Bug 245745 – [LBSE] (254863@main): [ iOS16 Debug ] 2X svg/compositing/inline-svg-non-integer-position-display-(Layout tests) are constant crashes

• Component: New Bugs
• Status: NEW

[Hercules Hjalmarsson]

svg/compositing/inline-svg-non-integer-position-display-inline-composited.html
svg/compositing/inline-svg-non-integer-position-display-block-composited.html

Are two constant crashes on iOS16 Debug ToT and since introduced at 254863@main.

HISTORY:
https://results.webkit.org/?suite=layout-tests&suite=layout-tests&test=svg%2Fcompositing%2Finline-svg-non-integer-position-display-block-composited.html&test=svg%2Fcompositing%2Finline-svg-non-integer-position-display-inline-composited.html

DIFF:
ASSERTION FAILED: is<Target>(source)
/OpenSource/WebKitBuild/Debug-iphonesimulator/usr/local/include/wtf/TypeCasts.h(79) : match_constness_t<Source, Target> &WTF::downcast(Source &) [Target = WebCore::RenderBoxModelObject, Source = WebCore::RenderObject]
1   0x7ff7b355d250 (null)
2   0x65478cc95 (null)
3   0x1f522add55 (null)
4   0x7ff7b355d250 (null)
5   0x7ff7b355d208 (null)
6   0x7ff7b355d220 (null)
7   0x6522adf1f WTFPrintBacktrace
8   0x7ff7b355d220 (null)
9   0x655174820 vtable for CrashLogPrintStream
10  0x1fb355d23c (null)
11  0x7ff7b355d250 (null)
12  0x7ff7b355d350 (null)
13  0x6522adebc WTFReportBacktrace
14  0x3000000008 (null)
15  0x21cfaf686a (null)
16  0x65237ca5f WTFGetBacktrace
17  0x6522adea3 WTFReportBacktrace
18  0x6522adfa9 WTFCrash
19  0x6522adfc9 WTFCrashWithSecurityImplication
20  0x6cac39b71 std::__1::conditional<std::is_const_v<WebCore::RenderObject>, std::__1::add_const<WebCore::RenderBoxModelObject>::type, std::__1::remove_const<WebCore::RenderBoxModelObject>::type>::type& WTF::downcast<WebCore::RenderBoxModelObject, WebCore::RenderObject>(WebCore::RenderObject&)
21  0x6ce2a7927 WebCore::RenderObject::destroy()
22  0x6ce2a7759 WebCore::RenderObjectDeleter::operator()(WebCore::RenderObject*) const
23  0x6ce19203c std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>::reset(WebCore::RenderObject*)
24  0x6ce191fd9 std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>::~unique_ptr()
25  0x6ce165955 std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>::~unique_ptr()
26  0x6ce497335 WebCore::RenderTreeBuilder::destroy(WebCore::RenderObject&, WebCore::RenderTreeBuilder::CanCollapseAnonymousBlock)
27  0x6ce49d453 WebCore::RenderTreeBuilder::destroyAndCleanUpAnonymousWrappers(WebCore::RenderObject&)
28  0x6ce4bc821 WebCore::RenderTreeUpdater::tearDownRenderers(WebCore::Element&, WebCore::RenderTreeUpdater::TeardownType, WebCore::RenderTreeBuilder&)::$_6::operator()(unsigned int) const
29  0x6ce4bb375 WebCore::RenderTreeUpdater::tearDownRenderers(WebCore::Element&, WebCore::RenderTreeUpdater::TeardownType, WebCore::RenderTreeBuilder&)
30  0x6ce4bc4ae WebCore::RenderTreeUpdater::tearDownRenderers(WebCore::Element&)
31  0x6cc95c912 WebCore::Document::destroyRenderTree()
com.apple.WebKit.WebContent.Development terminated (pid 49397) for reason: crash

BUILD URL:
https://build.webkit.org/results/Apple-iPadOS-16-Simulator-Debug-WK2-Tests/254907@main%20(56)/results.html

[Radar WebKit Bug Importer]

<rdar://problem/100468233>

[Hercules Hjalmarsson]

This issue can be bisected to 254863@main using command:

run-webkit-tests --debug --iterations=2 --ios-simulator svg/compositing/inline-svg-non-integer-position-display-inline-composited.html

[EWS]

Test gardening commit 254926@main (7f82ced676c2): <https://commits.webkit.org/254926@main>

Reviewed commits have been landed. Closing PR #4763 and removing active labels.

[Nikolas Zimmermann]

Sorry for the delay- will take care.