<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>91547</bug_id>
          
          <creation_ts>2012-07-17 15:20:14 -0700</creation_ts>
          <short_desc>REGRESSION (r89900): Assertion failure on null view() when destroying the document</short_desc>
          <delta_ts>2012-07-18 18:47:04 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Layout and Rendering</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Elliott Sprehn">esprehn</reporter>
          <assigned_to name="Elliott Sprehn">esprehn</assigned_to>
          <cc>eric</cc>
    
    <cc>inferno</cc>
    
    <cc>jchaffraix</cc>
    
    <cc>webkit.review.bot</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>671648</commentid>
    <comment_count>0</comment_count>
    <who name="Elliott Sprehn">esprehn</who>
    <bug_when>2012-07-17 15:20:14 -0700</bug_when>
    <thetext>As mentioned on the original bug by inferno@

Testcase::
&lt;script&gt;if (window.layoutTestController) layoutTestController.waitUntilDone(); &lt;/script&gt;
&lt;style&gt;
.c6::after { float: left; content: open-quote;&lt;/style&gt;
&lt;script&gt;
var nodes = Array();
var text = Array();
function boom() {
try { nodes[22] = document.createElement(&apos;figure&apos;); } catch(e) {}
try { nodes[56] = document.createElement(&apos;header&apos;); } catch(e) {}
try { nodes[56].setAttribute(&apos;class&apos;, &apos;c6&apos;); } catch(e) {}
try { document.documentElement.appendChild(nodes[56]); } catch(e) {}
try { text[32] = document.createTextNode(&apos;hssh&apos;); } catch(e) {}
try { nodes[56].appendChild(nodes[22]); } catch(e) {}
try { nodes[56].appendChild(text[32]); } catch(e) {}
}
window.onload = boom;
&lt;/script&gt;
&lt;meta http-equiv=&quot;refresh&quot; content=&quot;0&quot;&lt;/head&gt;

+----------------------------------------Debug Build Stacktrace----------------------------------------+

/mnt/scratch0/clusterfuzz/slave-bot/builds/symbolized/debug/asan-linux-debug-146683/DumpRenderTree

ASSERTION FAILED: renderer-&gt;view()
third_party/WebKit/Source/WebCore/rendering/RenderCounter.cpp(661) : static void WebCore::RenderCounter::rendererSubtreeAttached(WebCore::RenderObject *)
1   0x7f53547c339c
2   0x7f5354c18ff3
3   0x7f53547555dd
4   0x7f53547561b2
5   0x7f535447b0ce
6   0x7f53543b7444
7   0x7f53543b90d2
8   0x7f53549035dd
9   0x7f5354bfea1d
10  0x7f53546fd1e3
11  0x7f535465d489
12  0x7f53543a1447
13  0x7f5354bff885
14  0x7f5354bff295
15  0x7f534deee149
16  0x7f534d999b45
17  0x7f534dcf9145
18  0x7f534d9a7771
19  0x7f534d999b2b
20  0x7f534dcf9145
21  0x7f534d9a7771
22  0x7f534d999b2b
23  0x7f534dcf9145
24  0x7f534d9a7771
25  0x7f534d999b2b
26  0x7f534da71f58
27  0x7f534da72ef4
28  0x7f5353af6fce
29  0x7f5353b04c3f
30  0x7f5348546387
31  0x7f534822ccf4
ASAN:SIGSEGV
==31854== ERROR: AddressSanitizer crashed on unknown address 0x0000bbadbeef (pc 0x7f53547c33c4 sp 0x7fff77227000 bp 0x7fff77227190 T0)
AddressSanitizer can not provide additional info. ABORTING
    #0 0x7f53547c33c4 in WebCore::RenderCounter::rendererSubtreeAttached(WebCore::RenderObject*) third_party/WebKit/Source/WebCore/rendering/RenderCounter.cpp:661
    #1 0x7f5354c18ff3 in WebCore::RenderObjectChildList::insertChildNode(WebCore::RenderObject*, WebCore::RenderObject*, WebCore::RenderObject*, bool) third_party/WebKit/Source/WebCore/rendering/RenderObjectChildList.cpp:285
    #2 0x7f53547555dd in WebCore::RenderBoxModelObject::moveChildTo(WebCore::RenderBoxModelObject*, WebCore::RenderObject*, WebCore::RenderObject*, bool) third_party/WebKit/Source/WebCore/rendering/RenderBoxModelObject.cpp:2774
    #3 0x7f53547561b2 in WebCore::RenderBoxModelObject::moveChildrenTo(WebCore::RenderBoxModelObject*, WebCore::RenderObject*, WebCore::RenderObject*, WebCore::RenderObject*, bool) third_party/WebKit/Source/WebCore/rendering/RenderBoxModelObject.cpp:2792
    #4 0x7f535447b0ce in WebCore::RenderBoxModelObject::moveAllChildrenTo(WebCore::RenderBoxModelObject*, WebCore::RenderObject*, bool) third_party/WebKit/Source/WebCore/rendering/RenderBoxModelObject.h:265
    #5 0x7f53543b7444 in WebCore::RenderBlock::collapseAnonymousBoxChild(WebCore::RenderBlock*, WebCore::RenderObject*) third_party/WebKit/Source/WebCore/rendering/RenderBlock.cpp:1142
    #6 0x7f53543b90d2 in WebCore::RenderBlock::removeChild(WebCore::RenderObject*) third_party/WebKit/Source/WebCore/rendering/RenderBlock.cpp:1216
    #7 0x7f53549035dd in WebCore::RenderObject::remove() third_party/WebKit/Source/WebCore/rendering/RenderObject.h:874
    #8 0x7f5354bfea1d in WebCore::RenderObject::willBeDestroyed() third_party/WebKit/Source/WebCore/rendering/RenderObject.cpp:2310
    #9 0x7f53546fd1e3 in WebCore::RenderBoxModelObject::willBeDestroyed() third_party/WebKit/Source/WebCore/rendering/RenderBoxModelObject.cpp:358
    #10 0x7f535465d489 in WebCore::RenderBox::willBeDestroyed() third_party/WebKit/Source/WebCore/rendering/RenderBox.cpp:149
    #11 0x7f53543a1447 in WebCore::RenderBlock::willBeDestroyed() third_party/WebKit/Source/WebCore/rendering/RenderBlock.cpp:276
    #12 0x7f5354bff885 in WebCore::RenderObject::destroy() third_party/WebKit/Source/WebCore/rendering/RenderObject.cpp:2371
    #13 0x7f5354bff295 in WebCore::RenderObject::destroyAndCleanupAnonymousWrappers() third_party/WebKit/Source/WebCore/rendering/RenderObject.cpp:2348
    #14 0x7f534deee149 in WebCore::Node::detach() third_party/WebKit/Source/WebCore/dom/Node.cpp:1289
    #15 0x7f534d999b45 in WebCore::ContainerNode::detach() third_party/WebKit/Source/WebCore/dom/ContainerNode.cpp:676
    #16 0x7f534dcf9145 in WebCore::Element::detach() third_party/WebKit/Source/WebCore/dom/Element.cpp:993
    #17 0x7f534d9a7771 in WebCore::ContainerNode::detachChildren() third_party/WebKit/Source/WebCore/dom/ContainerNode.h:203
    #18 0x7f534d999b2b in WebCore::ContainerNode::detach() third_party/WebKit/Source/WebCore/dom/ContainerNode.cpp:674
    #19 0x7f534dcf9145 in WebCore::Element::detach() third_party/WebKit/Source/WebCore/dom/Element.cpp:993
    #20 0x7f534d9a7771 in WebCore::ContainerNode::detachChildren() third_party/WebKit/Source/WebCore/dom/ContainerNode.h:203
    #21 0x7f534d999b2b in WebCore::ContainerNode::detach() third_party/WebKit/Source/WebCore/dom/ContainerNode.cpp:674
    #22 0x7f534dcf9145 in WebCore::Element::detach() third_party/WebKit/Source/WebCore/dom/Element.cpp:993
    #23 0x7f534d9a7771 in WebCore::ContainerNode::detachChildren() third_party/WebKit/Source/WebCore/dom/ContainerNode.h:203
    #24 0x7f534d999b2b in WebCore::ContainerNode::detach() third_party/WebKit/Source/WebCore/dom/ContainerNode.cpp:674
    #25 0x7f534da71f58 in WebCore::Document::detach() third_party/WebKit/Source/WebCore/dom/Document.cpp:2129
    #26 0x7f534da72ef4 in WebCore::Document::prepareForDestruction() third_party/WebKit/Source/WebCore/dom/Document.cpp:2149
    #27 0x7f5353af6fce in WebCore::Frame::setView(WTF::PassRefPtr&lt;WebCore::FrameView&gt;) third_party/WebKit/Source/WebCore/page/Frame.cpp:271
    #28 0x7f5353b04c3f in WebCore::Frame::createView(WebCore::IntSize const&amp;, WebCore::Color const&amp;, bool, WebCore::IntSize const&amp;, bool, WebCore::ScrollbarMode, bool, WebCore::ScrollbarMode, bool) third_party/WebKit/Source/WebCore/page/Frame.cpp:805
    #29 0x7f5348546387 in WebKit::WebFrameImpl::createFrameView() third_party/WebKit/Source/WebKit/chromium/src/WebFrameImpl.cpp:2151
    #30 0x7f534822ccf4 in WebKit::FrameLoaderClientImpl::makeDocumentView() third_party/WebKit/Source/WebKit/chromium/src/FrameLoaderClientImpl.cpp:273
    #31 0x7f5348243ba3 in WebKit::FrameLoaderClientImpl::transitionToCommittedForNewPage() third_party/WebKit/Source/WebKit/chromium/src/FrameLoaderClientImpl.cpp:1409
    #32 0x7f5353650460 in WebCore::FrameLoader::transitionToCommitted(WTF::PassRefPtr&lt;WebCore::CachedPage&gt;) third_party/WebKit/Source/WebCore/loader/FrameLoader.cpp:1805
    #33 0x7f535364e05d in WebCore::FrameLoader::commitProvisionalLoad() third_party/WebKit/Source/WebCore/loader/FrameLoader.cpp:1663
    #34 0x7f5353551b76 in WebCore::DocumentLoader::commitIfReady() third_party/WebKit/Source/WebCore/loader/DocumentLoader.cpp:283
    #35 0x7f53535530b5 in WebCore::DocumentLoader::commitLoad(char const*, int) third_party/WebKit/Source/WebCore/loader/DocumentLoader.cpp:314
    #36 0x7f5353553cab in WebCore::DocumentLoader::receivedData(char const*, int) third_party/WebKit/Source/WebCore/loader/DocumentLoader.cpp:366
    #37 0x7f53536c926a in WebCore::MainResourceLoader::addData(char const*, int, bool) third_party/WebKit/Source/WebCore/loader/MainResourceLoader.cpp:193
    #38 0x7f53537597db in WebCore::ResourceLoader::didReceiveData(char const*, int, long long, bool) third_party/WebKit/Source/WebCore/loader/ResourceLoader.cpp:276
    #39 0x7f53536ce2d9 in WebCore::MainResourceLoader::didReceiveData(char const*, int, long long, bool) third_party/WebKit/Source/WebCore/loader/MainResourceLoader.cpp:484
    #40 0x7f535375cd5f in WebCore::ResourceLoader::didReceiveData(WebCore::ResourceHandle*, char const*, int, int) third_party/WebKit/Source/WebCore/loader/ResourceLoader.cpp:431
    #41 0x7f53506fac19 in WebCore::ResourceHandleInternal::didReceiveData(WebKit::WebURLLoader*, char const*, int, int) third_party/WebKit/Source/WebCore/platform/network/chromium/ResourceHandle.cpp:139
    #42 0x7f5338bf0411 in webkit_glue::WebURLLoaderImpl::Context::OnReceivedData(char const*, int, int) webkit/glue/weburlloader_impl.cc:615
    #43 0xe914a4 in (anonymous namespace)::RequestProxy::NotifyReceivedData(int) webkit/tools/test_shell/simple_resource_loader_bridge.cc:380
    #44 0xe93622 in base::internal::RunnableAdapter&lt;void ((anonymous namespace)::RequestProxy::*)(int)&gt;::Run((anonymous namespace)::RequestProxy*, int const&amp;) ./base/bind_internal.h:190
    #45 0xe93282 in base::internal::InvokeHelper&lt;false, void, base::internal::RunnableAdapter&lt;void ((anonymous namespace)::RequestProxy::*)(int)&gt;, void ()((anonymous namespace)::RequestProxy* const&amp;, int const&amp;)&gt;::MakeItSo(base::internal::RunnableAdapter&lt;void ((anonymous namespace)::RequestProxy::*)(int)&gt;, (anonymous namespace)::RequestProxy* const&amp;, int const&amp;) ./base/bind_internal.h:899
    #46 0xe92ead in base::internal::Invoker&lt;2, base::internal::BindState&lt;base::internal::RunnableAdapter&lt;void ((anonymous namespace)::RequestProxy::*)(int)&gt;, void ()((anonymous namespace)::RequestProxy*, int), void ()((anonymous namespace)::RequestProxy*, int)&gt;, void ()((anonymous namespace)::RequestProxy*, int)&gt;::Run(base::internal::BindStateBase*) ./base/bind_internal.h:1256
    #47 0x7f5340b7c935 in base::Callback&lt;void ()()&gt;::Run() const ./base/callback.h:388
    #48 0x7f5340d97f5f in MessageLoop::RunTask(base::PendingTask const&amp;) base/message_loop.cc:457
    #49 0x7f5340d998c3 in MessageLoop::DeferOrRunPendingTask(base::PendingTask const&amp;) base/message_loop.cc:471
    #50 0x7f5340d9a0e8 in MessageLoop::DoWork() base/message_loop.cc:644
    #51 0x7f5340a5482c in base::MessagePumpGlib::RunWithDispatcher(base::MessagePump::Delegate*, base::MessagePumpDispatcher*) base/message_pump_glib.cc:203
    #52 0x7f5340a56f45 in base::MessagePumpGlib::Run(base::MessagePump::Delegate*) base/message_pump_glib.cc:292
    #53 0x7f5340d967ad in MessageLoop::RunInternal() base/message_loop.cc:416
    #54 0x7f5340d962c3 in MessageLoop::RunHandler() base/message_loop.cc:389
    #55 0x7f5340f53a54 in base::RunLoop::Run() base/run_loop.cc:46
    #56 0x7f5340d94117 in MessageLoop::Run() base/message_loop.cc:300
    #57 0x927b81 in webkit_support::RunMessageLoop() webkit/support/webkit_support.cc:518
    #58 0x69cd76 in TestShell::waitTestFinished() third_party/WebKit/Tools/DumpRenderTree/chromium/TestShellPosix.cpp:66
    #59 0x657426 in TestShell::runFileTest(TestParams const&amp;) third_party/WebKit/Tools/DumpRenderTree/chromium/TestShell.cpp:274
    #60 0x4d91ac in runTest(TestShell&amp;, TestParams&amp;, std::basic_string&lt;char, std::char_traits&lt;char&gt;, std::allocator&lt;char&gt; &gt; const&amp;, bool) third_party/WebKit/Tools/DumpRenderTree/chromium/DumpRenderTree.cpp:128
    #61 0x4d6e0d in main third_party/WebKit/Tools/DumpRenderTree/chromium/DumpRenderTree.cpp:274
    #62 0x7f533282dc4d in __libc_start_main /build/buildd/eglibc-2.11.1/csu/libc-start.c:258
Stats: 13M malloced (24M for red zones) by 84577 calls
Stats: 1M realloced by 1420 calls
Stats: 11M freed by 66821 calls
Stats: 0M really freed by 0 calls
Stats: 68M (17417 full pages) mmaped in 17 calls
  mmaps   by size class: 8:81915; 9:8191; 10:4095; 11:2047; 12:1024; 13:512; 14:256; 15:128; 16:64; 17:32; 18:32; 19:8;
  mallocs by size class: 8:78014; 9:3475; 10:1580; 11:739; 12:316; 13:145; 14:196; 15:72; 16:15; 17:5; 18:18; 19:2;
  frees   by size class: 8:62122; 9:2096; 10:1306; 11:613; 12:282; 13:127; 14:179; 15:63; 16:9; 17:4; 18:18; 19:2;
  rfrees  by size class:
Stats: malloc large: 25 small slow: 281


+----------------------------------------Release Build Stacktrace----------------------------------------+

/mnt/scratch0/clusterfuzz/slave-bot/builds/symbolized/release/asan-symbolized-linux-release-146683/DumpRenderTree

ASAN:SIGSEGV
==31771== ERROR: AddressSanitizer crashed on unknown address 0x00000000015c (pc 0x00000223bde1 sp 0x7fffa1232d20 bp 0x7fffa1232d20 T0)
AddressSanitizer can not provide additional info. ABORTING
    #0 0x223bde1 in WebCore::RenderView::hasRenderCounters() third_party/WebKit/Source/WebCore/rendering/RenderView.h:204
    #1 0x223be17 in WebCore::RenderCounter::rendererSubtreeAttached(WebCore::RenderObject*) third_party/WebKit/Source/WebCore/rendering/RenderCounter.cpp:662
    #2 0x2163ccb in WebCore::RenderObjectChildList::insertChildNode(WebCore::RenderObject*, WebCore::RenderObject*, WebCore::RenderObject*, bool) third_party/WebKit/Source/WebCore/rendering/RenderObjectChildList.cpp:285
    #3 0x2081e01 in WebCore::RenderBoxModelObject::moveChildrenTo(WebCore::RenderBoxModelObject*, WebCore::RenderObject*, WebCore::RenderObject*, WebCore::RenderObject*, bool) third_party/WebKit/Source/WebCore/rendering/RenderBoxModelObject.cpp:2790
    #4 0x1faac4a in WebCore::RenderBlock::collapseAnonymousBoxChild(WebCore::RenderBlock*, WebCore::RenderObject*) third_party/WebKit/Source/WebCore/rendering/RenderBlock.cpp:1142
    #5 0x1fab23e in WebCore::RenderBlock::removeChild(WebCore::RenderObject*) third_party/WebKit/Source/WebCore/rendering/RenderBlock.cpp:1218
    #6 0x21603c7 in WebCore::RenderObject::willBeDestroyed() third_party/WebKit/Source/WebCore/rendering/RenderObject.cpp:2326
    #7 0x1fa6788 in WebCore::RenderBlock::willBeDestroyed() third_party/WebKit/Source/WebCore/rendering/RenderBlock.cpp:276
    #8 0x21606de in WebCore::RenderObject::destroy() third_party/WebKit/Source/WebCore/rendering/RenderObject.cpp:2371
    #9 0x97842c in WebCore::Node::detach() third_party/WebKit/Source/WebCore/dom/Node.cpp:1290
    #10 0x942197 in WebCore::Element::detach() third_party/WebKit/Source/WebCore/dom/Element.cpp:993
    #11 0x8cc539 in WebCore::ContainerNode::detachChildren() third_party/WebKit/Source/WebCore/dom/ContainerNode.h:203
    #12 0x8cc4be in WebCore::ContainerNode::detach() third_party/WebKit/Source/WebCore/dom/ContainerNode.cpp:674
    #13 0x942197 in WebCore::Element::detach() third_party/WebKit/Source/WebCore/dom/Element.cpp:993
    #14 0x8cc539 in WebCore::ContainerNode::detachChildren() third_party/WebKit/Source/WebCore/dom/ContainerNode.h:203
    #15 0x8cc4be in WebCore::ContainerNode::detach() third_party/WebKit/Source/WebCore/dom/ContainerNode.cpp:674
    #16 0x942197 in WebCore::Element::detach() third_party/WebKit/Source/WebCore/dom/Element.cpp:993
    #17 0x8cc539 in WebCore::ContainerNode::detachChildren() third_party/WebKit/Source/WebCore/dom/ContainerNode.h:203
    #18 0x8cc4be in WebCore::ContainerNode::detach() third_party/WebKit/Source/WebCore/dom/ContainerNode.cpp:674
    #19 0x8eeeed in WebCore::Document::detach() third_party/WebKit/Source/WebCore/dom/Document.cpp:2129
    #20 0x1c266ed in WebCore::Frame::setView(WTF::PassRefPtr&lt;WebCore::FrameView&gt;) third_party/WebKit/Source/WebCore/page/Frame.cpp:271
    #21 0x1c2964a in ~PassRefPtr third_party/WebKit/Source/WTF/wtf/PassRefPtr.h:67
    #22 0x5ed56a in WebKit::WebFrameImpl::createFrameView() third_party/WebKit/Source/WebKit/chromium/src/WebFrameImpl.cpp:2151
    #23 0x1b5c056 in WebCore::FrameLoader::transitionToCommitted(WTF::PassRefPtr&lt;WebCore::CachedPage&gt;) third_party/WebKit/Source/WebCore/loader/FrameLoader.cpp:1816
    #24 0x1b5b248 in ~PassRefPtr third_party/WebKit/Source/WTF/wtf/PassRefPtr.h:67
    #25 0x1b2a87c in WebCore::DocumentLoader::commitLoad(char const*, int) third_party/WebKit/Source/WebCore/loader/DocumentLoader.cpp:314
    #26 0x1b8b0b2 in WebCore::ResourceLoader::didReceiveData(char const*, int, long long, bool) third_party/WebKit/Source/WebCore/loader/ResourceLoader.cpp:276
    #27 0x1b7526c in void WTF::derefIfNotNull&lt;WebCore::MainResourceLoader&gt;(WebCore::MainResourceLoader*) third_party/WebKit/Source/WTF/wtf/PassRefPtr.h:52
    #28 0x1b8be44 in WebCore::ResourceLoader::didReceiveData(WebCore::ResourceHandle*, char const*, int, int) third_party/WebKit/Source/WebCore/loader/ResourceLoader.cpp:431
    #29 0x2b6774d in (anonymous namespace)::RequestProxy::NotifyReceivedData(int) webkit/tools/test_shell/simple_resource_loader_bridge.cc:380
    #30 0x2b67d28 in base::internal::InvokeHelper&lt;false, void, base::internal::RunnableAdapter&lt;void ((anonymous namespace)::RequestProxy::*)(int)&gt;, void ()((anonymous namespace)::RequestProxy* const&amp;, int const&amp;)&gt;::MakeItSo(base::internal::RunnableAdapter&lt;void ((anonymous namespace)::RequestProxy::*)(int)&gt;, (anonymous namespace)::RequestProxy* const&amp;, int const&amp;) ./base/bind_internal.h:899
    #31 0xa38de3 in MessageLoop::RunTask(base::PendingTask const&amp;) base/message_loop.cc:457
    #32 0xa395cd in MessageLoop::DeferOrRunPendingTask(base::PendingTask const&amp;) base/message_loop.cc:468
    #33 0xa39aa2 in MessageLoop::DoWork() base/message_loop.cc:644
    #34 0xa90c05 in base::MessagePumpGlib::HandleDispatch() base/message_pump_glib.cc:268
    #35 0xa8fd09 in (anonymous namespace)::WorkSourceDispatch(_GSource*, int (*)(void*), void*) base/message_pump_glib.cc:105
    #36 0x7f5360d738c2 in g_main_dispatch /build/buildd/glib2.0-2.24.1/glib/gmain.c:1960
Stats: 13M malloced (22M for red zones) by 74836 calls
Stats: 1M realloced by 1420 calls
Stats: 11M freed by 62518 calls
Stats: 0M really freed by 0 calls
Stats: 68M (17417 full pages) mmaped in 17 calls
  mmaps   by size class: 8:81915; 9:8191; 10:4095; 11:2047; 12:1024; 13:512; 14:256; 15:128; 16:64; 17:32; 18:32; 19:8;
  mallocs by size class: 8:69435; 9:2413; 10:1498; 11:724; 12:314; 13:147; 14:193; 15:73; 16:14; 17:5; 18:18; 19:2;
  frees   by size class: 8:57942; 9:2045; 10:1239; 11:609; 12:281; 13:127; 14:179; 15:63; 16:9; 17:4; 18:18; 19:2;
  rfrees  by size class:
Stats: malloc large: 25 small slow: 260</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>671654</commentid>
    <comment_count>1</comment_count>
      <attachid>152846</attachid>
    <who name="Elliott Sprehn">esprehn</who>
    <bug_when>2012-07-17 15:22:30 -0700</bug_when>
    <thetext>Created attachment 152846
Patch

Add checks for document destruction when attaching nodes</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>671658</commentid>
    <comment_count>2</comment_count>
      <attachid>152846</attachid>
    <who name="Abhishek Arya">inferno</who>
    <bug_when>2012-07-17 15:28:52 -0700</bug_when>
    <thetext>Comment on attachment 152846
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=152846&amp;action=review

Looks like you forgot to attach the testcase. We don&apos;t want to regress on this, so a testcase is good.

&gt; Source/WebCore/ChangeLog:3
&gt; +        Unneeded tree walking when adding or removing children due to RenderCounter / RenderQuote logic

Please fix this title with Regression(rXYZ): Crash in ...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>671837</commentid>
    <comment_count>3</comment_count>
    <who name="Elliott Sprehn">esprehn</who>
    <bug_when>2012-07-17 18:10:25 -0700</bug_when>
    <thetext>(In reply to comment #2)
&gt; (From update of attachment 152846 [details])
&gt; View in context: https://bugs.webkit.org/attachment.cgi?id=152846&amp;action=review
&gt; 
&gt; Looks like you forgot to attach the testcase. We don&apos;t want to regress on this, so a testcase is good.

I don&apos;t understand how to write this test. The ClusterFuzz test infinitely reloads the page so it&apos;ll never be &quot;done&quot;. Should I be appending something to the URL to stop the infinite reload?

&lt;!DOCTYPE html&gt;
&lt;script&gt;if (window.testRunner) {
    testRunner.waitUntilDone();
    testRunner.dumpAsText();
}
&lt;/script&gt;
&lt;meta http-equiv=&quot;refresh&quot; content=&quot;0&quot;&gt;
&lt;style&gt;
    section::after {
        float: left;
        content: open-quote; 
    }
&lt;/style&gt;

&lt;section&gt;
    &lt;div&gt;&lt;/div&gt;
    Example
&lt;/section&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>671841</commentid>
    <comment_count>4</comment_count>
    <who name="Abhishek Arya">inferno</who>
    <bug_when>2012-07-17 18:14:09 -0700</bug_when>
    <thetext>(In reply to comment #3)
&gt; (In reply to comment #2)
&gt; &gt; (From update of attachment 152846 [details] [details])
&gt; &gt; View in context: https://bugs.webkit.org/attachment.cgi?id=152846&amp;action=review
&gt; &gt; 
&gt; &gt; Looks like you forgot to attach the testcase. We don&apos;t want to regress on this, so a testcase is good.
&gt; 
&gt; I don&apos;t understand how to write this test. The ClusterFuzz test infinitely reloads the page so it&apos;ll never be &quot;done&quot;. Should I be appending something to the URL to stop the infinite reload?

Yeah,see http://code.google.com/codesearch#OAMlx_jo-ck/src/third_party/WebKit/LayoutTests/svg/custom/bug86392.html&amp;exact_package=chromium&amp;q=%22location.hash%20=%22%20file:layouttests&amp;type=cs&amp;l=41 as an example. you just need one reload.

&gt; 
&gt; &lt;!DOCTYPE html&gt;
&gt; &lt;script&gt;if (window.testRunner) {
&gt;     testRunner.waitUntilDone();
&gt;     testRunner.dumpAsText();
&gt; }
&gt; &lt;/script&gt;
&gt; &lt;meta http-equiv=&quot;refresh&quot; content=&quot;0&quot;&gt;
&gt; &lt;style&gt;
&gt;     section::after {
&gt;         float: left;
&gt;         content: open-quote; 
&gt;     }
&gt; &lt;/style&gt;
&gt; 
&gt; &lt;section&gt;
&gt;     &lt;div&gt;&lt;/div&gt;
&gt;     Example
&gt; &lt;/section&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>672862</commentid>
    <comment_count>5</comment_count>
      <attachid>153110</attachid>
    <who name="Elliott Sprehn">esprehn</who>
    <bug_when>2012-07-18 15:36:11 -0700</bug_when>
    <thetext>Created attachment 153110
Patch

Add test</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>672866</commentid>
    <comment_count>6</comment_count>
      <attachid>153110</attachid>
    <who name="Abhishek Arya">inferno</who>
    <bug_when>2012-07-18 15:39:23 -0700</bug_when>
    <thetext>Comment on attachment 153110
Patch

r=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>672932</commentid>
    <comment_count>7</comment_count>
      <attachid>153129</attachid>
    <who name="Elliott Sprehn">esprehn</who>
    <bug_when>2012-07-18 16:21:51 -0700</bug_when>
    <thetext>Created attachment 153129
Patch for landing</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>673062</commentid>
    <comment_count>8</comment_count>
      <attachid>153129</attachid>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2012-07-18 18:46:59 -0700</bug_when>
    <thetext>Comment on attachment 153129
Patch for landing

Clearing flags on attachment: 153129

Committed r123060: &lt;http://trac.webkit.org/changeset/123060&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>673063</commentid>
    <comment_count>9</comment_count>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2012-07-18 18:47:04 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>152846</attachid>
            <date>2012-07-17 15:22:30 -0700</date>
            <delta_ts>2012-07-18 15:36:00 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-91547-20120717152230.patch</filename>
            <type>text/plain</type>
            <size>2654</size>
            <attacher name="Elliott Sprehn">esprehn</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTIyODYyCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>153110</attachid>
            <date>2012-07-18 15:36:11 -0700</date>
            <delta_ts>2012-07-18 16:21:45 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-91547-20120718153610.patch</filename>
            <type>text/plain</type>
            <size>4952</size>
            <attacher name="Elliott Sprehn">esprehn</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTIzMDIwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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=
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>153129</attachid>
            <date>2012-07-18 16:21:51 -0700</date>
            <delta_ts>2012-07-18 18:46:59 -0700</delta_ts>
            <desc>Patch for landing</desc>
            <filename>bug-91547-20120718162150.patch</filename>
            <type>text/plain</type>
            <size>4950</size>
            <attacher name="Elliott Sprehn">esprehn</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTIzMDIwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
      

    </bug>

</bugzilla>