[Webkit-unassigned] [Bug 272127] REGRESSION(277009 at main) fast/text/remove-renderer-and-select-crash.html makes a subsequent test crash: RELEASE_ASSERT(index != notFound) in LayoutIntegration::BoxTree::rendererForLayoutBox

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=272127

--- Comment #1 from Fujii Hironori <Hironori.Fujii at sony.com> ---
This isn't a Release build specfic problem, but Debug build can't reproduce this due to another problem bug#272123.

By commenting out, it's reproducible with Debug build.

diff --git a/Source/WebCore/page/LocalFrameViewLayoutContext.cpp b/Source/WebCore/page/LocalFrameViewLayoutContext.cpp
index 7c1b8dfe35e1..e9e189be5d25 100644
--- a/Source/WebCore/page/LocalFrameViewLayoutContext.cpp
+++ b/Source/WebCore/page/LocalFrameViewLayoutContext.cpp
@@ -232,7 +232,7 @@ void LocalFrameViewLayoutContext::performLayout()
         SubtreeLayoutStateMaintainer subtreeLayoutStateMaintainer(subtreeLayoutRoot());
         RenderView::RepaintRegionAccumulator repaintRegionAccumulator(renderView());
 #ifndef NDEBUG
-        RenderTreeNeedsLayoutChecker checker(*renderView());
+        //RenderTreeNeedsLayoutChecker checker(*renderView());
 #endif
         layoutRoot->layout();
         ++m_layoutCount;


> python .\Tools\Scripts\run-webkit-tests --wincairo --debug --no-retry --iter=2 fast/text/remove-renderer-and-select-crash.html

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240404/b604e556/attachment.htm>