Bug 228226

Summary: ASSERTION FAILED: areEssentiallyEqual(rendererMappedResult, result) in RenderGeometryMap::mapToContainer
Product: WebKit Reporter: Chijin <tlock.chijin>
Component: Layout and RenderingAssignee: Nobody <webkit-unassigned>
Status: NEW    
Severity: Normal CC: bfulgham, simon.fraser, webkit-bug-importer, zalan
Priority: P2 Keywords: InRadar
Version: WebKit Local Build   
Hardware: PC   
OS: Linux   
Attachments:
Description Flags
This file is generated by a browser fuzzer none

Chijin
Reported 2021-07-23 01:55:54 PDT
Created attachment 434075 [details] This file is generated by a browser fuzzer I build webkitgtk-2.32.0 on Linux with Debug build. During the MiniBrowser renders the attachment html file, the WebProcess aborts with the ASSERTION FAILED info. ASSERTION FAILED: areEssentiallyEqual(rendererMappedResult, result) ../Source/WebCore/rendering/RenderGeometryMap.cpp(117) : WebCore::FloatPoint WebCore::RenderGeometryMap::mapToContainer(const WebCore::FloatPoint &, const WebCore::RenderLayerModelObject *) const
Attachments
This file is generated by a browser fuzzer (491.60 KB, text/html)
2021-07-23 01:55 PDT, Chijin 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2021-07-30 01:56:18 PDT
<rdar://problem/81315579>
Note You need to log in before you can comment on or make changes to this bug.