Bug 276216

Summary: Crash under RenderLayerCompositor::traverseUnchangedSubtree()
Product: WebKit Reporter: Gerald Squelart <g_squelart>
Component: CompositingAssignee: Gerald Squelart <g_squelart>
Status: RESOLVED FIXED    
Severity: Normal CC: simon.fraser, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 275937    

Gerald Squelart
Reported 2024-07-03 23:23:18 PDT
Near-null access in: ``` WTF::HashTableAddResult<...> WTF::WeakListHashSet<WebCore::RenderLayer, ...>::add<WebCore::RenderLayer>(WebCore::RenderLayer const&) WebCore::RenderLayerCompositor::traverseUnchangedSubtree(WebCore::RenderLayer*, WebCore::RenderLayer&, WebCore::LayerOverlapMap&, WebCore::RenderLayerCompositor::CompositingState&, WebCore::RenderLayerCompositor::BackingSharingState&, bool&) WebCore::RenderLayerCompositor::computeCompositingRequirements(WebCore::RenderLayer*, WebCore::RenderLayer&, WebCore::LayerOverlapMap&, WebCore::RenderLayerCompositor::CompositingState&, WebCore::RenderLayerCompositor::BackingSharingState&, bool&) WebCore::RenderLayerCompositor::computeCompositingRequirements(WebCore::RenderLayer*, WebCore::RenderLayer&, WebCore::LayerOverlapMap&, WebCore::RenderLayerCompositor::CompositingState&, WebCore::RenderLayerCompositor::BackingSharingState&, bool&) WebCore::RenderLayerCompositor::computeCompositingRequirements(WebCore::RenderLayer*, WebCore::RenderLayer&, WebCore::LayerOverlapMap&, WebCore::RenderLayerCompositor::CompositingState&, WebCore::RenderLayerCompositor::BackingSharingState&, bool&) WebCore::RenderLayerCompositor::updateCompositingLayers(WebCore::CompositingUpdateType, WebCore::RenderLayer*) WebCore::Document::resolveStyle(WebCore::Document::ResolveStyleType) ``` rdar://130615925
Attachments
Add attachment proposed patch, testcase, etc.
Gerald Squelart
Comment 1 2024-07-03 23:26:54 PDT
Pull request: https://github.com/WebKit/WebKit/pull/30483
EWS
Comment 2 2024-07-04 21:13:15 PDT
Committed 280673@main (7b1e2f8cef2e): <https://commits.webkit.org/280673@main> Reviewed commits have been landed. Closing PR #30483 and removing active labels.
Simon Fraser (smfr)
Comment 3 2024-07-22 11:34:42 PDT
*** Bug 275937 has been marked as a duplicate of this bug. ***
Note You need to log in before you can comment on or make changes to this bug.