[Webkit-unassigned] [Bug 271931] New: [ iOS Debug ] imported/w3c/web-platform-tests/css/css-text/text-transform/text-transform-upperlower-105.html is a consistent crash

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=271931

            Bug ID: 271931
           Summary: [ iOS Debug ]
                    imported/w3c/web-platform-tests/css/css-text/text-tran
                    sform/text-transform-upperlower-105.html is a
                    consistent crash
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: j_stfleur at apple.com

Description:
imported/w3c/web-platform-tests/css/css-text/text-transform/text-transform-upperlower-105.html

Is a consistent crash after SDK update from 21C62 to 21E213 on iOS Simulator debug 


History:
https://results.webkit.org/?suite=layout-tests&test=imported%2Fw3c%2Fweb-platform-tests%2Fcss%2Fcss-text%2Ftext-transform%2Ftext-transform-upperlower-105.html&platform=ios&style=debug

Diff/Image Diff/Crash Log:
stdout:
layer at (0,0) size 800x600
  RenderView at (0,0) size 800x600
layer at (0,0) size 800x80
  RenderBlock {HTML} at (0,0) size 800x80
    RenderBody {BODY} at (8,16) size 784x56
      RenderBlock {P} at (0,0) size 784x20
        RenderText {#text} at (0,0) size 691x19
          text run at (0,0) width 691: "The test passes if you see no red below (when you select the text below you can select the whole \"SS\" text)."
      RenderBlock (anonymous) at (0,36) size 784x20
        RenderInline {SPAN} at (0,0) size 18x19 [color=#FFFFFF] [bgcolor=#FF0000]
          RenderText {#text} at (0,0) size 18x19
            text run at (0,0) width 18: "SS"
        RenderText {#text} at (0,0) size 0x0
        RenderText {#text} at (0,0) size 0x0
selection start: position 0 of child 0 {#text} of child 2 {SPAN} of body
selection end:   position 2 of child 0 {#text} of child 2 {SPAN} of body

stderr:
ASSERTION FAILED: string.length() >= static_cast<unsigned>(textEndOffset)
/Volumes/Data/worker/Apple-iOS-17-Simulator-Debug-Build/build/Source/WebCore/editing/TextIterator.cpp(1142) : void WebCore::TextIterator::emitText(Text &, RenderText &, int, int)
com.apple.WebKit.WebContent.Development terminated (pid 6432) for reason: crash
#CRASHED - com.apple.WebKit.WebContent.Development (pid 6432)
LEAK: 18 WebProcessPool
LEAK: 19 WebPageProxy

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240330/f9631251/attachment.htm>