[Webkit-unassigned] [Bug 229594] [ Win EWS] js/dfg-int16array.html is a flaky crash under WebCore::LayoutIntegration::LineLayout::constructContent

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=229594

Ryan Haddad <ryanhaddad at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |bfulgham at webkit.org,
                   |                            |simon.fraser at apple.com,
                   |                            |zalan at apple.com
          Component|JavaScriptCore              |Layout and Rendering
            Summary|[ Win EWS]                  |[ Win EWS]
                   |js/dfg-int16array.html is a |js/dfg-int16array.html is a
                   |flaky crash                 |flaky crash under
                   |                            |WebCore::LayoutIntegration:
                   |                            |:LineLayout::constructConte
                   |                            |nt

--- Comment #4 from Ryan Haddad <ryanhaddad at apple.com> ---
    Frame[00]  Triage Symbol: [WTF!abort+0x35]
    Frame[01]  Triage Symbol: [WTF!WTF::fastMalloc+0x18]
    Frame[02]  Triage Symbol: [WebKit!WebCore::LayoutIntegration::LineLayout::constructContent+0x1c0]
    Frame[03]  Triage Symbol: [WebKit!WebCore::LayoutIntegration::LineLayout::layout+0x14f]
    Frame[04]  Triage Symbol: [WebKit!WebCore::RenderBlockFlow::layoutModernLines+0x347]
    Frame[05]  Triage Symbol: [WebKit!WebCore::RenderBlockFlow::layoutBlock+0x380]
    Frame[06]  Triage Symbol: [WebKit!WebCore::RenderBlock::layout+0x80]
    Frame[07]  Triage Symbol: [WebKit!WebCore::RenderBlockFlow::layoutBlockChild+0x292]
    Frame[08]  Triage Symbol: [WebKit!WebCore::RenderBlockFlow::layoutBlockChildren+0x508]
    Frame[09]  Triage Symbol: [WebKit!WebCore::RenderBlockFlow::layoutBlock+0x43f]
    Frame[0a]  Triage Symbol: [WebKit!WebCore::RenderBlock::layout+0x80]
    Frame[0b]  Triage Symbol: [WebKit!WebCore::RenderBlockFlow::layoutBlockChild+0x292]
    Frame[0c]  Triage Symbol: [WebKit!WebCore::RenderBlockFlow::layoutBlockChildren+0x508]
    Frame[0d]  Triage Symbol: [WebKit!WebCore::RenderBlockFlow::layoutBlock+0x43f]
    Frame[0e]  Triage Symbol: [WebKit!WebCore::RenderBlock::layout+0x80]
    Frame[0f]  Triage Symbol: [WebKit!WebCore::RenderBlockFlow::layoutBlockChild+0x292]
    Frame[10]  Triage Symbol: [WebKit!WebCore::RenderBlockFlow::layoutBlockChildren+0x508]
    Frame[11]  Triage Symbol: [WebKit!WebCore::RenderBlockFlow::layoutBlock+0x43f]
    Frame[12]  Triage Symbol: [WebKit!WebCore::RenderBlock::layout+0x80]
    Frame[13]  Triage Symbol: [WebKit!WebCore::RenderView::layout+0x2ed]
    Frame[14]  Triage Symbol: [WebKit!WebCore::FrameViewLayoutContext::layout+0x5bf]
    Frame[15]  Triage Symbol: [WebKit!WebCore::Document::implicitClose+0x35d]
    Frame[16]  Triage Symbol: [WebKit!WebCore::FrameLoader::checkCompleted+0x13f]
    Frame[17]  Triage Symbol: [WebKit!WebCore::CachedResourceLoader::loadDone+0x80]
    Frame[18]  Triage Symbol: [WebKit!WebCore::SubresourceLoader::notifyDone+0x55]
    Frame[19]  Triage Symbol: [WebKit!WebCore::SubresourceLoader::didFinishLoading+0x163]
    Frame[1a]  Triage Symbol: [WebKit!<lambda_e7e2d454785dfeaf6199132ec807941c>::operator+0xec]
    Frame[1b]  Triage Symbol: [WTF!WTF::RunLoop::performWork+0x23f]

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210827/bdf729fd/attachment.htm>