Bug 244598

Summary: ASSERTION FAILED: !isCalculated()
Product: WebKit Reporter: zzzsss <zzzssspro0202>
Component: Layout and RenderingAssignee: Nobody <webkit-unassigned>
Status: NEW    
Severity: Normal CC: bfulgham, ddkilzer, simon.fraser, webkit-bug-importer, zalan
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 244898    
Attachments:
Description Flags
html none

zzzsss
Reported 2022-08-31 05:28:12 PDT
Created attachment 462046 [details] html ASSERTION FAILED: !isCalculated() /home/fuzzer/temp/webkit/webkitgtk-2.36.0/build2/WebCore/PrivateHeaders/WebCore/Length.h(341) : float WebCore::Length::value() const ** (MiniBrowser:141147): WARNING **: 21:32:05.176: WebProcess CRASHED
Attachments
html (2.42 MB, text/html)
2022-08-31 05:28 PDT, zzzsss 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2022-09-07 05:29:41 PDT
<rdar://problem/99645693>
David Kilzer (:ddkilzer)
Comment 2 2022-09-08 10:25:03 PDT
Hi zzzsss, we really need a longer stack trace than just one frame to diagnose this issue, especially if it doesn't reproduce easily on Apple OSes. There are so many places where WebCore::Length::value() is called that this single stack frame doesn't really help to tell us where the bug is: > /home/fuzzer/temp/webkit/webkitgtk-2.36.0/build2/WebCore/PrivateHeaders/WebCore/Length.h(341) : float WebCore::Length::value() const Thanks!
Note You need to log in before you can comment on or make changes to this bug.