<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>118269</bug_id>
          
          <creation_ts>2013-07-01 17:46:53 -0700</creation_ts>
          <short_desc>100% repro assertion failure with testcase (m_repaintRect == renderer()-&gt;clippedOverflowRectForRepaint(renderer()-&gt;containerForRepaint()))</short_desc>
          <delta_ts>2026-01-05 10:06:18 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Layout and Rendering</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>WONTFIX</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Tim Horton">thorton</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>allan.jensen</cc>
    
    <cc>jbedard</cc>
    
    <cc>sabouhallawa</cc>
    
    <cc>sam</cc>
    
    <cc>simon.fraser</cc>
    
    <cc>tobias.netzel</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>905184</commentid>
    <comment_count>0</comment_count>
    <who name="Tim Horton">thorton</who>
    <bug_when>2013-07-01 17:46:53 -0700</bug_when>
    <thetext>The attached testcase reproduces this assertion 100% of the time in DumpRenderTree, but (not yet) in Safari or Minibrowser. Similar to https://bugs.webkit.org/show_bug.cgi?id=103432.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>905186</commentid>
    <comment_count>1</comment_count>
      <attachid>205847</attachid>
    <who name="Tim Horton">thorton</who>
    <bug_when>2013-07-01 17:47:19 -0700</bug_when>
    <thetext>Created attachment 205847
testcase</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>905197</commentid>
    <comment_count>2</comment_count>
    <who name="Tim Horton">thorton</who>
    <bug_when>2013-07-01 18:28:36 -0700</bug_when>
    <thetext>I’m going to land this testcase with https://bugs.webkit.org/show_bug.cgi?id=118176.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>905838</commentid>
    <comment_count>3</comment_count>
    <who name="Allan Sandfeld Jensen">allan.jensen</who>
    <bug_when>2013-07-03 06:01:40 -0700</bug_when>
    <thetext>(In reply to comment #2)
&gt; I’m going to land this testcase with https://bugs.webkit.org/show_bug.cgi?id=118176.

If the test-case is landed, does that mean the bug is fixed or is the test now partially failing?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>905888</commentid>
    <comment_count>4</comment_count>
    <who name="Tim Horton">thorton</who>
    <bug_when>2013-07-03 09:34:02 -0700</bug_when>
    <thetext>(In reply to comment #3)
&gt; (In reply to comment #2)
&gt; &gt; I’m going to land this testcase with https://bugs.webkit.org/show_bug.cgi?id=118176.
&gt; 
&gt; If the test-case is landed, does that mean the bug is fixed or is the test now partially failing?

Partially skipped.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>905958</commentid>
    <comment_count>5</comment_count>
    <who name="Tobias Netzel">tobias.netzel</who>
    <bug_when>2013-07-03 13:05:36 -0700</bug_when>
    <thetext>I can reproduce this in both Safari 5.0.6 and Minibrowser WK1 by doing the following (you&apos;ll need a google account for this):

1. go to [http://code.google.com/p/chromium/issues/detail?id=244592]
2. log in
3. scroll down and click in the box to add new comment, so that the text input cursor is blinking in that box
4. scroll up

Here the crash upon scrolling is &quot;enabled&quot; by the fact of having clicked in the box. Clicking inside the box and then clicking outside of it doesn&apos;t &quot;disable&quot; it.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>908491</commentid>
    <comment_count>6</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2013-07-15 12:57:31 -0700</bug_when>
    <thetext>Looks like this causes heavily broken rendering in release mode.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>908504</commentid>
    <comment_count>7</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2013-07-15 14:23:30 -0700</bug_when>
    <thetext>To clarify, I know that this test renders wrong in release builds (tracked internally at Apple as &lt;rdar://problem/14391146&gt;), I don&apos;t know how closely that&apos;s related to the assertion failure.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1615756</commentid>
    <comment_count>8</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2020-02-06 13:17:39 -0800</bug_when>
    <thetext>*** Bug 152722 has been marked as a duplicate of this bug. ***</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2169297</commentid>
    <comment_count>9</comment_count>
    <who name="Jonathan Bedard">jbedard</who>
    <bug_when>2026-01-05 10:05:14 -0800</bug_when>
    <thetext>Closing old WebKitLegacy bugs as we cut-back WebKitLegacy testing. See https://bugs.webkit.org/show_bug.cgi?id=304436</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>205847</attachid>
            <date>2013-07-01 17:47:19 -0700</date>
            <delta_ts>2013-07-01 17:47:19 -0700</delta_ts>
            <desc>testcase</desc>
            <filename>fixed-position-flipped-writing-mode.html</filename>
            <type>text/html</type>
            <size>1036</size>
            <attacher name="Tim Horton">thorton</attacher>
            
              <data encoding="base64">PCFET0NUWVBFIGh0bWw+Cgo8aHRtbD4KPGhlYWQ+CiAgICA8dGl0bGU+SXQgc2hvdWxkIGJlIHBv
c3NpYmxlIHRvIGNvdmVyIHRoZSByZWQgYm94IHdpdGggdGhlIGdyZWVuIGJveCBieSBzY3JvbGxp
bmcuPC90aXRsZT4KICAgIDxzdHlsZT4KICAgIGh0bWwgewogICAgICAgIGRpcmVjdGlvbjogcnRs
OwogICAgfQoKICAgIGJvZHkgewogICAgICAgIHdpZHRoOiA1MDAwcHg7CiAgICB9CgogICAgLmJv
eCB7CiAgICAgICAgd2lkdGg6IDIwMHB4OwogICAgICAgIGhlaWdodDogMTAwJTsKICAgICAgICB0
b3A6IDBweDsKICAgIH0KCiAgICAjYmFja2dyb3VuZCB7CiAgICAgICAgcG9zaXRpb246IGFic29s
dXRlOwogICAgICAgIGJhY2tncm91bmQtY29sb3I6IHJlZDsKICAgICAgICByaWdodDogMTAwMHB4
OwogICAgfQoKICAgICNjb3ZlciB7CiAgICAgICAgcG9zaXRpb246IGZpeGVkOwogICAgICAgIGJh
Y2tncm91bmQtY29sb3I6IGdyZWVuOwogICAgICAgIGxlZnQ6IDUwJTsKICAgIH0KCiAgICAjbGF5
ZXJzIHsKICAgICAgICBvcGFjaXR5OiAwOwogICAgfQogICAgPC9zdHlsZT4KICAgIDxzY3JpcHQ+
CiAgICBpZiAod2luZG93LnRlc3RSdW5uZXIpCiAgICAgICAgdGVzdFJ1bm5lci5kdW1wQXNUZXh0
KHRydWUpOwoKICAgIGZ1bmN0aW9uIHJ1blRlc3QoKQogICAgewogICAgICAgIGlmICh3aW5kb3cu
dGVzdFJ1bm5lcikKICAgICAgICAgICAgZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ2xheWVycycp
LmlubmVyVGV4dCA9IHdpbmRvdy5pbnRlcm5hbHMubGF5ZXJUcmVlQXNUZXh0KGRvY3VtZW50KTsK
ICAgIH0KCiAgICB3aW5kb3cuYWRkRXZlbnRMaXN0ZW5lcignbG9hZCcsIHJ1blRlc3QsIGZhbHNl
KTsKICAgIDwvc2NyaXB0Pgo8L2hlYWQ+Cjxib2R5PgogICAgPGRpdiBpZD0iYmFja2dyb3VuZCIg
Y2xhc3M9ImJveCI+PC9kaXY+CiAgICA8ZGl2IGlkPSJjb3ZlciIgY2xhc3M9ImJveCI+PC9kaXY+
CgogICAgPHByZSBpZD0ibGF5ZXJzIj5MYXllciB0cmVlIGdvZXMgaGVyZS48L3ByZT4KPC9ib2R5
Pgo8L2h0bWw+Cg==
</data>

          </attachment>
      

    </bug>

</bugzilla>