<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>139289</bug_id>
          
          <creation_ts>2014-12-04 21:23:21 -0800</creation_ts>
          <short_desc>Crash when setting &apos;-webkit-box-shadow&apos; CSS property to &apos;calc(50px + 1em) calc(50px + 1em) calc(50px + 1em)&apos;</short_desc>
          <delta_ts>2023-02-06 14:35:40 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>CSS</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>CONFIGURATION CHANGED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>138778</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Chris Dumez">cdumez</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>ahmad.saleem792</cc>
    
    <cc>ntim</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1052670</commentid>
    <comment_count>0</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2014-12-04 21:23:21 -0800</bug_when>
    <thetext>Crash when setting &apos;-webkit-box-shadow&apos; CSS property to &apos;calc(50px + 1em) calc(50px + 1em) calc(50px + 1em)&apos;.

Backtrace:

ASSERTION FAILED: !m_parsedCalculation
0   com.apple.JavaScriptCore      	0x000000010df4534a WTFCrash + 42
1   com.apple.WebCore             	0x000000010f884feb WebCore::CSSParser::parseCalculation(WebCore::CSSParserValue&amp;, WebCore::CalculationPermittedValueRange) + 235 (CSSParser.cpp:9989)
2   com.apple.WebCore             	0x000000010f884c49 WebCore::CSSParser::validCalculationUnit(WebCore::CSSParserValue&amp;, WebCore::CSSParser::Units, WebCore::CSSParser::ReleaseParsedCalcValueCondition) + 105 (CSSParser.cpp:1588)
3   com.apple.WebCore             	0x000000010f8850de WebCore::CSSParser::validUnit(WebCore::CSSParserValue&amp;, WebCore::CSSParser::Units, WebCore::CSSParserMode, WebCore::CSSParser::ReleaseParsedCalcValueCondition) + 78 (CSSParser.cpp:1640)
4   com.apple.WebCore             	0x000000010f895b78 WebCore::CSSParser::parseShadow(WebCore::CSSParserValueList&amp;, WebCore::CSSPropertyID) + 408 (CSSParser.cpp:7259)
5   com.apple.WebCore             	0x000000010f88883a WebCore::CSSParser::parseValue(WebCore::CSSPropertyID, bool) + 12394 (CSSParser.cpp:2407)
6   com.apple.WebCore             	0x000000010f851363 cssyyparse(WebCore::CSSParser*) + 2771 (.CSSGrammar.y:389)
7   com.apple.WebCore             	0x000000010f882a5e WebCore::CSSParser::parseValue(WebCore::MutableStyleProperties*, WebCore::CSSPropertyID, WTF::String const&amp;, bool, WebCore::StyleSheetContents*) + 110 (CSSParser.cpp:1314)
8   com.apple.WebCore             	0x000000010f881c97 WebCore::CSSParser::parseValue(WebCore::MutableStyleProperties*, WebCore::CSSPropertyID, WTF::String const&amp;, bool, WebCore::CSSParserMode, WebCore::StyleSheetContents*) + 471 (CSSParser.cpp:1302)
9   com.apple.WebCore             	0x0000000111131d6f WebCore::MutableStyleProperties::setProperty(WebCore::CSSPropertyID, WTF::String const&amp;, bool, WebCore::StyleSheetContents*) + 159 (StyleProperties.cpp:682)
10  com.apple.WebCore             	0x0000000110b1055b WebCore::PropertySetCSSStyleDeclaration::setPropertyInternal(WebCore::CSSPropertyID, WTF::String const&amp;, bool, int&amp;) + 171 (PropertySetCSSStyleDeclaration.cpp:265)
11  com.apple.WebCore             	0x0000000110305038 WebCore::JSCSSStyleDeclaration::putDelegate(JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&amp;) + 392 (JSCSSStyleDeclarationCustom.cpp:343)
12  com.apple.WebCore             	0x00000001103001e9 WebCore::JSCSSStyleDeclaration::put(JSC::JSCell*, JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&amp;) + 329 (JSCSSStyleDeclaration.cpp:284)
13  com.apple.JavaScriptCore      	0x000000010d90dd12 JSC::JSValue::put(JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&amp;) + 210
14  com.apple.JavaScriptCore      	0x000000010d8e2026 void JSC::DFG::operationPutByValInternal&lt;false, false&gt;(JSC::ExecState*, long long, long long, long long) + 678
15  com.apple.JavaScriptCore      	0x000000010d8e1d6b operationPutByValNonStrict + 75</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1931418</commentid>
    <comment_count>1</comment_count>
    <who name="Ahmad Saleem">ahmad.saleem792</who>
    <bug_when>2023-02-06 10:15:53 -0800</bug_when>
    <thetext>This seems like this commit - https://chromium.googlesource.com/chromium/blink/+/f72bda0163c886943084d4caa01a19a18ab63b1c

and it seems that we already have imported related test case, I think this might have already been fixed and it does not have because else it would&apos;ve been triggered by the test case, we imported from Blink?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1931499</commentid>
    <comment_count>2</comment_count>
    <who name="Tim Nguyen (:ntim)">ntim</who>
    <bug_when>2023-02-06 14:35:40 -0800</bug_when>
    <thetext>Seems fixed.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>