Bug 279424

Summary:	ASSERTION FAILED: !view().frameView().layoutContext().isPaintOffsetCacheEnabled() : virtual void WebCore::LegacyRenderSVGForeignObject::layout()
Product:	WebKit	Reporter:	Fujii Hironori <fujii.hironori>
Component:	SVG	Assignee:	Fujii Hironori <fujii.hironori>
Status:	NEW
Severity:	Normal	CC:	sabouhallawa, webkit-bug-importer, zimmermann, zsun
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Fujii Hironori

Reported 2024-09-10 00:02:03 PDT

Regressions: Unexpected crashes (1) imported/w3c/web-platform-tests/css/css-conditional/container-queries/svg-foreignobject-no-size-container.html [ Crash ] ASSERTION FAILED: !view().frameView().layoutContext().isPaintOffsetCacheEnabled() C:\webkit\wc\Source\WebCore\rendering/svg/legacy/LegacyRenderSVGForeignObject.cpp(126) : virtual void WebCore::LegacyRenderSVGForeignObject::layout() 1 00007FFDF2F68DAC WebCore::LegacyRenderSVGForeignObject::layout 2 00007FFDF23C53FE WebCore::LocalFrameViewLayoutContext::performLayout 3 00007FFDF23C46CD WebCore::LocalFrameViewLayoutContext::layout 4 00007FFDF1390DD2 WebCore::Document::updateLayout 5 00007FFDF23808BC WebCore::LocalFrameView::updateLayoutAndStyleIfNeededRecursive 6 00007FFDF2DB2EC5 WebCore::externalRepresentation 7 00007FFE1DE811C1 WebKit::WebPage::renderTreeExternalRepresentation 8 00007FFE1DC41AF8 WKBundlePageCopyRenderTreeExternalRepresentation 9 00007FFE0990A43C WTR::InjectedBundlePage::dump 10 00007FFE0990E0A6 WTR::dumpAfterWaitAttributeIsRemoved 11 00007FFE09909D2E WTR::InjectedBundlePage::frameDidChangeLocation 12 00007FFE099073D9 WTR::InjectedBundlePage::didFinishLoadForFrame 13 00007FFE09905937 WTR::InjectedBundlePage::didFinishLoadForFrame 14 00007FFE1DC2D073 WebKit::InjectedBundlePageLoaderClient::didFinishLoadForFrame 15 00007FFE1DDE3D38 WebKit::WebLocalFrameLoaderClient::dispatchDidFinishLoad 16 00007FFDF20B8D66 WebCore::FrameLoader::checkLoadCompleteForThisFrame 17 00007FFDF20A8D98 WebCore::FrameLoader::checkLoadComplete 18 00007FFDF2050C9B WebCore::DocumentLoader::finishedLoading 19 00007FFDF205086D WebCore::DocumentLoader::notifyFinished 20 00007FFDF21FD712 WebCore::CachedResource::checkNotify 21 00007FFDF21F8C84 WebCore::CachedResource::finishLoading 22 00007FFDF21F8A44 WebCore::CachedRawResource::finishLoading 23 00007FFDF217C267 WebCore::SubresourceLoader::didFinishLoading 24 00007FFE1DC98AA6 WebKit::WebResourceLoader::didFinishResourceLoad 25 00007FFE1C79E940 IPC::callMemberFunction<WebKit::WebResourceLoader,WebKit::WebResourceLoader,void (WebCore::NetworkLoadMetrics &&),std::tuple<WebCore::NetworkLoadMetrics> >::<lambda_1>::operator()<WebCore::NetworkLoadMetrics> 26 00007FFE1C79E8FD std::invoke<`lambda at C:\webkit\wc\Source\WebKit\Platform\IPC\HandleMessage.h:134:9',WebCore::NetworkLoadMetrics> 27 00007FFE1C79E8DA std::_Apply_impl<`lambda at C:\webkit\wc\Source\WebKit\Platform\IPC\HandleMessage.h:134:9',std::tuple<WebCore::NetworkLoadMetrics>,0> 28 00007FFE1C79E8A2 std::apply<`lambda at C:\webkit\wc\Source\WebKit\Platform\IPC\HandleMessage.h:134:9',std::tuple<WebCore::NetworkLoadMetrics> > 29 00007FFE1C79E85F IPC::callMemberFunction<WebKit::WebResourceLoader,WebKit::WebResourceLoader,void (WebCore::NetworkLoadMetrics &&),std::tuple<WebCore::NetworkLoadMetrics> > 30 00007FFE1C79A6DA IPC::handleMessage<Messages::WebResourceLoader::DidFinishResourceLoad,WebKit::WebResourceLoader,WebKit::WebResourceLoader,void (WebCore::NetworkLoadMetrics &&)> 31 00007FFE1C798979 WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage ERROR: 000001E1C6EFC0E0 - [PID=12824] WebProcessProxy::didClose (web process crash) C:\webkit\wc\Source\WebKit\UIProcess/WebProcessProxy.cpp(1226) : virtual void WebKit::WebProcessProxy::didClose(IPC::Connection &) ERROR: 000001E1C6EFC0E0 - [PID=12824] WebProcessProxy::processDidTerminateOrFailedToLaunch: reason=Crash C:\webkit\wc\Source\WebKit\UIProcess/WebProcessProxy.cpp(1234) : void WebKit::WebProcessProxy::processDidTerminateOrFailedToLaunch(ProcessTerminationReason) ERROR: 000001E1C6EDB520 - [pageProxyID=8, webPageID=9, PID=12824] WebPageProxy::processDidTerminate: (pid 12824), reason=Crash C:\webkit\wc\Source\WebKit\UIProcess/WebPageProxy.cpp(10114) : void WebKit::WebPageProxy::resetStateAfterProcessTermination(ProcessTerminationReason) ERROR: 000001E1C6EDB520 - [pageProxyID=8, webPageID=9, PID=12824] WebPageProxy::dispatchProcessDidTerminate: reason=Crash C:\webkit\wc\Source\WebKit\UIProcess/WebPageProxy.cpp(10176) : void WebKit::WebPageProxy::dispatchProcessDidTerminate(ProcessTerminationReason) WebProcess terminated (pid 12824) for reason: crash

Attachments
Add attachment proposed patch, testcase, etc.

Fujii Hironori

Comment 1 2024-09-10 00:05:23 PDT

History: https://results.webkit.org/?suite=layout-tests&test=imported%2Fw3c%2Fweb-platform-tests%2Fcss%2Fcss-conditional%2Fcontainer-queries%2Fsvg-foreignobject-no-size-container.html

Fujii Hironori

Comment 2 2024-09-10 00:06:53 PDT

Pull request: https://github.com/WebKit/WebKit/pull/33380

EWS

Comment 3 2024-09-10 00:09:16 PDT

Test gardening commit 283398@main (3c34cb530604): <https://commits.webkit.org/283398@main> Reviewed commits have been landed. Closing PR #33380 and removing active labels.

Radar WebKit Bug Importer

Comment 4 2024-09-17 00:03:27 PDT

<rdar://problem/136128694>

Note You need to log in before you can comment on or make changes to this bug.