<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>106083</bug_id>
          
          <creation_ts>2013-01-04 04:05:34 -0800</creation_ts>
          <short_desc>Regression(r138728): Causes crashes on the build bots</short_desc>
          <delta_ts>2013-01-04 05:20:35 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKit2</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>105442</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Chris Dumez">cdumez</reporter>
          <assigned_to name="Chris Dumez">cdumez</assigned_to>
          <cc>cmarcelo</cc>
    
    <cc>gyuyoung.kim</cc>
    
    <cc>kenneth</cc>
    
    <cc>macpherson</cc>
    
    <cc>menard</cc>
    
    <cc>naginenis</cc>
    
    <cc>noam</cc>
    
    <cc>simon.fraser</cc>
    
    <cc>tmpsantos</cc>
    
    <cc>tonikitoo</cc>
    
    <cc>webkit.review.bot</cc>
    
    <cc>zeno</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>800136</commentid>
    <comment_count>0</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2013-01-04 04:05:34 -0800</bug_when>
    <thetext>crash log for WebKitTestRunner (pid 452):
STDOUT: &lt;empty&gt;
STDERR: SHOULD NEVER BE REACHED
STDERR: /home/buildslave-1/webkit-buildslave/efl-linux-64-debug-wk2/build/Source/WebCore/platform/animation/TimingFunction.h(111) : static WTF::PassRefPtr&lt;WebCore::CubicBezierTimingFunction&gt; WebCore::CubicBezierTimingFunction::create(WebCore::CubicBezierTimingFunction::TimingFunctionPreset)
STDERR: 1   0x7fa0674c9728 WebCore::CubicBezierTimingFunction::create(WebCore::CubicBezierTimingFunction::TimingFunctionPreset)
STDERR: 2   0x7fa0642c5d1e CoreIPC::decodeTimingFunction(CoreIPC::ArgumentDecoder*, WTF::RefPtr&lt;WebCore::TimingFunction&gt;&amp;)
STDERR: 3   0x7fa0642c6659 CoreIPC::ArgumentCoder&lt;WebCore::GraphicsLayerAnimation&gt;::decode(CoreIPC::ArgumentDecoder*, WebCore::GraphicsLayerAnimation&amp;)
STDERR: 4   0x7fa0642cc879 bool CoreIPC::ArgumentDecoder::decode&lt;WebCore::GraphicsLayerAnimation&gt;(WebCore::GraphicsLayerAnimation&amp;)
STDERR: 5   0x7fa0642cbf02 CoreIPC::VectorArgumentCoder&lt;false, WebCore::GraphicsLayerAnimation&gt;::decode(CoreIPC::ArgumentDecoder*, WTF::Vector&lt;WebCore::GraphicsLayerAnimation, 0ul&gt;&amp;)
STDERR: 6   0x7fa0642ca6a5 bool CoreIPC::ArgumentDecoder::decode&lt;WTF::Vector&lt;WebCore::GraphicsLayerAnimation, 0ul&gt; &gt;(WTF::Vector&lt;WebCore::GraphicsLayerAnimation, 0ul&gt;&amp;)
STDERR: 7   0x7fa0642c6950 CoreIPC::ArgumentCoder&lt;WebCore::GraphicsLayerAnimations&gt;::decode(CoreIPC::ArgumentDecoder*, WebCore::GraphicsLayerAnimations&amp;)
STDERR: 8   0x7fa06456cf0f bool CoreIPC::ArgumentDecoder::decode&lt;WebCore::GraphicsLayerAnimations&gt;(WebCore::GraphicsLayerAnimations&amp;)
STDERR: 9   0x7fa06456cde4 CoreIPC::Arguments2&lt;unsigned int, WebCore::GraphicsLayerAnimations&gt;::decode(CoreIPC::ArgumentDecoder*, CoreIPC::Arguments2&lt;unsigned int, WebCore::GraphicsLayerAnimations&gt;&amp;)
STDERR: 10  0x7fa06456cb69 CoreIPC::ArgumentCoder&lt;CoreIPC::Arguments2&lt;unsigned int, WebCore::GraphicsLayerAnimations&gt; &gt;::decode(CoreIPC::ArgumentDecoder*, CoreIPC::Arguments2&lt;unsigned int, WebCore::GraphicsLayerAnimations&gt;&amp;)
STDERR: 11  0x7fa06456c7b7 bool CoreIPC::ArgumentDecoder::decode&lt;CoreIPC::Arguments2&lt;unsigned int, WebCore::GraphicsLayerAnimations&gt; &gt;(CoreIPC::Arguments2&lt;unsigned int, WebCore::GraphicsLayerAnimations&gt;&amp;)
STDERR: 12  0x7fa06456bef0 void CoreIPC::handleMessage&lt;Messages::CoordinatedLayerTreeHostProxy::SetLayerAnimations, WebKit::CoordinatedLayerTreeHostProxy, void (WebKit::CoordinatedLayerTreeHostProxy::*)(unsigned int, WebCore::GraphicsLayerAnimations const&amp;)&gt;(CoreIPC::MessageDecoder&amp;, WebKit::CoordinatedLayerTreeHostProxy*, void (WebKit::CoordinatedLayerTreeHostProxy::*)(unsigned int, WebCore::GraphicsLayerAnimations const&amp;))
STDERR: 13  0x7fa06456b334 WebKit::CoordinatedLayerTreeHostProxy::didReceiveCoordinatedLayerTreeHostProxyMessage(CoreIPC::Connection*, CoreIPC::MessageID, CoreIPC::MessageDecoder&amp;)
STDERR: 14  0x7fa0642dedfb WebKit::DrawingAreaProxyImpl::didReceiveCoordinatedLayerTreeHostProxyMessage(CoreIPC::Connection*, CoreIPC::MessageID, CoreIPC::MessageDecoder&amp;)
STDERR: 15  0x7fa0643396f4 WebKit::WebPageProxy::didReceiveMessage(CoreIPC::Connection*, CoreIPC::MessageID, CoreIPC::MessageDecoder&amp;)
STDERR: 16  0x7fa06437ae8b WebKit::WebProcessProxy::didReceiveMessage(CoreIPC::Connection*, CoreIPC::MessageID, CoreIPC::MessageDecoder&amp;)
STDERR: 17  0x7fa06425c72c CoreIPC::Connection::dispatchMessage(CoreIPC::MessageID, CoreIPC::MessageDecoder&amp;)
STDERR: 18  0x7fa06425c898 CoreIPC::Connection::dispatchMessage(CoreIPC::Connection::Message&lt;CoreIPC::MessageDecoder&gt;&amp;)
STDERR: 19  0x7fa06425cae3 CoreIPC::Connection::dispatchOneMessage()
STDERR: 20  0x7fa06426737a WTF::FunctionWrapper&lt;void (CoreIPC::Connection::*)()&gt;::operator()(CoreIPC::Connection*)
STDERR: 21  0x7fa064267180 WTF::BoundFunctionImpl&lt;WTF::FunctionWrapper&lt;void (CoreIPC::Connection::*)()&gt;, void (CoreIPC::Connection*)&gt;::operator()()
STDERR: 22  0x7fa06bba2eb2 WTF::Function&lt;void ()&gt;::operator()() const
STDERR: 23  0x7fa067c4dd57 WebCore::RunLoop::performWork()
STDERR: 24  0x7fa068737d06 WebCore::RunLoop::wakeUpEvent(void*, void*, unsigned int)
STDERR: 25  0x7fa06360b621
STDERR: 26  0x7fa06360a571
STDERR: 27  0x7fa06360aab7 ecore_main_loop_begin
STDERR: 28  0x434b05 WTR::TestController::platformRunUntil(bool&amp;, double)
STDERR: 29  0x41f50c WTR::TestController::runUntil(bool&amp;, WTR::TestController::TimeoutDuration)
STDERR: 30  0x426649 WTR::TestInvocation::invoke()
STDERR: 31  0x41f244 WTR::TestController::runTest(char const*)
STDERR: LEAK: 24 WebCoreNode</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>800141</commentid>
    <comment_count>1</comment_count>
      <attachid>181288</attachid>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2013-01-04 04:11:15 -0800</bug_when>
    <thetext>Created attachment 181288
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>800143</commentid>
    <comment_count>2</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2013-01-04 04:20:29 -0800</bug_when>
    <thetext>For reference, here is the decoding code:

/////
    case TimingFunction::CubicBezierFunction: {
        double x1, y1, x2, y2;
        CubicBezierTimingFunction::TimingFunctionPreset bezierPreset;
        if (!decoder-&gt;decodeEnum(bezierPreset))
            return false;
        if (bezierPreset != CubicBezierTimingFunction::Custom) {
            timingFunction = CubicBezierTimingFunction::create(bezierPreset);
            return true;
        }
        if (!decoder-&gt;decodeDouble(x1))
            return false;
        if (!decoder-&gt;decodeDouble(y1))
            return false;
        if (!decoder-&gt;decodeDouble(x2))
            return false;
        if (!decoder-&gt;decodeDouble(y2))
            return false;

        timingFunction = CubicBezierTimingFunction::create(x1, y1, x2, y2);
        return true;
    }
/////

As you can see, it returns early if the bezierPreset is not set custom and it does not decode the x/y parameters. Therefore, we should not encode them in the first place if bezierPreset is not set to custom.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>800148</commentid>
    <comment_count>3</comment_count>
      <attachid>181288</attachid>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2013-01-04 04:51:21 -0800</bug_when>
    <thetext>Comment on attachment 181288
Patch

Clearing flags on attachment: 181288

Committed r138790: &lt;http://trac.webkit.org/changeset/138790&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>800149</commentid>
    <comment_count>4</comment_count>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2013-01-04 04:51:26 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>800153</commentid>
    <comment_count>5</comment_count>
    <who name="Alexis Menard (darktears)">menard</who>
    <bug_when>2013-01-04 05:20:35 -0800</bug_when>
    <thetext>(In reply to comment #4)
&gt; All reviewed patches have been landed.  Closing bug.

Sorry about that.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>181288</attachid>
            <date>2013-01-04 04:11:15 -0800</date>
            <delta_ts>2013-01-04 04:51:21 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>106083_bezierPreset.patch</filename>
            <type>text/plain</type>
            <size>2248</size>
            <attacher name="Chris Dumez">cdumez</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJLaXQyL0NoYW5nZUxvZyBiL1NvdXJjZS9XZWJLaXQyL0No
YW5nZUxvZwppbmRleCA5Mzg0MTVkLi42YjQyNTVlIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViS2l0
Mi9DaGFuZ2VMb2cKKysrIGIvU291cmNlL1dlYktpdDIvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMjAg
QEAKKzIwMTMtMDEtMDQgIENocmlzdG9waGUgRHVtZXogIDxjaHJpc3RvcGhlLmR1bWV6QGludGVs
LmNvbT4KKworICAgICAgICBSZWdyZXNzaW9uKHIxMzg3MjgpOiBDYXVzZXMgY3Jhc2hlcyBvbiB0
aGUgYnVpbGQgYm90cworICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5j
Z2k/aWQ9MTA2MDgzCisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAg
ICAgICAgVXBkYXRlIGVuY29kZVRpbWluZ0Z1bmN0aW9uKCkgdG8gZW5jb2RlIHRoZSB4L3kgbWVt
YmVycyBvbmx5CisgICAgICAgIGlmIHRoZSBiZXppZXJQcmVzZXQgaXMgc2V0IHRvIGN1c3RvbS4g
VGhpcyBpcyBuZWVkZWQgYmVjYXVzZQorICAgICAgICBkZWNvZGVUaW1pbmdGdW5jdGlvbigpIG9u
bHkgZGVjb2RlcyB4L3kgbWVtYmVycyBpZiB0aGUKKyAgICAgICAgYmV6aWVyUHJlc2V0IGlzIHNl
dCB0byBjdXN0b20uCisKKyAgICAgICAgVGhpcyBmaXhlcyBhc3NlcnRpb24gaGl0cyBvbiB0aGUg
ZGVidWcgYnVpbGQgYm90cy4KKworICAgICAgICAqIFNoYXJlZC9Db29yZGluYXRlZEdyYXBoaWNz
L0Nvb3JkaW5hdGVkR3JhcGhpY3NBcmd1bWVudENvZGVycy5jcHA6CisgICAgICAgIChDb3JlSVBD
OjplbmNvZGVUaW1pbmdGdW5jdGlvbik6CisKIDIwMTMtMDEtMDQgIENhcmxvcyBHYXJjaWEgQ2Ft
cG9zICA8Y2dhcmNpYUBpZ2FsaWEuY29tPgogCiAgICAgICAgIFtTT1VQXSBDb252ZXJ0IFdlYlNv
dXBSZXF1ZXN0TWFuYWdlclByb3h5IHRvIGJlIFdlYkNvbnRleHRTdXBwbGVtZW50CmRpZmYgLS1n
aXQgYS9Tb3VyY2UvV2ViS2l0Mi9TaGFyZWQvQ29vcmRpbmF0ZWRHcmFwaGljcy9Db29yZGluYXRl
ZEdyYXBoaWNzQXJndW1lbnRDb2RlcnMuY3BwIGIvU291cmNlL1dlYktpdDIvU2hhcmVkL0Nvb3Jk
aW5hdGVkR3JhcGhpY3MvQ29vcmRpbmF0ZWRHcmFwaGljc0FyZ3VtZW50Q29kZXJzLmNwcAppbmRl
eCA0ODNhNDViLi5iZTI2MWExIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViS2l0Mi9TaGFyZWQvQ29v
cmRpbmF0ZWRHcmFwaGljcy9Db29yZGluYXRlZEdyYXBoaWNzQXJndW1lbnRDb2RlcnMuY3BwCisr
KyBiL1NvdXJjZS9XZWJLaXQyL1NoYXJlZC9Db29yZGluYXRlZEdyYXBoaWNzL0Nvb3JkaW5hdGVk
R3JhcGhpY3NBcmd1bWVudENvZGVycy5jcHAKQEAgLTU1NSwxMSArNTU1LDE0IEBAIHN0YXRpYyB2
b2lkIGVuY29kZVRpbWluZ0Z1bmN0aW9uKEFyZ3VtZW50RW5jb2RlciYgZW5jb2RlciwgY29uc3Qg
VGltaW5nRnVuY3Rpb24qCiAgICAgICAgIGJyZWFrOwogICAgIGNhc2UgVGltaW5nRnVuY3Rpb246
OkN1YmljQmV6aWVyRnVuY3Rpb246IHsKICAgICAgICAgY29uc3QgQ3ViaWNCZXppZXJUaW1pbmdG
dW5jdGlvbiogY3ViaWMgPSBzdGF0aWNfY2FzdDxjb25zdCBDdWJpY0JlemllclRpbWluZ0Z1bmN0
aW9uKj4odGltaW5nRnVuY3Rpb24pOwotICAgICAgICBlbmNvZGVyLmVuY29kZUVudW0oY3ViaWMt
PnRpbWluZ0Z1bmN0aW9uUHJlc2V0KCkpOwotICAgICAgICBlbmNvZGVyIDw8IGN1YmljLT54MSgp
OwotICAgICAgICBlbmNvZGVyIDw8IGN1YmljLT55MSgpOwotICAgICAgICBlbmNvZGVyIDw8IGN1
YmljLT54MigpOwotICAgICAgICBlbmNvZGVyIDw8IGN1YmljLT55MigpOworICAgICAgICBDdWJp
Y0JlemllclRpbWluZ0Z1bmN0aW9uOjpUaW1pbmdGdW5jdGlvblByZXNldCBiZXppZXJQcmVzZXQg
PSBjdWJpYy0+dGltaW5nRnVuY3Rpb25QcmVzZXQoKTsKKyAgICAgICAgZW5jb2Rlci5lbmNvZGVF
bnVtKGJlemllclByZXNldCk7CisgICAgICAgIGlmIChiZXppZXJQcmVzZXQgPT0gQ3ViaWNCZXpp
ZXJUaW1pbmdGdW5jdGlvbjo6Q3VzdG9tKSB7CisgICAgICAgICAgICBlbmNvZGVyIDw8IGN1Ymlj
LT54MSgpOworICAgICAgICAgICAgZW5jb2RlciA8PCBjdWJpYy0+eTEoKTsKKyAgICAgICAgICAg
IGVuY29kZXIgPDwgY3ViaWMtPngyKCk7CisgICAgICAgICAgICBlbmNvZGVyIDw8IGN1YmljLT55
MigpOworICAgICAgICB9CiAgICAgICAgIGJyZWFrOwogICAgIH0KICAgICBjYXNlIFRpbWluZ0Z1
bmN0aW9uOjpTdGVwc0Z1bmN0aW9uOiB7Cg==
</data>

          </attachment>
      

    </bug>

</bugzilla>