225247 2021-04-30 13:49:31 -0700 [Multi-column] ASSERTION FAILED: !flow.spannerMap().get(placeholder.spanner()) 2024-08-14 06:56:17 -0700 1 1 1 Unclassified WebKit Layout and Rendering WebKit Nightly Build Unspecified Unspecified NEW InRadar P2 Normal --- 1 zalan webkit-unassigned ahmad.saleem792 bfulgham simon.fraser vitaly webkit-bug-importer zalan oldest_to_newest 1755794 0 427444 zalan 2021-04-30 13:49:31 -0700 Created attachment 427444 test case with floats and continuation. 1757986 1 webkit-bug-importer 2021-05-07 13:50:32 -0700 <rdar://problem/77671764> 1964674 2 ahmad.saleem792 2023-07-02 04:03:02 -0700 I built —debug build on top of 265693@main with some local patches but it does not assert when opened in “MiniBrowser” (WK2). 1964675 3 ahmad.saleem792 2023-07-02 04:08:32 -0700 (In reply to Ahmad Saleem from comment #2) > I built —debug build on top of 265693@main with some local patches but it > does not assert when opened in “MiniBrowser” (WK2). Ignore - it is reproducible. :-( 1964676 4 ahmad.saleem792 2023-07-02 04:09:40 -0700 ASSERTION FAILED: !flow.spannerMap().get(placeholder.spanner()) /Users/ahmadsaleem/Documents/GitHub-Webkit-origin/Webkit/Source/WebCore/rendering/updating/RenderTreeBuilderMultiColumn.cpp(302) : void WebCore::RenderTreeBuilder::MultiColumn::multiColumnDescendantInserted(WebCore::RenderMultiColumnFlow &, WebCore::RenderObject &) 1 0x137e8975c WTFCrash 2 0x28297b700 WebCore::BaseAudioContext::currentSampleFrame() const 3 0x28531f108 WebCore::RenderTreeBuilder::MultiColumn::multiColumnDescendantInserted(WebCore::RenderMultiColumnFlow&, WebCore::RenderObject&) 4 0x28530fdbc WebCore::RenderTreeBuilder::attachToRenderElementInternal(WebCore::RenderElement&, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderObject*, WebCore::RenderObject::IsInternalMove) 5 0x28530e230 WebCore::RenderTreeBuilder::attachToRenderElement(WebCore::RenderElement&, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderObject*) 6 0x28530eb08 WebCore::RenderTreeBuilder::Block::attachIgnoringContinuation(WebCore::RenderBlock&, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderObject*) 7 0x28530e034 WebCore::RenderTreeBuilder::Block::attach(WebCore::RenderBlock&, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderObject*) 8 0x28530df40 WebCore::RenderTreeBuilder::BlockFlow::attach(WebCore::RenderBlockFlow&, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderObject*) 9 0x28530d474 WebCore::RenderTreeBuilder::attachInternal(WebCore::RenderElement&, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderObject*) 10 0x28530c980 WebCore::RenderTreeBuilder::attach(WebCore::RenderElement&, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderObject*) 11 0x28531c554 WebCore::RenderTreeBuilder::Inline::splitFlow(WebCore::RenderInline&, WebCore::RenderObject*, std::__1::unique_ptr<WebCore::RenderBlock, WebCore::RenderObjectDeleter>, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderBoxModelObject*) 12 0x28531cfe0 WebCore::RenderTreeBuilder::Inline::childBecameNonInline(WebCore::RenderInline&, WebCore::RenderElement&) 13 0x285310cc0 WebCore::RenderTreeBuilder::childFlowStateChangesAndAffectsParentBlock(WebCore::RenderElement&) 14 0x285310b0c WebCore::RenderTreeBuilder::normalizeTreeAfterStyleChange(WebCore::RenderElement&, WebCore::RenderStyle&) 15 0x28532e164 WebCore::RenderTreeUpdater::updateRendererStyle(WebCore::RenderElement&, WebCore::RenderStyle&&, WebCore::StyleDifference) 16 0x28532d5ec WebCore::RenderTreeUpdater::updateElementRenderer(WebCore::Element&, WebCore::Style::ElementUpdate const&) 17 0x28532c954 WebCore::RenderTreeUpdater::updateRenderTree(WebCore::ContainerNode&) 18 0x28532c1cc WebCore::RenderTreeUpdater::commit(std::__1::unique_ptr<WebCore::Style::Update const, std::__1::default_delete<WebCore::Style::Update const>>) 19 0x2836534e8 WebCore::Document::updateRenderTree(std::__1::unique_ptr<WebCore::Style::Update const, std::__1::default_delete<WebCore::Style::Update const>>) 20 0x283653afc WebCore::Document::resolveStyle(WebCore::Document::ResolveStyleType) 21 0x283654714 WebCore::Document::updateStyleIfNeeded() 22 0x283672020 WebCore::Document::finishedParsing() 23 0x283db0498 WebCore::HTMLConstructionSite::finishedParsing() 24 0x283e08b88 WebCore::HTMLTreeBuilder::finished() 25 0x283db7bec WebCore::HTMLDocumentParser::end() 26 0x283db5b2c WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd() 27 0x283db5864 WebCore::HTMLDocumentParser::prepareToStopParsing() 28 0x283db7c58 WebCore::HTMLDocumentParser::attemptToEnd() 29 0x283db7d28 WebCore::HTMLDocumentParser::finish() 30 0x28422b928 WebCore::DocumentWriter::end() 31 0x28422aa08 WebCore::DocumentLoader::finishedLoading() 2023-07-02 12:07:43.139 MiniBrowser[92386:7413360] WebContent process crashed; reloading ASSERTION FAILED: m_connection /Users/ahmadsaleem/Documents/GitHub-Webkit-origin/Webkit/Source/WebKit/UIProcess/AuxiliaryProcessProxy.h(92) : IPC::Connection *WebKit::AuxiliaryProcessProxy::connection() const 1 0x13424175c WTFCrash 2 0x1161183d0 decltype(auto) std::__1::apply[abi:v15006]<void IPC::callMemberFunction<WebKit::DrawingArea, WebKit::DrawingArea, void (), std::__1::tuple<>>(WebKit::DrawingArea*, void (WebKit::DrawingArea::*)(), std::__1::tuple<>&&)::'lambda'(auto&&...), std::__1::tuple<>>(WebKit::DrawingArea&&, WebKit::DrawingArea&&) 3 0x117119c64 WebKit::AuxiliaryProcessProxy::connection() const 4 0x117bc36e0 WebKit::WebPageProxy::messageSenderConnection() const 5 0x117bc3544 WebKit::WebPageProxy::sendWheelEvent(WebKit::WebWheelEvent const&, WTF::OptionSet<WebCore::WheelEventProcessingSteps>, WebCore::RectEdges<bool>, std::__1::optional<bool>, bool) 6 0x117bc300c WebKit::WebPageProxy::continueWheelEventHandling(WebKit::WebWheelEvent const&, WebCore::WheelEventHandlingResult const&, std::__1::optional<bool>) 7 0x117bc2e10 WebKit::WebPageProxy::handleWheelEvent(WebKit::WebWheelEvent const&) 8 0x117bc2bc4 WebKit::WebPageProxy::handleNativeWheelEvent(WebKit::NativeWebWheelEvent const&) 9 0x1178db060 WebKit::WebViewImpl::scrollWheel(NSEvent*) 10 0x117490354 -[WKWebView(WKImplementationMac) scrollWheel:] 11 0x18ed83028 -[NSWindow(NSEventRouting) _reallySendEvent:isDelayedEvent:] 12 0x18ed82bc8 -[NSWindow(NSEventRouting) sendEvent:] 13 0x18ed81f0c -[NSApplication(NSEvent) sendEvent:] 14 0x18efd1fc4 -[NSApplication _handleEvent:] 15 0x18ec49368 -[NSApplication run] 16 0x18ec20794 NSApplicationMain 17 0x100d0cfd8 main 18 0x18b5fff28 start 2052717 5 vitaly 2024-08-14 06:56:17 -0700 I think it's been fixed some time ago. The test still hits an assertion but it's another one. See https://bugs.webkit.org/show_bug.cgi?id=278100 for details. 427444 2021-04-30 13:49:31 -0700 2021-04-30 13:49:31 -0700 test case 77326189.html text/html 291 zalan PHN0eWxlPgouc3Bhbm5lciB7CiAgICBjb2x1bW4tc3BhbjogYWxsOwogIH0KLmNvbHVtbnMgewog ICAgY29sdW1uLWNvdW50OiAyOwogIH0KPC9zdHlsZT4KPGRpdiBjbGFzcz1jb2x1bW5zPjxzcGFu PjxkaXYgaWQ9Zm9vIHN0eWxlPSJmbG9hdDogbGVmdCI+PGRpdiBjbGFzcz1zcGFubmVyPlBBU1Mg aWYgbm8gY3Jhc2ggb3IgYXNzZXJ0LjwvZGl2PjwvZGl2Pjwvc3Bhbj48L2Rpdj4KPHNjcmlwdD4K ZG9jdW1lbnQuYm9keS5vZmZzZXRIZWlnaHQ7CmZvby5zdHlsZS5mbG9hdCA9ICJub25lIjsKPC9z Y3JpcHQ+