Bug 279421 – ASSERTION FAILED: newFloatItem.layoutBox() => m_list.findIf([&] (auto& entry) { return entry.layoutBox() == newFloatItem.layoutBox(); }) == notFound : void WebCore::Layout::PlacedFloats::append(Item)

• Component: Layout and Rendering
• Status: NEW

[Fujii Hironori]

Regressions: Unexpected crashes (1)
  imported/w3c/web-platform-tests/css/css-multicol/crashtests/inline-float-parallel-flow.html [ Crash ]

ASSERTION FAILED: newFloatItem.layoutBox() => m_list.findIf([&] (auto& entry) { return entry.layoutBox() == newFloatItem.layoutBox(); }) == notFound
C:\webkit\wc\Source\WebCore\layout/floats/PlacedFloats.cpp(85) : void WebCore::Layout::PlacedFloats::append(Item)
1   00007FFDF1EC1B96 WebCore::Layout::PlacedFloats::append
2   00007FFDF1F5D85B WebCore::Layout::LineBuilder::tryPlacingFloatBox::<lambda_0>::operator()
3   00007FFDF1F5D1FF WebCore::Layout::LineBuilder::tryPlacingFloatBox
4   00007FFDF1F595EF WebCore::Layout::LineBuilder::placeInlineAndFloatContent::<lambda_0>::operator()
5   00007FFDF1F582C3 WebCore::Layout::LineBuilder::placeInlineAndFloatContent
6   00007FFDF1F574EA WebCore::Layout::LineBuilder::layoutInlineContent
7   00007FFDF1F148F8 WebCore::Layout::InlineFormattingContext::lineLayout
8   00007FFDF1F13B2E WebCore::Layout::InlineFormattingContext::layout
9   00007FFDF200E289 WebCore::LayoutIntegration::LineLayout::layout
10  00007FFDF2B24D7A WebCore::RenderBlockFlow::layoutInlineContent
11  00007FFDF2B22636 WebCore::RenderBlockFlow::layoutInlineChildren
12  00007FFDF2B217EA WebCore::RenderBlockFlow::layoutInFlowChildren
13  00007FFDF2B20459 WebCore::RenderBlockFlow::layoutBlock
14  00007FFDF2B0338F WebCore::RenderBlock::layout
15  00007FFDF2B23767 WebCore::RenderBlockFlow::layoutBlockChild
16  00007FFDF2B22A19 WebCore::RenderBlockFlow::layoutBlockChildren
17  00007FFDF2B21846 WebCore::RenderBlockFlow::layoutInFlowChildren
18  00007FFDF2B20459 WebCore::RenderBlockFlow::layoutBlock
19  00007FFDF2B0338F WebCore::RenderBlock::layout
20  00007FFDF2C04485 WebCore::RenderFragmentedFlow::layout
21  00007FFDF2D08827 WebCore::RenderMultiColumnFlow::layout
22  00007FFDF2B35545 WebCore::RenderBlockFlow::layoutExcludedChildren
23  00007FFDF2B228AA WebCore::RenderBlockFlow::layoutBlockChildren
24  00007FFDF2B21846 WebCore::RenderBlockFlow::layoutInFlowChildren
25  00007FFDF2B20459 WebCore::RenderBlockFlow::layoutBlock
26  00007FFDF2B0338F WebCore::RenderBlock::layout
27  00007FFDF2B23767 WebCore::RenderBlockFlow::layoutBlockChild
28  00007FFDF2B22A19 WebCore::RenderBlockFlow::layoutBlockChildren
29  00007FFDF2B21846 WebCore::RenderBlockFlow::layoutInFlowChildren
30  00007FFDF2B20459 WebCore::RenderBlockFlow::layoutBlock
31  00007FFDF2B0338F WebCore::RenderBlock::layout
ERROR: 0000021C67F33CB0 - [PID=27136] WebProcessProxy::didClose (web process crash)
C:\webkit\wc\Source\WebKit\UIProcess/WebProcessProxy.cpp(1226) : virtual void WebKit::WebProcessProxy::didClose(IPC::Connection &)
ERROR: 0000021C67F33CB0 - [PID=27136] WebProcessProxy::processDidTerminateOrFailedToLaunch: reason=Crash
C:\webkit\wc\Source\WebKit\UIProcess/WebProcessProxy.cpp(1234) : void WebKit::WebProcessProxy::processDidTerminateOrFailedToLaunch(ProcessTerminationReason)
ERROR: 0000021C67F17200 - [pageProxyID=8, webPageID=9, PID=27136] WebPageProxy::processDidTerminate: (pid 27136), reason=Crash
C:\webkit\wc\Source\WebKit\UIProcess/WebPageProxy.cpp(10114) : void WebKit::WebPageProxy::resetStateAfterProcessTermination(ProcessTerminationReason)
ERROR: 0000021C67F17200 - [pageProxyID=8, webPageID=9, PID=27136] WebPageProxy::dispatchProcessDidTerminate: reason=Crash
C:\webkit\wc\Source\WebKit\UIProcess/WebPageProxy.cpp(10176) : void WebKit::WebPageProxy::dispatchProcessDidTerminate(ProcessTerminationReason)
WebProcess terminated (pid 27136) for reason: crash

[Fujii Hironori]

Pull request: https://github.com/WebKit/WebKit/pull/33377

[EWS]

Test gardening commit 283436@main (12dfb5ce7510): <https://commits.webkit.org/283436@main>

Reviewed commits have been landed. Closing PR #33377 and removing active labels.

[Radar WebKit Bug Importer]

<rdar://problem/136128153>