<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>224757</bug_id>
          
          <creation_ts>2021-04-19 07:45:01 -0700</creation_ts>
          <short_desc>Crash in RenderObjectBitfields::needsLayout</short_desc>
          <delta_ts>2021-04-21 20:41:34 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Layout and Rendering</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Ali Juma">ajuma</reporter>
          <assigned_to name="alan">zalan</assigned_to>
          <cc>bfulgham</cc>
    
    <cc>changseok</cc>
    
    <cc>darin</cc>
    
    <cc>esprehn+autocc</cc>
    
    <cc>ews-feeder</cc>
    
    <cc>ews-watchlist</cc>
    
    <cc>glenn</cc>
    
    <cc>koivisto</cc>
    
    <cc>kondapallykalyan</cc>
    
    <cc>pdr</cc>
    
    <cc>product-security</cc>
    
    <cc>rniwa</cc>
    
    <cc>rohitrao</cc>
    
    <cc>simon.fraser</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>zalan</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1751766</commentid>
    <comment_count>0</comment_count>
      <attachid>426416</attachid>
    <who name="Ali Juma">ajuma</who>
    <bug_when>2021-04-19 07:45:01 -0700</bug_when>
    <thetext>Created attachment 426416
Minimal test case

Filing this as a security bug since it was found using a fuzzer; there&apos;s no disclosure deadline for this bug.

This reproduces in an ASan build of WebKitTestRunner, as well as in STP 123.

Stack:
=================================================================
==20046==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000030 (pc 0x0005f2b68e9e bp 0x7ffee93874a0 sp 0x7ffee93874a0 T0)
==20046==The signal is caused by a READ memory access.
==20046==Hint: address points to the zero page.
==20046==WARNING: invalid path to external symbolizer!
==20046==WARNING: Failed to use and restart external symbolizer!
    #0 0x5f2b68e9d in WebCore::RenderObject::RenderObjectBitfields::needsLayout() const (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x2c5de9d)
    #1 0x5f3a5cbeb in WebCore::RenderObject::setNeedsLayout(WebCore::MarkingBehavior) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x3b51beb)
    #2 0x5f5357bd9 in WebCore::resetOverriddenHeight(WebCore::RenderBox*, WebCore::RenderObject const*) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x544cbd9)
    #3 0x5f53569c7 in WebCore::RenderTextControlSingleLine::layout() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x544b9c7)
    #4 0x5f502a83b in WebCore::RenderBlockFlow::positionNewFloats() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x511f83b)
    #5 0x5f4f2c1ad in WebCore::ComplexLineLayout::positionNewFloatOnLine(WebCore::FloatingObject const&amp;, WebCore::FloatingObject*, WebCore::LineInfo&amp;, WebCore::LineWidth&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x50211ad)
    #6 0x5f53f8143 in WebCore::LineBreaker::skipLeadingWhitespace(WebCore::BidiResolverWithIsolate&lt;WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun&gt;&amp;, WebCore::LineInfo&amp;, WebCore::FloatingObject*, WebCore::LineWidth&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x54ed143)
    #7 0x5f53f85cb in WebCore::LineBreaker::nextLineBreak(WebCore::BidiResolverWithIsolate&lt;WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun&gt;&amp;, WebCore::LineInfo&amp;, WebCore::RenderTextInfo&amp;, WebCore::FloatingObject*, unsigned int, WTF::Vector&lt;WebCore::WordMeasurement, 64ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x54ed5cb)
    #8 0x5f4f21cf6 in WebCore::ComplexLineLayout::layoutRunsAndFloatsInRange(WebCore::LineLayoutState&amp;, WebCore::BidiResolverWithIsolate&lt;WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun&gt;&amp;, WebCore::InlineIterator const&amp;, WebCore::BidiStatus const&amp;, unsigned int) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5016cf6)
    #9 0x5f4f1fc68 in WebCore::ComplexLineLayout::layoutRunsAndFloats(WebCore::LineLayoutState&amp;, bool) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5014c68)
    #10 0x5f4f277fd in WebCore::ComplexLineLayout::layoutLineBoxes(bool, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x501c7fd)
    #11 0x5f5020aef in WebCore::RenderBlockFlow::layoutInlineChildren(bool, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5115aef)
    #12 0x5f501f19e in WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x511419e)
    #13 0x5f4ff02c4 in WebCore::RenderBlock::layout() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x50e52c4)
    #14 0x5f5146886 in WebCore::RenderFragmentedFlow::layout() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x523b886)
    #15 0x5f52ab220 in WebCore::RenderMultiColumnFlow::layout() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x53a0220)
    #16 0x5f5045043 in WebCore::RenderBlockFlow::layoutExcludedChildren(bool) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x513a043)
    #17 0x5f5020d32 in WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5115d32)
    #18 0x5f501f1a9 in WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x51141a9)
    #19 0x5f5021069 in WebCore::RenderBlockFlow::relayoutForPagination() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5116069)
    #20 0x5f501f348 in WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5114348)
    #21 0x5f4ff02c4 in WebCore::RenderBlock::layout() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x50e52c4)
    #22 0x5f50237a8 in WebCore::RenderBlockFlow::insertFloatingObject(WebCore::RenderBox&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x51187a8)
    #23 0x5f53f8129 in WebCore::LineBreaker::skipLeadingWhitespace(WebCore::BidiResolverWithIsolate&lt;WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun&gt;&amp;, WebCore::LineInfo&amp;, WebCore::FloatingObject*, WebCore::LineWidth&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x54ed129)
    #24 0x5f53f85cb in WebCore::LineBreaker::nextLineBreak(WebCore::BidiResolverWithIsolate&lt;WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun&gt;&amp;, WebCore::LineInfo&amp;, WebCore::RenderTextInfo&amp;, WebCore::FloatingObject*, unsigned int, WTF::Vector&lt;WebCore::WordMeasurement, 64ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x54ed5cb)
    #25 0x5f4f21cf6 in WebCore::ComplexLineLayout::layoutRunsAndFloatsInRange(WebCore::LineLayoutState&amp;, WebCore::BidiResolverWithIsolate&lt;WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun&gt;&amp;, WebCore::InlineIterator const&amp;, WebCore::BidiStatus const&amp;, unsigned int) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5016cf6)
    #26 0x5f4f1fc68 in WebCore::ComplexLineLayout::layoutRunsAndFloats(WebCore::LineLayoutState&amp;, bool) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5014c68)
    #27 0x5f4f277fd in WebCore::ComplexLineLayout::layoutLineBoxes(bool, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x501c7fd)
    #28 0x5f5020aef in WebCore::RenderBlockFlow::layoutInlineChildren(bool, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5115aef)
    #29 0x5f501f19e in WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x511419e)
    #30 0x5f4ff02c4 in WebCore::RenderBlock::layout() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x50e52c4)
    #31 0x5f50237a8 in WebCore::RenderBlockFlow::insertFloatingObject(WebCore::RenderBox&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x51187a8)
    #32 0x5f53f8129 in WebCore::LineBreaker::skipLeadingWhitespace(WebCore::BidiResolverWithIsolate&lt;WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun&gt;&amp;, WebCore::LineInfo&amp;, WebCore::FloatingObject*, WebCore::LineWidth&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x54ed129)
    #33 0x5f53f85cb in WebCore::LineBreaker::nextLineBreak(WebCore::BidiResolverWithIsolate&lt;WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun&gt;&amp;, WebCore::LineInfo&amp;, WebCore::RenderTextInfo&amp;, WebCore::FloatingObject*, unsigned int, WTF::Vector&lt;WebCore::WordMeasurement, 64ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x54ed5cb)
    #34 0x5f4f21cf6 in WebCore::ComplexLineLayout::layoutRunsAndFloatsInRange(WebCore::LineLayoutState&amp;, WebCore::BidiResolverWithIsolate&lt;WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun&gt;&amp;, WebCore::InlineIterator const&amp;, WebCore::BidiStatus const&amp;, unsigned int) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5016cf6)
    #35 0x5f4f1fc68 in WebCore::ComplexLineLayout::layoutRunsAndFloats(WebCore::LineLayoutState&amp;, bool) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5014c68)
    #36 0x5f4f277fd in WebCore::ComplexLineLayout::layoutLineBoxes(bool, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x501c7fd)
    #37 0x5f5020aef in WebCore::RenderBlockFlow::layoutInlineChildren(bool, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5115aef)
    #38 0x5f501f19e in WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x511419e)
    #39 0x5f4ff02c4 in WebCore::RenderBlock::layout() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x50e52c4)
    #40 0x5f50237a8 in WebCore::RenderBlockFlow::insertFloatingObject(WebCore::RenderBox&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x51187a8)
    #41 0x5f53f8129 in WebCore::LineBreaker::skipLeadingWhitespace(WebCore::BidiResolverWithIsolate&lt;WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun&gt;&amp;, WebCore::LineInfo&amp;, WebCore::FloatingObject*, WebCore::LineWidth&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x54ed129)
    #42 0x5f53f85cb in WebCore::LineBreaker::nextLineBreak(WebCore::BidiResolverWithIsolate&lt;WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun&gt;&amp;, WebCore::LineInfo&amp;, WebCore::RenderTextInfo&amp;, WebCore::FloatingObject*, unsigned int, WTF::Vector&lt;WebCore::WordMeasurement, 64ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x54ed5cb)
    #43 0x5f4f21cf6 in WebCore::ComplexLineLayout::layoutRunsAndFloatsInRange(WebCore::LineLayoutState&amp;, WebCore::BidiResolverWithIsolate&lt;WebCore::InlineIterator, WebCore::BidiRun, WebCore::BidiIsolatedRun&gt;&amp;, WebCore::InlineIterator const&amp;, WebCore::BidiStatus const&amp;, unsigned int) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5016cf6)
    #44 0x5f4f1fc68 in WebCore::ComplexLineLayout::layoutRunsAndFloats(WebCore::LineLayoutState&amp;, bool) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5014c68)
    #45 0x5f4f277fd in WebCore::ComplexLineLayout::layoutLineBoxes(bool, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x501c7fd)
    #46 0x5f5020aef in WebCore::RenderBlockFlow::layoutInlineChildren(bool, WebCore::LayoutUnit&amp;, WebCore::LayoutUnit&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x5115aef)
    #47 0x5f501f19e in WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x511419e)
    #48 0x5f4ff02c4 in WebCore::RenderBlock::layout() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x50e52c4)
    #49 0x5f539777a in WebCore::RenderView::layout() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x548c77a)
    #50 0x5f45668de in WebCore::FrameViewLayoutContext::layout() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x465b8de)
    #51 0x5f347ba56 in WebCore::Document::implicitClose() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x3570a56)
    #52 0x5f42f5562 in WebCore::FrameLoader::checkCompleted() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x43ea562)
    #53 0x5f42f2050 in WebCore::FrameLoader::finishedParsing() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x43e7050)
    #54 0x5f349acb2 in WebCore::Document::finishedParsing() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x358fcb2)
    #55 0x5f3db121a in WebCore::HTMLDocumentParser::prepareToStopParsing() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x3ea621a)
    #56 0x5f427be60 in WebCore::DocumentWriter::end() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x4370e60)
    #57 0x5f427a9dc in WebCore::DocumentLoader::finishedLoading() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x436f9dc)
    #58 0x5f427a348 in WebCore::DocumentLoader::notifyFinished(WebCore::CachedResource&amp;, WebCore::NetworkLoadMetrics const&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x436f348)
    #59 0x5f443954f in WebCore::CachedResource::checkNotify(WebCore::NetworkLoadMetrics const&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x452e54f)
    #60 0x5f443545b in WebCore::CachedRawResource::finishLoading(WebCore::SharedBuffer*, WebCore::NetworkLoadMetrics const&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x452a45b)
    #61 0x5f43aed5b in WebCore::SubresourceLoader::didFinishLoading(WebCore::NetworkLoadMetrics const&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebCore.framework/Versions/A/WebCore:x86_64+0x44a3d5b)
    #62 0x5e21bcab6 in WebKit::WebResourceLoader::didFinishResourceLoad(WebCore::NetworkLoadMetrics const&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0x21bcab6)
    #63 0x5e2895626 in void IPC::handleMessage&lt;Messages::WebResourceLoader::DidFinishResourceLoad, WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&amp;)&gt;(IPC::Decoder&amp;, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&amp;)) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0x2895626)
    #64 0x5e2894c33 in WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&amp;, IPC::Decoder&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0x2894c33)
    #65 0x5e217fd4a in WebKit::NetworkProcessConnection::didReceiveMessage(IPC::Connection&amp;, IPC::Decoder&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0x217fd4a)
    #66 0x5e008cfb9 in IPC::Connection::dispatchMessage(IPC::Decoder&amp;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0x8cfb9)
    #67 0x5e008d9d6 in IPC::Connection::dispatchMessage(std::__1::unique_ptr&lt;IPC::Decoder, std::__1::default_delete&lt;IPC::Decoder&gt; &gt;) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0x8d9d6)
    #68 0x5e008e59b in IPC::Connection::dispatchOneIncomingMessage() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0x8e59b)
    #69 0x60bf759ac in WTF::RunLoop::performWork() (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0xcf9ac)
    #70 0x60bf79055 in WTF::RunLoop::performWork(void*) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/JavaScriptCore.framework/Versions/A/JavaScriptCore:x86_64+0xd3055)
    #71 0x7fff2fcbd883 in __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation:x86_64+0x84883)
    #72 0x7fff2fcbd822 in __CFRunLoopDoSource0 (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation:x86_64+0x84822)
    #73 0x7fff2fcbd63c in __CFRunLoopDoSources0 (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation:x86_64+0x8463c)
    #74 0x7fff2fcbc358 in __CFRunLoopRun (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation:x86_64+0x83358)
    #75 0x7fff2fcbb952 in CFRunLoopRunSpecific (/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation:x86_64+0x82952)
    #76 0x7fff323791c7 in -[NSRunLoop(NSRunLoop) runMode:beforeDate:] (/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation:x86_64+0x601c7)
    #77 0x7fff3242bc6e in -[NSRunLoop(NSRunLoop) run] (/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation:x86_64+0x112c6e)
    #78 0x7fff69e984e9 in _xpc_objc_main.cold.4 (/usr/lib/system/libxpc.dylib:x86_64+0x164e9)
    #79 0x7fff69e9842f in _xpc_objc_main (/usr/lib/system/libxpc.dylib:x86_64+0x1642f)
    #80 0x7fff69e97f62 in xpc_main (/usr/lib/system/libxpc.dylib:x86_64+0x15f62)
    #81 0x5e0f00c73 in WebKit::XPCServiceMain(int, char const**) (/Users/chrome-bot/clusterfuzz/bot/builds/chrome-ios-webkit-to-fuzz_ios-webkit-to-fuzz_cb292771138f3c7c4bb12f2df778e2b1c42b4cd7/revisions/WebKitMacOS/WebKit.framework/Versions/A/WebKit:x86_64+0xf00c73)
    #82 0x7fff69c46cc8 in start (/usr/lib/system/libdyld.dylib:x86_64+0x1acc8)
==20046==Register values:
rax = 0x0000000000000000  rbx = 0x0000000000000030  rcx = 0x0000100000000006  rdx = 0x00001c2c0000b1e5
rdi = 0x0000000000000030  rsi = 0x0000000000000000  rbp = 0x00007ffee93874a0  rsp = 0x00007ffee93874a0
 r8 = 0x0000100000000000   r9 = 0x0000000000000000  r10 = 0xffffffffffffffff  r11 = 0x00000fffffffffff
r12 = 0x00007ffee93874e0  r13 = 0x00001fffdd270e9c  r14 = 0x0000000000000000  r15 = 0x0000000000000000
=====================================
Clusterfuzz-id: 4922814914953216</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1751767</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2021-04-19 07:45:11 -0700</bug_when>
    <thetext>&lt;rdar://problem/76844224&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1751821</commentid>
    <comment_count>2</comment_count>
    <who name="Darin Adler">darin</who>
    <bug_when>2021-04-19 09:32:09 -0700</bug_when>
    <thetext>This is another runaway loop. The inner renderer is not a descendant of &quot;this&quot; in RenderTextControlSingleLine::layout and so the loop in resetOverriddenHeight keeps going and we hit null. We can add a null check to the loop. Separately we can also figure out why the pre-condition is not met.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1752788</commentid>
    <comment_count>3</comment_count>
      <attachid>426702</attachid>
    <who name="alan">zalan</who>
    <bug_when>2021-04-21 09:43:44 -0700</bug_when>
    <thetext>Created attachment 426702
test reduction</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1752789</commentid>
    <comment_count>4</comment_count>
    <who name="alan">zalan</who>
    <bug_when>2021-04-21 09:47:01 -0700</bug_when>
    <thetext>This looks like the classic case of &quot;the spanner renderer has been moved out of its original place and this code should check for the spanner placeholder instead&quot;.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1752850</commentid>
    <comment_count>5</comment_count>
      <attachid>426723</attachid>
    <who name="alan">zalan</who>
    <bug_when>2021-04-21 12:06:54 -0700</bug_when>
    <thetext>Created attachment 426723
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1752856</commentid>
    <comment_count>6</comment_count>
      <attachid>426724</attachid>
    <who name="alan">zalan</who>
    <bug_when>2021-04-21 12:11:52 -0700</bug_when>
    <thetext>Created attachment 426724
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1752877</commentid>
    <comment_count>7</comment_count>
      <attachid>426724</attachid>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2021-04-21 12:51:51 -0700</bug_when>
    <thetext>Comment on attachment 426724
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=426724&amp;action=review

&gt; Source/WebCore/ChangeLog:12
&gt; +        Test: fast/multicol/spanner-inside-text-control.html
&gt; +
&gt; +        Let&apos;s not try to span columns with the _inner_ part of a text control. Such subtrees should be opaque to multi-column layout.
&gt; +        (we already do this for &lt;legend&gt;)

Looks like these are in the wrong order?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1753027</commentid>
    <comment_count>8</comment_count>
      <attachid>426768</attachid>
    <who name="alan">zalan</who>
    <bug_when>2021-04-21 20:39:21 -0700</bug_when>
    <thetext>Created attachment 426768
[fast-cq] Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1753028</commentid>
    <comment_count>9</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2021-04-21 20:41:31 -0700</bug_when>
    <thetext>Committed r276419 (236884@main): &lt;https://commits.webkit.org/236884@main&gt;

All reviewed patches have been landed. Closing bug and clearing flags on attachment 426768.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>426416</attachid>
            <date>2021-04-19 07:45:01 -0700</date>
            <delta_ts>2021-04-19 07:45:01 -0700</delta_ts>
            <desc>Minimal test case</desc>
            <filename>renderObjectBitfieldsNeedsLayout.html</filename>
            <type>text/html</type>
            <size>1105</size>
            <attacher name="Ali Juma">ajuma</attacher>
            
              <data encoding="base64">PHN0eWxlIHR5cGU9InRleHQvY3NzIiBkaXI9Imx0ciIgeG1sOmxhbmc9ImVuIj4NCip7ZGlyZWN0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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>426702</attachid>
            <date>2021-04-21 09:43:44 -0700</date>
            <delta_ts>2021-04-21 09:43:44 -0700</delta_ts>
            <desc>test reduction</desc>
            <filename>224757.html</filename>
            <type>text/html</type>
            <size>190</size>
            <attacher name="alan">zalan</attacher>
            
              <data encoding="base64">PHN0eWxlPgppbnB1dCB7CiAgZmxvYXQ6IGxlZnQ7Cn0KCmRpdiB7CiAgLXdlYmtpdC1jb2x1bW4t
Y291bnQ6IDI7Cn0KCmlucHV0Ojotd2Via2l0LXRleHRmaWVsZC1kZWNvcmF0aW9uLWNvbnRhaW5l
cnsKICAtd2Via2l0LWNvbHVtbi1zcGFuOmFsbDsKfQo8L3N0eWxlPgo8ZGl2PjxpbnB1dCB0eXBl
PSJwYXNzd29yZCI+PC9kaXY+Cg==
</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>426723</attachid>
            <date>2021-04-21 12:06:54 -0700</date>
            <delta_ts>2021-04-21 12:11:50 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-224757-20210421120653.patch</filename>
            <type>text/plain</type>
            <size>2101</size>
            <attacher name="alan">zalan</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjc2MzYyCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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==
</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>426724</attachid>
            <date>2021-04-21 12:11:52 -0700</date>
            <delta_ts>2021-04-21 20:39:18 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-224757-20210421121151.patch</filename>
            <type>text/plain</type>
            <size>4011</size>
            <attacher name="alan">zalan</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjc2MzYyCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>426768</attachid>
            <date>2021-04-21 20:39:21 -0700</date>
            <delta_ts>2021-04-21 20:41:33 -0700</delta_ts>
            <desc>[fast-cq] Patch</desc>
            <filename>bug-224757-20210421203920.patch</filename>
            <type>text/plain</type>
            <size>3949</size>
            <attacher name="alan">zalan</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjc2MzQzCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
      

    </bug>

</bugzilla>