123486 2013-10-29 19:20:49 -0700 ASSERTION FAILED: m_repaintRect == renderer().clippedOverflowRectForRepaint(renderer().containerForRepaint()) 2013-11-13 11:17:11 -0800 1 1 1 Unclassified WebKit Layout and Rendering 528+ (Nightly build) Unspecified Unspecified RESOLVED DUPLICATE 103432 InRadar P2 Normal --- 1 rniwa webkit-unassigned bdakin dino simon.fraser thorton webkit-bug-importer oldest_to_newest 944728 0 rniwa 2013-10-29 19:20:49 -0700 Reproduction steps: 1. Log into Facebook.com 2. Open an image people posted on timeline ASSERTION FAILED: m_repaintRect == renderer().clippedOverflowRectForRepaint(renderer().containerForRepaint()) /Volumes/Data/webkit2/Source/WebCore/rendering/RenderLayer.cpp(788) : void WebCore::RenderLayer::updateLayerPositionsAfterScroll(WebCore::RenderGeometryMap *, UpdateLayerPositionsAfterScrollFlags) 1 0x10eea39d0 WTFCrash 2 0x11122133b WebCore::RenderLayer::updateLayerPositionsAfterScroll(WebCore::RenderGeometryMap*, unsigned int) 3 0x111221419 WebCore::RenderLayer::updateLayerPositionsAfterScroll(WebCore::RenderGeometryMap*, unsigned int) 4 0x1112210c1 WebCore::RenderLayer::updateLayerPositionsAfterDocumentScroll() 5 0x110565dbf WebCore::FrameView::repaintFixedElementsAfterScrolling() 6 0x1114aa9b5 WebCore::ScrollView::scrollTo(WebCore::IntSize const&) 7 0x11056884e WebCore::FrameView::scrollTo(WebCore::IntSize const&) 8 0x1114aa8bf WebCore::ScrollView::setScrollOffset(WebCore::IntPoint const&) 9 0x1114aa8ff non-virtual thunk to WebCore::ScrollView::setScrollOffset(WebCore::IntPoint const&) 10 0x11146f780 WebCore::ScrollableArea::scrollPositionChanged(WebCore::IntPoint const&) 11 0x11146f6ef WebCore::ScrollableArea::notifyScrollPositionChanged(WebCore::IntPoint const&) 12 0x111488c2f WebCore::ScrollingCoordinator::updateMainFrameScrollPosition(WebCore::IntPoint const&, bool, WebCore::SetOrSyncScrollingLayerPosition) 13 0x11148b4b3 WebCore::ScrollingCoordinatorMac::requestScrollPositionUpdate(WebCore::FrameView*, WebCore::IntPoint const&) 14 0x110566251 WebCore::FrameView::requestScrollPositionUpdate(WebCore::IntPoint const&) 15 0x1105662af non-virtual thunk to WebCore::FrameView::requestScrollPositionUpdate(WebCore::IntPoint const&) 16 0x11146fae2 WebCore::ScrollableArea::setScrollOffsetFromAnimation(WebCore::IntPoint const&) 17 0x111472181 WebCore::ScrollAnimator::notifyPositionChanged(WebCore::FloatSize const&) 18 0x111476956 WebCore::ScrollAnimatorMac::notifyPositionChanged(WebCore::FloatSize const&) 19 0x11147649a WebCore::ScrollAnimatorMac::immediateScrollTo(WebCore::FloatPoint const&) 20 0x111476373 WebCore::ScrollAnimatorMac::scrollToOffsetWithoutAnimation(WebCore::FloatPoint const&) 21 0x11146f5cc WebCore::ScrollableArea::scrollToOffsetWithoutAnimation(WebCore::FloatPoint const&) 22 0x1114a930d WebCore::ScrollView::updateScrollbars(WebCore::IntSize const&) 23 0x1114a9e40 WebCore::ScrollView::setContentsSize(WebCore::IntSize const&) 24 0x11055dd81 WebCore::FrameView::setContentsSize(WebCore::IntSize const&) 25 0x11055f223 WebCore::FrameView::adjustViewSize() 26 0x11056192a WebCore::FrameView::layout(bool) 27 0x11029e568 WebCore::Document::updateLayout() 28 0x1102a177f WebCore::Document::updateLayoutIgnorePendingStylesheets() 29 0x110417177 WebCore::Element::offsetHeight() 30 0x110ae6737 WebCore::jsElementOffsetHeight(JSC::ExecState*, JSC::JSValue, JSC::PropertyName) 31 0x10e83ea0f JSC::PropertySlot::getValue(JSC::ExecState*, JSC::PropertyName) const 944729 1 webkit-bug-importer 2013-10-29 19:21:14 -0700 <rdar://problem/15348150> 949515 2 simon.fraser 2013-11-11 17:56:41 -0800 See also bug 103432 949516 3 simon.fraser 2013-11-11 18:03:43 -0800 I think the issue here is that FrameView::layout() does adjustViewSize() before updateLayerPositionsAfterLayout(), but adjustViewSize() can cause scrolling. 950249 4 simon.fraser 2013-11-13 11:17:11 -0800 *** This bug has been marked as a duplicate of bug 103432 ***