[Webkit-unassigned] [Bug 262244] New: ASSERTION FAILED: containerBlock.canHaveBoxInfoInFragment() /app/webkit/Source/WebCore/rendering/RenderBox.cpp(4445)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=262244

            Bug ID: 262244
           Summary: ASSERTION FAILED:
                    containerBlock.canHaveBoxInfoInFragment()
                    /app/webkit/Source/WebCore/rendering/RenderBox.cpp(444
                    5)
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: 1319794503 at qq.com
                CC: bfulgham at webkit.org, simon.fraser at apple.com,
                    zalan at apple.com

Created attachment 467920

  --> https://bugs.webkit.org/attachment.cgi?id=467920&action=review

testcase to trigger the crash

version: webkitgtk 2.42.0 with asan and debug on linux
ASSERTION FAILED: containerBlock.canHaveBoxInfoInFragment()
/app/webkit/Source/WebCore/rendering/RenderBox.cpp(4445) : void WebCore::RenderBox::computePositionedLogicalHeight(LogicalExtentComputedValues&) const
1   0x7f3b644ad3f3 WTFCrash
2   0x7f3b6e56fda9 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x8d5eda9) [0x7f3b6e56fda9]
3   0x7f3b7489e6f1 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf08d6f1) [0x7f3b7489e6f1]
4   0x7f3b748972a0 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf0862a0) [0x7f3b748972a0]
5   0x7f3b74897029 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf086029) [0x7f3b74897029]
6   0x7f3b7491dd9a /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf10cd9a) [0x7f3b7491dd9a]
7   0x7f3b74919189 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf108189) [0x7f3b74919189]
8   0x7f3b7485e0b3 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf04d0b3) [0x7f3b7485e0b3]
9   0x7f3b73b037b1 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xe2f27b1) [0x7f3b73b037b1]
10  0x7f3b7485ff6a /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf04ef6a) [0x7f3b7485ff6a]
11  0x7f3b748601a9 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf04f1a9) [0x7f3b748601a9]
12  0x7f3b74a6d806 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf25c806) [0x7f3b74a6d806]
13  0x7f3b73b037b1 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xe2f27b1) [0x7f3b73b037b1]
14  0x7f3b7481036f /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xefff36f) [0x7f3b7481036f]
15  0x7f3b74872a20 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf061a20) [0x7f3b74872a20]
16  0x7f3b74871a83 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf060a83) [0x7f3b74871a83]
17  0x7f3b74870a39 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf05fa39) [0x7f3b74870a39]
18  0x7f3b7485e0b3 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf04d0b3) [0x7f3b7485e0b3]
19  0x7f3b74872de9 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf061de9) [0x7f3b74872de9]
20  0x7f3b7487208b /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf06108b) [0x7f3b7487208b]
21  0x7f3b74871ac2 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf060ac2) [0x7f3b74871ac2]
22  0x7f3b74870a39 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf05fa39) [0x7f3b74870a39]
23  0x7f3b7485e0b3 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf04d0b3) [0x7f3b7485e0b3]
24  0x7f3b749406a9 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf12f6a9) [0x7f3b749406a9]
25  0x7f3b74a2e4ef /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf21d4ef) [0x7f3b74a2e4ef]
26  0x7f3b748849ec /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf0739ec) [0x7f3b748849ec]
27  0x7f3b74871f3f /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf060f3f) [0x7f3b74871f3f]
28  0x7f3b74871ac2 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf060ac2) [0x7f3b74871ac2]
29  0x7f3b74870a39 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf05fa39) [0x7f3b74870a39]
30  0x7f3b7485e0b3 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf04d0b3) [0x7f3b7485e0b3]
31  0x7f3b74872de9 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf061de9) [0x7f3b74872de9]

** (MiniBrowser:17): WARNING **: 04:27:45.114: WebProcess CRASHED

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230928/5beed7f5/attachment.htm>