RESOLVED FIXED 251296
REGRESSION(259372@main): ASSERTION FAILED: !m_disabledFieldsetElementsCount on fast/forms/fieldset/fieldset-elements.html 
https://bugs.webkit.org/show_bug.cgi?id=251296
Summary REGRESSION(259372@main): ASSERTION FAILED: !m_disabledFieldsetElementsCount o...
Bri Harris
Reported Friday, January 27, 2023 10:48:03 PM UTC
fast/forms/fieldset/fieldset-elements.html is a flaky crash on iPad OS, Big Sur and later Debug. HISTORY: https://results.webkit.org/?suite=layout-tests&test=fast%2Fforms%2Ffieldset%2Ffieldset-grid.html Crash Log is attached. CRASH LOG TEXT: stderr: ASSERTION FAILED: !m_disabledFieldsetElementsCount dom/Document.cpp(682) : virtual WebCore::Document::~Document()
Attachments
Crash Log (3.65 KB, text/plain)
2023-01-27 14:49 PST, Bri Harris 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 Friday, January 27, 2023 10:48:47 PM UTC
<rdar://problem/104762152>
Bri Harris
Comment 2 Friday, January 27, 2023 10:49:12 PM UTC
Created attachment 464693 [details] Crash Log
Ryan Haddad
Comment 3 Saturday, January 28, 2023 12:03:09 AM UTC
I wonder if https://commits.webkit.org/259372@main is somehow related, it landed shortly before the first crash.
Alexey Shvayka
Comment 4 Monday, January 30, 2023 5:35:12 PM UTC
Thanks folks, that's definitely https://commits.webkit.org/259372@main, yet I don't immediately see the underlying cause: hasDisabledAttribute() in fieldset destructor is safe, addDisabledFieldsetElement() / removeDisabledFieldsetElement() call sites are unchanged... Trying to reproduce locally now...
Alexey Shvayka
Comment 5 Monday, January 30, 2023 8:16:39 PM UTC
Pull request: https://github.com/WebKit/WebKit/pull/9335
EWS
Comment 6 Monday, January 30, 2023 8:22:10 PM UTC
Committed 259580@main (f4d8caebb352): <https://commits.webkit.org/259580@main> Reviewed commits have been landed. Closing PR #9335 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.