[Webkit-unassigned] [Bug 243627] New: ASSERTION FAILED !rect.isEmpty() in WebCore::GraphicsContextCairo::drawRect

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=243627

            Bug ID: 243627
           Summary: ASSERTION FAILED !rect.isEmpty() in
                    WebCore::GraphicsContextCairo::drawRect
           Product: WebKit
           Version: WebKit Local Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: hodovan at inf.u-szeged.hu

Created attachment 461443

  --> https://bugs.webkit.org/attachment.cgi?id=461443&action=review

Test

WebKit revision: r295779
OS: Linux-5.4.0-122-generic-x86_64-with-glibc2.29
Build command: Tools/Scripts/build-webkit --gtk --debug
SUT: WebKitTestRunner, MiniBrowser
Fuzzer: Grammarinator (https://github.com/renatahodovan/grammarinator)

Test case:

<style>
* {
  border-inline-end-width: inherit;
  inline-size: 7%;
  border-inline-start-style: inherit;
</style>
<select></select>

Backtrace:

ASSERTION FAILED: !rect.isEmpty()
/app/webkit/Source/WebCore/platform/graphics/cairo/GraphicsContextCairo.cpp(141) : virtual void WebCore::GraphicsContextCairo::drawRect(const WebCore::FloatRect&, float)
1   0x7f0e930b55e1 WTFCrash
2   0x7f0e968a8586 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xe3f586) [0x7f0e968a8586]
3   0x7f0e9bc73a63 WebCore::GraphicsContextCairo::drawRect(WebCore::FloatRect const&, float)
4   0x7f0e9bfaea2f /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x6545a2f) [0x7f0e9bfaea2f]
5   0x7f0e9bfabc7a /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x6542c7a) [0x7f0e9bfabc7a]
6   0x7f0e9bfac542 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x6543542) [0x7f0e9bfac542]
7   0x7f0e9bfac702 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x6543702) [0x7f0e9bfac702]
8   0x7f0e9bfade7b /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x6544e7b) [0x7f0e9bfade7b]
9   0x7f0e9bf8ba34 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x6522a34) [0x7f0e9bf8ba34]
10  0x7f0e9bf61f58 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x64f8f58) [0x7f0e9bf61f58]
11  0x7f0e9bf61426 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x64f8426) [0x7f0e9bf61426]
12  0x7f0e9c0a42a8 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x663b2a8) [0x7f0e9c0a42a8]
13  0x7f0e9c0a21e8 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x66391e8) [0x7f0e9c0a21e8]
14  0x7f0e9c0a06a3 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x66376a3) [0x7f0e9c0a06a3]
15  0x7f0e9c0a04d9 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x66374d9) [0x7f0e9c0a04d9]
16  0x7f0e9c09fd9b /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x6636d9b) [0x7f0e9c09fd9b]
17  0x7f0e9c0a2e87 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x6639e87) [0x7f0e9c0a2e87]
18  0x7f0e9c0a23b8 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x66393b8) [0x7f0e9c0a23b8]
19  0x7f0e9c0a06a3 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x66376a3) [0x7f0e9c0a06a3]
20  0x7f0e9c0a04d9 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x66374d9) [0x7f0e9c0a04d9]
21  0x7f0e9c09fd9b /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x6636d9b) [0x7f0e9c09fd9b]
22  0x7f0e9c0a2e87 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x6639e87) [0x7f0e9c0a2e87]
23  0x7f0e9c0a23b8 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x66393b8) [0x7f0e9c0a23b8]
24  0x7f0e9c0a06a3 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x66376a3) [0x7f0e9c0a06a3]
25  0x7f0e9c0a04d9 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x66374d9) [0x7f0e9c0a04d9]
26  0x7f0e9c09fd9b /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x6636d9b) [0x7f0e9c09fd9b]
27  0x7f0e9c0a2e87 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x6639e87) [0x7f0e9c0a2e87]
28  0x7f0e9c0a23b8 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x66393b8) [0x7f0e9c0a23b8]
29  0x7f0e9c0a06a3 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x66376a3) [0x7f0e9c0a06a3]
30  0x7f0e9c0a04d9 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x66374d9) [0x7f0e9c0a04d9]
31  0x7f0e9c09fd9b /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x6636d9b) [0x7f0e9c09fd9b]
WebKitWebProcess terminated (pid 24) for reason: crash
#CRASHED - WebKitWebProcess (pid 24)
LEAK: 1 WebProcessPool
LEAK: 1 WebPageProxy

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220806/6885f78b/attachment.htm>