Bug 273072 - Sending a message on meta.ai sometimes crashes under Layout::LayoutState::geometryForBox
Summary: Sending a message on meta.ai sometimes crashes under Layout::LayoutState::geo...
Status: RESOLVED CONFIGURATION CHANGED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Layout and Rendering (show other bugs)
Version: Safari 17
Hardware: All All
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-04-22 09:56 PDT by bennyhobart
Modified: 2024-04-26 14:34 PDT (History)
4 users (show)

See Also:

Attachments
dump of bug, seems to be coming from scrollTo (35.19 KB, text/plain)
2024-04-22 09:56 PDT, bennyhobart 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description bennyhobart 2024-04-22 09:56:44 PDT 
Created attachment 471042 [details]
dump of bug, seems to be coming from scrollTo

As Title, this is something im seeing infrequently happen on meta.ai, it seems to be coming from the scrollTo implementation on safari (calling scroll on an element which doesn't exist? I'm not sure happens infrequently and hard to reproduce)
Comment 1 Alexey Proskuryakov 2024-04-23 11:09:20 PDT 
This is a somewhat common crash signature for WebKit, several issues that match it have been fixed in the past. 

The most recent fix was in macOS 14.5 beta, but it's hard to tell if it has addressed this particular case. Perhaps Alan (CC'ed) would have deeper insight. Or if you could try with the beta to see if this still reproduces, that would be appreciated.
Comment 2 bennyhobart 2024-04-23 11:11:15 PDT 
definitely will do some testing today
Comment 3 zalan 2024-04-23 11:19:47 PDT 
Yeah, we've fixed a few issues in RenderInline::linesBoundingBox and I haven't seen any related reports lately but please let me know if it still causes issues.
Comment 4 Alexey Proskuryakov 2024-04-26 14:34:09 PDT 
Marking as Configuration Changed pending testing results.