Bug 248827

Summary:	REGRESSION (253865@main): Crashes under RenderLayerCompositor::updateScrollingNodeForViewportConstrainedRole
Product:	WebKit	Reporter:	Simon Fraser (smfr) <simon.fraser>
Component:	Compositing	Assignee:	Simon Fraser (smfr) <simon.fraser>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	simon.fraser, webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Description Simon Fraser (smfr) 2022-12-06 10:28:12 PST

253865@main introduced a cluster of crashes where, under RenderLayerCompositor::updateScrollingNodeForViewportConstrainedRole(), a fixed or sticky layer would have a null viewportAnchorLayer().

Comment 1 Simon Fraser (smfr) 2022-12-06 10:28:25 PST

rdar://102619100

Comment 2 Simon Fraser (smfr) 2022-12-06 10:39:45 PST

Pull request: https://github.com/WebKit/WebKit/pull/7213

Comment 3 EWS 2022-12-06 18:31:11 PST

Committed 257455@main (df0e5116081b): <https://commits.webkit.org/257455@main>

Reviewed commits have been landed. Closing PR #7213 and removing active labels.