<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>307073</bug_id>
          
          <creation_ts>2026-02-05 08:30:16 -0800</creation_ts>
          <short_desc>FocusController assert can be hit with slot without fallback</short_desc>
          <delta_ts>2026-02-09 03:52:49 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Forms</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>NEW</bug_status>
          <resolution></resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=306984</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Alexey Proskuryakov">ap</reporter>
          <assigned_to name="Anne van Kesteren">annevk</assigned_to>
          <cc>annevk</cc>
    
    <cc>cdumez</cc>
    
    <cc>d_delatoba</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>wenson_hsieh</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2178402</commentid>
    <comment_count>0</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2026-02-05 08:30:16 -0800</bug_when>
    <thetext>imported/w3c/web-platform-tests/focus/focus-element-crash.html has started to crash with an assertion every time since commits.webkit.org/306393@main

https://results.safari.apple.com/?suite=layout-tests&amp;test=imported%2Fw3c%2Fweb-platform-tests%2Ffocus%2Ffocus-element-crash.html

ASSERTION FAILED: last
/Volumes/Data/worker/Apple-iOS-26-Simulator-Debug-Build/build/Source/WebCore/page/FocusController.cpp(958) : Element *WebCore::FocusController::previousFocusableElementOrScopeOwner(const FocusNavigationScope &amp;, Node *, const FocusEventData &amp;)
1   0x14ab54a4c WebCore::FocusController::previousFocusableElementOrScopeOwner(WebCore::FocusNavigationScope const&amp;, WebCore::Node*, WebCore::FocusEventData const&amp;)
2   0x14ab544d0 WebCore::FocusController::previousFocusableElementWithinScope(WebCore::FocusNavigationScope const&amp;, WebCore::Node*, WebCore::FocusEventData const&amp;)
3   0x14ab54604 WebCore::FocusController::previousFocusableElementWithinScope(WebCore::FocusNavigationScope const&amp;, WebCore::Node*, WebCore::FocusEventData const&amp;)
4   0x14ab5455c WebCore::FocusController::previousFocusableElementWithinScope(WebCore::FocusNavigationScope const&amp;, WebCore::Node*, WebCore::FocusEventData const&amp;)
5   0x14ab52ca8 WebCore::FocusController::findFocusableElementWithinScope(WebCore::FocusDirection, WebCore::FocusNavigationScope const&amp;, WebCore::Node*, WebCore::FocusEventData const&amp;, WebCore::ShouldFocusElement)
6   0x14ab53cb4 WebCore::FocusController::findFocusableElementAcrossFocusScope(WebCore::FocusDirection, WebCore::FocusNavigationScope const&amp;, WebCore::Node*, WebCore::FocusEventData const&amp;, WebCore::ShouldFocusElement)
7   0x14ab55178 WebCore::FocusController::previousFocusableElement(WebCore::Node&amp;)
8   0x130ee99a8 WebKit::nextAssistableElement(WebCore::Node*, WebCore::Page&amp;, bool)
9   0x130ecd3d4 WebKit::WebPage::focusedElementInformation()
10  0x1321e2a3c WebKit::WebPage::elementDidFocus(WebCore::Element&amp;, WebCore::FocusOptions const&amp;)
11  0x131fbeb20 WebKit::WebChromeClient::elementDidFocus(WebCore::Element&amp;, WebCore::FocusOptions const&amp;)
12  0x1499d2f60 WebCore::Element::dispatchFocusEvent(WTF::RefPtr&lt;WebCore::Element, WTF::RawPtrTraits&lt;WebCore::Element&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Element&gt;&gt;&amp;&amp;, WebCore::FocusOptions const&amp;)
13  0x14a07f328 WebCore::HTMLTextFormControlElement::dispatchFocusEvent(WTF::RefPtr&lt;WebCore::Element, WTF::RawPtrTraits&lt;WebCore::Element&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::Element&gt;&gt;&amp;&amp;, WebCore::FocusOptions const&amp;)
14  0x149868c2c WebCore::Document::setFocusedElement(WebCore::Element*, WebCore::FocusOptions const&amp;, WebCore::BroadcastFocusedElement)
15  0x14ab432d8 WebCore::FocusController::setFocusedElement(WebCore::Element*, WebCore::Frame*, WebCore::FocusOptions const&amp;, WebCore::BroadcastFocusedElement)
16  0x1499d240c WebCore::Element::focus(WebCore::FocusOptions const&amp;)
17  0x1499d25d8 WebCore::Element::focusForBindings(WebCore::FocusOptions&amp;&amp;)
18  0x145cefa80 WebCore::jsHTMLElementPrototypeFunction_focusBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSHTMLElement*)::&apos;lambda&apos;()::operator()() const
19  0x145cef904 JSC::JSValue WebCore::toJS&lt;WebCore::IDLUndefined, WebCore::jsHTMLElementPrototypeFunction_focusBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSHTMLElement*)::&apos;lambda&apos;()&gt;(JSC::JSGlobalObject&amp;, JSC::ThrowScope&amp;, WebCore::jsHTMLElementPrototypeFunction_focusBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSHTMLElement*)::&apos;lambda&apos;()&amp;&amp;)
20  0x145cef6d8 WebCore::jsHTMLElementPrototypeFunction_focusBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSHTMLElement*)
21  0x145cef598 long long WebCore::IDLOperation&lt;WebCore::JSHTMLElement&gt;::call&lt;&amp;WebCore::jsHTMLElementPrototypeFunction_focusBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSHTMLElement*), (WebCore::CastedThisErrorBehavior)0&gt;(JSC::JSGlobalObject&amp;, JSC::CallFrame&amp;, char const*)
22  0x145ce6510 WebCore::jsHTMLElementPrototypeFunction_focus(JSC::JSGlobalObject*, JSC::CallFrame*)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2178403</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2026-02-05 08:30:23 -0800</bug_when>
    <thetext>&lt;rdar://problem/169714010&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2179399</commentid>
    <comment_count>2</comment_count>
    <who name="Anne van Kesteren">annevk</who>
    <bug_when>2026-02-09 03:52:49 -0800</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/58196</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>