<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>62587</bug_id>
          
          <creation_ts>2011-06-13 12:33:29 -0700</creation_ts>
          <short_desc>[Texmap] [Qt] [WK2] Unsync in TextureMapperNode between parent and child lists cause crashes on WK2.</short_desc>
          <delta_ts>2011-07-18 10:05:06 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Platform</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>47068</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Viatcheslav Ostapenko">ostap73</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>noam</cc>
    
    <cc>webkit.review.bot</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>419777</commentid>
    <comment_count>0</comment_count>
    <who name="Viatcheslav Ostapenko">ostap73</who>
    <bug_when>2011-06-13 12:33:29 -0700</bug_when>
    <thetext>In TextureMapperNode::syncCompositingStateSelf in ParentChange &quot;if&quot; statement m_parent gets overwritten 1st and node gets removed from new m_parent child list and never added.

In ChildrenChange m_children list gets cleared, but m_parent members of child nodes are not cleared.

This cause unsync in m_children &lt;-&gt; m_parent linkage and random crashes mostly ~TextureMapperNode(), but also in other places when already deallocated node gets referenced because it wasn&apos;t removed from child list.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>419781</commentid>
    <comment_count>1</comment_count>
      <attachid>96991</attachid>
    <who name="Viatcheslav Ostapenko">ostap73</who>
    <bug_when>2011-06-13 12:49:07 -0700</bug_when>
    <thetext>Created attachment 96991
Fix parent/children unsync in TextureMapperNode.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>438185</commentid>
    <comment_count>2</comment_count>
      <attachid>96991</attachid>
    <who name="Noam Rosenthal">noam</who>
    <bug_when>2011-07-16 15:02:50 -0700</bug_when>
    <thetext>Comment on attachment 96991
Fix parent/children unsync in TextureMapperNode.

View in context: https://bugs.webkit.org/attachment.cgi?id=96991&amp;action=review

&gt; Source/WebCore/ChangeLog:10
&gt; +        Unofficially reviewed by Noam Rosenthal (module author).

This is now an official review, so please remove this line before committing.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>438327</commentid>
    <comment_count>3</comment_count>
      <attachid>101122</attachid>
    <who name="Viatcheslav Ostapenko">ostap73</who>
    <bug_when>2011-07-17 21:04:20 -0700</bug_when>
    <thetext>Created attachment 101122
Updated Changelog by Noams request.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>438536</commentid>
    <comment_count>4</comment_count>
      <attachid>101122</attachid>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2011-07-18 10:05:02 -0700</bug_when>
    <thetext>Comment on attachment 101122
Updated Changelog by Noams request.

Clearing flags on attachment: 101122

Committed r91192: &lt;http://trac.webkit.org/changeset/91192&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>438537</commentid>
    <comment_count>5</comment_count>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2011-07-18 10:05:06 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>96991</attachid>
            <date>2011-06-13 12:49:07 -0700</date>
            <delta_ts>2011-07-17 21:04:20 -0700</delta_ts>
            <desc>Fix parent/children unsync in TextureMapperNode.</desc>
            <filename>TextureMapperNode_parent_child_sync_01.diff</filename>
            <type>text/plain</type>
            <size>2643</size>
            <attacher name="Viatcheslav Ostapenko">ostap73</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZyBiL1NvdXJjZS9XZWJDb3JlL0No
YW5nZUxvZwppbmRleCA4MzJmM2E0Li5hN2MyY2NjIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29y
ZS9DaGFuZ2VMb2cKKysrIGIvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTcg
QEAKKzIwMTEtMDYtMTMgIFZpYXRjaGVzbGF2IE9zdGFwZW5rbyAgPG9zdGFwZW5rby52aWF0Y2hl
c2xhdkBub2tpYS5jb20+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisK
KyAgICAgICAgW1RleG1hcF0gW1F0XSBbV0syXSBVbnN5bmMgaW4gVGV4dHVyZU1hcHBlck5vZGUg
YmV0d2VlbiBwYXJlbnQgYW5kIGNoaWxkIGxpc3RzIGNhdXNlIGNyYXNoZXMgb24gV0syLgorICAg
ICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9NjI1ODcKKworICAg
ICAgICBGaXggdW5zeW5jIGJldHdlZW4gbV9wYXJlbnQgYW5kIG1fY2hpbGRyZW4gbGlzdCBpbiBj
aGlsZCBhbmQgcGFyZW50IHRleHR1cmUgbWFwcGVyIG5vZGVzIAorICAgICAgICBpbiBzeW5jQ29t
cG9zaXRpbmdTdGF0ZVNlbGYuCisgICAgICAgIFVub2ZmaWNpYWxseSByZXZpZXdlZCBieSBOb2Ft
IFJvc2VudGhhbCAobW9kdWxlIGF1dGhvcikuCisKKyAgICAgICAgKiBwbGF0Zm9ybS9ncmFwaGlj
cy90ZXhtYXAvVGV4dHVyZU1hcHBlck5vZGUuY3BwOgorICAgICAgICAoV2ViQ29yZTo6VGV4dHVy
ZU1hcHBlck5vZGU6OnN5bmNDb21wb3NpdGluZ1N0YXRlU2VsZik6CisKIDIwMTEtMDYtMTMgIEFk
YW0gQmFydGggIDxhYmFydGhAd2Via2l0Lm9yZz4KIAogICAgICAgICBSZXZpZXdlZCBieSBEYXJp
biBBZGxlci4KZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL2dyYXBoaWNzL3Rl
eG1hcC9UZXh0dXJlTWFwcGVyTm9kZS5jcHAgYi9Tb3VyY2UvV2ViQ29yZS9wbGF0Zm9ybS9ncmFw
aGljcy90ZXhtYXAvVGV4dHVyZU1hcHBlck5vZGUuY3BwCmluZGV4IDM4ODhlMjkuLmIzNzBmNDgg
MTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL2dyYXBoaWNzL3RleG1hcC9UZXh0
dXJlTWFwcGVyTm9kZS5jcHAKKysrIGIvU291cmNlL1dlYkNvcmUvcGxhdGZvcm0vZ3JhcGhpY3Mv
dGV4bWFwL1RleHR1cmVNYXBwZXJOb2RlLmNwcApAQCAtNTg1LDE1ICs1ODUsMjcgQEAgdm9pZCBU
ZXh0dXJlTWFwcGVyTm9kZTo6c3luY0NvbXBvc2l0aW5nU3RhdGVTZWxmKEdyYXBoaWNzTGF5ZXJU
ZXh0dXJlTWFwcGVyKiBncmEKICAgICAgICAgcmV0dXJuOwogCiAgICAgaWYgKG1fY3VycmVudENv
bnRlbnQuY29udGVudFR5cGUgPT0gSFRNTENvbnRlbnRUeXBlICYmIChjaGFuZ2VNYXNrICYgUGFy
ZW50Q2hhbmdlKSkgewotICAgICAgICBtX3BhcmVudCA9IHRvVGV4dHVyZU1hcHBlck5vZGUoZ3Jh
cGhpY3NMYXllci0+cGFyZW50KCkpOwotCi0gICAgICAgIGlmICghZ3JhcGhpY3NMYXllci0+cGFy
ZW50KCkgJiYgbV9wYXJlbnQpIHsKLSAgICAgICAgICAgIHNpemVfdCBpbmRleCA9IG1fcGFyZW50
LT5tX2NoaWxkcmVuLmZpbmQodGhpcyk7Ci0gICAgICAgICAgICBtX3BhcmVudC0+bV9jaGlsZHJl
bi5yZW1vdmUoaW5kZXgpOworICAgICAgICBUZXh0dXJlTWFwcGVyTm9kZSogbmV3UGFyZW50ID0g
dG9UZXh0dXJlTWFwcGVyTm9kZShncmFwaGljc0xheWVyLT5wYXJlbnQoKSk7CisgICAgICAgIGlm
IChuZXdQYXJlbnQgIT0gbV9wYXJlbnQpIHsKKyAgICAgICAgICAgIC8vIFJlbW92ZSBub2RlIGZy
b20gY3VycmVudCBmcm9tIGNoaWxkIGxpc3QgZmlyc3QuCisgICAgICAgICAgICBpZiAobV9wYXJl
bnQpIHsKKyAgICAgICAgICAgICAgICBzaXplX3QgaW5kZXggPSBtX3BhcmVudC0+bV9jaGlsZHJl
bi5maW5kKHRoaXMpOworICAgICAgICAgICAgICAgIG1fcGFyZW50LT5tX2NoaWxkcmVuLnJlbW92
ZShpbmRleCk7CisgICAgICAgICAgICAgICAgbV9wYXJlbnQgPSAwOworICAgICAgICAgICAgfQor
ICAgICAgICAgICAgLy8gU2V0IG5ldyBub2RlIHBhcmVudCBhbmQgYWRkIG5vZGUgdG8gdGhlIHBh
cmVudHMgY2hpbGQgbGlzdC4KKyAgICAgICAgICAgIGlmIChuZXdQYXJlbnQpIHsKKyAgICAgICAg
ICAgICAgICBtX3BhcmVudCA9IG5ld1BhcmVudDsKKyAgICAgICAgICAgICAgICBtX3BhcmVudC0+
bV9jaGlsZHJlbi5hcHBlbmQodGhpcyk7CisgICAgICAgICAgICB9CiAgICAgICAgIH0KICAgICB9
CiAKICAgICBpZiAoY2hhbmdlTWFzayAmIENoaWxkcmVuQ2hhbmdlKSB7CisgICAgICAgIC8vIENs
ZWFyIGNoaWxkcmVuIHBhcmVudCBwb2ludGVyIHRvIGF2b2lkIHVuc3luYyBhbmQgY3Jhc2ggb24g
bm9kZSBkZWxldGUuCisgICAgICAgIGZvciAoc2l6ZV90IGkgPSAwOyBpIDwgbV9jaGlsZHJlbi5z
aXplKCk7IGkrKykKKyAgICAgICAgICAgIG1fY2hpbGRyZW5baV0tPm1fcGFyZW50ID0gMDsKKwog
ICAgICAgICBtX2NoaWxkcmVuLmNsZWFyKCk7CiAgICAgICAgIGZvciAoc2l6ZV90IGkgPSAwOyBp
IDwgZ3JhcGhpY3NMYXllci0+Y2hpbGRyZW4oKS5zaXplKCk7ICsraSkgewogICAgICAgICAgICAg
VGV4dHVyZU1hcHBlck5vZGUqIGNoaWxkID0gdG9UZXh0dXJlTWFwcGVyTm9kZShncmFwaGljc0xh
eWVyLT5jaGlsZHJlbigpW2ldKTsK
</data>
<flag name="review"
          id="90802"
          type_id="1"
          status="+"
          setter="noam"
    />
    <flag name="commit-queue"
          id="90803"
          type_id="3"
          status="-"
          setter="noam"
    />
          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>101122</attachid>
            <date>2011-07-17 21:04:20 -0700</date>
            <delta_ts>2011-07-18 10:05:02 -0700</delta_ts>
            <desc>Updated Changelog by Noams request.</desc>
            <filename>ac_unsync_01.diff</filename>
            <type>text/plain</type>
            <size>2651</size>
            <attacher name="Viatcheslav Ostapenko">ostap73</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZyBiL1NvdXJjZS9XZWJDb3JlL0No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</data>

          </attachment>
      

    </bug>

</bugzilla>