[Webkit-unassigned] [Bug 174131] ASSERTION FAILED: !needsLayout() in WebCore::RenderMathMLScripts::firstLineBaseline
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Tue Nov 14 02:12:53 PST 2017
https://bugs.webkit.org/show_bug.cgi?id=174131
Frédéric Wang (:fredw) <fred.wang at free.fr> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |alex at igalia.com,
| |fred.wang at free.fr,
| |lambda at liu.ms,
| |mrobinson at webkit.org
Component|Layout and Rendering |MathML
--- Comment #2 from Frédéric Wang (:fredw) <fred.wang at free.fr> ---
OK, I hit it with the torture test https://mdn.mozillademos.org/en-US/docs/Mozilla/MathML_Project/MathML_Torture_Test$samples/MathML_Torture_Test ; I obtain the following trace:
ASSERTION FAILED: !needsLayout()
/Users/fred/WebKit/Source/WebCore/rendering/mathml/RenderMathMLScripts.cpp(479) : virtual std::optional<int> WebCore::RenderMathMLScripts::firstLineBaseline() const
1 0x10eeed24d WTFCrash
2 0x11639fbac WebCore::RenderMathMLScripts::firstLineBaseline() const
3 0x11638b0d8 WebCore::RenderMathMLBlock::ascentForChild(WebCore::RenderBox const&)
4 0x11639b909 WebCore::RenderMathMLRow::firstLineBaseline() const
5 0x11638b0d8 WebCore::RenderMathMLBlock::ascentForChild(WebCore::RenderBox const&)
6 0x11639b909 WebCore::RenderMathMLRow::firstLineBaseline() const
7 0x115ff77a4 WebCore::RenderBlock::firstLineBaseline() const
8 0x116019045 WebCore::RenderBlockFlow::firstLineBaseline() const
9 0x11629a8e6 WebCore::RenderTableCell::cellBaselinePosition() const
10 0x11629ab1b WebCore::RenderTableCell::layout()
11 0x1162b8dcd WebCore::RenderTableRow::layout()
12 0x115f8cdfc WebCore::RenderElement::layoutIfNeeded()
13 0x1162bd020 WebCore::RenderTableSection::layout()
14 0x115f8cdfc WebCore::RenderElement::layoutIfNeeded()
15 0x1162913ba WebCore::RenderTable::layout()
This ASSERT was added in bug 153918 and was not present in RenderMathMLScripts::firstLineBaseline before. I wonder whether it is actually valid, none of the other firstLineBaseline functions have it.
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20171114/32b676ce/attachment-0001.html>
More information about the webkit-unassigned
mailing list