NEW 228226
ASSERTION FAILED: areEssentiallyEqual(rendererMappedResult, result) in RenderGeometryMap::mapToContainer 
https://bugs.webkit.org/show_bug.cgi?id=228226
Summary ASSERTION FAILED: areEssentiallyEqual(rendererMappedResult, result) in Render...
Chijin
Reported 2021-07-23 01:55:54 PDT
Created attachment 434075 [details] This file is generated by a browser fuzzer I build webkitgtk-2.32.0 on Linux with Debug build. During the MiniBrowser renders the attachment html file, the WebProcess aborts with the ASSERTION FAILED info. ASSERTION FAILED: areEssentiallyEqual(rendererMappedResult, result) ../Source/WebCore/rendering/RenderGeometryMap.cpp(117) : WebCore::FloatPoint WebCore::RenderGeometryMap::mapToContainer(const WebCore::FloatPoint &, const WebCore::RenderLayerModelObject *) const
Attachments
This file is generated by a browser fuzzer (491.60 KB, text/html)
2021-07-23 01:55 PDT, Chijin 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2021-07-30 01:56:18 PDT
<rdar://problem/81315579>
Note You need to log in before you can comment on or make changes to this bug.