<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>278100</bug_id>
          
          <creation_ts>2024-08-14 06:34:54 -0700</creation_ts>
          <short_desc>[Debug] ASSERTION FAILED: !flow.spannerMap().get(placeholder-&gt;spanner()) in `fast/multicol/span/float-becomes-spanner-crash.html`</short_desc>
          <delta_ts>2024-08-27 07:58:29 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Layout and Rendering</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Vitaly Dyackhov">vitaly</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>bfulgham</cc>
    
    <cc>simon.fraser</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>zalan</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2052715</commentid>
    <comment_count>0</comment_count>
    <who name="Vitaly Dyackhov">vitaly</who>
    <bug_when>2024-08-14 06:34:54 -0700</bug_when>
    <thetext>STDERR: ASSERTION FAILED: !flow.spannerMap().get(placeholder-&gt;spanner())
STDERR: /home/vitaly/WebKit/Source/WebCore/rendering/updating/RenderTreeBuilderMultiColumn.cpp(302) : void WebCore::RenderTreeBuilder::MultiColumn::multiColumnDescendantInserted(WebCore::RenderMultiColumnFlow&amp;, WebCore::RenderObject&amp;)
STDERR: 1   0x7f1e0e4d1b5e WebCore::RenderTreeBuilder::MultiColumn::multiColumnDescendantInserted(WebCore::RenderMultiColumnFlow&amp;, WebCore::RenderObject&amp;)
STDERR: 2   0x7f1e0e4bb78a WebCore::RenderTreeBuilder::attachToRenderElementInternal(WebCore::RenderElement&amp;, std::unique_ptr&lt;WebCore::RenderObject, WebCore::RenderObjectDeleter&gt;, WebCore::RenderObject*)
STDERR: 3   0x7f1e0e4ce6aa WebCore::RenderTreeBuilder::Inline::splitFlow(WebCore::RenderInline&amp;, WebCore::RenderObject*, std::unique_ptr&lt;WebCore::RenderBlock, WebCore::RenderObjectDeleter&gt;, std::unique_ptr&lt;WebCore::RenderObject, WebCore::RenderObjectDeleter&gt;, WebCore::RenderBoxModelObject*)
STDERR: 4   0x7f1e0e4ce245 WebCore::RenderTreeBuilder::Inline::attachIgnoringContinuation(WebCore::RenderInline&amp;, std::unique_ptr&lt;WebCore::RenderObject, WebCore::RenderObjectDeleter&gt;, WebCore::RenderObject*)
STDERR: 5   0x7f1e0e4cdaf1 WebCore::RenderTreeBuilder::Inline::attach(WebCore::RenderInline&amp;, std::unique_ptr&lt;WebCore::RenderObject, WebCore::RenderObjectDeleter&gt;, WebCore::RenderObject*)
STDERR: 6   0x7f1e0e4baa7f WebCore::RenderTreeBuilder::attachInternal(WebCore::RenderElement&amp;, std::unique_ptr&lt;WebCore::RenderObject, WebCore::RenderObjectDeleter&gt;, WebCore::RenderObject*)
STDERR: 7   0x7f1e0e4b9c63 WebCore::RenderTreeBuilder::attach(WebCore::RenderElement&amp;, std::unique_ptr&lt;WebCore::RenderObject, WebCore::RenderObjectDeleter&gt;, WebCore::RenderObject*)
STDERR: 8   0x7f1e0e4dfd40 WebCore::RenderTreeUpdater::createRenderer(WebCore::Element&amp;, WebCore::RenderStyle&amp;&amp;)
STDERR: 9   0x7f1e0e4df902 WebCore::RenderTreeUpdater::updateElementRenderer(WebCore::Element&amp;, WebCore::Style::ElementUpdate const&amp;)
STDERR: 10  0x7f1e0e4de9ba WebCore::RenderTreeUpdater::updateRenderTree(WebCore::ContainerNode&amp;)
STDERR: 11  0x7f1e0e4ddc49 WebCore::RenderTreeUpdater::commit(std::unique_ptr&lt;WebCore::Style::Update, std::default_delete&lt;WebCore::Style::Update&gt; &gt;)
STDERR: 12  0x7f1e0c5bea97 WebCore::Document::updateRenderTree(std::unique_ptr&lt;WebCore::Style::Update, std::default_delete&lt;WebCore::Style::Update&gt; &gt;)
STDERR: 13  0x7f1e0c5bf4d9 WebCore::Document::resolveStyle(WebCore::Document::ResolveStyleType)
STDERR: 14  0x7f1e0c5bfd19 WebCore::Document::updateStyleIfNeeded()
STDERR: 15  0x7f1e0c5c0118 WebCore::Document::updateLayout(WTF::OptionSet&lt;WebCore::LayoutOptions&gt;, WebCore::Element const*)
STDERR: 16  0x7f1e0c5bfdb2 WebCore::Document::updateLayoutIgnorePendingStylesheets(WTF::OptionSet&lt;WebCore::LayoutOptions&gt;, WebCore::Element const*)
STDERR: 17  0x7f1e0c6a3a35 WebCore::Element::offsetTop()
STDERR: 18  0x7f1e0c6a37a4 WebCore::Element::offsetTopForBindings()
STDERR: 19  0x7f1e09e1b18a jsHTMLElement_offsetTopGetter
STDERR: 20  0x7f1e09e48121 get&lt;WebCore::jsHTMLElement_offsetTopGetter, (WebCore::CastedThisErrorBehavior)3&gt;
STDERR: 21  0x7f1e09e1b203 jsHTMLElement_offsetTop
STDERR: 22  0x7f1dfbcf1bd6 WTF::FunctionPtr&lt;(WTF::PtrTag)57072, long (JSC::JSGlobalObject*, long, JSC::PropertyName), (WTF::FunctionAttributes)1&gt;::operator()(JSC::JSGlobalObject*, long, JSC::PropertyName) const
STDERR: 23  0x7f1dfbf939ae JSC::PropertySlot::customGetter(JSC::VM&amp;, JSC::PropertyName) const
STDERR: 24  0x7f1dfa087d92 JSC::PropertySlot::getValue(JSC::JSGlobalObject*, JSC::PropertyName) const
STDERR: 25  0x7f1dfa0b3354 JSC::JSValue::get(JSC::JSGlobalObject*, JSC::PropertyName, JSC::PropertySlot&amp;) const
STDERR: 26  0x7f1dfb8a9449 performLLIntGetByID
STDERR: 27  0x7f1dfb8a9cb4 llint_slow_path_get_by_id
STDERR: 28  0x7f1dfa019dc3 llint_op_get_by_id</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2052716</commentid>
    <comment_count>1</comment_count>
    <who name="Vitaly Dyackhov">vitaly</who>
    <bug_when>2024-08-14 06:45:25 -0700</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/32195</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2054402</commentid>
    <comment_count>2</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2024-08-21 06:35:16 -0700</bug_when>
    <thetext>&lt;rdar://problem/134414694&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2055640</commentid>
    <comment_count>3</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2024-08-27 07:58:27 -0700</bug_when>
    <thetext>Committed 282788@main (3ea9a89c350e): &lt;https://commits.webkit.org/282788@main&gt;

Reviewed commits have been landed. Closing PR #32195 and removing active labels.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>