[Webkit-unassigned] [Bug 235570] New: ASSERTION FAILED: view().frameView().layoutContext().layoutDeltaMatches(oldLayoutDelta)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=235570

            Bug ID: 235570
           Summary: ASSERTION FAILED:
                    view().frameView().layoutContext().layoutDeltaMatches(
                    oldLayoutDelta)
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: alset0326 at gmail.com

Created attachment 449912

  --> https://bugs.webkit.org/attachment.cgi?id=449912&action=review

the html trigger the crash

1. build a debug webkit
2. open html
3. crash

ASSERTION FAILED: view().frameView().layoutContext().layoutDeltaMatches(oldLayoutDelta)
../../Source/WebCore/rendering/RenderBlockFlow.cpp(850) : void WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
1   0x7ff56d9bc964 WTFReportBacktrace
2   0x7ff56d9bcc01 WTFCrash
3   0x7ff5874b3ba1 WTF::CrashOnOverflow::overflowed()
4   0x7ff590cc79c9 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
5   0x7ff590cc5c96 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&)
6   0x7ff590cc3fa4 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
7   0x7ff590bed8ab WebCore::RenderBlock::layout()
8   0x7ff590b30e9e WebCore::RenderElement::layoutIfNeeded()
9   0x7ff590e2d966 WebCore::RenderFlexibleBox::layoutAndPlaceChildren(WebCore::LayoutUnit&, WTF::Vector<WebCore::FlexItem, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit, bool, WTF::Vector<WebCore::RenderFlexibleBox::LineContext, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit)
10  0x7ff590e2360a WebCore::RenderFlexibleBox::layoutFlexItems(bool)
11  0x7ff590e1a3e3 WebCore::RenderFlexibleBox::layoutBlock(bool, WebCore::LayoutUnit)
12  0x7ff590bed8ab WebCore::RenderBlock::layout()
13  0x7ff590cc6a40 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
14  0x7ff590cc5c96 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&)
15  0x7ff590cc3fa4 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
16  0x7ff590bed8ab WebCore::RenderBlock::layout()
17  0x7ff590cc6a40 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
18  0x7ff590cc5c96 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&)
19  0x7ff590cc3fa4 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
20  0x7ff590bed8ab WebCore::RenderBlock::layout()
21  0x7ff590b30e9e WebCore::RenderElement::layoutIfNeeded()
22  0x7ff590bcb8b4 WebCore::LegacyLineLayout::layoutLineBoxes(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
23  0x7ff590cc601a WebCore::RenderBlockFlow::layoutInlineChildren(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
24  0x7ff590cc3f80 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
25  0x7ff590bed8ab WebCore::RenderBlock::layout()
26  0x7ff590cc6a40 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
27  0x7ff590cc5c96 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&)
28  0x7ff590cc3fa4 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
29  0x7ff590bed8ab WebCore::RenderBlock::layout()
30  0x7ff590cc6a40 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
31  0x7ff590cc5c96 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220125/27a985ea/attachment.htm>