NEW 225247
[Multi-column] ASSERTION FAILED: !flow.spannerMap().get(placeholder.spanner()) 
https://bugs.webkit.org/show_bug.cgi?id=225247
Summary [Multi-column] ASSERTION FAILED: !flow.spannerMap().get(placeholder.spanner())
alan
Reported 2021-04-30 13:49:31 PDT
Created attachment 427444 [details] test case with floats and continuation.
Attachments
test case (291 bytes, text/html)
2021-04-30 13:49 PDT, alan 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2021-05-07 13:50:32 PDT
<rdar://problem/77671764>
Ahmad Saleem
Comment 2 2023-07-02 04:03:02 PDT
I built —debug build on top of 265693@main with some local patches but it does not assert when opened in “MiniBrowser” (WK2).
Ahmad Saleem
Comment 3 2023-07-02 04:08:32 PDT
(In reply to Ahmad Saleem from comment #2) > I built —debug build on top of 265693@main with some local patches but it > does not assert when opened in “MiniBrowser” (WK2). Ignore - it is reproducible. :-(
Ahmad Saleem
Comment 4 2023-07-02 04:09:40 PDT
ASSERTION FAILED: !flow.spannerMap().get(placeholder.spanner()) /Users/ahmadsaleem/Documents/GitHub-Webkit-origin/Webkit/Source/WebCore/rendering/updating/RenderTreeBuilderMultiColumn.cpp(302) : void WebCore::RenderTreeBuilder::MultiColumn::multiColumnDescendantInserted(WebCore::RenderMultiColumnFlow &, WebCore::RenderObject &) 1 0x137e8975c WTFCrash 2 0x28297b700 WebCore::BaseAudioContext::currentSampleFrame() const 3 0x28531f108 WebCore::RenderTreeBuilder::MultiColumn::multiColumnDescendantInserted(WebCore::RenderMultiColumnFlow&, WebCore::RenderObject&) 4 0x28530fdbc WebCore::RenderTreeBuilder::attachToRenderElementInternal(WebCore::RenderElement&, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderObject*, WebCore::RenderObject::IsInternalMove) 5 0x28530e230 WebCore::RenderTreeBuilder::attachToRenderElement(WebCore::RenderElement&, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderObject*) 6 0x28530eb08 WebCore::RenderTreeBuilder::Block::attachIgnoringContinuation(WebCore::RenderBlock&, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderObject*) 7 0x28530e034 WebCore::RenderTreeBuilder::Block::attach(WebCore::RenderBlock&, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderObject*) 8 0x28530df40 WebCore::RenderTreeBuilder::BlockFlow::attach(WebCore::RenderBlockFlow&, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderObject*) 9 0x28530d474 WebCore::RenderTreeBuilder::attachInternal(WebCore::RenderElement&, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderObject*) 10 0x28530c980 WebCore::RenderTreeBuilder::attach(WebCore::RenderElement&, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderObject*) 11 0x28531c554 WebCore::RenderTreeBuilder::Inline::splitFlow(WebCore::RenderInline&, WebCore::RenderObject*, std::__1::unique_ptr<WebCore::RenderBlock, WebCore::RenderObjectDeleter>, std::__1::unique_ptr<WebCore::RenderObject, WebCore::RenderObjectDeleter>, WebCore::RenderBoxModelObject*) 12 0x28531cfe0 WebCore::RenderTreeBuilder::Inline::childBecameNonInline(WebCore::RenderInline&, WebCore::RenderElement&) 13 0x285310cc0 WebCore::RenderTreeBuilder::childFlowStateChangesAndAffectsParentBlock(WebCore::RenderElement&) 14 0x285310b0c WebCore::RenderTreeBuilder::normalizeTreeAfterStyleChange(WebCore::RenderElement&, WebCore::RenderStyle&) 15 0x28532e164 WebCore::RenderTreeUpdater::updateRendererStyle(WebCore::RenderElement&, WebCore::RenderStyle&&, WebCore::StyleDifference) 16 0x28532d5ec WebCore::RenderTreeUpdater::updateElementRenderer(WebCore::Element&, WebCore::Style::ElementUpdate const&) 17 0x28532c954 WebCore::RenderTreeUpdater::updateRenderTree(WebCore::ContainerNode&) 18 0x28532c1cc WebCore::RenderTreeUpdater::commit(std::__1::unique_ptr<WebCore::Style::Update const, std::__1::default_delete<WebCore::Style::Update const>>) 19 0x2836534e8 WebCore::Document::updateRenderTree(std::__1::unique_ptr<WebCore::Style::Update const, std::__1::default_delete<WebCore::Style::Update const>>) 20 0x283653afc WebCore::Document::resolveStyle(WebCore::Document::ResolveStyleType) 21 0x283654714 WebCore::Document::updateStyleIfNeeded() 22 0x283672020 WebCore::Document::finishedParsing() 23 0x283db0498 WebCore::HTMLConstructionSite::finishedParsing() 24 0x283e08b88 WebCore::HTMLTreeBuilder::finished() 25 0x283db7bec WebCore::HTMLDocumentParser::end() 26 0x283db5b2c WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd() 27 0x283db5864 WebCore::HTMLDocumentParser::prepareToStopParsing() 28 0x283db7c58 WebCore::HTMLDocumentParser::attemptToEnd() 29 0x283db7d28 WebCore::HTMLDocumentParser::finish() 30 0x28422b928 WebCore::DocumentWriter::end() 31 0x28422aa08 WebCore::DocumentLoader::finishedLoading() 2023-07-02 12:07:43.139 MiniBrowser[92386:7413360] WebContent process crashed; reloading ASSERTION FAILED: m_connection /Users/ahmadsaleem/Documents/GitHub-Webkit-origin/Webkit/Source/WebKit/UIProcess/AuxiliaryProcessProxy.h(92) : IPC::Connection *WebKit::AuxiliaryProcessProxy::connection() const 1 0x13424175c WTFCrash 2 0x1161183d0 decltype(auto) std::__1::apply[abi:v15006]<void IPC::callMemberFunction<WebKit::DrawingArea, WebKit::DrawingArea, void (), std::__1::tuple<>>(WebKit::DrawingArea*, void (WebKit::DrawingArea::*)(), std::__1::tuple<>&&)::'lambda'(auto&&...), std::__1::tuple<>>(WebKit::DrawingArea&&, WebKit::DrawingArea&&) 3 0x117119c64 WebKit::AuxiliaryProcessProxy::connection() const 4 0x117bc36e0 WebKit::WebPageProxy::messageSenderConnection() const 5 0x117bc3544 WebKit::WebPageProxy::sendWheelEvent(WebKit::WebWheelEvent const&, WTF::OptionSet<WebCore::WheelEventProcessingSteps>, WebCore::RectEdges<bool>, std::__1::optional<bool>, bool) 6 0x117bc300c WebKit::WebPageProxy::continueWheelEventHandling(WebKit::WebWheelEvent const&, WebCore::WheelEventHandlingResult const&, std::__1::optional<bool>) 7 0x117bc2e10 WebKit::WebPageProxy::handleWheelEvent(WebKit::WebWheelEvent const&) 8 0x117bc2bc4 WebKit::WebPageProxy::handleNativeWheelEvent(WebKit::NativeWebWheelEvent const&) 9 0x1178db060 WebKit::WebViewImpl::scrollWheel(NSEvent*) 10 0x117490354 -[WKWebView(WKImplementationMac) scrollWheel:] 11 0x18ed83028 -[NSWindow(NSEventRouting) _reallySendEvent:isDelayedEvent:] 12 0x18ed82bc8 -[NSWindow(NSEventRouting) sendEvent:] 13 0x18ed81f0c -[NSApplication(NSEvent) sendEvent:] 14 0x18efd1fc4 -[NSApplication _handleEvent:] 15 0x18ec49368 -[NSApplication run] 16 0x18ec20794 NSApplicationMain 17 0x100d0cfd8 main 18 0x18b5fff28 start
Vitaly Dyackhov
Comment 5 2024-08-14 06:56:17 PDT
I think it's been fixed some time ago. The test still hits an assertion but it's another one. See https://bugs.webkit.org/show_bug.cgi?id=278100 for details.
Note You need to log in before you can comment on or make changes to this bug.