[Webkit-unassigned] [Bug 206337] New: REGRESSION (r251110): Crash on https://developer.apple.com/tutorials/swiftui/creating-and-combining-views

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=206337

            Bug ID: 206337
           Summary: REGRESSION (r251110): Crash on
                    https://developer.apple.com/tutorials/swiftui/creating
                    -and-combining-views
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Keywords: InRadar
          Severity: Normal
          Priority: P2
         Component: Forms
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: rniwa at webkit.org
                CC: cdumez at apple.com, wenson_hsieh at apple.com

WebKit crashes with the following backtrace when visiting https://developer.apple.com/tutorials/swiftui/creating-and-combining-views.
0   WebCore                             0x00000001b88af7b0 WebCore::RadioButtonGroups::hasCheckedButton(WebCore::HTMLInputElement const&) const + 136
1   WebCore                             0x00000001b88af74c WebCore::RadioButtonGroups::hasCheckedButton(WebCore::HTMLInputElement const&) const + 36
2   WebCore                             0x00000001b8ae7310 WebCore::RadioInputType::matchesIndeterminatePseudoClass() const + 48
3   ???                                 0x0000000caf0068a0 0 + 54475647136
4   WebCore                             0x00000001b9238b0c WebCore::Style::ElementRuleCollector::collectMatchingRulesForList(WTF::Vector<WebCore::Style::RuleData, 1ul, WTF::CrashOnOverflow, 16ul> const*, WebCore::Style::MatchRequest const&) + 384
5   WebCore                             0x00000001b9238840 WebCore::Style::ElementRuleCollector::collectMatchingRules(WebCore::Style::MatchRequest const&) + 740
6   WebCore                             0x00000001b9239930 WebCore::Style::ElementRuleCollector::matchUARules() + 104
7   WebCore                             0x00000001b9239f60 WebCore::Style::ElementRuleCollector::matchAllRules(bool, bool) + 40
8   WebCore                             0x00000001b9250990 WebCore::Style::Resolver::styleForElement(WebCore::Element const&, WebCore::RenderStyle const*, WebCore::RenderStyle const*, WebCore::RuleMatchingBehavior, WebCore::SelectorFilter const*) + 488
9   WebCore                             0x00000001b925b9e4 WebCore::Style::TreeResolver::styleForElement(WebCore::Element&, WebCore::RenderStyle const&) + 228
10  WebCore                             0x00000001b925bd20 WebCore::Style::TreeResolver::resolveElement(WebCore::Element&) + 112
11  WebCore                             0x00000001b925cd9c WebCore::Style::TreeResolver::resolveComposedTree() + 1388
12  WebCore                             0x00000001b925d8f0 WebCore::Style::TreeResolver::resolve() + 700

<rdar://problem/58441241>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200116/50f3d432/attachment.htm>