Bug 277262 – [Debug] CSS Multicol (crashtests) crashes on WebKit ToT (281494@main) in RenderTable::layout

• Status: NEW
• Component: Tables

[Ahmad Saleem]

Hi Team,

While looking into debug build, it seems that crashtests for css-multicol, we crash following 'break-before-multicol-caption.html' with below:

No crash log found for com.apple.WebKit.WebContent.Development:15273.

stdout:

stderr:
SHOULD NEVER BE REACHED
/Users/ahmadsaleem/Documents/GitHub/WebKit-Ahmad-Fork/Untitled/Source/WebCore/rendering/RenderTable.cpp(629) : virtual void WebCore::RenderTable::layout()
1   0x3313b26ec WebCore::RenderTable::layout()
2   0x3311bbeec WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
3   0x3311bb1ac WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&)
4   0x3311b92e4 WebCore::RenderBlockFlow::layoutInFlowChildren(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
5   0x3311b81a0 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
6   0x33119ac98 WebCore::RenderBlock::layout()
7   0x33128a608 WebCore::RenderFragmentedFlow::layout()
8   0x331376ae0 WebCore::RenderMultiColumnFlow::layout()
9   0x3311ce9c4 WebCore::RenderBlockFlow::layoutExcludedChildren(bool)
10  0x3311bb08c WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&)
11  0x3311b92e4 WebCore::RenderBlockFlow::layoutInFlowChildren(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
12  0x3311b81a0 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
13  0x33119ac98 WebCore::RenderBlock::layout()
14  0x3311bbeec WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
15  0x3311bb1ac WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&)
16  0x3311b92e4 WebCore::RenderBlockFlow::layoutInFlowChildren(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
17  0x3311b81a0 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
18  0x33119ac98 WebCore::RenderBlock::layout()
19  0x3311bbeec WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
20  0x3311bb1ac WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&)
21  0x3311b92e4 WebCore::RenderBlockFlow::layoutInFlowChildren(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
22  0x3311b81a0 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
23  0x33119ac98 WebCore::RenderBlock::layout()
24  0x3311bbeec WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
25  0x3311bb1ac WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&)
26  0x3311b92e4 WebCore::RenderBlockFlow::layoutInFlowChildren(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
27  0x3311b81a0 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
28  0x33119ac98 WebCore::RenderBlock::layout()
29  0x331426a70 WebCore::RenderView::layout()
30  0x3305b3b1c WebCore::LocalFrameViewLayoutContext::performLayout(bool)
31  0x3305b309c WebCore::LocalFrameViewLayoutContext::layout(bool)
com.apple.WebKit.WebContent.Development terminated (pid 15273) for reason: crash
LEAK: 1 WebPageProxy

___

Just raising so we can fix it.

Thanks!

[Radar WebKit Bug Importer]

<rdar://problem/132725822>

[Ahmad Saleem]

This test was added by following Blink commit - https://issues.chromium.org/issues/40242744

[Ahmad Saleem]

Created attachment 472005 [details]
Crash Logs

Actually all multicoloured tests crash here.