| Summary: | ASSERTION FAILED: areEssentiallyEqual(rendererMappedResult, result) in RenderGeometryMap::mapToContainer | ||||||
|---|---|---|---|---|---|---|---|
| Product: | WebKit | Reporter: | Chijin <tlock.chijin> | ||||
| Component: | Layout and Rendering | Assignee: | Nobody <webkit-unassigned> | ||||
| Status: | NEW --- | ||||||
| Severity: | Normal | CC: | bfulgham, simon.fraser, webkit-bug-importer, zalan | ||||
| Priority: | P2 | Keywords: | InRadar | ||||
| Version: | WebKit Local Build | ||||||
| Hardware: | PC | ||||||
| OS: | Linux | ||||||
| Attachments: |
|
||||||
Created attachment 434075 [details] This file is generated by a browser fuzzer I build webkitgtk-2.32.0 on Linux with Debug build. During the MiniBrowser renders the attachment html file, the WebProcess aborts with the ASSERTION FAILED info. ASSERTION FAILED: areEssentiallyEqual(rendererMappedResult, result) ../Source/WebCore/rendering/RenderGeometryMap.cpp(117) : WebCore::FloatPoint WebCore::RenderGeometryMap::mapToContainer(const WebCore::FloatPoint &, const WebCore::RenderLayerModelObject *) const