Bug 242786

Summary:	Assertion failure (!m_invoking) in web-platform-tests/web-animations/interfaces/Animation/commitStyles-crash.html
Product:	WebKit	Reporter:	Ryosuke Niwa <rniwa>
Component:	DOM	Assignee:	Ryosuke Niwa <rniwa>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified
See Also:	https://bugs.webkit.org/show_bug.cgi?id=242784

Ryosuke Niwa

Reported 2022-07-14 20:08:50 PDT

Assertion failure in imported/w3c/web-platform-tests/web-animations/interfaces/Animation/commitStyles-crash.html: SSERTION FAILED: !m_invoking ./dom/CustomElementReactionQueue.cpp(247) : void WebCore::CustomElementQueue::add(WebCore::Element &) 1 0x452bfb3d9 WTFCrash 2 0x46ff4183b WTFCrashWithInfo(int, char const*, char const*, int) 3 0x47334c53c WebCore::CustomElementQueue::add(WebCore::Element&) 4 0x47334b330 WebCore::CustomElementReactionQueue::enqueueElementOnAppropriateElementQueue(WebCore::Element&) 5 0x47334bd6a WebCore::CustomElementReactionQueue::enqueueAttributeChangedCallbackIfNeeded(WebCore::Element&, WebCore::QualifiedName const&, WTF::AtomString const&, WTF::AtomString const&) 6 0x47345f353 WebCore::Element::attributeChanged(WebCore::QualifiedName const&, WTF::AtomString const&, WTF::AtomString const&, WebCore::Element::AttributeModificationReason) 7 0x4735d35c0 WebCore::StyledElement::attributeChanged(WebCore::QualifiedName const&, WTF::AtomString const&, WTF::AtomString const&, WebCore::Element::AttributeModificationReason) 8 0x47346dec8 WebCore::Element::didModifyAttribute(WebCore::QualifiedName const&, WTF::AtomString const&, WTF::AtomString const&) 9 0x47345e900 WebCore::Element::setAttributeInternal(unsigned int, WebCore::QualifiedName const&, WTF::AtomString const&, WebCore::Element::SynchronizationOfLazyAttribute) 10 0x473455dbf WebCore::Element::setAttribute(WebCore::QualifiedName const&, WTF::AtomString const&) 11 0x472c29a63 WebCore::WebAnimation::commitStyles() 12 0x471b7a3a6 WebCore::jsWebAnimationPrototypeFunction_commitStylesBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebAnimation*)::'lambda'()::operator()() const 13 0x471b7a2f1 JSC::JSValue WebCore::toJS<WebCore::IDLUndefined, WebCore::jsWebAnimationPrototypeFunction_commitStylesBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebAnimation*)::'lambda'()>(JSC::JSGlobalObject&, JSC::ThrowScope&, WebCore::jsWebAnimationPrototypeFunction_commitStylesBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebAnimation*)::'lambda'()&&) 14 0x471b7a291 WebCore::jsWebAnimationPrototypeFunction_commitStylesBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebAnimation*) 15 0x471b7a19e long long WebCore::IDLOperation<WebCore::JSWebAnimation>::call<&(WebCore::jsWebAnimationPrototypeFunction_commitStylesBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebAnimation*)), (WebCore::CastedThisErrorBehavior)0>(JSC::JSGlobalObject&, JSC::CallFrame&, char const*) 16 0x471b77cf4 WebCore::jsWebAnimationPrototypeFunction_commitStyles(JSC::JSGlobalObject*, JSC::CallFrame*) 17 0x337e2480c038

Attachments
Add attachment proposed patch, testcase, etc.

Ryosuke Niwa

Comment 1 2022-07-15 23:15:49 PDT

This is due to https://github.com/w3c/csswg-drafts/issues/7507

Ryosuke Niwa

Comment 2 2022-07-16 00:05:33 PDT

Pull request: https://github.com/WebKit/WebKit/pull/2485

EWS

Comment 3 2022-07-17 15:38:33 PDT

Committed 252553@main (5b863a0f9261): <https://commits.webkit.org/252553@main> Reviewed commits have been landed. Closing PR #2485 and removing active labels.

Radar WebKit Bug Importer

Comment 4 2022-07-17 15:39:16 PDT

<rdar://problem/97164338>

Note You need to log in before you can comment on or make changes to this bug.