow::layoutChildren()
#30 0x7fa3ce28f342 blink::LayoutBlockFlow::layoutBlock()
#31 0x7fa3ce27573d blink::LayoutBlock::layout()
#32 0x7fa3ce3f4352 blink::LayoutView::layoutContent()
#33 0x7fa3ce3f4bf1 blink::LayoutView::layout()
#34 0x7fa3cdc5fd68 blink::layoutFromRootObject()
#35 0x7fa3cdc6062d blink::FrameView::performLayout()
#36 0x7fa3cdc61659 blink::FrameView::layout()
#37 0x7fa3cd7b528a blink::Document::implicitClose()
#38 0x7fa3ce59ec43 blink::FrameLoader::checkCompleted()
#39 0x7fa3cd7c3a50 blink::Document::decrementLoadEventDelayCountAndCheckLoadEvent()
#40 0x7fa3cd8a9bd8 blink::IncrementLoadEventDelayCount::clearAndCheckLoadEvent()
#41 0x7fa3cde6c90b blink::HTMLStyleElement::dispatchPendingEvent()
#42 0x7fa3cde6e31a _ZN4base8internal13FunctorTraitsIMN5blink16HTMLStyleElementEFvSt10unique_ptrINS2_28IncrementLoadEventDelayCountESt14default_deleteIS5_EEEvE6InvokeIRKNS2_10PersistentIS3_EEJS8_EEEvSA_OT_DpOT0_
#43 0x7fa3cde6e06c _ZN4base8internal12InvokeHelperILb0EvE8MakeItSoIRKMN5blink16HTMLStyleElementEFvSt10unique_ptrINS4_28IncrementLoadEventDelayCountESt14default_deleteIS7_EEEJRKNS4_10PersistentIS5_EESA_EEEvOT_DpOT0_
#44 0x7fa3cde6dc10 _ZN4base8internal7InvokerINS0_9BindStateIMN5blink16HTMLStyleElementEFvSt10unique_ptrINS3_28IncrementLoadEventDelayCountESt14default_deleteIS6_EEEJNS3_10PersistentIS4_EEN3WTF13PassedWrapperIS9_EEEEEFvvEE7RunImplIRKSB_RKSt5tupleIJSD_SG_EEJLm0ELm1EEEEvOT_OT0_NS_13IndexSequenceIJXspT1_EEEE
#45 0x7fa3cde6dacd _ZN4base8internal7InvokerINS0_9BindStateIMN5blink16HTMLStyleElementEFvSt10unique_ptrINS3_28IncrementLoadEventDelayCountESt14default_deleteIS6_EEEJNS3_10PersistentIS4_EEN3WTF13PassedWrapperIS9_EEEEEFvvEE3RunEPNS0_13BindStateBaseE
#46 0x7fa3da4eafdb _ZNO4base8internal8RunMixinINS_8CallbackIFvvELNS0_8CopyModeE0ELNS0_10RepeatModeE0EEEE3RunEv
#47 0x7fa3da4eabc3 base::debug::TaskAnnotator::RunTask()
#48 0x7fa3d24a173d blink::scheduler::TaskQueueManager::ProcessTaskFromWorkQueue()
#49 0x7fa3d24a0207 blink::scheduler::TaskQueueManager::DoWork()
#50 0x7fa3d24b47ac _ZN4base8internal13FunctorTraitsIMN5blink9scheduler16TaskQueueManagerEFvbEvE6InvokeIRKNS_7WeakPtrIS4_EEJRKbEEEvS6_OT_DpOT0_
#51 0x7fa3d24b2c22 _ZN4base8internal12InvokeHelperILb1EvE8MakeItSoIRKMN5blink9scheduler16TaskQueueManagerEFvbERKNS_7WeakPtrIS6_EEJRKbEEEvOT_OT0_DpOT1_
#52 0x7fa3d24af23a _ZN4base8internal7InvokerINS0_9BindStateIMN5blink9scheduler16TaskQueueManagerEFvbEJNS_7WeakPtrIS5_EEbEEEFvvEE7RunImplIRKS7_RKSt5tupleIJS9_bEEJLm0ELm1EEEEvOT_OT0_NS_13IndexSequenceIJXspT1_EEEE
#53 0x7fa3d24aba3a _ZN4base8internal7InvokerINS0_9BindStateIMN5blink9scheduler16TaskQueueManagerEFvbEJNS_7WeakPtrIS5_EEbEEEFvvEE3RunEPNS0_13BindStateBaseE
#54 0x7fa3da4eafdb _ZNO4base8internal8RunMixinINS_8CallbackIFvvELNS0_8CopyModeE0ELNS0_10RepeatModeE0EEEE3RunEv
#55 0x7fa3da4eabc3 base::debug::TaskAnnotator::RunTask()
#56 0x7fa3da571dda base::MessageLoop::RunTask()
#57 0x7fa3da571f38 base::MessageLoop::DeferOrRunPendingTask()
#58 0x7fa3da57240b base::MessageLoop::DoWork()
#59 0x7fa3da58c760 base::MessagePumpDefault::Run()
#60 0x7fa3da5719d6 base::MessageLoop::RunHandler()
#61 0x7fa3da623b53 base::RunLoop::Run()
Received signal 6
#0 0x7fa3da4e7086 base::debug::StackTrace::StackTrace()
#1 0x7fa3da4e5195 base::debug::StackTrace::StackTrace()
#2 0x7fa3da4e5f23 base::debug::(anonymous namespace)::StackDumpSignalHandler()
#3 0x7fa3e1949390 <unknown>
#4 0x7fa3c7d0a428 gsignal
#5 0x7fa3c7d0c02a abort
#6 0x7fa3da4e300d base::debug::(anonymous namespace)::DebugBreak()
#7 0x7fa3da4e3026 base::debug::BreakDebugger()
#8 0x7fa3da5467c6 logging::LogMessage::~LogMessage()
#9 0x7fa3ce406d35 blink::MultiColumnFragmentainerGroup::calculateMaxColumnHeight()
#10 0x7fa3ce405d85 blink::MultiColumnFragmentainerGroup::resetColumnHeight()
#11 0x7fa3ce367f06 blink::LayoutMultiColumnSet::resetColumnHeight()
#12 0x7fa3ce360635 blink::LayoutMultiColumnFlowThread::layoutColumns()
#13 0x7fa3ce28e3d3 blink::LayoutBlockFlow::layoutSpecialExcludedChild()
#14 0x7fa3ce292d02 blink::LayoutBlockFlow::layoutBlockChildren()
#15 0x7fa3ce28f9dd blink::LayoutBlockFlow::layoutChildren()
#16 0x7fa3ce28f342 blink::LayoutBlockFlow::layoutBlock()
#17 0x7fa3ce27573d blink::LayoutBlock::layout()
#18 0x7fa3ce290533 blink::LayoutBlockFlow::positionAndLayoutOnceIfNeeded()
#19 0x7fa3ce2907f9 blink::LayoutBlockFlow::layoutBlockChild()
#20 0x7fa3ce2930d0 blink::LayoutBlockFlow::layoutBlockChildren()
#21 0x7fa3ce28f9dd blink::LayoutBlockFlow::layoutChildren()
#22 0x7fa3ce28f342 blink::LayoutBlockFlow::layoutBlock()
#23 0x7fa3ce27573d blink::LayoutBlock::layout()
#24 0x7fa3ce3246e8 blink::LayoutFlowThread::layout()
#25 0x7fa3ce363a84 blink::LayoutMultiColumnFlowThread::layout()
#26 0x7fa3ce36069b blink::LayoutMultiColumnFlowThread::layoutColumns()
#27 0x7fa3ce28e3d3 blink::LayoutBlockFlow::layoutSpecialExcludedChild()
#28 0x7fa3ce292d02 blink::LayoutBlockFlow::layoutBlockChildren()
#29 0x7fa3ce28f9dd blink::LayoutBlockFlow::layoutChildren()
#30 0x7fa3ce28f342 blink::LayoutBlockFlow::layoutBlock()
#31 0x7fa3ce27573d blink::LayoutBlock::layout()
#32 0x7fa3ce290533 blink::LayoutBlockFlow::positionAndLayoutOnceIfNeeded()
#33 0x7fa3ce2907f9 blink::LayoutBlockFlow::layoutBlockChild()
#34 0x7fa3ce2930d0 blink::LayoutBlockFlow::layoutBlockChildren()
#35 0x7fa3ce28f9dd blink::LayoutBlockFlow::layoutChildren()
#36 0x7fa3ce28f342 blink::LayoutBlockFlow::layoutBlock()
#37 0x7fa3ce27573d blink::LayoutBlock::layout()
#38 0x7fa3ce3f4352 blink::LayoutView::layoutContent()
#39 0x7fa3ce3f4bf1 blink::LayoutView::layout()
#40 0x7fa3cdc5fd68 blink::layoutFromRootObject()
#41 0x7fa3cdc6062d blink::FrameView::performLayout()
#42 0x7fa3cdc61659 blink::FrameView::layout()
#43 0x7fa3cd7b528a blink::Document::implicitClose()
#44 0x7fa3ce59ec43 blink::FrameLoader::checkCompleted()
#45 0x7fa3cd7c3a50 blink::Document::decrementLoadEventDelayCountAndCheckLoadEvent()
#46 0x7fa3cd8a9bd8 blink::IncrementLoadEventDelayCount::clearAndCheckLoadEvent()
#47 0x7fa3cde6c90b blink::HTMLStyleElement::dispatchPendingEvent()
#48 0x7fa3cde6e31a _ZN4base8internal13FunctorTraitsIMN5blink16HTMLStyleElementEFvSt10unique_ptrINS2_28IncrementLoadEventDelayCountESt14default_deleteIS5_EEEvE6InvokeIRKNS2_10PersistentIS3_EEJS8_EEEvSA_OT_DpOT0_
#49 0x7fa3cde6e06c _ZN4base8internal12InvokeHelperILb0EvE8MakeItSoIRKMN5blink16HTMLStyleElementEFvSt10unique_ptrINS4_28IncrementLoadEventDelayCountESt14default_deleteIS7_EEEJRKNS4_10PersistentIS5_EESA_EEEvOT_DpOT0_
#50 0x7fa3cde6dc10 _ZN4base8internal7InvokerINS0_9BindStateIMN5blink16HTMLStyleElementEFvSt10unique_ptrINS3_28IncrementLoadEventDelayCountESt14default_deleteIS6_EEEJNS3_10PersistentIS4_EEN3WTF13PassedWrapperIS9_EEEEEFvvEE7RunImplIRKSB_RKSt5tupleIJSD_SG_EEJLm0ELm1EEEEvOT_OT0_NS_13IndexSequenceIJXspT1_EEEE
#51 0x7fa3cde6dacd _ZN4base8internal7InvokerINS0_9BindStateIMN5blink16HTMLStyleElementEFvSt10unique_ptrINS3_28IncrementLoadEventDelayCountESt14default_deleteIS6_EEEJNS3_10PersistentIS4_EEN3WTF13PassedWrapperIS9_EEEEEFvvEE3RunEPNS0_13BindStateBaseE
#52 0x7fa3da4eafdb _ZNO4base8internal8RunMixinINS_8CallbackIFvvELNS0_8CopyModeE0ELNS0_10RepeatModeE0EEEE3RunEv
#53 0x7fa3da4eabc3 base::debug::TaskAnnotator::RunTask()
#54 0x7fa3d24a173d blink::scheduler::TaskQueueManager::ProcessTaskFromWorkQueue()
#55 0x7fa3d24a0207 blink::scheduler::TaskQueueManager::DoWork()
#56 0x7fa3d24b47ac _ZN4base8internal13FunctorTraitsIMN5blink9scheduler16TaskQueueManagerEFvbEvE6InvokeIRKNS_7WeakPtrIS4_EEJRKbEEEvS6_OT_DpOT0_
#57 0x7fa3d24b2c22 _ZN4base8internal12InvokeHelperILb1EvE8MakeItSoIRKMN5blink9scheduler16TaskQueueManagerEFvbERKNS_7WeakPtrIS6_EEJRKbEEEvOT_OT0_DpOT1_
#58 0x7fa3d24af23a _ZN4base8internal7InvokerINS0_9BindStateIMN5blink9scheduler16TaskQueueManagerEFvbEJNS_7WeakPtrIS5_EEbEEEFvvEE7RunImplIRKS7_RKSt5tupleIJS9_bEEJLm0ELm1EEEEvOT_OT0_NS_13IndexSequenceIJXspT1_EEEE
#59 0x7fa3d24aba3a _ZN4base8internal7InvokerINS0_9BindStateIMN5blink9scheduler16TaskQueueManagerEFvbEJNS_7WeakPtrIS5_EEbEEEFvvEE3RunEPNS0_13BindStateBaseE
#60 0x7fa3da4eafdb _ZNO4base8internal8RunMixinINS_8CallbackIFvvELNS0_8CopyModeE0ELNS0_10RepeatModeE0EEEE3RunEv
#61 0x7fa3da4eabc3 base::debug::TaskAnnotator::RunTask()
r8: ffffffffffe71020 r9: ffffffffffe71010 r10: 0000000000000008 r11: 0000000000000202
r12: 0000000000001406 r13: 00007ffce0fed4d8 r14: 0000000000000001 r15: 0000000000000000
di: 0000000000000001 si: 0000000000000001 bp: 00007ffce0fecdc0 bx: 000006d9dd6007a0
dx: 0000000000000006 ax: 0000000000000000 cx: 00007fa3c7d0a428 sp: 00007ffce0fecc88
ip: 00007fa3c7d0a428 efl: 0000000000000202 cgf: 0000000000000033 erf: 0000000000000000
trp: 0000000000000000 msk: 0000000000000000 cr2: 0000000000000000
[end of stack trace]
#CRASHED - renderer
,
Feb 14 2017
Int overflows that aren't security related are considered WontFix. |
||
►
Sign in to add a comment |
||
Comment 1 by ajha@chromium.org
, Feb 14 2017Labels: Needs-Triage-M58 OS-Linux