[Webkit-unassigned] [Bug 245745] New: New Test(254863 at main): [ iOS16 Debug ] svg/compositing/inline-svg-non-integer-position-display-(Layout tests) are constant crashes

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=245745

            Bug ID: 245745
           Summary: New Test(254863 at main): [ iOS16 Debug ]
                    svg/compositing/inline-svg-non-integer-position-displa
                    y-(Layout tests) are constant crashes
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: hhjalmarsson at apple.com

svg/compositing/inline-svg-non-integer-position-display-inline-composited.html
svg/compositing/inline-svg-non-integer-position-display-block-composited.html

Are two constant crashes on iOS16 Debug ToT and since introduced at 254863 at main.

HISTORY:
https://results.webkit.org/?suite=layout-tests&suite=layout-tests&test=svg%2Fcompositing%2Finline-svg-non-integer-position-display-block-composited.html&test=svg%2Fcompositing%2Finline-svg-non-integer-position-display-inline-composited.html

DIFF:
ASSERTION FAILED: is<Target>(source)
/OpenSource/WebKitBuild/Debug-iphonesimulator/usr/local/include/wtf/TypeCasts.h(79) : match_constness_t<Source, Target> &WTF::downcast(Source &) [Target = WebCore::RenderBoxModelObject, Source = WebCore::RenderObject]
1   0x7ff7b355d250 (null)
2   0x65478cc95 (null)
3   0x1f522add55 (null)
4   0x7ff7b355d250 (null)
5   0x7ff7b355d208 (null)
6   0x7ff7b355d220 (null)
7   0x6522adf1f WTFPrintBacktrace
8   0x7ff7b355d220 (null)
9   0x655174820 vtable for CrashLogPrintStream
10  0x1fb355d23c (null)
11  0x7ff7b355d250 (null)
12  0x7ff7b355d350 (null)
13  0x6522adebc WTFReportBacktrace
14  0x3000000008 (null)
15  0x21cfaf686a (null)
16  0x65237ca5f WTFGetBacktrace
17  0x6522adea3 WTFReportBacktrace
18  0x6522adfa9 WTFCrash
19  0x6522adfc9 WTFCrashWithSecurityImplication
20  0x6cac39b71 std::__1::conditional<std::is_const_v<WebCore::RenderObject>, std::__1::add_const<WebCore::RenderBoxModelObject>::type, std::__1::remove_const<WebCore::RenderBoxModelObject>::type>::type& WTF::downcast<WebCore::RenderBoxModelObject, WebCore::RenderObject>(WebCore::RenderObject&)
21  0x6ce2a7927 WebCore::RenderObject::destroy()
22  0x6ce2a7759 WebCore::RenderObjectDeleter::operator()(WebCore::RenderObject*) const
23  0x6ce19203c std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>::reset(WebCore::RenderObject*)
24  0x6ce191fd9 std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>::~unique_ptr()
25  0x6ce165955 std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>::~unique_ptr()
26  0x6ce497335 WebCore::RenderTreeBuilder::destroy(WebCore::RenderObject&, WebCore::RenderTreeBuilder::CanCollapseAnonymousBlock)
27  0x6ce49d453 WebCore::RenderTreeBuilder::destroyAndCleanUpAnonymousWrappers(WebCore::RenderObject&)
28  0x6ce4bc821 WebCore::RenderTreeUpdater::tearDownRenderers(WebCore::Element&, WebCore::RenderTreeUpdater::TeardownType, WebCore::RenderTreeBuilder&)::$_6::operator()(unsigned int) const
29  0x6ce4bb375 WebCore::RenderTreeUpdater::tearDownRenderers(WebCore::Element&, WebCore::RenderTreeUpdater::TeardownType, WebCore::RenderTreeBuilder&)
30  0x6ce4bc4ae WebCore::RenderTreeUpdater::tearDownRenderers(WebCore::Element&)
31  0x6cc95c912 WebCore::Document::destroyRenderTree()
com.apple.WebKit.WebContent.Development terminated (pid 49397) for reason: crash

BUILD URL:
https://build.webkit.org/results/Apple-iPadOS-16-Simulator-Debug-WK2-Tests/254907@main%20(56)/results.html

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220927/336eb82e/attachment.htm>