[Webkit-unassigned] [Bug 258135] REGRESSION(264701 at main): wpt/css/CSS2/normal-flow/crashtests/block-in-inline-ax-crash.html

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Jun 15 09:04:01 PDT 2023


https://bugs.webkit.org/show_bug.cgi?id=258135

--- Comment #2 from Chris Dumez <cdumez at apple.com> ---
This is a crash test, not a correctness test.

264701 at main aligned our behavior with Firefox when it comes to timer ordering (Chrome still has the bug). As a result, it is a little surprising Firefox is passing this crash test and we're not. I looked into it and Chrome & Firefox's output is very different. Chrome runs the whole test without JS exception and produces a large output. Firefox produces a much smaller output because they throw exceptions.

We have Firefox's timer ordering but don't end up throwing exception. As a result, the test ends up in an infinite loop and the WebProcess hangs.

I wouldn't say this is a true regression given that this isn't a correctness and given that our new timer ordering is correct.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230615/d578ef92/attachment.htm>


More information about the webkit-unassigned mailing list