JDK-8154186 : JVM crash while using JavaFW WebView and colgroup/cols html feature
  • Type: Bug
  • Component: javafx
  • Sub-Component: web
  • Affected Version: 8u66,9
  • Priority: P2
  • Status: Resolved
  • Resolution: Fixed
  • OS: windows_7
  • CPU: x86_64
  • Submitted: 2016-04-13
  • Updated: 2017-09-07
  • Resolved: 2016-04-22
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 8 JDK 9
8u102Fixed 9Fixed
Related Reports
Duplicate :  
Relates :  
Description
FULL PRODUCT VERSION :
$ java -version
java version "1.8.0_77"
Java(TM) SE Runtime Environment (build 1.8.0_77-b03)
Java HotSpot(TM) Client VM (build 25.77-b03, mixed mode)

$ java -version
java version "1.8.0_74"
Java(TM) SE Runtime Environment (build 1.8.0_74-b02)
Java HotSpot(TM) 64-Bit Server VM (build 25.74-b02, mixed mode)


ADDITIONAL OS VERSION INFORMATION :
$ uname -a
MINGW64_NT-6.1 MORLI894 2.4.0(0.292/5/3) 2016-01-07 19:39 x86_64 Msys

d:\>ver
Microsoft Windows [version 6.1.7601]

A DESCRIPTION OF THE PROBLEM :
JVM is crashing when some html table>colgroup>col feature are in use via the JavaFX WebView.

Problem has been discussed in JavaFX mailing list already : http://mail.openjdk.java.net/pipermail/openjfx-dev/2016-April/018950.html

This issue is for tracability and to provide a reproducer application.


REGRESSION.  Last worked in version 8u72

ADDITIONAL REGRESSION INFORMATION: 
was working in 8u45.
with the given reproducer app (especially the app.html) I can reproduce the problem in:
8u66 (32 & 64 bits), 8u74 (32 & 64 bits), 8u77  (32 & 64 bits).

STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
Within the reproducer application click the "Clean and Recreate table" button ; the JVM should crash.
If after load, before clicking the button you unselect the checkbox; then you can click the button safelly. even after re-selecting the checkbox (that activates again the colgroup>col resizing) you can click the button the JVM will not crash anymore.

EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
The JVM should not crash and by clicking the button the tbale shoudl be refreshed correctly.
ACTUAL -
JVM is crashing

ERROR MESSAGES/STACK TRACES THAT OCCUR :
#
# A fatal error has been detected by the Java Runtime Environment:
#
#  EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x000000006e2f614f, pid=4220, tid=10840
#
# JRE version: Java(TM) SE Runtime Environment (8.0_74-b02) (build 1.8.0_74-b02)
# Java VM: Java HotSpot(TM) 64-Bit Server VM (25.74-b02 mixed mode windows-amd64 compressed oops)
# Problematic frame:
# C  [jfxwebkit.dll+0x9c614f]
#
# Failed to write core dump. Minidumps are not enabled by default on client versions of Windows
#
# If you would like to submit a bug report, please visit:
#   http://bugreport.java.com/bugreport/crash.jsp
# The crash happened outside the Java Virtual Machine in native code.
# See problematic frame for where to report the bug.
#

---------------  T H R E A D  ---------------

Current thread (0x000000001e28c800):  JavaThread "JavaFX Application Thread" [_thread_in_native, id=10840, stack(0x000000001f110000,0x000000001f210000)]

siginfo: ExceptionCode=0xc0000005, reading address 0x0000000000000058

Registers:
RAX=0x0000000000000000, RBX=0x0000000023863360, RCX=0x0000000023863d00, RDX=0x0000000000000000
RSP=0x000000001f20d198, RBP=0x000000000000000a, RSI=0x0000000000000000, RDI=0x0000000000000000
R8 =0x0000000000000000, R9 =0x0000000000000000, R10=0x0000000000000801, R11=0x0000016800ec0001
R12=0x0000000000000000, R13=0x0000000000000000, R14=0x000000002385d330, R15=0x0000000000000000
RIP=0x000000006e2f614f, EFLAGS=0x0000000000010246

Top of Stack: (sp=0x000000001f20d198)
0x000000001f20d198:   000000006e31058e 0000000077041440
0x000000001f20d1a8:   0000000000000000 00000000237fd900
0x000000001f20d1b8:   000000001f20d260 00000000227f9ad0
0x000000001f20d1c8:   0000000000000000 000000000cc8b288
0x000000001f20d1d8:   0000000000000000 0000000000000000
0x000000001f20d1e8:   000000002298fc80 00000000237fd900
0x000000001f20d1f8:   000000006e28cbc9 000000002381db40
0x000000001f20d208:   0000000000000008 0000000000000008
0x000000001f20d218:   000000000000000a fffffffffffffffe
0x000000001f20d228:   00000000237fd900 00000000237fd900
0x000000001f20d238:   000000002298fc80 00000000229cb1d0
0x000000001f20d248:   0000000000000001 000000002298fc80
0x000000001f20d258:   000000006e28c902 0000000000000000
0x000000001f20d268:   00000000238a9c40 00000000238a9c40
0x000000001f20d278:   00000000238a9c40 00000000238a9c40
0x000000001f20d288:   000000006e355fda 0000000000000000 

Instructions: (pc=0x000000006e2f614f)
0x000000006e2f612f:   08 a8 01 75 2e 45 84 c0 75 12 c1 ea 08 f6 c2 01
0x000000006e2f613f:   74 0a 48 8b 41 10 48 8b 50 48 eb 04 48 8b 51 48
0x000000006e2f614f:   8b 42 58 c1 e8 16 83 e0 07 83 e8 02 a9 fb ff ff
0x000000006e2f615f:   ff 74 05 e9 f9 d2 ff ff c3 cc cc cc cc cc cc cc 


Register to memory mapping:

RAX=0x0000000000000000 is an unknown value
RBX=0x0000000023863360 is an unknown value
RCX=0x0000000023863d00 is an unknown value
RDX=0x0000000000000000 is an unknown value
RSP=0x000000001f20d198 is pointing into the stack for thread: 0x000000001e28c800
RBP=0x000000000000000a is an unknown value
RSI=0x0000000000000000 is an unknown value
RDI=0x0000000000000000 is an unknown value
R8 =0x0000000000000000 is an unknown value
R9 =0x0000000000000000 is an unknown value
R10=0x0000000000000801 is an unknown value
R11=0x0000016800ec0001 is an unknown value
R12=0x0000000000000000 is an unknown value
R13=0x0000000000000000 is an unknown value
R14=0x000000002385d330 is an unknown value
R15=0x0000000000000000 is an unknown value


Stack: [0x000000001f110000,0x000000001f210000],  sp=0x000000001f20d198,  free space=1012k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
C  [jfxwebkit.dll+0x9c614f]

Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
j  com.sun.webkit.WebPage.twkPrePaint(J)V+0
j  com.sun.webkit.WebPage.updateDirty(Lcom/sun/webkit/graphics/WCRectangle;)V+117
j  com.sun.webkit.WebPage.updateContent(Lcom/sun/webkit/graphics/WCRectangle;)V+48
j  com.sun.javafx.sg.prism.web.NGWebView.update()V+68
j  javafx.scene.web.WebView.handleStagePulse()V+78
j  javafx.scene.web.WebView.lambda$new$29()V+1
j  javafx.scene.web.WebView$$Lambda$90.pulse()V+4
J 1898 C1 com.sun.javafx.tk.Toolkit$$Lambda$143.run()Ljava/lang/Object; (8 bytes) @ 0x000000000f5f794c [0x000000000f5f7800+0x14c]
v  ~StubRoutines::call_stub
J 1341  java.security.AccessController.doPrivileged(Ljava/security/PrivilegedAction;Ljava/security/AccessControlContext;)Ljava/lang/Object; (0 bytes) @ 0x000000000f481b26 [0x000000000f481ac0+0x66]
J 1867 C1 com.sun.javafx.tk.Toolkit.runPulse(Lcom/sun/javafx/tk/TKPulseListener;Ljava/security/AccessControlContext;)V (26 bytes) @ 0x000000000f5e7d54 [0x000000000f5e78e0+0x474]
j  com.sun.javafx.tk.Toolkit.firePulse()V+129
j  com.sun.javafx.tk.quantum.QuantumToolkit.pulse(Z)V+97
j  com.sun.javafx.tk.quantum.QuantumToolkit.pulse()V+2
j  com.sun.javafx.tk.quantum.QuantumToolkit.lambda$runToolkit$404()V+1
j  com.sun.javafx.tk.quantum.QuantumToolkit$$Lambda$42.run()V+4
j  com.sun.glass.ui.InvokeLaterDispatcher$Future.run()V+4
v  ~StubRoutines::call_stub
j  com.sun.glass.ui.win.WinApplication._runLoop(Ljava/lang/Runnable;)V+0
j  com.sun.glass.ui.win.WinApplication.lambda$null$148(ILjava/lang/Runnable;)V+8
j  com.sun.glass.ui.win.WinApplication$$Lambda$38.run()V+12
j  java.lang.Thread.run()V+11
v  ~StubRoutines::call_stub

---------------  P R O C E S S  ---------------

Java Threads: ( => current thread )
  0x000000001e555000 JavaThread "Prism Font Disposer" daemon [_thread_blocked, id=8532, stack(0x0000000024d30000,0x0000000024e30000)]
  0x000000001e554800 JavaThread "Watchdog-Timer-1" daemon [_thread_blocked, id=10208, stack(0x00000000230b0000,0x00000000231b0000)]
  0x000000001e553800 JavaThread "URL-Loader-2" daemon [_thread_blocked, id=10424, stack(0x0000000022b00000,0x0000000022c00000)]
  0x000000001e3fa800 JavaThread "Keep-Alive-Timer" daemon [_thread_blocked, id=10764, stack(0x0000000021d30000,0x0000000021e30000)]
  0x000000001e3a0000 JavaThread "URL-Loader-1" daemon [_thread_blocked, id=5912, stack(0x0000000021880000,0x0000000021980000)]
  0x000000001e391000 JavaThread "Disposer" daemon [_thread_blocked, id=10916, stack(0x0000000021510000,0x0000000021610000)]
  0x000000001e309000 JavaThread "Thread-3" daemon [_thread_in_native, id=9072, stack(0x0000000020be0000,0x0000000020ce0000)]
  0x000000001e301000 JavaThread "JavaFX-Launcher" [_thread_blocked, id=7420, stack(0x0000000020d50000,0x0000000020e50000)]
=>0x000000001e28c800 JavaThread "JavaFX Application Thread" [_thread_in_native, id=10840, stack(0x000000001f110000,0x000000001f210000)]
  0x000000001e28a000 JavaThread "Thread-1" daemon [_thread_blocked, id=9820, stack(0x000000001ef50000,0x000000001f050000)]
  0x000000000e825000 JavaThread "QuantumRenderer-0" daemon [_thread_blocked, id=10452, stack(0x000000001eb60000,0x000000001ec60000)]
  0x000000000e4f0000 JavaThread "Service Thread" daemon [_thread_blocked, id=8288, stack(0x000000000ecc0000,0x000000000edc0000)]
  0x000000000cfda000 JavaThread "C1 CompilerThread2" daemon [_thread_blocked, id=10936, stack(0x000000001e020000,0x000000001e120000)]
  0x000000000cfd5000 JavaThread "C2 CompilerThread1" daemon [_thread_blocked, id=8296, stack(0x000000000ede0000,0x000000000eee0000)]
  0x000000000e475000 JavaThread "C2 CompilerThread0" daemon [_thread_blocked, id=10104, stack(0x000000000ebb0000,0x000000000ecb0000)]
  0x000000000e471800 JavaThread "Attach Listener" daemon [_thread_blocked, id=3016, stack(0x000000000e8c0000,0x000000000e9c0000)]
  0x000000000e470800 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=9588, stack(0x000000000e9d0000,0x000000000ead0000)]
  0x000000000cfbc000 JavaThread "Finalizer" daemon [_thread_blocked, id=4240, stack(0x000000000e370000,0x000000000e470000)]
  0x000000000cf73000 JavaThread "Reference Handler" daemon [_thread_blocked, id=6936, stack(0x000000000e270000,0x000000000e370000)]
  0x000000000259e800 JavaThread "main" [_thread_blocked, id=10416, stack(0x00000000025c0000,0x00000000026c0000)]

Other Threads:
  0x000000000cf6a800 VMThread [stack: 0x000000000e0f0000,0x000000000e1f0000] [id=9376]
  0x000000000e520000 WatcherThread [stack: 0x000000001e150000,0x000000001e250000] [id=10564]

VM state:not at safepoint (normal execution)

VM Mutex/Monitor currently owned by a thread: None

Heap:
 PSYoungGen      total 76288K, used 58614K [0x000000076b380000, 0x0000000770880000, 0x00000007c0000000)
  eden space 65536K, 89% used [0x000000076b380000,0x000000076ecbdb40,0x000000076f380000)
  from space 10752K, 0% used [0x000000076fe00000,0x000000076fe00000,0x0000000770880000)
  to   space 10752K, 0% used [0x000000076f380000,0x000000076f380000,0x000000076fe00000)
 ParOldGen       total 175104K, used 0K [0x00000006c1a00000, 0x00000006cc500000, 0x000000076b380000)
  object space 175104K, 0% used [0x00000006c1a00000,0x00000006c1a00000,0x00000006cc500000)
 Metaspace       used 19862K, capacity 20652K, committed 20736K, reserved 1067008K
  class space    used 2801K, capacity 3013K, committed 3072K, reserved 1048576K

Card table byte_map: [0x0000000002b60000,0x0000000003360000] byte_map_base: 0xffffffffff553000

Marking Bits: (ParMarkBitMap*) 0x000000005ad30600
 Begin Bits: [0x0000000003eb0000, 0x0000000007e48000)
 End Bits:   [0x0000000007e48000, 0x000000000bde0000)

Polling page: 0x0000000000440000

CodeCache: size=245760Kb used=6112Kb max_used=6112Kb free=239647Kb
 bounds [0x000000000f010000, 0x000000000f610000, 0x000000001e010000]
 total_blobs=2685 nmethods=1953 adapters=644
 compilation: enabled

Compilation events (10 events):
Event: 3.109 Thread 0x000000000cfda000 1949       3       com.sun.webkit.graphics.WCRectangle::getMaxX (10 bytes)
Event: 3.109 Thread 0x000000000cfda000 nmethod 1949 0x000000000f609250 code [0x000000000f6093c0, 0x000000000f6096d0]
Event: 3.109 Thread 0x000000000cfda000 1950       3       com.sun.webkit.graphics.WCRectangle::getMaxY (10 bytes)
Event: 3.110 Thread 0x000000000cfda000 nmethod 1950 0x000000000f609790 code [0x000000000f609900, 0x000000000f609c10]
Event: 3.110 Thread 0x000000000cfda000 1951       3       java.util.LinkedList$ListItr::next (56 bytes)
Event: 3.110 Thread 0x000000000cfda000 nmethod 1951 0x000000000f609cd0 code [0x000000000f609e80, 0x000000000f60a398]
Event: 3.110 Thread 0x000000000cfda000 1952       3       com.sun.webkit.graphics.WCRectangle::<init> (5 bytes)
Event: 3.110 Thread 0x000000000cfda000 nmethod 1952 0x000000000f60a590 code [0x000000000f60a6e0, 0x000000000f60a890]
Event: 3.110 Thread 0x000000000cfda000 1953       3       java.util.AbstractSequentialList::iterator (5 bytes)
Event: 3.110 Thread 0x000000000cfda000 nmethod 1953 0x000000000f60a950 code [0x000000000f60aac0, 0x000000000f60ada8]

GC Heap History (0 events):
No events

Deoptimization events (10 events):
Event: 1.266 Thread 0x000000001e553800 Uncommon trap: reason=unstable_if action=reinterpret pc=0x000000000f2f5e3c method=java.lang.String.regionMatches(ZILjava/lang/String;II)Z @ 123
Event: 1.267 Thread 0x000000001e553800 Uncommon trap: reason=unstable_if action=reinterpret pc=0x000000000f36e36c method=java.io.ByteArrayInputStream.read()I @ 8
Event: 1.368 Thread 0x000000001e553800 Uncommon trap: reason=unstable_if action=reinterpret pc=0x000000000f374e94 method=java.lang.CharacterDataLatin1.digit(II)I @ 82
Event: 1.368 Thread 0x000000001e553800 Uncommon trap: reason=unstable_if action=reinterpret pc=0x000000000f374ad4 method=java.lang.CharacterDataLatin1.digit(II)I @ 82
Event: 1.759 Thread 0x000000001e28c800 Uncommon trap: reason=bimorphic action=maybe_recompile pc=0x000000000f446fd8 method=java.util.HashMap.putVal(ILjava/lang/Object;Ljava/lang/Object;ZZ)Ljava/lang/Object; @ 203
Event: 1.759 Thread 0x000000001e28c800 Uncommon trap: reason=bimorphic action=maybe_recompile pc=0x000000000f446fd8 method=java.util.HashMap.putVal(ILjava/lang/Object;Ljava/lang/Object;ZZ)Ljava/lang/Object; @ 203
Event: 1.763 Thread 0x000000001e28c800 Uncommon trap: reason=bimorphic action=maybe_recompile pc=0x000000000f446fd8 method=java.util.HashMap.putVal(ILjava/lang/Object;Ljava/lang/Object;ZZ)Ljava/lang/Object; @ 203
Event: 1.763 Thread 0x000000001e28c800 Uncommon trap: reason=bimorphic action=maybe_recompile pc=0x000000000f446fd8 method=java.util.HashMap.putVal(ILjava/lang/Object;Ljava/lang/Object;ZZ)Ljava/lang/Object; @ 203
Event: 1.764 Thread 0x000000001e28c800 Uncommon trap: reason=bimorphic action=maybe_recompile pc=0x000000000f450c98 method=java.util.HashMap.putVal(ILjava/lang/Object;Ljava/lang/Object;ZZ)Ljava/lang/Object; @ 203
Event: 1.848 Thread 0x000000001e28c800 Uncommon trap: reason=unstable_if action=reinterpret pc=0x000000000f5766ec method=java.lang.ClassLoader.checkName(Ljava/lang/String;)Z @ 20

Internal exceptions (10 events):
Event: 0.129 Thread 0x000000000259e800 Exception <a 'java/security/PrivilegedActionException'> (0x000000076b6cc638) thrown at [C:\re\workspace\8-2-build-windows-amd64-cygwin\jdk8u74\6087\hotspot\src\share\vm\prims\jvm.cpp, line 1386]
Event: 0.129 Thread 0x000000000259e800 Exception <a 'java/security/PrivilegedActionException'> (0x000000076b6cee38) thrown at [C:\re\workspace\8-2-build-windows-amd64-cygwin\jdk8u74\6087\hotspot\src\share\vm\prims\jvm.cpp, line 1386]
Event: 0.129 Thread 0x000000000259e800 Exception <a 'java/security/PrivilegedActionException'> (0x000000076b6cf048) thrown at [C:\re\workspace\8-2-build-windows-amd64-cygwin\jdk8u74\6087\hotspot\src\share\vm\prims\jvm.cpp, line 1386]
Event: 0.129 Thread 0x000000000259e800 Exception <a 'java/lang/NullPointerException'> (0x000000076b6cf620) thrown at [C:\re\workspace\8-2-build-windows-amd64-cygwin\jdk8u74\6087\hotspot\src\share\vm\interpreter\linkResolver.cpp, line 1178]
Event: 0.350 Thread 0x000000001e28c800 Exception <a 'java/lang/NullPointerException'> (0x000000076c1b61e8) thrown at [C:\re\workspace\8-2-build-windows-amd64-cygwin\jdk8u74\6087\hotspot\src\share\vm\interpreter\linkResolver.cpp, line 1178]
Event: 0.350 Thread 0x000000001e28c800 Exception <a 'java/lang/NullPointerException'> (0x000000076c1b61e8) thrown at [C:\re\workspace\8-2-build-windows-amd64-cygwin\jdk8u74\6087\hotspot\src\share\vm\prims\jvm.cpp, line 1390]
Event: 0.615 Thread 0x000000001e28c800 Exception <a 'sun/nio/fs/WindowsException'> (0x000000076c771200) thrown at [C:\re\workspace\8-2-build-windows-amd64-cygwin\jdk8u74\6087\hotspot\src\share\vm\prims\jni.cpp, line 709]
Event: 0.617 Thread 0x000000001e28c800 Exception <a 'sun/nio/fs/WindowsException'> (0x000000076c773038) thrown at [C:\re\workspace\8-2-build-windows-amd64-cygwin\jdk8u74\6087\hotspot\src\share\vm\prims\jni.cpp, line 709]
Event: 0.621 Thread 0x000000001e28c800 Implicit null exception at 0x000000000f216556 to 0x000000000f21689d
Event: 0.666 Thread 0x000000001e3a0000 Implicit null exception at 0x000000000f281d75 to 0x000000000f281f6d

Events (10 events):
Event: 3.017 loading class javafx/animation/Animation$5
Event: 3.017 loading class javafx/animation/Animation$5 done
Event: 3.019 loading class com/sun/webkit/event/WCFocusEvent
Event: 3.019 loading class com/sun/webkit/event/WCFocusEvent done
Event: 3.020 loading class javafx/scene/control/TextFormatter$Change
Event: 3.020 loading class javafx/scene/control/TextFormatter$Change done
Event: 3.021 loading class javafx/scene/control/TextInputControl$TextInputControlFromatterAccessor
Event: 3.021 loading class javafx/scene/control/TextInputControl$TextInputControlFromatterAccessor done
Event: 3.024 loading class javafx/animation/Animation$1
Event: 3.024 loading class javafx/animation/Animation$1 done


Dynamic libraries:
0x000000013f4f0000 - 0x000000013f527000 	D:\dev\tools\jdks\1.8\bin\java.exe
0x0000000076f30000 - 0x00000000770d9000 	C:\windows\SYSTEM32\ntdll.dll
0x0000000076d10000 - 0x0000000076e30000 	C:\windows\system32\kernel32.dll
0x000007fefccf0000 - 0x000007fefcd5c000 	C:\windows\system32\KERNELBASE.dll
0x000007fefd280000 - 0x000007fefd35b000 	C:\windows\system32\ADVAPI32.dll
0x000007fefeac0000 - 0x000007fefeb5f000 	C:\windows\system32\msvcrt.dll
0x000007fefea50000 - 0x000007fefea6f000 	C:\windows\SYSTEM32\sechost.dll
0x000007fefd5d0000 - 0x000007fefd6fd000 	C:\windows\system32\RPCRT4.dll
0x0000000076e30000 - 0x0000000076f2a000 	C:\windows\system32\USER32.dll
0x000007fefe770000 - 0x000007fefe7d7000 	C:\windows\system32\GDI32.dll
0x000007fefd360000 - 0x000007fefd36e000 	C:\windows\system32\LPK.dll
0x000007fefd370000 - 0x000007fefd43a000 	C:\windows\system32\USP10.dll
0x000007fefb670000 - 0x000007fefb864000 	C:\windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\COMCTL32.dll
0x000007feff1c0000 - 0x000007feff231000 	C:\windows\system32\SHLWAPI.dll
0x000007fefd700000 - 0x000007fefd72e000 	C:\windows\system32\IMM32.DLL
0x000007fefd090000 - 0x000007fefd199000 	C:\windows\system32\MSCTF.dll
0x000007fefcc10000 - 0x000007fefcc31000 	C:\windows\system32\AMInit64.dll
0x0000000077100000 - 0x0000000077107000 	C:\windows\system32\PSAPI.DLL
0x000007fefcb40000 - 0x000007fefcb6f000 	C:\windows\system32\nvinitx.dll
0x000007fefcb30000 - 0x000007fefcb3c000 	C:\windows\system32\VERSION.dll
0x000000000f000000 - 0x000000000f006000 	C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
0x000007fefa3c0000 - 0x000007fefa3f3000 	C:\Program Files\NVIDIA Corporation\CoProcManager\nvd3d9wrapx.dll
0x000007fefec70000 - 0x000007fefee47000 	C:\windows\system32\SETUPAPI.dll
0x000007fefcfb0000 - 0x000007fefcfe6000 	C:\windows\system32\CFGMGR32.dll
0x000007fefd1a0000 - 0x000007fefd277000 	C:\windows\system32\OLEAUT32.dll
0x000007fefe560000 - 0x000007fefe763000 	C:\windows\system32\ole32.dll
0x000007fefce10000 - 0x000007fefce2a000 	C:\windows\system32\DEVOBJ.dll
0x000007fefa390000 - 0x000007fefa3b3000 	C:\Program Files\NVIDIA Corporation\CoProcManager\nvdxgiwrapx.dll
0x000000005adb0000 - 0x000000005ae82000 	D:\dev\tools\jdks\1.8\jre\bin\msvcr100.dll
0x000000005a520000 - 0x000000005adb0000 	D:\dev\tools\jdks\1.8\jre\bin\server\jvm.dll
0x000007fef7380000 - 0x000007fef7389000 	C:\windows\system32\WSOCK32.dll
0x000007fefea70000 - 0x000007fefeabd000 	C:\windows\system32\WS2_32.dll
0x000007fefec60000 - 0x000007fefec68000 	C:\windows\system32\NSI.dll
0x000007fefaa40000 - 0x000007fefaa7b000 	C:\windows\system32\WINMM.dll
0x000000005a510000 - 0x000000005a51f000 	D:\dev\tools\jdks\1.8\jre\bin\verify.dll
0x000000005a4e0000 - 0x000000005a509000 	D:\dev\tools\jdks\1.8\jre\bin\java.dll
0x000000005a4c0000 - 0x000000005a4d6000 	D:\dev\tools\jdks\1.8\jre\bin\zip.dll
0x000007fefd7d0000 - 0x000007fefe559000 	C:\windows\system32\SHELL32.dll
0x00000000023c0000 - 0x00000000023cf000 	C:\windows\system32\profapi.dll
0x000007fede050000 - 0x000007fede13f000 	D:\dev\tools\jdks\1.8\jre\bin\msvcr120.dll
0x000007feddfa0000 - 0x000007fede046000 	D:\dev\tools\jdks\1.8\jre\bin\msvcp120.dll
0x0000000065ec0000 - 0x0000000065ee3000 	D:\dev\tools\jdks\1.8\jre\bin\prism_d3d.dll
0x000007feddda0000 - 0x000007feddf9f000 	C:\windows\system32\d3d9.dll
0x000007fef5d50000 - 0x000007fef5d57000 	C:\windows\system32\d3d8thk.dll
0x000007fefaf90000 - 0x000007fefafa8000 	C:\windows\system32\dwmapi.dll
0x000007fefb610000 - 0x000007fefb666000 	C:\windows\system32\uxtheme.dll
0x000007fef3a50000 - 0x000007fef3b46000 	C:\windows\system32\nvumdshimx.dll
0x000007fedb780000 - 0x000007fedcf23000 	C:\windows\system32\igdumdim64.dll
0x0000000065dd0000 - 0x0000000065e13000 	D:\dev\tools\jdks\1.8\jre\bin\glass.dll
0x000007fefebc0000 - 0x000007fefec57000 	C:\windows\system32\COMDLG32.dll
0x000007fefcb00000 - 0x000007fefcb0f000 	C:\windows\system32\CRYPTBASE.dll
0x000007fef1c90000 - 0x000007fef2650000 	C:\windows\system32\igdusc64.dll
0x000000006d930000 - 0x000000006febe000 	D:\dev\tools\jdks\1.8\jre\bin\jfxwebkit.dll
0x000007fefc4a0000 - 0x000007fefc4b8000 	C:\windows\system32\CRYPTSP.dll
0x000007fefc160000 - 0x000007fefc1a7000 	C:\windows\system32\rsaenh.dll
0x000000005a3f0000 - 0x000000005a40a000 	D:\dev\tools\jdks\1.8\jre\bin\net.dll
0x000007fefc440000 - 0x000007fefc495000 	C:\windows\system32\mswsock.dll
0x000007fefc430000 - 0x000007fefc437000 	C:\windows\System32\wship6.dll
0x000000005a3d0000 - 0x000000005a3e1000 	D:\dev\tools\jdks\1.8\jre\bin\nio.dll
0x000007fefbdf0000 - 0x000007fefbdf7000 	C:\windows\System32\wshtcpip.dll
0x000007fefc2c0000 - 0x000007fefc31b000 	C:\windows\system32\DNSAPI.dll
0x000007fef9e40000 - 0x000007fef9e67000 	C:\windows\system32\IPHLPAPI.DLL
0x000007fef9e20000 - 0x000007fef9e2b000 	C:\windows\system32\WINNSI.DLL
0x000007fef58d0000 - 0x000007fef58d8000 	C:\windows\system32\rasadhlp.dll
0x000007fef9990000 - 0x000007fef99e3000 	C:\windows\System32\fwpuclnt.dll
0x0000000065f00000 - 0x0000000065f14000 	D:\dev\tools\jdks\1.8\jre\bin\javafx_font.dll
0x000007fee4240000 - 0x000007fee43d7000 	C:\windows\system32\dwrite.dll
0x000007feff120000 - 0x000007feff1b9000 	C:\windows\system32\CLBCatQ.DLL
0x000007fefacb0000 - 0x000007fefae11000 	C:\windows\system32\WindowsCodecs.dll
0x000007fefcaa0000 - 0x000007fefcaf7000 	C:\windows\system32\apphelp.dll
0x0000000003a80000 - 0x0000000003a96000 	C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
0x0000000003ab0000 - 0x0000000003ac7000 	D:\dev\tools\SCMs\SVN\TortoiseSVN\bin\TortoiseStub.dll
0x000000000e1f0000 - 0x000000000e26d000 	D:\dev\tools\SCMs\SVN\TortoiseSVN\bin\TortoiseSVN.dll
0x000007fefe7e0000 - 0x000007fefea49000 	C:\windows\system32\WININET.dll
0x000007fefcd70000 - 0x000007fefcd74000 	C:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
0x000007fefcdf0000 - 0x000007fefcdf4000 	C:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
0x000007fefcfa0000 - 0x000007fefcfa4000 	C:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
0x000007fefce00000 - 0x000007fefce03000 	C:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
0x00000000770f0000 - 0x00000000770f3000 	C:\windows\system32\normaliz.DLL
0x000007fefee50000 - 0x000007feff118000 	C:\windows\system32\iertutil.dll
0x000007fefcd80000 - 0x000007fefcd85000 	C:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
0x000007fefcdd0000 - 0x000007fefcdee000 	C:\windows\system32\USERENV.dll
0x000007fef15e0000 - 0x000007fef1a87000 	D:\dev\tools\SCMs\SVN\TortoiseSVN\bin\libsvn_tsvn.dll
0x0000000003d60000 - 0x0000000003d92000 	D:\dev\tools\SCMs\SVN\TortoiseSVN\bin\libapr_tsvn.dll
0x000007fef8d00000 - 0x000007fef8dd4000 	C:\windows\system32\MSVCR110.dll
0x000000000e870000 - 0x000000000e8b5000 	D:\dev\tools\SCMs\SVN\TortoiseSVN\bin\libaprutil_tsvn.dll
0x000007fefeb60000 - 0x000007fefebb2000 	C:\windows\system32\WLDAP32.dll
0x000007fef3570000 - 0x000007fef3581000 	D:\dev\tools\SCMs\SVN\TortoiseSVN\bin\intl3_tsvn.dll
0x000007fef1c70000 - 0x000007fef1c89000 	D:\dev\tools\SCMs\SVN\TortoiseSVN\bin\libsasl.dll
0x000007fefc8a0000 - 0x000007fefc8ab000 	C:\windows\system32\Secur32.dll
0x000007fefca70000 - 0x000007fefca95000 	C:\windows\system32\SSPICLI.DLL
0x000007fefce30000 - 0x000007fefcf9d000 	C:\windows\system32\CRYPT32.dll
0x000007fefccd0000 - 0x000007fefccdf000 	C:\windows\system32\MSASN1.dll
0x000007fef8c50000 - 0x000007fef8cf7000 	C:\windows\system32\MSVCP110.dll
0x000007fef1c30000 - 0x000007fef1c65000 	C:\windows\system32\EhStorShell.dll
0x000007fefb040000 - 0x000007fefb16c000 	C:\windows\system32\PROPSYS.dll
0x000007fef1bb0000 - 0x000007fef1c2e000 	C:\windows\System32\cscui.dll
0x000007fef1ba0000 - 0x000007fef1bac000 	C:\windows\System32\CSCDLL.dll
0x000007fef58e0000 - 0x000007fef58ef000 	C:\windows\system32\CSCAPI.dll
0x000007fef4f00000 - 0x000007fef4f2d000 	C:\Program Files\Common Files\Microsoft Shared\Ink\rtscom.dll
0x000000005a410000 - 0x000000005a434000 	D:\dev\tools\jdks\1.8\jre\bin\sunec.dll
0x000007fef98f0000 - 0x000007fef9901000 	C:\windows\system32\dhcpcsvc6.DLL
0x000007fef9910000 - 0x000007fef9928000 	C:\windows\system32\dhcpcsvc.DLL
0x000007fefab10000 - 0x000007fefab25000 	C:\windows\system32\NLAapi.dll
0x000007fef5000000 - 0x000007fef5015000 	C:\windows\system32\napinsp.dll
0x000007fef5020000 - 0x000007fef5039000 	C:\windows\system32\pnrpnsp.dll
0x000007fef4ff0000 - 0x000007fef4ffb000 	C:\windows\System32\winrnr.dll
0x000007fef4fe0000 - 0x000007fef4ff0000 	C:\windows\system32\wshbth.dll
0x0000000065ea0000 - 0x0000000065eb1000 	D:\dev\tools\jdks\1.8\jre\bin\prism_common.dll
0x000007fedf1d0000 - 0x000007fedf2f5000 	C:\windows\system32\dbghelp.dll

VM Arguments:
java_command: com.agfa.apps.SimpleBrowser
java_class_path (initial): classes
Launcher Type: SUN_STANDARD

Environment Variables:
JAVA_HOME=D:/dev/tools/jdks/1.8
PATH=D:\dev\tools\jdks\1.8\bin;D:\dev\tools\apache\maven\latest\bin;D:\dev\tools\apache\ant\latest\bin;D:\dev\scripts;D:\Users\awxgx\AppData\Local\Atlassian\SourceTree\hg_local;D:\dev\tools\nodejs;D:\Users\awxgx\AppData\Roaming\npm;D:\Users\awxgx\bin;D:\dev\tools\SCMs\Git\Git\mingw64\bin;D:\dev\tools\SCMs\Git\Git\usr\local\bin;D:\dev\tools\SCMs\Git\Git\usr\bin;D:\dev\tools\SCMs\Git\Git\usr\bin;D:\dev\tools\SCMs\Git\Git\mingw64\bin;D:\dev\tools\SCMs\Git\Git\usr\bin;D:\Users\awxgx\bin;C:\ProgramData\Oracle\Java\javapath;C:\Software\ORA11g;C:\Software\ORA11g\bin;C:\Software\Perl58\bin;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\windows\system32;C:\windows;C:\windows\System32\Wbem;C:\windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Common Files\Roxio Shared\DLLShared;C:\Program Files (x86)\Common Files\Roxio Shared\10.0\DLLShared;C:\Program Files\Intel\WiFi\bin;C:\Program Files\Common Files\Intel\WirelessCommon;D:\dev\tools\SCMs\SVN\TortoiseSVN\bin;D:\dev\tools\merge\Perforce\DVCS;D:\dev\tools\docker\toolbox;D:\dev\tools\SCMs\Git\Git\usr\bin\vendor_perl;D:\dev\tools\SCMs\Git\Git\usr\bin\core_perl
USERNAME=awxgx
SHELL=D:\dev\tools\SCMs\Git\Git\usr\bin\bash
DISPLAY=needs-to-be-defined
OS=Windows_NT
PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 61 Stepping 4, GenuineIntel



---------------  S Y S T E M  ---------------

OS: Windows 7 , 64 bit Build 7601 (6.1.7601.19045)

CPU:total 4 (2 cores per cpu, 2 threads per core) family 6 model 61 stepping 4, cmov, cx8, fxsr, mmx, sse, sse2, sse3, ssse3, sse4.1, sse4.2, popcnt, avx, avx2, aes, clmul, erms, rtm, 3dnowpref, lzcnt, ht, tsc, tscinvbit, bmi1, bmi2, adx

Memory: 4k page, physical 16662904k(9878100k free), swap 33323972k(25642972k free)

vm_info: Java HotSpot(TM) 64-Bit Server VM (25.74-b02) for windows-amd64 JRE (1.8.0_74-b02), built on Jan 29 2016 17:42:36 by "java_re" with MS VC++ 10.0 (VS2010)

time: Wed Apr 13 17:16:04 2016
elapsed time: 3 seconds (0d 0h 0m 3s)


REPRODUCIBILITY :
This bug can be reproduced always.

---------- BEGIN SOURCE ----------
#### app.html ####
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html lang="en">
<head>
<script src="https://code.jquery.com/jquery-2.2.3.min.js"></script>
<style type="text/css">
td {
	text-align: center;
}

#t {
	width: 100%;
}
</style>
</head>
<div id="main">
  <script type="text/javascript">
			function randomInt(max) {
				return parseInt(Math.random() * max, 10);
			}

			function initTable() {
				$("#t").empty();
				$("#t").append("<colgroup></colgroup>");

				var nbElements = $("#nbCols").val();

				for (i = 0; i < nbElements; i++) {
					$("#t colgroup").append("<col></col>");
				}

				$("#t").append("<tbody></tbody>");
				var tBody = $("#t > tbody");

				for (i = 0; i < nbElements; i++) {
					tBody.append("<tr></tr>");
					var tr = $("#t > tbody tr:last-child");
					for (j = 0; j < nbElements; j++) {
						tr.append("<td>init</td>");
					}
				}
			}

			function resetTable() {
				var nbElements = $("#nbCols").val();

				if ($("#clearCol").is(':checked')) {
					// set all cols to 0px
					$("col").attr("style", "width:0px");
				}

				// remove all rows
				$("tr").remove();

				// recreate some content
				for (row = 0; row < nbElements; row++) {
					$("#t").append("<tr></tr>");
					var lastTR = $("#t tr:last-child");
					for (col = 0; col < nbElements; col++) {
						lastTR.append("<td>" + randomInt(10) + "</td>");
					}
				}

				if ($("#clearCol").is(':checked')) {
					$("col").attr("style",
							"width:" + parseInt(100 / nbElements, 10) + "%");
				}
			};

			$(document).ready(function() {
				$("#nbCols").val(10);
				$("#clearCol").attr("checked", true);
				$("#nbCols").change(function(event) {
					// Reset the table on width change
					initTable();
				});
				initTable();
			});
		</script>
  <button onclick="resetTable()">Clean and Recreate table</button>
  <input type="number" id="nbCols">Number of row/cols</input> <input type="checkbox" id="clearCol">Clear col
  sizes</input>
  <table id="t" border="1">
  </table>
</div>
</html>


### SimpleBroswer.java ####
public class SimpleBrowser extends Application {
    @Override
    public void start(Stage stage) {
        WebView wv = new WebView();
        wv.getEngine().load("http://localhost:8080/app.html");
        
        Scene s = new Scene(wv);
        stage.setScene(s);
        stage.show();
    }

    public static void main(String[] args) {
        launch(args);
    }
}


---------- END SOURCE ----------

CUSTOMER SUBMITTED WORKAROUND :
modify the inner webapp not to use the resizing feature of colgroup>col !


Comments
Changeset: fb4c37073893 Author: ghb Date: 2016-04-22 09:52 +0530 URL: http://hg.openjdk.java.net/openjfx/9-dev/rt/rev/fb4c37073893 8154186: JVM crash while using JavaFW WebView and colgroup/cols html feature Reviewed-by: arajkumar, azvegint, kcr Contributed-by: guru.hb@oracle.com
22-04-2016

+1
21-04-2016

+1
21-04-2016

Built and tested. +1
21-04-2016

Webrev : http://cr.openjdk.java.net/~ghb/8154186/webrev.00/ Root cause : Crash when updating table elements. REGRESSION (r162334): RenderTableCol::styleDidChange uses out-of-date table information Solution : Fixed by merging http://trac.webkit.org/changeset/165837 Test : Executing below two use case should not crash 1. Run Attached WebviewTestApp.jar without any arguments . will load app.html content (which is provided by the submitter) 2. Run Attached "WebviewTestApp.jar http://advanced-gwt.sourceforge.net/demo/index.html" --> "Click Heading (Caption)"
20-04-2016

The additional information in the description (works on 8u45, fails on 8u66, 8u74, and 8u77) suggests that the following is wrong in the description: > REGRESSION. Last worked in version 8u72 Given that the user indicated that this last worked in 8u45, it was likely introduced in 8u60.
13-04-2016