298501 2025-09-06 10:26:31 -0700 ASSERT fires when calling CanvasRenderingContext2D::reset() after beginning a layer with a filter 2025-09-18 15:46:02 -0700 1 1 1 Unclassified WebKit Canvas WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 243816 267566 1 sabouhallawa sabouhallawa sabouhallawa webkit-bug-importer oldest_to_newest 2141446 0 sabouhallawa 2025-09-06 10:26:31 -0700 1. Enable "Canvas Filters" and "Canvas Layers" from Experimental Features 2. Open the attached test case in a debug mini-browser Result: This ASSERT fires: ASSERTION FAILED: purpose == m_state.purpose() /Volumes/Data/WebKit/OpenSource/Source/WebCore/platform/graphics/GraphicsContext.cpp(82) : virtual void WebCore::GraphicsContext::restore(GraphicsContextState::Purpose) 1 0x306f328b4 WebCore::GraphicsContext::restore(WebCore::GraphicsContextState::Purpose) 2 0x30721beec WebCore::DisplayList::Recorder::updateStateForEndTransparencyLayer() 3 0x11905d538 WebKit::RemoteGraphicsContextProxy::endTransparencyLayer() 4 0x30707b418 WebCore::TransparencyLayerContextSwitcher::endDrawSourceImage(WebCore::GraphicsContext&, WebCore::DestinationColorSpace const&) 5 0x305e2b078 WebCore::CanvasLayerContextSwitcher::~CanvasLayerContextSwitcher() 6 0x305e2b0f8 WebCore::CanvasLayerContextSwitcher::~CanvasLayerContextSwitcher() 7 0x305e2a4d8 WTF::RefCounted<WebCore::CanvasLayerContextSwitcher>::deref() const 8 0x305e2a45c WTF::DefaultRefDerefTraits<WebCore::CanvasLayerContextSwitcher>::derefIfNotNull(WebCore::CanvasLayerContextSwitcher*) 9 0x305e2a424 WTF::RefPtr<WebCore::CanvasLayerContextSwitcher, WTF::RawPtrTraits<WebCore::CanvasLayerContextSwitcher>, WTF::DefaultRefDerefTraits<WebCore::CanvasLayerContextSwitcher>>::~RefPtr() 10 0x305e203e4 WTF::RefPtr<WebCore::CanvasLayerContextSwitcher, WTF::RawPtrTraits<WebCore::CanvasLayerContextSwitcher>, WTF::DefaultRefDerefTraits<WebCore::CanvasLayerContextSwitcher>>::~RefPtr() 11 0x305e4acc0 WebCore::CanvasRenderingContext2DBase::State::~State() 12 0x305e3407c WebCore::CanvasRenderingContext2DBase::State::~State() 13 0x305e59fd4 WTF::VectorDestructor<true, WebCore::CanvasRenderingContext2DBase::State>::destruct(WebCore::CanvasRenderingContext2DBase::State*, WebCore::CanvasRenderingContext2DBase::State*) 14 0x305e59f30 WTF::VectorTypeOperations<WebCore::CanvasRenderingContext2DBase::State>::destruct(WebCore::CanvasRenderingContext2DBase::State*, WebCore::CanvasRenderingContext2DBase::State*) 15 0x305e33de4 WTF::Vector<WebCore::CanvasRenderingContext2DBase::State, 1ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>::resize(unsigned long) 16 0x305e33c50 WebCore::CanvasRenderingContext2DBase::reset() 17 0x300f38a20 WebCore::jsCanvasRenderingContext2DPrototypeFunction_resetBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSCanvasRenderingContext2D*)::'lambda'()::operator()() const 2141456 1 476664 sabouhallawa 2025-09-06 11:09:00 -0700 Created attachment 476664 test case 2141457 2 webkit-bug-importer 2025-09-06 11:09:34 -0700 <rdar://problem/160017871> 2141458 3 sabouhallawa 2025-09-06 11:38:32 -0700 Pull request: https://github.com/WebKit/WebKit/pull/50414 2141634 4 ews-feeder 2025-09-08 09:56:05 -0700 Committed 299695@main (ec19ea6f1987): <https://commits.webkit.org/299695@main> Reviewed commits have been landed. Closing PR #50414 and removing active labels. 476664 2025-09-06 11:09:00 -0700 2025-09-06 11:09:00 -0700 test case canvas-reset-layer-filter-no-end.html text/html 482 sabouhallawa PGJvZHk+CiAgICA8aDI+VGhpcyB0ZXN0IGVuc3VyZXMgdGhhdCBjYWxsaW5nIHJlc2V0KCkgYWZ0 ZXIgc3RhcnRpbmcgYSBsYXllciB3aXRoIGEgZmlsdGVyIGRvZXMgbm90IGNyYXNoLjwvaDI+CiAg ICA8Y2FudmFzIGlkPSJjYW52YXMiIHdpZHRoPSIxMDAiIGhlaWdodD0iNTAiPjwvY2FudmFzPgog ICAgPHNjcmlwdD4KICAgICAgICBpZiAod2luZG93LnRlc3RSdW5uZXIpCiAgICAgICAgICAgIHRl c3RSdW5uZXIuZHVtcEFzVGV4dCgpOwoKICAgICAgICBjb25zdCBjYW52YXMgPSBkb2N1bWVudC5n ZXRFbGVtZW50QnlJZCgiY2FudmFzIik7CiAgICAgICAgY29uc3QgY3R4ID0gY2FudmFzLmdldENv bnRleHQoJzJkJyk7CgogICAgICAgIGN0eC5maWx0ZXIgPSAnZHJvcC1zaGFkb3coMTBweCAxMHB4 IDBweCBncmVlbiknOwogICAgICAgIGN0eC5iZWdpbkxheWVyKCk7CiAgICAgICAgY3R4LnJlc2V0 KCk7CiAgICA8L3NjcmlwdD4KPC9ib2R5Pgo=