71264 2011-10-31 21:48:28 -0700 ASSERT(!m_inBeforeLoadEventHandler) triggered when forcing a layout in a beforeload listener. 2023-01-20 13:29:34 -0800 1 1 1 Unclassified WebKit DOM 528+ (Nightly build) All All RESOLVED CONFIGURATION CHANGED InRadar P2 Major --- 1 aestes webkit-unassigned abucur aestes ahmad.saleem792 rniwa oldest_to_newest 493738 0 113125 aestes 2011-10-31 21:48:28 -0700 Created attachment 113125 Test case Since HTMLObjectElement::updateWidget() is called during layout, we can do certain things in a beforeload listener that would trigger a reentrant layout and hence a re-entrant call to HTMLObjectElement::updateWidget(). A simple case would be calling event.target.offsetWidth in the listener for an object's beforeload event. See the attached test case. While this triggers an assertion in debug builds, it has no release symptom that I'm aware of. 493739 1 aestes 2011-10-31 21:48:51 -0700 <rdar://problem/9319618> 1926946 2 ahmad.saleem792 2023-01-20 10:06:47 -0800 I am not able to reproduce this assert in Debug WK2 MiniBrowser using build based of 259136@main on attached test case. Anything else required or any better step to reproduce beside loading this test case in debug build? Thanks! 113125 2011-10-31 21:48:28 -0700 2011-10-31 21:48:28 -0700 Test case style-recalc-in-beforeload.html text/html 170 aestes PHNjcmlwdD4KICAgIGRvY3VtZW50LmFkZEV2ZW50TGlzdGVuZXIoImJlZm9yZWxvYWQiLCBmdW5j dGlvbihldmVudCkgewogICAgICAgIGV2ZW50LnRhcmdldC5vZmZzZXRXaWR0aDsKICAgIH0sIHRy dWUpOwo8L3NjcmlwdD4KPGVtYmVkIHNyYz0iZGF0YTp0ZXh0L2h0bWwsUEFTUyI+PC9lbWJlZD4=