NEW 279421
ASSERTION FAILED: newFloatItem.layoutBox() => m_list.findIf([&] (auto& entry) { return entry.layoutBox() == newFloatItem.layoutBox(); }) == notFound : void WebCore::Layout::PlacedFloats::append(Item) 
https://bugs.webkit.org/show_bug.cgi?id=279421
Summary ASSERTION FAILED: newFloatItem.layoutBox() => m_list.findIf([&] (auto& entry)...
Fujii Hironori
Reported 2024-09-09 23:42:07 PDT
Regressions: Unexpected crashes (1) imported/w3c/web-platform-tests/css/css-multicol/crashtests/inline-float-parallel-flow.html [ Crash ] ASSERTION FAILED: newFloatItem.layoutBox() => m_list.findIf([&] (auto& entry) { return entry.layoutBox() == newFloatItem.layoutBox(); }) == notFound C:\webkit\wc\Source\WebCore\layout/floats/PlacedFloats.cpp(85) : void WebCore::Layout::PlacedFloats::append(Item) 1 00007FFDF1EC1B96 WebCore::Layout::PlacedFloats::append 2 00007FFDF1F5D85B WebCore::Layout::LineBuilder::tryPlacingFloatBox::<lambda_0>::operator() 3 00007FFDF1F5D1FF WebCore::Layout::LineBuilder::tryPlacingFloatBox 4 00007FFDF1F595EF WebCore::Layout::LineBuilder::placeInlineAndFloatContent::<lambda_0>::operator() 5 00007FFDF1F582C3 WebCore::Layout::LineBuilder::placeInlineAndFloatContent 6 00007FFDF1F574EA WebCore::Layout::LineBuilder::layoutInlineContent 7 00007FFDF1F148F8 WebCore::Layout::InlineFormattingContext::lineLayout 8 00007FFDF1F13B2E WebCore::Layout::InlineFormattingContext::layout 9 00007FFDF200E289 WebCore::LayoutIntegration::LineLayout::layout 10 00007FFDF2B24D7A WebCore::RenderBlockFlow::layoutInlineContent 11 00007FFDF2B22636 WebCore::RenderBlockFlow::layoutInlineChildren 12 00007FFDF2B217EA WebCore::RenderBlockFlow::layoutInFlowChildren 13 00007FFDF2B20459 WebCore::RenderBlockFlow::layoutBlock 14 00007FFDF2B0338F WebCore::RenderBlock::layout 15 00007FFDF2B23767 WebCore::RenderBlockFlow::layoutBlockChild 16 00007FFDF2B22A19 WebCore::RenderBlockFlow::layoutBlockChildren 17 00007FFDF2B21846 WebCore::RenderBlockFlow::layoutInFlowChildren 18 00007FFDF2B20459 WebCore::RenderBlockFlow::layoutBlock 19 00007FFDF2B0338F WebCore::RenderBlock::layout 20 00007FFDF2C04485 WebCore::RenderFragmentedFlow::layout 21 00007FFDF2D08827 WebCore::RenderMultiColumnFlow::layout 22 00007FFDF2B35545 WebCore::RenderBlockFlow::layoutExcludedChildren 23 00007FFDF2B228AA WebCore::RenderBlockFlow::layoutBlockChildren 24 00007FFDF2B21846 WebCore::RenderBlockFlow::layoutInFlowChildren 25 00007FFDF2B20459 WebCore::RenderBlockFlow::layoutBlock 26 00007FFDF2B0338F WebCore::RenderBlock::layout 27 00007FFDF2B23767 WebCore::RenderBlockFlow::layoutBlockChild 28 00007FFDF2B22A19 WebCore::RenderBlockFlow::layoutBlockChildren 29 00007FFDF2B21846 WebCore::RenderBlockFlow::layoutInFlowChildren 30 00007FFDF2B20459 WebCore::RenderBlockFlow::layoutBlock 31 00007FFDF2B0338F WebCore::RenderBlock::layout ERROR: 0000021C67F33CB0 - [PID=27136] WebProcessProxy::didClose (web process crash) C:\webkit\wc\Source\WebKit\UIProcess/WebProcessProxy.cpp(1226) : virtual void WebKit::WebProcessProxy::didClose(IPC::Connection &) ERROR: 0000021C67F33CB0 - [PID=27136] WebProcessProxy::processDidTerminateOrFailedToLaunch: reason=Crash C:\webkit\wc\Source\WebKit\UIProcess/WebProcessProxy.cpp(1234) : void WebKit::WebProcessProxy::processDidTerminateOrFailedToLaunch(ProcessTerminationReason) ERROR: 0000021C67F17200 - [pageProxyID=8, webPageID=9, PID=27136] WebPageProxy::processDidTerminate: (pid 27136), reason=Crash C:\webkit\wc\Source\WebKit\UIProcess/WebPageProxy.cpp(10114) : void WebKit::WebPageProxy::resetStateAfterProcessTermination(ProcessTerminationReason) ERROR: 0000021C67F17200 - [pageProxyID=8, webPageID=9, PID=27136] WebPageProxy::dispatchProcessDidTerminate: reason=Crash C:\webkit\wc\Source\WebKit\UIProcess/WebPageProxy.cpp(10176) : void WebKit::WebPageProxy::dispatchProcessDidTerminate(ProcessTerminationReason) WebProcess terminated (pid 27136) for reason: crash
Attachments
Add attachment proposed patch, testcase, etc.
Fujii Hironori
Comment 1 2024-09-09 23:47:15 PDT
Pull request: https://github.com/WebKit/WebKit/pull/33377
EWS
Comment 2 2024-09-10 12:56:26 PDT
Test gardening commit 283436@main (12dfb5ce7510): <https://commits.webkit.org/283436@main> Reviewed commits have been landed. Closing PR #33377 and removing active labels.
Radar WebKit Bug Importer
Comment 3 2024-09-16 23:43:12 PDT
<rdar://problem/136128153>
Note You need to log in before you can comment on or make changes to this bug.