Bug 228226 - ASSERTION FAILED: areEssentiallyEqual(rendererMappedResult, result) in RenderGeometryMap::mapToContainer
Summary: ASSERTION FAILED: areEssentiallyEqual(rendererMappedResult, result) in Render...
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: Layout and Rendering (show other bugs)
Version: WebKit Local Build
Hardware: PC Linux
: P2 Normal
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2021-07-23 01:55 PDT by Chijin
Modified: 2021-07-30 01:56 PDT (History)
4 users (show)

See Also:

Attachments
This file is generated by a browser fuzzer (491.60 KB, text/html)
2021-07-23 01:55 PDT, Chijin 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Chijin 2021-07-23 01:55:54 PDT 
Created attachment 434075 [details]
This file is generated by a browser fuzzer

I build webkitgtk-2.32.0 on Linux with Debug build. During the MiniBrowser renders the attachment html file, the WebProcess aborts with the ASSERTION FAILED info.

ASSERTION FAILED: areEssentiallyEqual(rendererMappedResult, result)
../Source/WebCore/rendering/RenderGeometryMap.cpp(117) : WebCore::FloatPoint WebCore::RenderGeometryMap::mapToContainer(const WebCore::FloatPoint &, const WebCore::RenderLayerModelObject *) const
Comment 1 Radar WebKit Bug Importer 2021-07-30 01:56:18 PDT 
<rdar://problem/81315579>