Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-41404

Failure to render website with extremely large composited layer

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • P1: Critical
    • 5.4.0 RC
    • 5.3.1, 5.3.2
    • WebKit
    • None
    • Windows 7
    • f384f80057d0648692a01ae034ec27d56b455010

    Description

      I found a new crah by loading this web page :
      http://www.elle.fr/Mode/page/Chaussures-Clotaire

      This is the debug output :

      QPainter::begin: Paint device returned engine == 0, type: 2
      ASSERTION FAILED: m_ptr
      ..\WTF/wtf/OwnPtr.h(72) : WTF::OwnPtr<T>::ValueType* WTF::OwnPtr<T>::operator->() const [with T = WebCore::ImageBuffer; WTF::OwnPtr<T>::PtrType = WebCore::ImageBuffer*; WTF::OwnPtr<T>::ValueType = WebCore::ImageBuffer]
      1 0D5443EB
      2 0D543D3E
      3 0D54E30F
      4 0D54D51B
      5 0D54D56E
      6 0D54D56E
      7 0D54D56E
      8 0D54D56E
      9 0D54D56E
      10 0D54D56E
      11 0C356EA9
      12 0D718D08
      13 0D718F01
      14 0BFA075D
      15 206D4E24
      16 206D4EEF
      17 206DF8E4
      18 21E4F282
      19 206DF6D4
      20 21E1DF61
      21 21E1DDE5
      22 6B929EEE
      23 22166AF1
      24 21E47CFA
      25 21E242FD
      26 21E235DD
      27 21E3FC58
      28 21E4F7C3
      29 21F6B790
      30 21E1DF61
      31 21E1DDE5

      This is the call tree :

      0 WTFCrash C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xdd40805
      1 WebCore::BitmapTextureImageBuffer::updateContents(WebCore::TextureMapper*, WebCore::GraphicsLayer*, WebCore::IntRect const&, WebCore::IntPoint const&, WebCore::BitmapTexture::UpdateContentsFlag) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd54a534
      2 WebCore::TextureMapperTile::updateContents(WebCore::TextureMapper*, WebCore::GraphicsLayer*, WebCore::IntRect const&, WebCore::BitmapTexture::UpdateContentsFlag) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd5443eb
      3 WebCore::TextureMapperTiledBackingStore::updateContents(WebCore::TextureMapper*, WebCore::GraphicsLayer*, WebCore::FloatSize const&, WebCore::IntRect const&, WebCore::BitmapTexture::UpdateContentsFlag) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd543d3e
      4 WebCore::GraphicsLayerTextureMapper::updateBackingStoreIfNeeded() C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd54e30f
      5 WebCore::GraphicsLayerTextureMapper::flushCompositingState(WebCore::FloatRect const&) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd54d51b
      6 WebCore::GraphicsLayerTextureMapper::flushCompositingState(WebCore::FloatRect const&) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd54d56e
      7 WebCore::GraphicsLayerTextureMapper::flushCompositingState(WebCore::FloatRect const&) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd54d56e
      8 WebCore::GraphicsLayerTextureMapper::flushCompositingState(WebCore::FloatRect const&) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd54d56e
      9 WebCore::GraphicsLayerTextureMapper::flushCompositingState(WebCore::FloatRect const&) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd54d56e
      10 WebCore::GraphicsLayerTextureMapper::flushCompositingState(WebCore::FloatRect const&) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd54d56e
      11 WebCore::GraphicsLayerTextureMapper::flushCompositingState(WebCore::FloatRect const&) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd54d56e
      12 WebCore::RenderLayerCompositor::flushPendingLayerChanges(bool) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xc356ea9
      13 WebCore::FrameView::flushCompositingStateForThisFrame(WebCore::Frame*) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd718d08
      14 WebCore::FrameView::paintContents(WebCore::GraphicsContext*, WebCore::IntRect const&) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd718f01
      15 QWebFrameAdapter::renderRelativeCoords(QPainter*, int, QRegion const&) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xbfa075d
      16 QWebFrame::render 644 0x206d4e24
      17 QWebFrame::render 654 0x206d4eef
      18 QWebView::paintEvent 827 0x206df8e4
      19 QWidget::event 8117 0x21e4f282
      20 QWebView::event 731 0x206df6d4
      21 QApplicationPrivate::notify_helper 3499 0x21e1df61
      22 QApplication::notify 3464 0x21e1dde5
      23 QCoreApplication::notifyInternal 935 0x6b929eee
      24 QCoreApplication::sendSpontaneousEvent 240 0x22166af1
      25 QWidgetPrivate::drawWidget 5157 0x21e47cfa
      26 QWidgetBackingStore::doSync 1182 0x21e242fd
      27 QWidgetBackingStore::sync 1029 0x21e235dd
      28 QWidgetPrivate::syncBackingStore 1691 0x21e3fc58
      29 QWidget::event 8255 0x21e4f7c3
      30 QMainWindow::event 1499 0x21f6b790
      31 QApplicationPrivate::notify_helper 3499 0x21e1df61
      32 QApplication::notify 3464 0x21e1dde5
      33 QCoreApplication::notifyInternal 935 0x6b929eee
      34 QCoreApplication::sendEvent 237 0x22166b4d
      35 QWidgetBackingStore::sendUpdateRequest 461 0x21e20ee8
      36 QWidgetBackingStore::markDirty 652 0x21e21bac
      37 QWidget::repaint 9911 0x21e521bd
      38 QWidget::repaint 9867 0x21e51fee
      39 QProgressBar::setValue 340 0x21f9a38e
      40 MainWindow::slot_loadingBarProgress MainWindow.cpp 1333 0x44cebe
      41 MainWindow::qt_static_metacall moc_MainWindow.cpp 177 0x46ae9d
      42 QMetaObject::activate 3681 0x6b955027
      43 QMetaObject::activate 3547 0x6b95498c
      44 QWebView::loadProgress 324 0x206e06f3
      45 QWebView::qt_static_metacall 152 0x206dffc7
      46 QMetaObject::activate 3681 0x6b955027
      47 QMetaObject::activate 3547 0x6b95498c
      48 QWebPage::loadProgress 782 0x206ddecf
      49 QWebPage::qt_static_metacall 487 0x206dd254
      50 QMetaObject::activate 3681 0x6b955027
      51 QMetaObject::activate 3547 0x6b95498c
      52 WebCore::FrameLoaderClientQt::postProgressEstimateChangedNotification() C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xbfafbca
      53 WebCore::ProgressTracker::incrementProgress(unsigned long, char const*, int) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd7ab165
      54 WebCore::ResourceLoadNotifier::didReceiveData(WebCore::ResourceLoader*, char const*, int, int) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd7a1b06
      55 WebCore::ResourceLoader::didReceiveDataOrBuffer(char const*, int, WTF::PassRefPtr<WebCore::SharedBuffer>, long long, WebCore::DataPayloadType) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd7a3db4
      56 WebCore::SubresourceLoader::didReceiveDataOrBuffer(char const*, int, WTF::PassRefPtr<WebCore::SharedBuffer>, long long, WebCore::DataPayloadType) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd799117
      57 WebCore::SubresourceLoader::didReceiveData(char const*, int, long long, WebCore::DataPayloadType) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd7994fc
      58 WebCore::ResourceLoader::didReceiveData(WebCore::ResourceHandle*, char const*, int, int) C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd7a3233
      59 WebCore::QNetworkReplyHandler::forwardData() C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd537cfc
      60 WebCore::QNetworkReplyHandlerCallQueue::flush() [clone .part.73] C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd5351cd
      61 WebCore::QNetworkReplyWrapper::emitMetaDataChanged() C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd53757e
      62 WebCore::QNetworkReplyWrapper::receiveMetaData() C:\Qt\5.3\mingw482_32\bin\Qt5WebKitd.dll 0xd5378d3
      63 QMetaObject::activate 3681 0x6b955027
      64 QMetaObject::activate 3547 0x6b95498c
      65 QIODevice::readyRead 153 0x6b9a92a0
      66 QNetworkReplyHttpImplPrivate::replyDownloadData 1049 0x67cbd5ee
      67 QNetworkReplyHttpImpl::qt_static_metacall 222 0x67d1acc1
      68 QMetaCallEvent::placeMetaCall 487 0x6b94e76c
      69 QObject::event 1241 0x6b94f4db
      70 QApplicationPrivate::notify_helper 3499 0x21e1df61
      71 QApplication::notify 2952 0x21e1ba13
      72 QCoreApplication::notifyInternal 935 0x6b929eee
      73 QCoreApplication::sendEvent 237 0x6b9cf5e7
      74 QCoreApplicationPrivate::sendPostedEvents 1539 0x6b92b0a6
      75 QCoreApplication::sendPostedEvents 1397 0x6b92ab8e
      76 QWindowsGuiEventDispatcher::sendPostedEvents 88 0x6285cf11
      77 qt_internal_proc(HWND__*, unsigned int, unsigned int, long)@16 419 0x6b978658
      78 gapfnScSendMessage C:\Windows\syswow64\user32.dll 0x765f62fa
      79 ?? 0x201c0
      80 USER32!GetThreadDesktop C:\Windows\syswow64\user32.dll 0x765f6d3a
      81 __lambda0::operator() 362 0x6b978393
      82 ?? 0x201c0
      83 USER32!CharPrevW C:\Windows\syswow64\user32.dll 0x765f77c4
      84 USER32!DispatchMessageW C:\Windows\syswow64\user32.dll 0x765f788a
      85 QEventDispatcherWin32::processEvents 794 0x6b979c99
      86 QWindowsGuiEventDispatcher::processEvents 80 0x6285cdf0
      87 QEventLoop::processEvents 136 0x6b927f94
      88 QEventLoop::exec 212 0x6b92822f
      89 QCoreApplication::exec 1188 0x6b92a53d
      90 QGuiApplication::exec 1483 0x3c96520
      91 QApplication::exec 2744 0x21e1b357
      92 qMain main.cpp 123 0x455fed
      93 WinMain@16 131 0x46e59b
      94 main 0x48f1ad

      And this is the WTFCrash disassembly :

      Function: WTFCrash
      0xdd407f1 <+0x0001> in (%dx),%al
      0xdd407f2 <+0x0002> or $0xa1,%al
      0xdd407f4 <+0x0004> rorb $0x74,-0x3f7aefd5(%ecx)
      0xdd407fb <+0x000b> add %bh,%bh
      0xdd407fd <+0x000d> shr %al
      0xdd407ff <+0x000f> (bad)
      0xdd40800 <+0x0010> (bad)
      0xdd40801 <+0x0011> (bad)
      0xdd40802 <+0x0012> pushl (%ecx)
      0xdd40804 <+0x0014> rol $0x5,%bh
      0xdd40807 <+0x0017> out %eax,(%dx)
      0xdd40808 <+0x0018> mov $0xbbad,%esi
      0xdd4080d <+0x001d> add %al,(%eax)
      0xdd4080f <+0x001f> add $0xc,%esp
      0xdd40812 <+0x0022> jmp *%eax
      0xdd40814 <+0x0024> lea 0x0(%esi),%esi
      0xdd4081a <+0x002a> lea 0x0(%edi),%edi
      Function: vprintf_stderr_with_prefix
      0xdd40820 push %ebp
      0xdd40821 <+0x0001> mov %eax,%ebp
      0xdd40823 <+0x0003> push %edi
      0xdd40824 <+0x0004> mov %edx,%edi
      0xdd40826 <+0x0006> push %esi
      0xdd40827 <+0x0007> push %ebx
      0xdd40828 <+0x0008> sub $0x2c,%esp
      0xdd4082b <+0x000b> mov %eax,(%esp)
      0xdd4082e <+0x000e> mov %ecx,0x14(%esp)
      0xdd40832 <+0x0012> call 0xdd4fac0 <strlen>
      0xdd40837 <+0x0017> mov %edi,(%esp)
      0xdd4083a <+0x001a> mov %eax,%esi
      0xdd4083c <+0x001c> call 0xdd4fac0 <strlen>
      0xdd40841 <+0x0021> lea (%eax,%esi,1),%edx
      0xdd40844 <+0x0024> mov %eax,0x1c(%esp)
      0xdd40848 <+0x0028> lea 0x1(%edx),%eax
      0xdd4084b <+0x002b> mov %eax,(%esp)
      0xdd4084e <+0x002e> mov %edx,0x18(%esp)
      0xdd40852 <+0x0032> call 0xdd41e90 <_Znaj>
      0xdd40857 <+0x0037> mov %esi,0x8(%esp)
      0xdd4085b <+0x003b> mov %ebp,0x4(%esp)
      0xdd4085f <+0x003f> mov %eax,(%esp)
      0xdd40862 <+0x0042> mov %eax,%ebx
      0xdd40864 <+0x0044> call 0xdd4fac8 <memcpy>

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            allan.jensen Allan Sandfeld Jensen
            stigmatix Stigmatix
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes