[Webkit-unassigned] [Bug 243515] New: [ iOS15 Debug ] 11X SVG (Layout tests) are a consistent crash
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Wed Aug 3 14:49:40 PDT 2022
https://bugs.webkit.org/show_bug.cgi?id=243515
Bug ID: 243515
Summary: [ iOS15 Debug ] 11X SVG (Layout tests) are a
consistent crash
Product: WebKit
Version: WebKit Nightly Build
Hardware: Unspecified
OS: Unspecified
Status: NEW
Severity: Normal
Priority: P2
Component: New Bugs
Assignee: webkit-unassigned at lists.webkit.org
Reporter: hhjalmarsson at apple.com
svg/compositing/outermost-svg-directly-composited-group-child-overflow-hidden.html
svg/compositing/outermost-svg-directly-composited-group-child.html
svg/compositing/outermost-svg-directly-composited-shape-child.html
svg/compositing/outermost-svg-directly-composited-transformed-group-child.html
svg/compositing/outermost-svg-with-border-overflow-visible.html
svg/compositing/outermost-svg-with-border-padding-margin.html
svg/compositing/outermost-svg-with-border-padding.html
svg/compositing/outermost-svg-with-border.html
svg/compositing/svg-poster-circle.html
svg/z-index/group-with-zindex.svg
svg/z-index/shapes-with-zindex.svg
Are 11 Layout tests that are constantly crashing on iOS15 Debug ToT. These tests are also a consistently image failures on iOS15 Release queues.
HISTORY:
https://results.webkit.org/?suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&test=svg%2Fcompositing%2Foutermost-svg-directly-composited-group-child-overflow-hidden.html&test=svg%2Fcompositing%2Foutermost-svg-directly-composited-group-child.html&test=svg%2Fcompositing%2Foutermost-svg-directly-composited-shape-child.html&test=svg%2Fcompositing%2Foutermost-svg-directly-composited-transformed-group-child.html&test=svg%2Fcompositing%2Foutermost-svg-with-border-overflow-visible.html&test=svg%2Fcompositing%2Foutermost-svg-with-border-padding-margin.html&test=svg%2Fcompositing%2Foutermost-svg-with-border-padding.html&test=svg%2Fcompositing%2Foutermost-svg-with-border.html&test=svg%2Fcompositing%2Fsvg-poster-circle.html&test=svg%2Fz-index%2Fgroup-with-zindex.svg&test=svg%2Fz-index%2Fshapes-with-zindex.svg
DIFF:
No crash log found for com.apple.WebKit.WebContent.Development:8767.
stdout:
stderr:
ASSERTION FAILED: is<Target>(source)
/Volumes/Data/worker/Apple-iOS-15-Simulator-Debug-Build/build/WebKitBuild/Debug-iphonesimulator/usr/local/include/wtf/TypeCasts.h(79) : match_constness_t<Source, Target> &WTF::downcast(Source &) [Target = WebCore::RenderBoxModelObject, Source = WebCore::RenderObject]
1 0x28d5d7129 WTFCrash
2 0x28d5d7149 WTFCrashWithSecurityImplication
3 0x2b80862c1 std::__1::conditional<std::is_const_v<WebCore::RenderObject>, std::__1::add_const<WebCore::RenderBoxModelObject>::type, std::__1::remove_const<WebCore::RenderBoxModelObject>::type>::type& WTF::downcast<WebCore::RenderBoxModelObject, WebCore::RenderObject>(WebCore::RenderObject&)
4 0x2bbb83c57 WebCore::RenderObject::destroy()
5 0x2bbb83a89 WebCore::RenderObjectDeleter::operator()(WebCore::RenderObject*) const
6 0x2bbde5d1c std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>::reset(WebCore::RenderObject*)
7 0x2bbde5cb9 std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>::~unique_ptr()
8 0x2bbdd6be5 std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>::~unique_ptr()
9 0x2bbdd65ed WebCore::RenderTreeBuilder::destroy(WebCore::RenderObject&, WebCore::RenderTreeBuilder::CanCollapseAnonymousBlock)
10 0x2bbddc413 WebCore::RenderTreeBuilder::destroyAndCleanUpAnonymousWrappers(WebCore::RenderObject&)
11 0x2bbdfec89 WebCore::RenderTreeUpdater::tearDownRenderers(WebCore::Element&, WebCore::RenderTreeUpdater::TeardownType, WebCore::RenderTreeBuilder&)::$_7::operator()(unsigned int) const
12 0x2bbdfd6c5 WebCore::RenderTreeUpdater::tearDownRenderers(WebCore::Element&, WebCore::RenderTreeUpdater::TeardownType, WebCore::RenderTreeBuilder&)
13 0x2bbdfe936 WebCore::RenderTreeUpdater::tearDownRenderers(WebCore::Element&)
14 0x2b9f11f82 WebCore::Document::destroyRenderTree()
15 0x2b9f12484 WebCore::Document::willBeRemovedFromFrame()
16 0x2bae65f15 WebCore::Frame::setView(WTF::RefPtr<WebCore::FrameView, WTF::RawPtrTraits<WebCore::FrameView>, WTF::DefaultRefDerefTraits<WebCore::FrameView> >&&)
17 0x2bae6ad4d WebCore::Frame::createView(WebCore::IntSize const&, std::__1::optional<WebCore::Color> const&, WebCore::IntSize const&, WebCore::IntRect const&, bool, WebCore::ScrollbarMode, bool, WebCore::ScrollbarMode, bool)
18 0x270978c21 WebKit::WebFrameLoaderClient::transitionToCommittedForNewPage()
19 0x2bac1d710 WebCore::FrameLoader::transitionToCommitted(WebCore::CachedPage*)
20 0x2bac1c377 WebCore::FrameLoader::commitProvisionalLoad()
21 0x2bab8ad69 WebCore::DocumentLoader::commitIfReady()
22 0x2bab8b4dd WebCore::DocumentLoader::finishedLoading()
23 0x2bab989b1 WebCore::DocumentLoader::maybeLoadEmpty()
24 0x2bab98c16 WebCore::DocumentLoader::startLoadingMainResource()
25 0x2bac4359a WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&, WebCore::FormState*, WebCore::NavigationPolicyDecision, WebCore::AllowNavigationToInvalidURL)::$_11::operator()()
26 0x2bac43049 WTF::Detail::CallableWrapper<WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&, WebCore::FormState*, WebCore::NavigationPolicyDecision, WebCore::AllowNavigationToInvalidURL)::$_11, void>::call()
27 0x2b682bfb2 WTF::Function<void ()>::operator()() const
28 0x2b68892f0 WTF::CompletionHandler<void ()>::operator()()
29 0x2bac196b0 WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&, WebCore::FormState*, WebCore::NavigationPolicyDecision, WebCore::AllowNavigationToInvalidURL)
30 0x2bac3f9ec WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::RefPtr<WebCore::FormState, WTF::RawPtrTraits<WebCore::FormState>, WTF::DefaultRefDerefTraits<WebCore::FormState> >&&, WebCore::AllowNavigationToInvalidURL, WTF::CompletionHandler<void ()>&&)::$_8::operator()(WebCore::ResourceRequest const&, WTF::WeakPtr<WebCore::FormState, WTF::EmptyCounter>&&, WebCore::NavigationPolicyDecision)
31 0x2bac3f8bc WTF::Detail::CallableWrapper<WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::RefPtr<WebCore::FormState, WTF::RawPtrTraits<WebCore::FormState>, WTF::DefaultRefDerefTraits<WebCore::FormState> >&&, WebCore::AllowNavigationToInvalidURL, WTF::CompletionHandler<void ()>&&)::$_8, void, WebCore::ResourceRequest&&, WTF::WeakPtr<WebCore::FormState, WTF::EmptyCounter>&&, WebCore::NavigationPolicyDecision>::call(WebCore::ResourceRequest&&, WTF::WeakPtr<WebCore::FormState, WTF::EmptyCounter>&&, WebCore::NavigationPolicyDecision)
com.apple.WebKit.WebContent.Development terminated (pid 8767) for reason: crash
DIFF URL:
https://build.webkit.org/results/Apple-iPadOS-15-Simulator-Debug-WK2-Tests/253068@main%20(1956)/svg/z-index/group-with-zindex-crash-log.txt
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220803/1371fdcf/attachment.htm>
More information about the webkit-unassigned
mailing list