Bug 244596

Summary: ASSERTION FAILED: !mode.contains(IsFixed)
Product: WebKit Reporter: zzzsss <zzzssspro0202>
Component: SVGAssignee: Rob Buis <rbuis>
Status: RESOLVED FIXED    
Severity: Normal CC: changseok, darin, dino, esprehn+autocc, ews-watchlist, fmalita, glenn, gyuyoung.kim, kondapallykalyan, pdr, rbuis, sabouhallawa, schenney, sergio, webkit-bug-importer, zimmermann
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: PC   
OS: Linux   
Bug Depends on:    
Bug Blocks: 244898    
Attachments:
Description Flags
html
none
Patch
none
Patch
none
Patch none

Description zzzsss 2022-08-31 05:20:48 PDT 
Created attachment 462044 [details]
html

ASSERTION FAILED: !mode.contains(IsFixed)
/home/fuzzer/temp/webkit/webkitgtk-2.36.0/Source/WebCore/rendering/svg/LegacyRenderSVGRoot.cpp(403) : virtual void WebCore::LegacyRenderSVGRoot::mapLocalToContainer(const WebCore::RenderLayerModelObject *, WebCore::TransformState &, OptionSet<WebCore::MapCoordinatesMode>, bool *) const

** (MiniBrowser:135369): WARNING **: 18:33:58.239: WebProcess CRASHED
Comment 1 Radar WebKit Bug Importer 2022-09-07 05:21:18 PDT 
<rdar://problem/99645492>
Comment 2 Rob Buis 2022-11-21 01:53:35 PST 
Created attachment 463636 [details]
Patch
Comment 3 Rob Buis 2022-11-21 02:11:46 PST 
Created attachment 463637 [details]
Patch
Comment 4 Nikolas Zimmermann 2022-11-21 02:52:18 PST 
r=me. <svg> can be positioned, the rest of the SVG tree not.
Comment 5 Rob Buis 2022-11-21 02:57:27 PST 
Created attachment 463638 [details]
Patch
Comment 6 EWS 2022-11-21 08:25:55 PST 
Committed 256907@main (917f78d471e1): <https://commits.webkit.org/256907@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 463638 [details].
Comment 7 Darin Adler 2022-11-21 10:39:18 PST 
Comment on attachment 463638 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=463638&action=review

> COMMIT_MESSAGE:7
> +but postion: fixed is allowed on outermost svg elements, so

postion