Bug 300123 – CALayerInvalidGeometry Exception: CALayerInvalidGeometry: CALayer position contains NaN

• Status: NEW
• Component: WebKit Misc.

This existed in iOS 18 in very small numbers, but iOS 26 has shown a large spike.

Exception stack:
Earlier exception: CALayerInvalidGeometry: CALayer position contains NaN: [nan 119]. Layer: <CALayer:0x60123ae00; position = CGPoint (0 0); bounds = CGRect (0 0; 0 51); delegate = <_UIEditMenuListView: 0x604b539c0; frame = (0 0; 0 51); anchorPoint = (28, 0); alpha = 0;
0x000000018043d7c4(libobjc.A.dylib + 0x000317c4)objc_exception_throw
0x00000001835578d4(CoreFoundation + 0x001548d4)-[NSException initWithCoder:]
0x0000000183e5284c(QuartzCore + 0x0009084c)CA::Layer::set_position(CA::Vec2<double> const&, bool)
0x0000000184070844(QuartzCore + 0x002ae844)-[CALayer setPosition:]
0x0000000189b8640c(UIKitCore + 0x00e9c40c)-[UIView _backing_setPosition:]
0x000000018a5dbee0(UIKitCore + 0x018f1ee0)-[UIView setCenter:]
0x000000018a47cd70(UIKitCore + 0x01792d70)-[_UIEditMenuContentPresentation _displayPreparedMenu:titleView:reason:didDismissMenu:configuration:]
0x000000018a47c99c(UIKitCore + 0x0179299c)__54-[_UIEditMenuContentPresentation _displayMenu:reason:]_block_invoke
0x000000018a5aecc8(UIKitCore + 0x018c4cc8)-[UIEditMenuInteraction _editMenuPresentation:preparedMenuForDisplay:completion:]
0x000000018a47c8c0(UIKitCore + 0x017928c0)-[_UIEditMenuContentPresentation _displayMenu:reason:]
0x000000018a47c6b4(UIKitCore + 0x017926b4)-[_UIEditMenuContentPresentation displayMenu:configuration:]
0x000000018a5adfac(UIKitCore + 0x018c3fac)__58-[UIEditMenuInteraction presentEditMenuWithConfiguration:]_block_invoke
0x000000018a5afbf4(UIKitCore + 0x018c5bf4)__80-[UIEditMenuInteraction _prepareMenuAtLocation:configuration:completionHandler:]_block_invoke
0x000000018a361274(UIKitCore + 0x01677274)__109-[UITextContextMenuInteraction _editMenuInteraction:menuForConfiguration:suggestedActions:completionHandler:]_block_invoke
0x000000018a3617bc(UIKitCore + 0x016777bc)__107-[UITextContextMenuInteraction _querySelectionCommandsForConfiguration:suggestedActions:completionHandler:]_block_invoke
0x000000019dcb4790(WebKit + 0x00946790)WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>::operator()(WebKit::DocumentEditingContext&&)
0x000000019dcc1580(WebKit + 0x00953580)WTF::Detail::CallableWrapper<WTF::CompletionHandler<void (IPC::Connection*, IPC::Decoder*)> IPC::Connection::makeAsyncReplyCompletionHandler<Messages::WebPage::RequestDocumentEditingContext, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>>(WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&, WTF::ThreadLikeAssertion)::'lambda'(IPC::Connection*, IPC::Decoder*), void, IPC::Connection*, IPC::Decoder*>::call(IPC::Connection*, IPC::Decoder*)

Crash Stack:
Thread 0 CrWebMain (id: 0x0018a296)crashedMAGIC SIGNATURE THREAD
0x0000000105e5f110(Chrome -exception_processor.mm:176)crashpad::(anonymous namespace)::ExceptionPreprocessorState::Get()
0x0000000105e5f110(Chrome -exception_processor.mm:305)crashpad::(anonymous namespace)::HANDLE_UNCAUGHT_NSEXCEPTION(objc_object*, char const*)
0x0000000105e5f10c(Chrome -exception_processor.mm:302)crashpad::(anonymous namespace)::HANDLE_UNCAUGHT_NSEXCEPTION(objc_object*, char const*)
0x0000000105e5e770(Chrome -exception_processor.mm:597)crashpad::(anonymous namespace)::ObjcExceptionPreprocessor(objc_object*)
0x0000000190c357c0(libobjc.A.dylib + 0x000317c0)objc_exception_throw
0x0000000193d4f8d0(CoreFoundation + 0x001548d0)+[NSException raise:format:]
0x000000019464a848(QuartzCore + 0x00090848)CA::Layer::set_position(CA::Vec2<double> const&, bool)
0x0000000194868840(QuartzCore + 0x002ae840)-[CALayer setPosition:]
0x000000019a37e408(UIKitCore + 0x00e9c408)-[UIView _backing_setPosition:]
0x000000019add3edc(UIKitCore + 0x018f1edc)-[UIView setCenter:]
0x000000019ac74d6c(UIKitCore + 0x01792d6c)-[_UIEditMenuContentPresentation _displayPreparedMenu:titleView:reason:didDismissMenu:configuration:]
0x000000019ac74998(UIKitCore + 0x01792998)__54-[_UIEditMenuContentPresentation _displayMenu:reason:]_block_invoke
0x000000019ada6cc4(UIKitCore + 0x018c4cc4)-[UIEditMenuInteraction _editMenuPresentation:preparedMenuForDisplay:completion:]
0x000000019ac748bc(UIKitCore + 0x017928bc)-[_UIEditMenuContentPresentation _displayMenu:reason:]
0x000000019ac746b0(UIKitCore + 0x017926b0)-[_UIEditMenuContentPresentation displayMenu:configuration:]
0x000000019ada5fa8(UIKitCore + 0x018c3fa8)__58-[UIEditMenuInteraction presentEditMenuWithConfiguration:]_block_invoke
0x000000019ada7bf0(UIKitCore + 0x018c5bf0)__80-[UIEditMenuInteraction _prepareMenuAtLocation:configuration:completionHandler:]_block_invoke
0x000000019ab59270(UIKitCore + 0x01677270)__109-[UITextContextMenuInteraction _editMenuInteraction:menuForConfiguration:suggestedActions:completionHandler:]_block_invoke
0x000000019ab597b8(UIKitCore + 0x016777b8)__107-[UITextContextMenuInteraction _querySelectionCommandsForConfiguration:suggestedActions:completionHandler:]_block_invoke
0x00000001ae4ac78c(WebKit + 0x0094678c)WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>::operator()(WebKit::DocumentEditingContext&&)
0x00000001ae4b957c(WebKit + 0x0095357c)WTF::Detail::CallableWrapper<WTF::CompletionHandler<void (IPC::Connection*, IPC::Decoder*)> IPC::Connection::makeAsyncReplyCompletionHandler<Messages::WebPage::RequestDocumentEditingContext, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>>(WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&, WTF::ThreadLikeAssertion)::'lambda'(IPC::Connection*, IPC::Decoder*), void, IPC::Connection*, IPC::Decoder*>::call(IPC::Connection*, IPC::Decoder*)
0x00000001adbf8a80(WebKit + 0x00092a80)WTF::Detail::CallableWrapper<WebKit::AuxiliaryProcessProxy::sendMessage(WTF::UniqueRef<IPC::Encoder>&&, WTF::OptionSet<IPC::SendOption>, std::__1::optional<IPC::ConnectionAsyncReplyHandler>, WebKit::AuxiliaryProcessProxy::ShouldStartProcessThrottlerActivity)::$_1, void, IPC::Connection*, IPC::Decoder*>::call(IPC::Connection*, IPC::Decoder*)
0x00000001adbe8900(WebKit + 0x00082900)IPC::Connection::dispatchMessage(WTF::UniqueRef<IPC::Decoder>)
0x00000001adbf8768(WebKit + 0x00092768)IPC::Connection::dispatchIncomingMessages()
0x00000001a880e838(JavaScriptCore + 0x00190838)WTF::RunLoop::performWork()
0x00000001a880e5f0(JavaScriptCore + 0x001905f0)WTF::RunLoop::performWork(void*)
0x0000000193c6522c(CoreFoundation + 0x0006a22c)__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__
0x0000000193c651a0(CoreFoundation + 0x0006a1a0)__CFRunLoopDoSource0
0x0000000193c42c68(CoreFoundation + 0x00047c68)__CFRunLoopDoSources0
0x0000000193c188ac(CoreFoundation + 0x0001d8ac)__CFRunLoopRun
0x0000000193c17c40(CoreFoundation + 0x0001cc40)_CFRunLoopRunSpecificWithOptions
0x0000000232abd494(GraphicsServices + 0x00001494)GSEventRunModal
0x000000019958c6dc(UIKitCore + 0x000aa6dc)-[UIApplication _run]
0x0000000199530c1c(UIKitCore + 0x0004ec1c)UIApplicationMain
0x00000001046bc2a8(Chrome -chrome_main.mm:85)(anonymous namespace)::RunUIApplicationMain(int, char**)
0x00000001046bc2a8(Chrome -chrome_main.mm:203)ChromeMain
0x0000000190c89b14(dyld + 0x00004b14)start

[Radar WebKit Bug Importer]

<rdar://problem/162380482>