<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>294587</bug_id>
          
          <creation_ts>2025-06-16 17:21:19 -0700</creation_ts>
          <short_desc>[ASSERTION FAILED: Custom property should be handled by applyCustomProperty] variable-css-wide-keywords.html crashes on Debug build</short_desc>
          <delta_ts>2025-07-02 05:56:27 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>CSS</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>294585</dup_id>
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Ahmad Saleem">ahmad.saleem792</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>koivisto</cc>
    
    <cc>sam</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2124097</commentid>
    <comment_count>0</comment_count>
    <who name="Ahmad Saleem">ahmad.saleem792</who>
    <bug_when>2025-06-16 17:21:19 -0700</bug_when>
    <thetext>Hi Team,

While importing css-variables from WPT, it seems we crash following WPT test case:

WPT Test Case Live Link: http://wpt.live/css/css-variables/variable-css-wide-keywords.html

EWS Link for crash logs: https://ews-build.s3-us-west-2.amazonaws.com/macOS-Sequoia-Debug-WK2-Tests-EWS/b6247bde-25889-stress-mode/results.html

Crash log:

No crash log found for com.apple.WebKit.WebContent.Development:12303.

stdout:

stderr:
ASSERTION FAILED: Custom property should be handled by applyCustomProperty
id != CSSPropertyCustom
/Volumes/Data/worker/macOS-Sequoia-Debug-Build-EWS/build/Source/WebCore/style/StyleBuilder.cpp(308) : void WebCore::Style::Builder::applyProperty(CSSPropertyID, CSSValue &amp;, SelectorChecker::LinkMatchMask, CascadeLevel)
1   0x3071730c8 WebCore::Style::Builder::applyProperty(WebCore::CSSPropertyID, WebCore::CSSValue&amp;, WebCore::SelectorChecker::LinkMatchMask, WebCore::Style::CascadeLevel)
2   0x307172fe0 WebCore::Style::Builder::applyRollbackCascadeProperty(WebCore::Style::PropertyCascade::Property const&amp;, WebCore::SelectorChecker::LinkMatchMask)
3   0x3071b7328 WebCore::Style::Builder::applyCustomProperty(WTF::AtomString const&amp;, std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;&amp;&amp;, WebCore::SelectorChecker::LinkMatchMask, WebCore::Style::CascadeLevel)::$_0::operator()(WebCore::CSSWideKeyword&amp;&amp;) const
4   0x3071b6f0c decltype(auto) WTF::visitOneVariant&lt;0ul, WTF::Visitor&lt;WebCore::Style::Builder::applyCustomProperty(WTF::AtomString const&amp;, std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;&amp;&amp;, WebCore::SelectorChecker::LinkMatchMask, WebCore::Style::CascadeLevel)::$_0, WebCore::Style::Builder::applyCustomProperty(WTF::AtomString const&amp;, std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;&amp;&amp;, WebCore::SelectorChecker::LinkMatchMask, WebCore::Style::CascadeLevel)::$_1&gt;, std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;&gt;(WTF::Visitor&lt;WebCore::Style::Builder::applyCustomProperty(WTF::AtomString const&amp;, std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;&amp;&amp;, WebCore::SelectorChecker::LinkMatchMask, WebCore::Style::CascadeLevel)::$_0, WebCore::Style::Builder::applyCustomProperty(WTF::AtomString const&amp;, std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;&amp;&amp;, WebCore::SelectorChecker::LinkMatchMask, WebCore::Style::CascadeLevel)::$_1&gt;&amp;&amp;, std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;&amp;&amp;)
5   0x3071742e8 decltype(visitOneVariant(makeVisitor(std::forward&lt;WebCore::Style::Builder::applyCustomProperty(WTF::AtomString const&amp;, std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;&amp;&amp;, WebCore::SelectorChecker::LinkMatchMask, WebCore::Style::CascadeLevel)::$_0&gt;(fp0), std::forward&lt;WebCore::Style::Builder::applyCustomProperty(WTF::AtomString const&amp;, std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;&amp;&amp;, WebCore::SelectorChecker::LinkMatchMask, WebCore::Style::CascadeLevel)::$_1&gt;(fp0)), asVariant(std::forward&lt;std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;&gt;(fp)))) WTF::switchOn&lt;std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;, WebCore::Style::Builder::applyCustomProperty(WTF::AtomString const&amp;, std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;&amp;&amp;, WebCore::SelectorChecker::LinkMatchMask, WebCore::Style::CascadeLevel)::$_0, WebCore::Style::Builder::applyCustomProperty(WTF::AtomString const&amp;, std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;&amp;&amp;, WebCore::SelectorChecker::LinkMatchMask, WebCore::Style::CascadeLevel)::$_1&gt;(std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;&amp;&amp;, WebCore::Style::Builder::applyCustomProperty(WTF::AtomString const&amp;, std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;&amp;&amp;, WebCore::SelectorChecker::LinkMatchMask, WebCore::Style::CascadeLevel)::$_0&amp;&amp;, WebCore::Style::Builder::applyCustomProperty(WTF::AtomString const&amp;, std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;&amp;&amp;, WebCore::SelectorChecker::LinkMatchMask, WebCore::Style::CascadeLevel)::$_1&amp;&amp;)
6   0x307172e2c WebCore::Style::Builder::applyCustomProperty(WTF::AtomString const&amp;, std::__1::variant&lt;WTF::Ref&lt;WebCore::Style::CustomProperty const, WTF::RawPtrTraits&lt;WebCore::Style::CustomProperty const&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Style::CustomProperty const&gt;&gt;, WebCore::CSSWideKeyword&gt;&amp;&amp;, WebCore::SelectorChecker::LinkMatchMask, WebCore::Style::CascadeLevel)
7   0x307172440 WebCore::Style::Builder::applyCustomPropertyImpl(WTF::AtomString const&amp;, WebCore::Style::PropertyCascade::Property const&amp;)
8   0x3071725f0 WebCore::Style::Builder::applyCustomProperty(WTF::AtomString const&amp;)
9   0x3044cf3ec WebCore::propertyValueForVariableName(WTF::AtomString const&amp;, WebCore::CSSValueID, WebCore::Style::BuilderState&amp;)
10  0x3044cf668 WebCore::CSSVariableReferenceValue::tryResolveSimpleReference(WebCore::Style::BuilderState&amp;) const
11  0x30445c40c bool WebCore::CSSVariableReferenceValue::resolveAndCacheValue&lt;WebCore::CSSPendingSubstitutionValue::resolveValue(WebCore::Style::BuilderState&amp;, WebCore::CSSPropertyID) const::$_0&gt;(WebCore::Style::BuilderState&amp;, WebCore::CSSPendingSubstitutionValue::resolveValue(WebCore::Style::BuilderState&amp;, WebCore::CSSPropertyID) const::$_0 const&amp;) const
12  0x30445c320 WebCore::CSSPendingSubstitutionValue::resolveValue(WebCore::Style::BuilderState&amp;, WebCore::CSSPropertyID) const
13  0x307174358 WebCore::Style::Builder::resolveVariableReferences(WebCore::CSSPropertyID, WebCore::CSSValue&amp;)::$_0::operator()() const
14  0x307173738 WebCore::Style::Builder::resolveVariableReferences(WebCore::CSSPropertyID, WebCore::CSSValue&amp;)
15  0x3071730e8 WebCore::Style::Builder::applyProperty(WebCore::CSSPropertyID, WebCore::CSSValue&amp;, WebCore::SelectorChecker::LinkMatchMask, WebCore::Style::CascadeLevel)
16  0x307191fd4 WebCore::Style::Builder::applyCascadeProperty(WebCore::Style::PropertyCascade::Property const&amp;)::&apos;lambda&apos;(WebCore::SelectorChecker::LinkMatchMask)::operator()(WebCore::SelectorChecker::LinkMatchMask) const
17  0x307171eb8 WebCore::Style::Builder::applyCascadeProperty(WebCore::Style::PropertyCascade::Property const&amp;)
18  0x3071b62ec void WebCore::Style::Builder::applyPropertiesImpl&lt;(WebCore::Style::Builder::CustomPropertyCycleTracking)0&gt;(int, int)::&apos;lambda&apos;(unsigned long)::operator()(unsigned long) const
19  0x3071b64d0 void WTF::forEachSetBit&lt;unsigned long long, void WebCore::Style::Builder::applyPropertiesImpl&lt;(WebCore::Style::Builder::CustomPropertyCycleTracking)0&gt;(int, int)::&apos;lambda&apos;(unsigned long)&gt;(std::__1::span&lt;unsigned long long const, 18446744073709551615ul&gt;, unsigned long, void WebCore::Style::Builder::applyPropertiesImpl&lt;(WebCore::Style::Builder::CustomPropertyCycleTracking)0&gt;(int, int)::&apos;lambda&apos;(unsigned long) const&amp;)::&apos;lambda&apos;(unsigned long long, unsigned long)::operator()(unsigned long long, unsigned long) const
20  0x3071b63cc void WTF::forEachSetBit&lt;unsigned long long, void WebCore::Style::Builder::applyPropertiesImpl&lt;(WebCore::Style::Builder::CustomPropertyCycleTracking)0&gt;(int, int)::&apos;lambda&apos;(unsigned long)&gt;(std::__1::span&lt;unsigned long long const, 18446744073709551615ul&gt;, unsigned long, void WebCore::Style::Builder::applyPropertiesImpl&lt;(WebCore::Style::Builder::CustomPropertyCycleTracking)0&gt;(int, int)::&apos;lambda&apos;(unsigned long) const&amp;)
21  0x3071b6218 void WTF::BitSet&lt;382ul, unsigned long long&gt;::forEachSetBit&lt;void WebCore::Style::Builder::applyPropertiesImpl&lt;(WebCore::Style::Builder::CustomPropertyCycleTracking)0&gt;(int, int)::&apos;lambda&apos;(unsigned long)&gt;(unsigned long, void WebCore::Style::Builder::applyPropertiesImpl&lt;(WebCore::Style::Builder::CustomPropertyCycleTracking)0&gt;(int, int)::&apos;lambda&apos;(unsigned long) const&amp;) const
22  0x307172080 void WebCore::Style::Builder::applyPropertiesImpl&lt;(WebCore::Style::Builder::CustomPropertyCycleTracking)0&gt;(int, int)
23  0x307171b04 WebCore::Style::Builder::applyProperties(int, int)
24  0x3071719c4 WebCore::Style::Builder::applyNonHighPriorityProperties()
25  0x3071e31d4 WebCore::Style::Resolver::applyMatchedProperties(WebCore::Style::Resolver::State&amp;, WebCore::Style::MatchResult const&amp;, WebCore::Style::PropertyCascade::IncludedProperties&amp;&amp;)
26  0x3071e2c54 WebCore::Style::Resolver::unadjustedStyleForElement(WebCore::Element&amp;, WebCore::Style::ResolutionContext const&amp;, WebCore::RuleMatchingBehavior)
27  0x3071f2974 WebCore::Style::TreeResolver::styleForStyleable(WebCore::Styleable const&amp;, WebCore::Style::TreeResolver::ResolutionType, WebCore::Style::ResolutionContext const&amp;, WebCore::RenderStyle const*)::$_0::operator()() const
28  0x3071f20e8 WebCore::Style::TreeResolver::styleForStyleable(WebCore::Styleable const&amp;, WebCore::Style::TreeResolver::ResolutionType, WebCore::Style::ResolutionContext const&amp;, WebCore::RenderStyle const*)
29  0x3071f2f20 WebCore::Style::TreeResolver::resolveElement(WebCore::Element&amp;, WebCore::RenderStyle const*, WebCore::Style::TreeResolver::ResolutionType)
30  0x3071f8428 WebCore::Style::TreeResolver::resolveComposedTree()
31  0x3071f9ab4 WebCore::Style::TreeResolver::resolve()
com.apple.WebKit.WebContent.Development terminated (pid 12303) for reason: crash
LEAK: 1 WebPageProxy

Just raising so we can fix it.

Thanks!</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2125375</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2025-06-23 17:22:13 -0700</bug_when>
    <thetext>&lt;rdar://problem/154140335&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2127276</commentid>
    <comment_count>2</comment_count>
    <who name="Antti Koivisto">koivisto</who>
    <bug_when>2025-07-02 05:56:27 -0700</bug_when>
    <thetext>

*** This bug has been marked as a duplicate of bug 294585 ***</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>