[Webkit-unassigned] [Bug 216668] New: ASSERTION FAILED: &formattingContextRoot == m_rootContainer.get() in WebCore::Layout::LayoutState::establishedInlineFormattingState

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=216668

            Bug ID: 216668
           Summary: ASSERTION FAILED: &formattingContextRoot ==
                    m_rootContainer.get() in
                    WebCore::Layout::LayoutState::establishedInlineFormatt
                    ingState
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ryanhaddad at apple.com
                CC: bfulgham at webkit.org, simon.fraser at apple.com,
                    zalan at apple.com

Seeing this assertion failure with various LFC layout tests on macOS debug bots:

ASSERTION FAILED: &formattingContextRoot == m_rootContainer.get()
./layout/LayoutState.cpp(118) : WebCore::Layout::InlineFormattingState &WebCore::Layout::LayoutState::establishedInlineFormattingState(const WebCore::Layout::ContainerBox &) const
1   0x4ff075629 WTFCrash
2   0x4e0007dbb WTFCrashWithInfo(int, char const*, char const*, int)
3   0x4e394aca4 WebCore::Layout::LayoutState::establishedInlineFormattingState(WebCore::Layout::ContainerBox const&) const
4   0x4e39a1a54 auto WebCore::Display::paintSubtree(WebCore::GraphicsContext&, WebCore::Layout::LayoutState const&, WebCore::Layout::Box const&, WebCore::IntRect const&, WebCore::Display::PaintPhase)::$_2::operator()<WebCore::Layout::Box const>(WebCore::Layout::Box const&) const
5   0x4e399caa5 WebCore::Display::paintSubtree(WebCore::GraphicsContext&, WebCore::Layout::LayoutState const&, WebCore::Layout::Box const&, WebCore::IntRect const&, WebCore::Display::PaintPhase)
6   0x4e399c6cb WebCore::Display::Painter::paint(WebCore::Layout::LayoutState const&, WebCore::GraphicsContext&, WebCore::IntRect const&)
7   0x4e3956295 WebCore::Layout::LayoutContext::paint(WebCore::Layout::LayoutState const&, WebCore::GraphicsContext&, WebCore::IntRect const&)
8   0x4e3999b1a WebCore::Display::LayerController::RootLayerClient::paintContents(WebCore::GraphicsLayer const*, WebCore::GraphicsContext&, WebCore::FloatRect const&, unsigned int)
9   0x4e40c3160 WebCore::GraphicsLayer::paintGraphicsLayerContents(WebCore::GraphicsContext&, WebCore::FloatRect const&, unsigned int)
10  0x4e4160ccf WebCore::GraphicsLayerCA::platformCALayerPaintContents(WebCore::PlatformCALayer*, WebCore::GraphicsContext&, WebCore::FloatRect const&, unsigned int)
11  0x4e1bfcca1 WebCore::PlatformCALayer::drawLayerContents(WebCore::GraphicsContext&, WebCore::PlatformCALayer*, WTF::Vector<WebCore::FloatRect, 5ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, unsigned int)
12  0x4e1d9770d -[WebLayer drawInContext:]
13  0x7fff3864ae02 CABackingStoreUpdate_
14  0x7fff386aca0d invocation function for block in CA::Layer::display_()
15  0x7fff3864a020 -[CALayer _display]
16  0x4e1d97eeb -[WebSimpleLayer display]
17  0x7fff38649551 CA::Layer::display_if_needed(CA::Transaction*)
18  0x7fff386377c6 CA::Context::commit_transaction(CA::Transaction*)
19  0x7fff38636ea6 CA::Transaction::commit()
20  0x7fff38636ba6 CA::Transaction::observer_callback(__CFRunLoopObserver*, unsigned long, void*)
21  0x7fff2dc2af28 __CFRUNLOOP_IS_CALLING_OUT_TO_AN_OBSERVER_CALLBACK_FUNCTION__
22  0x7fff2dc2ae5d __CFRunLoopDoObservers
23  0x7fff2dbccef9 CFRunLoopRunSpecific
24  0x7fff2fe317df -[NSRunLoop(NSRunLoop) runMode:beforeDate:]
25  0x7fff2fe316b4 -[NSRunLoop(NSRunLoop) run]
26  0x7fff59d5c077 _xpc_objc_main
27  0x7fff59d5bb79 _xpc_copy_xpcservice_dictionary
28  0x102893136 WebKit::XPCServiceMain(int, char const**)
29  0x103c7913b WKXPCServiceMain
30  0x101f66eb2 main
31  0x7fff59b233d5 start
LEAK: 1 WebPageProxy

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200917/01d39a33/attachment-0001.htm>