[Webkit-unassigned] [Bug 235276] New: REGRESSION(r286848): [Debug][WPE] fast/borders/rtl-border-05.html is crashing

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=235276

            Bug ID: 235276
           Summary: REGRESSION(r286848): [Debug][WPE]
                    fast/borders/rtl-border-05.html is crashing
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: dpino at igalia.com

Test fast/borders/rtl-border-05.html started crashing in r286848 with the following stacktrace:

STDERR: WARNING: trying to load platform resource 'missingImage'
STDERR: ASSERTION FAILED: m_hasValidTop && (m_hasPrecomputedMarginBefore || m_hasValidVerticalMargin)
STDERR: /app/webkit/Source/WebCore/layout/layouttree/LayoutBoxGeometry.h(198) : WebCore::LayoutUnit WebCore::Layout::BoxGeometry::logicalTop() const

Thread 1 (Thread 0x7f84496149c0 (LWP 29731)):
#0  0x00007f8452562866 in WTFCrash () at /app/webkit/WebKitBuild/Debug/lib/libWPEWebKit-1.1.so.0
#1  0x00007f844f280a14 in std::numeric_limits<unsigned int>::max() () at /app/webkit/WebKitBuild/Debug/lib/libWPEWebKit-1.1.so.0
#2  0x00007f8455073a11 in WebCore::Layout::BoxGeometry::logicalTop() const () at /app/webkit/WebKitBuild/Debug/lib/libWPEWebKit-1.1.so.0
#3  0x00007f84550730e8 in WebCore::Layout::BoxGeometry::borderBoxRect(WebCore::Layout::BoxGeometry const&) () at /app/webkit/WebKitBuild/Debug/lib/libWPEWebKit-1.1.so.0
#4  0x00007f8456af582b in WebCore::Layout::InlineDisplayContentBuilder::setInlineBoxGeometry(WebCore::Layout::Box const&, WebCore::Layout::InlineRect const&, bool) () at /app/webkit/WebKitBuild/Debug/lib/libWPEWebKit-1.1.so.0
#5  0x00007f8456af76ca in WebCore::Layout::InlineDisplayContentBuilder::adjustVisualGeometryForDisplayBox(unsigned long, float&, float, WebCore::Layout::DisplayBoxTree const&, WTF::Vector<WebCore::InlineDisplay::Box, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::Layout::LineBox const&, WTF::HashMap<WebCore::Layout:
#6  0x00007f8456af8682 in WebCore::Layout::InlineDisplayContentBuilder::processBidiContent(WebCore::Layout::LineBuilder::LineContent const&, WebCore::Layout::LineBox const&, WebCore::InlineDisplay::Line const&, WTF::Vector<WebCore::InlineDisplay::Box, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&)::{lambda()#2}::operator()()
#7  0x00007f8456af879f in WebCore::Layout::InlineDisplayContentBuilder::processBidiContent(WebCore::Layout::LineBuilder::LineContent const&, WebCore::Layout::LineBox const&, WebCore::InlineDisplay::Line const&, WTF::Vector<WebCore::InlineDisplay::Box, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&)::{lambda()#2}::operator()()
#8  0x00007f8456af89e6 in WebCore::Layout::InlineDisplayContentBuilder::processBidiContent(WebCore::Layout::LineBuilder::LineContent const&, WebCore::Layout::LineBox const&, WebCore::InlineDisplay::Line const&, WTF::Vector<WebCore::InlineDisplay::Box, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&) () at /app/webkit/WebKitBui
#9  0x00007f8456af45d0 in WebCore::Layout::InlineDisplayContentBuilder::build(WebCore::Layout::LineBuilder::LineContent const&, WebCore::Layout::LineBox const&, WebCore::InlineDisplay::Line const&, unsigned long) () at /app/webkit/WebKitBuild/Debug/lib/libWPEWebKit-1.1.so.0
#10 0x00007f8456ad2c74 in WebCore::Layout::InlineFormattingContext::computeGeometryForLineContent(WebCore::Layout::LineBuilder::LineContent const&) () at /app/webkit/WebKitBuild/Debug/lib/libWPEWebKit-1.1.so.0
#11 0x00007f8456ad0b75 in WebCore::Layout::InlineFormattingContext::lineLayout(WTF::Vector<WebCore::Layout::InlineItem, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::Layout::LineBuilder::InlineItemRange, WebCore::Layout::ConstraintsForInFlowContent const&) () at /app/webkit/WebKitBuild/Debug/lib/libWPEWebKit-1.1.so
#12 0x00007f8456ad0262 in WebCore::Layout::InlineFormattingContext::lineLayoutForIntergration(WebCore::Layout::ConstraintsForInFlowContent const&) () at /app/webkit/WebKitBuild/Debug/lib/libWPEWebKit-1.1.so.0
#13 0x00007f8455093b75 in WebCore::LayoutIntegration::LineLayout::layout() () at /app/webkit/WebKitBuild/Debug/lib/libWPEWebKit-1.1.so.0
#14 0x00007f8455a9f091 in WebCore::RenderBlockFlow::layoutModernLines(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&) () at /app/webkit/WebKitBuild/Debug/lib/libWPEWebKit-1.1.so.0
#15 0x00007f8455a90076 in WebCore::RenderBlockFlow::layoutInlineChildren(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&) () at /app/webkit/WebKitBuild/Debug/lib/libWPEWebKit-1.1.so.0
#16 0x00007f8455a8f3e7 in WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) () at /app/webkit/WebKitBuild/Debug/lib/libWPEWebKit-1.1.so.0
#17 0x00007f8455a7dc31 in WebCore::RenderBlock::layout() () at /app/webkit/WebKitBuild/Debug/lib/libWPEWebKit-1.1.so.0

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220116/72f6bee5/attachment.htm>