<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>279421</bug_id>
          
          <creation_ts>2024-09-09 23:42:07 -0700</creation_ts>
          <short_desc>ASSERTION FAILED: newFloatItem.layoutBox() =&gt; m_list.findIf([&amp;] (auto&amp; entry) { return entry.layoutBox() == newFloatItem.layoutBox(); }) == notFound : void WebCore::Layout::PlacedFloats::append(Item)</short_desc>
          <delta_ts>2026-03-08 21:59:55 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Layout and Rendering</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>NEW</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Fujii Hironori">fujii</reporter>
          <assigned_to name="Fujii Hironori">fujii</assigned_to>
          <cc>bfulgham</cc>
    
    <cc>csaavedra</cc>
    
    <cc>simon.fraser</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>zalan</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2058875</commentid>
    <comment_count>0</comment_count>
    <who name="Fujii Hironori">fujii</who>
    <bug_when>2024-09-09 23:42:07 -0700</bug_when>
    <thetext>Regressions: Unexpected crashes (1)
  imported/w3c/web-platform-tests/css/css-multicol/crashtests/inline-float-parallel-flow.html [ Crash ]

ASSERTION FAILED: newFloatItem.layoutBox() =&gt; m_list.findIf([&amp;] (auto&amp; entry) { return entry.layoutBox() == newFloatItem.layoutBox(); }) == notFound
C:\webkit\wc\Source\WebCore\layout/floats/PlacedFloats.cpp(85) : void WebCore::Layout::PlacedFloats::append(Item)
1   00007FFDF1EC1B96 WebCore::Layout::PlacedFloats::append
2   00007FFDF1F5D85B WebCore::Layout::LineBuilder::tryPlacingFloatBox::&lt;lambda_0&gt;::operator()
3   00007FFDF1F5D1FF WebCore::Layout::LineBuilder::tryPlacingFloatBox
4   00007FFDF1F595EF WebCore::Layout::LineBuilder::placeInlineAndFloatContent::&lt;lambda_0&gt;::operator()
5   00007FFDF1F582C3 WebCore::Layout::LineBuilder::placeInlineAndFloatContent
6   00007FFDF1F574EA WebCore::Layout::LineBuilder::layoutInlineContent
7   00007FFDF1F148F8 WebCore::Layout::InlineFormattingContext::lineLayout
8   00007FFDF1F13B2E WebCore::Layout::InlineFormattingContext::layout
9   00007FFDF200E289 WebCore::LayoutIntegration::LineLayout::layout
10  00007FFDF2B24D7A WebCore::RenderBlockFlow::layoutInlineContent
11  00007FFDF2B22636 WebCore::RenderBlockFlow::layoutInlineChildren
12  00007FFDF2B217EA WebCore::RenderBlockFlow::layoutInFlowChildren
13  00007FFDF2B20459 WebCore::RenderBlockFlow::layoutBlock
14  00007FFDF2B0338F WebCore::RenderBlock::layout
15  00007FFDF2B23767 WebCore::RenderBlockFlow::layoutBlockChild
16  00007FFDF2B22A19 WebCore::RenderBlockFlow::layoutBlockChildren
17  00007FFDF2B21846 WebCore::RenderBlockFlow::layoutInFlowChildren
18  00007FFDF2B20459 WebCore::RenderBlockFlow::layoutBlock
19  00007FFDF2B0338F WebCore::RenderBlock::layout
20  00007FFDF2C04485 WebCore::RenderFragmentedFlow::layout
21  00007FFDF2D08827 WebCore::RenderMultiColumnFlow::layout
22  00007FFDF2B35545 WebCore::RenderBlockFlow::layoutExcludedChildren
23  00007FFDF2B228AA WebCore::RenderBlockFlow::layoutBlockChildren
24  00007FFDF2B21846 WebCore::RenderBlockFlow::layoutInFlowChildren
25  00007FFDF2B20459 WebCore::RenderBlockFlow::layoutBlock
26  00007FFDF2B0338F WebCore::RenderBlock::layout
27  00007FFDF2B23767 WebCore::RenderBlockFlow::layoutBlockChild
28  00007FFDF2B22A19 WebCore::RenderBlockFlow::layoutBlockChildren
29  00007FFDF2B21846 WebCore::RenderBlockFlow::layoutInFlowChildren
30  00007FFDF2B20459 WebCore::RenderBlockFlow::layoutBlock
31  00007FFDF2B0338F WebCore::RenderBlock::layout
ERROR: 0000021C67F33CB0 - [PID=27136] WebProcessProxy::didClose (web process crash)
C:\webkit\wc\Source\WebKit\UIProcess/WebProcessProxy.cpp(1226) : virtual void WebKit::WebProcessProxy::didClose(IPC::Connection &amp;)
ERROR: 0000021C67F33CB0 - [PID=27136] WebProcessProxy::processDidTerminateOrFailedToLaunch: reason=Crash
C:\webkit\wc\Source\WebKit\UIProcess/WebProcessProxy.cpp(1234) : void WebKit::WebProcessProxy::processDidTerminateOrFailedToLaunch(ProcessTerminationReason)
ERROR: 0000021C67F17200 - [pageProxyID=8, webPageID=9, PID=27136] WebPageProxy::processDidTerminate: (pid 27136), reason=Crash
C:\webkit\wc\Source\WebKit\UIProcess/WebPageProxy.cpp(10114) : void WebKit::WebPageProxy::resetStateAfterProcessTermination(ProcessTerminationReason)
ERROR: 0000021C67F17200 - [pageProxyID=8, webPageID=9, PID=27136] WebPageProxy::dispatchProcessDidTerminate: reason=Crash
C:\webkit\wc\Source\WebKit\UIProcess/WebPageProxy.cpp(10176) : void WebKit::WebPageProxy::dispatchProcessDidTerminate(ProcessTerminationReason)
WebProcess terminated (pid 27136) for reason: crash</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2058876</commentid>
    <comment_count>1</comment_count>
    <who name="Fujii Hironori">fujii</who>
    <bug_when>2024-09-09 23:47:15 -0700</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/33377</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2059069</commentid>
    <comment_count>2</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2024-09-10 12:56:26 -0700</bug_when>
    <thetext>Test gardening commit 283436@main (12dfb5ce7510): &lt;https://commits.webkit.org/283436@main&gt;

Reviewed commits have been landed. Closing PR #33377 and removing active labels.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2060698</commentid>
    <comment_count>3</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2024-09-16 23:43:12 -0700</bug_when>
    <thetext>&lt;rdar://problem/136128153&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2140869</commentid>
    <comment_count>4</comment_count>
    <who name="Fujii Hironori">fujii</who>
    <bug_when>2025-09-04 01:44:43 -0700</bug_when>
    <thetext>*** Bug 286130 has been marked as a duplicate of this bug. ***</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2188291</commentid>
    <comment_count>5</comment_count>
    <who name="Fujii Hironori">fujii</who>
    <bug_when>2026-03-08 21:59:55 -0700</bug_when>
    <thetext>*** Bug 286130 has been marked as a duplicate of this bug. ***</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>