[Webkit-unassigned] [Bug 191159] New: ASSERTION FAILED: !parentClipRect.isInfinite() in RenderLayerBacking::computeParentGraphicsLayerRect

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=191159

            Bug ID: 191159
           Summary: ASSERTION FAILED: !parentClipRect.isInfinite() in
                    RenderLayerBacking::computeParentGraphicsLayerRect
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
               URL: https://store.google.com/us/product/google_home_hub?hl
                    =en-US
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: joepeck at webkit.org
                CC: bfulgham at webkit.org, simon.fraser at apple.com,
                    zalan at apple.com

ASSERTION FAILED: !parentClipRect.isInfinite() in RenderLayerBacking::computeParentGraphicsLayerRect

Steps to Reproduce:
1. Open https://store.google.com/us/product/google_home_hub?hl=en-US
  => ASSERT

ASSERTION FAILED: !parentClipRect.isInfinite()
./rendering/RenderLayerBacking.cpp(935) : WebCore::LayoutRect WebCore::RenderLayerBacking::computeParentGraphicsLayerRect(WebCore::RenderLayer *, WebCore::LayoutSize &) const
1   0x12928df79 WTFCrash
2   0x11800e1bb WTFCrashWithInfo(int, char const*, char const*, int)
3   0x11b360178 WebCore::RenderLayerBacking::computeParentGraphicsLayerRect(WebCore::RenderLayer*, WebCore::LayoutSize&) const
4   0x11b35b779 WebCore::RenderLayerBacking::updateGeometry()
5   0x11b35b1cb WebCore::RenderLayerCompositor::updateCompositingDescendantGeometry(WebCore::RenderLayer&, WebCore::RenderLayer&)
6   0x11b35b39e WebCore::RenderLayerCompositor::updateCompositingDescendantGeometry(WebCore::RenderLayer&, WebCore::RenderLayer&)
7   0x11b35b39e WebCore::RenderLayerCompositor::updateCompositingDescendantGeometry(WebCore::RenderLayer&, WebCore::RenderLayer&)
8   0x11b35b39e WebCore::RenderLayerCompositor::updateCompositingDescendantGeometry(WebCore::RenderLayer&, WebCore::RenderLayer&)
9   0x11b3316c4 WebCore::RenderLayerBacking::updateAfterLayout(WTF::OptionSet<WebCore::RenderLayerBacking::UpdateAfterLayoutFlags>)
10  0x11b33000b WebCore::RenderLayer::updateLayerPositions(WebCore::RenderGeometryMap*, WTF::OptionSet<WebCore::RenderLayer::UpdateLayerPositionsFlag>)
11  0x11b32f69b WebCore::RenderLayer::updateLayerPositionsAfterLayout(WebCore::RenderLayer const*, WTF::OptionSet<WebCore::RenderLayer::UpdateLayerPositionsFlag>)
12  0x11ab11ca6 WebCore::FrameView::didLayout(WTF::WeakPtr<WebCore::RenderElement>)
13  0x11ab07837 WebCore::FrameViewLayoutContext::layout()
14  0x11a0d8d66 WebCore::Document::updateLayoutIfDimensionsOutOfDate(WebCore::Element&, WebCore::DimensionsCheck)
15  0x11a18a900 WebCore::Element::offsetHeight()
16  0x118b0d4bd WebCore::jsHTMLElementOffsetHeightGetter(JSC::ExecState&, WebCore::JSHTMLElement&, JSC::ThrowScope&)
17  0x118abfaf0 long long WebCore::IDLAttribute<WebCore::JSHTMLElement>::get<&(WebCore::jsHTMLElementOffsetHeightGetter(JSC::ExecState&, WebCore::JSHTMLElement&, JSC::ThrowScope&)), (WebCore::CastedThisErrorBehavior)3>(JSC::ExecState&, long long, char const*)
18  0x118abf9cb WebCore::jsHTMLElementOffsetHeight(JSC::ExecState*, long long, JSC::PropertyName)
19  0x12a872a9b JSC::PropertySlot::customGetter(JSC::ExecState*, JSC::PropertyName) const
20  0x1297762d2 JSC::PropertySlot::getValue(JSC::ExecState*, JSC::PropertyName) const
21  0x12a017985 JSC::JSValue::get(JSC::ExecState*, JSC::PropertyName, JSC::PropertySlot&) const
22  0x12a4805de llint_slow_path_get_by_id
23  0x12973a54c llint_entry
24  0x129746a52 llint_entry
25  0x129746a52 llint_entry
26  0x129746a52 llint_entry
27  0x129732de2 vmEntryToJavaScript
28  0x12a378aee JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*)
29  0x12a379189 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&)
30  0x12a63eedc JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&)
31  0x12a7155dd JSC::boundFunctionCall(JSC::ExecState*)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20181101/33220f9a/attachment-0001.html>