Bug 244598

Summary: ASSERTION FAILED: !isCalculated()
Product: WebKit Reporter: zzzsss <zzzssspro0202>
Component: Layout and RenderingAssignee: Nobody <webkit-unassigned>
Status: NEW ---    
Severity: Normal CC: bfulgham, ddkilzer, simon.fraser, webkit-bug-importer, zalan
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 244898    
Attachments:
Description Flags
html none

Description zzzsss 2022-08-31 05:28:12 PDT
Created attachment 462046 [details]
html

ASSERTION FAILED: !isCalculated()
/home/fuzzer/temp/webkit/webkitgtk-2.36.0/build2/WebCore/PrivateHeaders/WebCore/Length.h(341) : float WebCore::Length::value() const

** (MiniBrowser:141147): WARNING **: 21:32:05.176: WebProcess CRASHED
Comment 1 Radar WebKit Bug Importer 2022-09-07 05:29:41 PDT
<rdar://problem/99645693>
Comment 2 David Kilzer (:ddkilzer) 2022-09-08 10:25:03 PDT
Hi zzzsss, we really need a longer stack trace than just one frame to diagnose this issue, especially if it doesn't reproduce easily on Apple OSes.

There are so many places where WebCore::Length::value() is called that this single stack frame doesn't really help to tell us where the bug is:

> /home/fuzzer/temp/webkit/webkitgtk-2.36.0/build2/WebCore/PrivateHeaders/WebCore/Length.h(341) : float WebCore::Length::value() const

Thanks!