[Webkit-unassigned] [Bug 262247] New: ASSERTION FAILED: rendererHasOutlineAutoAncestor || originalRenderer->outlineStyleForRepaint().outlineStyleIsAuto() == OutlineIsAuto::On || (is<RenderBoxModelObject>(*renderer) && downcast<RenderBoxModelObject>(*renderer).isContinuation())

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=262247

            Bug ID: 262247
           Summary: ASSERTION FAILED: rendererHasOutlineAutoAncestor ||
                    originalRenderer->outlineStyleForRepaint().outlineStyl
                    eIsAuto() == OutlineIsAuto::On ||
                    (is<RenderBoxModelObject>(*renderer) &&
                    downcast<RenderBoxModelObject>(*renderer).isContinuati
                    on())
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: 1319794503 at qq.com
                CC: bfulgham at webkit.org, simon.fraser at apple.com,
                    zalan at apple.com

Created attachment 467923

  --> https://bugs.webkit.org/attachment.cgi?id=467923&action=review

testcase to trigger the crash

ASSERTION FAILED: rendererHasOutlineAutoAncestor || originalRenderer->outlineStyleForRepaint().outlineStyleIsAuto() == OutlineIsAuto::On || (is<RenderBoxModelObject>(*renderer) && downcast<RenderBoxModelObject>(*renderer).isContinuation())
/app/webkit/Source/WebCore/rendering/RenderObject.cpp(926) : void WebCore::RenderObject::propagateRepaintToParentWithOutlineAutoIfNeeded(const WebCore::RenderLayerModelObject&, const WebCore::LayoutRect&) const
1   0x7f4eb70a93f3 WTFCrash
2   0x7f4ec116bda9 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0x8d5eda9) [0x7f4ec116bda9]
3   0x7f4ec764028c /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf23328c) [0x7f4ec764028c]
4   0x7f4ec764059c /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf23359c) [0x7f4ec764059c]
5   0x7f4ec7640a8b /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf233a8b) [0x7f4ec7640a8b]
6   0x7f4ec7640b65 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf233b65) [0x7f4ec7640b65]
7   0x7f4ec78b677a /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf4a977a) [0x7f4ec78b677a]
8   0x7f4ec78b3aba /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf4a6aba) [0x7f4ec78b3aba]
9   0x7f4ec78b2405 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf4a5405) [0x7f4ec78b2405]
10  0x7f4ec78b62c7 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf4a92c7) [0x7f4ec78b62c7]
11  0x7f4ec78d4fa2 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf4c7fa2) [0x7f4ec78d4fa2]
12  0x7f4ec78d51f9 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf4c81f9) [0x7f4ec78d51f9]
13  0x7f4ec78d4b27 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xf4c7b27) [0x7f4ec78d4b27]
14  0x7f4ec5a2cbb1 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xd61fbb1) [0x7f4ec5a2cbb1]
15  0x7f4ec5a2f1d7 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xd6221d7) [0x7f4ec5a2f1d7]
16  0x7f4ec5a37600 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xd62a600) [0x7f4ec5a37600]
17  0x7f4ec5a2efa5 WebCore::ContainerNode::removeChild(WebCore::Node&)
18  0x7f4ec5c55bc0 WebCore::Node::removeChild(WebCore::Node&)
19  0x7f4ec3d0f522 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xb902522) [0x7f4ec3d0f522]
20  0x7f4ec3d1b5c3 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xb90e5c3) [0x7f4ec3d1b5c3]
21  0x7f4ec3d0f7e3 /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xb9027e3) [0x7f4ec3d0f7e3]
22  0x7f4ec3d1b8be /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xb90e8be) [0x7f4ec3d1b8be]
23  0x7f4ec3d0f86c /app/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.1.so.0(+0xb90286c) [0x7f4ec3d0f86c]
24  0x7f4e611241b8 [0x7f4e611241b8]

** (MiniBrowser:17): WARNING **: 06:26:09.765: WebProcess CRASHED

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230928/19c816a9/attachment.htm>