Bug 215875 – REGRESSION: ASSERT NOT REACHED: WebCore::Layout::LayoutContext::verifyAndOutputMismatchingLayoutTree

• Component: New Bugs
• Status: RESOLVED FIXED

[Hector Lopez]

fast/layoutformattingcontext/line-heigt-when-text-is-inside-inline-container.html

Test is a constant failure according to history on macOS wk2 Debug. First occurrence of a crash is at r266126 but no indication that revision was cause. Might be associated with change made https://results.webkit.org/commit?branch=trunk&uuid=159837355000

History:
https://results.webkit.org/?suite=layout-tests&test=fast%2Flayoutformattingcontext%2Fline-heigt-when-text-is-inside-inline-container.html&limit=50000&platform=mac&flavor=wk2

Crash log:

(B)lock/(I)nline/I(N)line-block, (A)bsolute/Fi(X)ed/(R)elative/Stic(K)y, (F)loating, (O)verflow clip, Anon(Y)mous, (G)enerated, has(L)ayer, (C)omposited, (+)Dirty style, (+)Dirty layout
B---YGLC --* RenderView at (0,0) size 785x600 renderer->(0x335df9260)
B-----L- --    HTML RenderBlock at (0,0) size 785x600 renderer->(0x335df9710) node->(0x337bc0080)
B------- --      BODY RenderBody at (8,8) size 769x584 renderer->(0x335df9840) node->(0x337bc8080)
BA----L- --        DIV RenderBlock at (8,8) size 120x10 renderer->(0x337ba4490) node->(0x337bb6200)
-------- --          RootInlineBox at (0,-6) size 120x18 (0x337ba7290) renderer->(0x337ba4490)
-------- --            InlineTextBox at (0,0) size 120x10 (0x337ba7220) renderer->(0x337ba7120) run(0, 12) "text content"
I------- --          SPAN RenderInline renderer->(0x337ba7040) node->(0x337bb6290)
I------- --            #text RenderText renderer->(0x337ba7120) node->(0x337ba8210) length->(12) "text content"

Initial containing block at (0,0) size 785x600 layout box->(0x335df9970)
  HTML at (0,0) size 785x600 layout box->(0x335df9ad0)
    BODY at (8,8) size 769x584 layout box->(0x335df9ba0)
      block box at (8,8) size 120x18 layout box->(0x337ba46f0)
          lines are -> [0.00,0.00 120.00x18.00] 
          inline text box at (0.00,6.00) size 120.00x10.00 run(0, 12)
        SPAN inline box at (0,6) size 120x10 layout box->(0x337ba47c0)

DIV RenderBlock (positioned)(0x337ba4490) layoutBox(0x337ba46f0)
frameBox	renderer->(8,8) (120x10)	layout->(8,8) (120x18)

SHOULD NEVER BE REACHED
./layout/Verification.cpp(401) : static void WebCore::Layout::LayoutContext::verifyAndOutputMismatchingLayoutTree(const WebCore::Layout::LayoutState &, const WebCore::RenderView &)
1   0x32cbdeac9 WTFCrash
2   0x30dbee23b WTFCrashWithInfo(int, char const*, char const*, int)
3   0x311465c35 WebCore::Layout::LayoutContext::verifyAndOutputMismatchingLayoutTree(WebCore::Layout::LayoutState const&, WebCore::RenderView const&)
4   0x31181f4f2 WebCore::FrameViewLayoutContext::layoutUsingFormattingContext()
5   0x31182070f WebCore::FrameViewLayoutContext::layout()
6   0x310937a73 WebCore::Document::implicitClose()
7   0x3115a5b5b WebCore::FrameLoader::checkCallImplicitClose()
8   0x3115a564a WebCore::FrameLoader::checkCompleted()
9   0x3115a39f7 WebCore::FrameLoader::finishedParsing()
10  0x31094aea6 WebCore::Document::finishedParsing()
11  0x31110c358 WebCore::HTMLConstructionSite::finishedParsing()
12  0x311151c07 WebCore::HTMLTreeBuilder::finished()
13  0x31111b328 WebCore::HTMLDocumentParser::end()
14  0x311119178 WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd()
15  0x311118ea7 WebCore::HTMLDocumentParser::prepareToStopParsing()
16  0x31111b392 WebCore::HTMLDocumentParser::attemptToEnd()
17  0x31111b469 WebCore::HTMLDocumentParser::finish()
18  0x31153a172 WebCore::DocumentWriter::end()
19  0x311539174 WebCore::DocumentLoader::finishedLoading()
20  0x311538b71 WebCore::DocumentLoader::notifyFinished(WebCore::CachedResource&, WebCore::NetworkLoadMetrics const&)
21  0x3116c8f6a WebCore::CachedResource::checkNotify(WebCore::NetworkLoadMetrics const&)
22  0x3116c4c3c WebCore::CachedResource::finishLoading(WebCore::SharedBuffer*, WebCore::NetworkLoadMetrics const&)
23  0x3116c5fac WebCore::CachedRawResource::finishLoading(WebCore::SharedBuffer*, WebCore::NetworkLoadMetrics const&)
24  0x311643154 WebCore::SubresourceLoader::didFinishLoading(WebCore::NetworkLoadMetrics const&)
25  0x30167e0ea WebKit::WebResourceLoader::didFinishResourceLoad(WebCore::NetworkLoadMetrics const&)
26  0x301c95080 void IPC::callMemberFunctionImpl<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&), std::__1::tuple<WebCore::NetworkLoadMetrics>, 0ul>(WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&), std::__1::tuple<WebCore::NetworkLoadMetrics>&&, std::__1::integer_sequence<unsigned long, 0ul>)
27  0x301c94fb0 void IPC::callMemberFunction<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&), std::__1::tuple<WebCore::NetworkLoadMetrics>, std::__1::integer_sequence<unsigned long, 0ul> >(std::__1::tuple<WebCore::NetworkLoadMetrics>&&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&))
28  0x301c929ce void IPC::handleMessage<Messages::WebResourceLoader::DidFinishResourceLoad, WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&)>(IPC::Decoder&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&))
29  0x301c9233e WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&, IPC::Decoder&)
30  0x301641370 WebKit::NetworkProcessConnection::didReceiveMessage(IPC::Connection&, IPC::Decoder&)
31  0x3000750bf IPC::Connection::dispatchMessage(IPC::Decoder&)
LEAK: 1 WebPageProxy

[Radar WebKit Bug Importer]

<rdar://problem/67840583>

[Hector Lopez]

Test expectation while investigated:

https://trac.webkit.org/changeset/266211/webkit

[zalan]

This (not-enabled-in-shipping-configuration) code is in transitional state: see bug 215752. I'll re-enable this test once the last patch is landed (probably by the end of this week).