[Webkit-unassigned] [Bug 265537] New: REGRESSION: [Win] ASSERTION FAILED: m_repaintRectsValid => m_repaintRects.clippedOverflowRect == renderer().clippedOverflowRectForRepaint(renderer().containerForRepaint().renderer.get())

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=265537

            Bug ID: 265537
           Summary: REGRESSION: [Win] ASSERTION FAILED:
                    m_repaintRectsValid =>
                    m_repaintRects.clippedOverflowRect ==
                    renderer().clippedOverflowRectForRepaint(renderer().co
                    ntainerForRepaint().renderer.get())
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Compositing
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: Hironori.Fujii at sony.com
                CC: simon.fraser at apple.com

271260 at main: good
271263 at main: bad

Buildbot: builder WinCairo-64-bit-Debug-Tests build 21402 : 271263 at main
https://build.webkit.org/#/builders/727/builds/21402

Regressions: Unexpected crashes (3)
  compositing/geometry/fixed-position-composited-page-scale-scroll.html [ Crash ]
  fast/visual-viewport/zoomed-scroll-into-view-fixed.html [ Crash ]
  fast/visual-viewport/zoomed-scroll-to-anchor-in-position-fixed.html [ Crash ]


https://build.webkit.org/results/WinCairo-64-bit-Debug-Tests/271263@main%20(21402)/compositing/geometry/fixed-position-composited-page-scale-scroll-stderr.txt

ASSERTION FAILED: m_repaintRectsValid => m_repaintRects.clippedOverflowRect == renderer().clippedOverflowRectForRepaint(renderer().containerForRepaint().renderer.get())
C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\rendering/RenderLayer.cpp(1275) : recursiveUpdateLayerPositionsAfterScroll
1   00007FF8F5DF1B99 WTFCrash
2   00007FF8DC981EB0 WebCore::RenderLayer::recursiveUpdateLayerPositionsAfterScroll
3   00007FF8DC9821E3 WebCore::RenderLayer::updateLayerPositionsAfterDocumentScroll
4   00007FF8DC19B645 WebCore::LocalFrameView::updateLayerPositionsAfterScrolling
5   00007FF8DC39AC21 WebCore::ScrollView::completeUpdatesAfterScrollTo
6   00007FF8DC39AF07 WebCore::ScrollView::scrollTo
7   00007FF8DC1A1274 WebCore::LocalFrameView::scrollTo
8   00007FF8DC39A735 WebCore::ScrollView::setScrollOffset
9   00007FF8DC3A1B9E WebCore::ScrollableArea::scrollPositionChanged
10  00007FF8DC3A20E4 WebCore::ScrollableArea::setScrollPositionFromAnimation
11  00007FF8DC38B5F9 WebCore::ScrollAnimator::notifyPositionChanged
12  00007FF8DC38AC45 WebCore::ScrollAnimator::setCurrentPosition
13  00007FF8DC38AB9C WebCore::ScrollAnimator::scrollToPositionWithoutAnimation
14  00007FF8DC3A153B WebCore::ScrollableArea::scrollToPositionWithoutAnimation
15  00007FF8DC39BD66 WebCore::ScrollView::updateScrollbars::<lambda_0>::operator()
16  00007FF8DC398B84 WebCore::ScrollView::updateScrollbars
17  00007FF8DC39B56B WebCore::ScrollView::setScrollPosition
18  00007FF8DC18B214 WebCore::LocalFrameView::setScrollPosition
19  00007FF8DC398F7B WebCore::ScrollView::setContentsScrollPosition
20  00007FF8DC17E6A3 WebCore::LocalDOMWindow::scrollTo
21  00007FF8DC17E777 WebCore::LocalDOMWindow::scrollTo
22  00007FF8D998DC0C WebCore::jsLocalDOMWindowInstanceFunction_scrollTo2Body::<lambda_1>::operator()
23  00007FF8D998DBBF WebCore::toJS<WebCore::IDLUndefined,`lambda at C:\BW\WinCairo-64-bit-Debug-Build\build\WebKitBuild\Debug\WebCore\DerivedSources\JSLocalDOMWindow.cpp:27186:5'>
24  00007FF8D998DA4C WebCore::jsLocalDOMWindowInstanceFunction_scrollTo2Body
25  00007FF8D998D382 WebCore::jsLocalDOMWindowInstanceFunction_scrollToOverloadDispatcher
26  00007FF8D998D110 WebCore::IDLOperation<WebCore::JSLocalDOMWindow>::call<&WebCore::jsLocalDOMWindowInstanceFunction_scrollToOverloadDispatcher,0>
27  00007FF8D997DDA4 WebCore::jsLocalDOMWindowInstanceFunction_scrollTo
28  00000207B11F115E (null)
ERROR: 0000019D0029DED0 - [PID=5684] WebProcessProxy::didClose (web process crash)
C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\UIProcess/WebProcessProxy.cpp(1098) : didClose
ERROR: 0000019D0029DED0 - [PID=5684] WebProcessProxy::processDidTerminateOrFailedToLaunch: reason=Crash
C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\UIProcess/WebProcessProxy.cpp(1106) : processDidTerminateOrFailedToLaunch
ERROR: 0000019D001CA240 - [pageProxyID=181, webPageID=182, PID=5684] WebPageProxy::processDidTerminate: (pid 5684), reason=Crash
C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\UIProcess/WebPageProxy.cpp(9138) : resetStateAfterProcessTermination
ERROR: 0000019D001CA240 - [pageProxyID=181, webPageID=182, PID=5684] WebPageProxy::dispatchProcessDidTerminate: reason=Crash
C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\UIProcess/WebPageProxy.cpp(9196) : dispatchProcessDidTerminate
WebProcess terminated (pid 5684) for reason: crash

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20231129/b9ab738a/attachment-0001.htm>