231282 2021-10-05 23:05:57 -0700 ASSERTION FAILED: clipRectsContext.rootLayer == m_clipRectsCache->m_clipRectsRoot[clipRectsType] in WebCore::RenderLayer::updateClipRects 2021-10-21 16:41:03 -0700 1 1 1 Unclassified WebKit Layout and Rendering WebKit Nightly Build Unspecified Unspecified RESOLVED DUPLICATE 117928 InRadar P2 Normal --- 1 fujii webkit-unassigned bfulgham simon.fraser smoley webkit-bug-importer zalan oldest_to_newest 1800959 0 440332 fujii 2021-10-05 23:05:57 -0700 Created attachment 440332 test case ASSERTION FAILED: clipRectsContext.rootLayer == m_clipRectsCache->m_clipRectsRoot[clipRectsType] in WebCore::RenderLayer::updateClipRects I'm testing with WinCairo Debug WK2 r283591. ASSERTION FAILED: clipRectsContext.rootLayer == m_clipRectsCache->m_clipRectsRoot[clipRectsType] C:\home\webkit\gc\Source\WebCore\rendering/RenderLayer.cpp(4417) : WebCore::RenderLayer::updateClipRects 1 00007FF94281217B WTFCrash 2 00007FF8DE05AAAE WTFCrashWithInfo 3 00007FF8E310E6DB WebCore::RenderLayer::updateClipRects 4 00007FF8E311B82B WebCore::RenderLayer::parentClipRects 5 00007FF8E311B933 WebCore::RenderLayer::backgroundClipRect 6 00007FF8E31086BC WebCore::RenderLayer::calculateRects 7 00007FF8E3108C13 WebCore::RenderLayer::collectFragments 8 00007FF8E3114A2E WebCore::RenderLayer::paintLayerContents 9 00007FF8E3113C21 WebCore::RenderLayer::paintLayerContentsAndReflection 10 00007FF8E31139DC WebCore::RenderLayer::paintLayerWithEffects 11 00007FF8E3113378 WebCore::RenderLayer::paintLayer 12 00007FF8E31153A4 WebCore::RenderLayer::paintList 13 00007FF8E3114D52 WebCore::RenderLayer::paintLayerContents 14 00007FF8E3113C21 WebCore::RenderLayer::paintLayerContentsAndReflection 15 00007FF8E31139DC WebCore::RenderLayer::paintLayerWithEffects 16 00007FF8E3113378 WebCore::RenderLayer::paintLayer 17 00007FF8E31153A4 WebCore::RenderLayer::paintList 18 00007FF8E3114D52 WebCore::RenderLayer::paintLayerContents 19 00007FF8E3113C21 WebCore::RenderLayer::paintLayerContentsAndReflection 20 00007FF8E31139DC WebCore::RenderLayer::paintLayerWithEffects 21 00007FF8E3113378 WebCore::RenderLayer::paintLayer 22 00007FF8E3107F4A WebCore::RenderLayer::paint 23 00007FF8E29ADC05 WebCore::FrameView::paintContents 24 00007FF8E2B8C204 WebCore::ScrollView::paint 25 00007FF8DE1235D7 WebKit::LayerTreeHost::paintContents 26 00007FF8E2CBA0E4 WebCore::GraphicsLayer::paintGraphicsLayerContents 27 00007FF8DFC18F40 WebCore::BitmapTexture::updateContents 28 00007FF8DFC29905 WebCore::TextureMapperTile::updateContents 29 00007FF8DFC4AF64 WebCore::TextureMapperTiledBackingStore::updateContents 30 00007FF8DFC46D51 WebCore::GraphicsLayerTextureMapper::updateBackingStoreIfNeeded 31 00007FF8DFC45BEE WebCore::GraphicsLayerTextureMapper::updateBackingStoreIncludingSubLayers Exception thrown at 0x00007FF942812180 (WTF.dll) in WebKitWebProcess.exe: 0xC0000005: Access violation writing location 0x00000000BBADBEEF. 1801183 1 simon.fraser 2021-10-06 10:52:32 -0700 There are several bugs on this assertion already. 1803649 2 webkit-bug-importer 2021-10-12 23:06:20 -0700 <rdar://problem/84182716> 1807427 3 smoley 2021-10-21 16:41:03 -0700 *** This bug has been marked as a duplicate of bug 117928 *** 440332 2021-10-05 23:05:57 -0700 2021-10-05 23:05:57 -0700 test case hb.htm text/html 2964 fujii PCFET0NUWVBFIGh0bWw+DQo8aHRtbD4NCiAgIDxoZWFkPg0KICAgICAgPG1ldGEgY2hhcnNldD0i VVRGLTgiPg0KICAgICAgDQogICAgICA8c2NyaXB0Pg0KCWRvY3VtZW50LmRvY3VtZW50RWxlbWVu dC5jbGFzc05hbWUgPSAnYXN5bmMtaGlkZSc7DQoJc2V0VGltZW91dChmdW5jdGlvbigpew0KCSAg ICBkb2N1bWVudC5kb2N1bWVudEVsZW1lbnQuY2xhc3NOYW1lID0gJyc7DQoJfSwgMTAwKTsNCiAg ICAgIDwvc2NyaXB0Pg0KICAgICAgDQogICAgICA8c3R5bGU+DQoJLmFzeW5jLWhpZGUgeyBvcGFj aXR5OiAwIH0gDQoNCgkubmF2aS13cmFwcGVyIHsNCgkgICAgei1pbmRleDogMTsNCgl9DQoNCgku bmF2aS13cmFwcGVyLmlzLWZpeGVkIHsNCgkgICAgcG9zaXRpb246IGZpeGVkOw0KCX0NCg0KCS5u YXZpLWJvZHkgew0KCSAgICAtd2Via2l0LWJveC1wYWNrOiBjZW50ZXI7DQoJICAgIC13ZWJraXQt Ym94LXNpemluZzogYm9yZGVyLWJveDsNCgkgICAgYm94LXNpemluZzogYm9yZGVyLWJveDsNCgkg ICAgZGlzcGxheTogLXdlYmtpdC1ib3g7DQoJICAgIGRpc3BsYXk6IC13ZWJraXQtZmxleDsNCgkg ICAgZGlzcGxheTogZmxleDsNCgkgICAgLXdlYmtpdC1qdXN0aWZ5LWNvbnRlbnQ6IGNlbnRlcjsN CgkgICAganVzdGlmeS1jb250ZW50OiBjZW50ZXI7DQoJfQ0KDQoJLm5hdmktYm9keTphZnRlciwN CgkubmF2aS1ib2R5OmJlZm9yZSB7DQoJICAgIC13ZWJraXQtYm94LWZsZXg6IDE7DQoJICAgIGJv cmRlci1ib3R0b206IDJweCBzb2xpZCAjZWVlOw0KCSAgICBjb250ZW50OiAiIjsNCgkgICAgLXdl YmtpdC1mbGV4LWdyb3c6IDE7DQoJICAgIGZsZXgtZ3JvdzogMQ0KCX0NCg0KCS5uYXZpLWxpbmsg ew0KCSAgICBwb3NpdGlvbjogcmVsYXRpdmUNCgl9DQoNCgkuZW50cnktY29udGVudHMgew0KCSAg ICBkaXNwbGF5OiAtd2Via2l0LWJveDsNCgkgICAgZGlzcGxheTogLXdlYmtpdC1mbGV4Ow0KCSAg ICBkaXNwbGF5OiBmbGV4Ow0KCSAgICBtYXJnaW46IDAgMCA0MHB4DQoJfQ0KDQoJLmVudHJ5LW1h aW4gew0KCSAgICBib3JkZXItcmlnaHQ6IDNweCBzb2xpZCAjZWNlY2VjOw0KCSAgICAtd2Via2l0 LWZsZXgtYmFzaXM6IDcyOHB4Ow0KCSAgICBmbGV4LWJhc2lzOiA3MjhweDsNCgkgICAgbWluLXdp ZHRoOiAwOw0KCSAgICBwYWRkaW5nOiAwIDI0cHggMCAwOw0KCSAgICBwb3NpdGlvbjogcmVsYXRp dmUNCgl9DQoNCg0KCS5lbnRyeS1ib29rbWFyayB7DQoJICAgIGJvcmRlcjogMXB4IHNvbGlkICNj Y2M7DQoJICAgIG1hcmdpbjogMCAwIDIwcHg7DQoJICAgIHBvc2l0aW9uOiByZWxhdGl2ZQ0KCX0N Cg0KDQoJLmVudHJ5LWluZm8gew0KCSAgICBvdmVyZmxvdzogaGlkZGVuOw0KCSAgICBwYWRkaW5n OiAyMHB4DQoJfQ0KDQoNCgkuZW50cnktaW5mby1tZXRhIHsNCgkgICAgLXdlYmtpdC1ib3gtYWxp Z246IGNlbnRlcjsNCgkgICAgLXdlYmtpdC1hbGlnbi1pdGVtczogY2VudGVyOw0KCSAgICBhbGln bi1pdGVtczogY2VudGVyOw0KCSAgICBkaXNwbGF5OiAtd2Via2l0LWJveDsNCgkgICAgZGlzcGxh eTogLXdlYmtpdC1mbGV4Ow0KCSAgICBkaXNwbGF5OiBmbGV4Ow0KCSAgICBwb3NpdGlvbjogcmVs YXRpdmUNCgl9DQoNCgkuZW50cnktaW5mby1jYXRlZ29yeSB7DQoJICAgIC13ZWJraXQtZmxleC1z aHJpbms6IDA7DQoJICAgIGZsZXgtc2hyaW5rOiAwOw0KCSAgICBmb250LXNpemU6IDE0cHg7DQoJ ICAgIGxldHRlci1zcGFjaW5nOiAtLjA4ZW07DQoJICAgIG1hcmdpbjogMCAxMnB4IDAgMDsNCgkg ICAgd2hpdGUtc3BhY2U6IG5vd3JhcA0KCX0NCg0KDQoJLmVudHJ5LWluZm8tY2F0ZWdvcnktY2hh bmdlIHsNCgkgICAgZGlzcGxheTogaW5saW5lLWJsb2NrOw0KCSAgICBwb3NpdGlvbjogcmVsYXRp dmU7DQoJICAgIHZlcnRpY2FsLWFsaWduOiB0ZXh0LXRvcA0KCX0NCg0KCS5lbnRyeS1pbmZvLWNh dGVnb3J5LWNoYW5nZTpiZWZvcmUgew0KCSAgICBjb250ZW50OiAiIjsNCgkgICAgZGlzcGxheTog YmxvY2s7DQoJICAgIGhlaWdodDogMTZweDsNCgkgICAgLXdlYmtpdC1tYXNrLXNpemU6IDE1cHg7 DQoJICAgIG1hc2stc2l6ZTogMTVweDsNCgkgICAgd2lkdGg6IDE2cHgNCgl9DQoNCiAgICAgIDwv c3R5bGU+DQoNCiAgIDwvaGVhZD4NCiAgIDxib2R5Pg0KICAgICAgPGRpdiBjbGFzcz0ibmF2aS13 cmFwcGVyIGlzLWZpeGVkIj4NCiAgICAgICAgIDx1bCBjbGFzcz0ibmF2aS1ib2R5Ij4NCiAgICAg ICAgIDwvdWw+DQogICAgICA8L2Rpdj4NCiAgICAgIDxkaXY+DQogICAgICAgICA8ZGl2Pg0KICAg ICAgICAgICAgPGRpdiBjbGFzcz0iZW50cnktY29udGVudHMiPg0KICAgICAgICAgICAgICAgPGRp diBjbGFzcz0iZW50cnktbWFpbiI+DQogICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJlbnRy eS1ib29rbWFyayI+DQogICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJlbnRyeS1pbmZv Ij4NCiAgICAgICAgICAgICAgICAgICAgICAgIDxkaXYgY2xhc3M9ImVudHJ5LWluZm8taW5uZXIi Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0iZW50cnktaW5mby1tZXRh Ij4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9ImVudHJ5LWluZm8t Y2F0ZWdvcnkiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxhIGNsYXNzPSJlbnRy eS1pbmZvLWNhdGVnb3J5LWNoYW5nZSI+PC9hPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAg ICA8L3NwYW4+DQogICAgICAgICAgICAgICAgICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAg ICAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAg ICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgPC9k aXY+DQogICAgICAgICA8L2Rpdj4NCiAgICAgIDwvZGl2Pg0KICAgPC9ib2R5Pg0KPC9odG1sPg0K