Bug 244598 - ASSERTION FAILED: !isCalculated()
Summary: ASSERTION FAILED: !isCalculated()
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: Layout and Rendering (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks: 244898
  Show dependency tree / graph
 
Reported: 2022-08-31 05:28 PDT by zzzsss
Modified: 2022-09-08 10:25 PDT (History)
5 users (show)

See Also:

Attachments
html (2.42 MB, text/html)
2022-08-31 05:28 PDT, zzzsss 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description zzzsss 2022-08-31 05:28:12 PDT 
Created attachment 462046 [details]
html

ASSERTION FAILED: !isCalculated()
/home/fuzzer/temp/webkit/webkitgtk-2.36.0/build2/WebCore/PrivateHeaders/WebCore/Length.h(341) : float WebCore::Length::value() const

** (MiniBrowser:141147): WARNING **: 21:32:05.176: WebProcess CRASHED
Comment 1 Radar WebKit Bug Importer 2022-09-07 05:29:41 PDT 
<rdar://problem/99645693>
Comment 2 David Kilzer (:ddkilzer) 2022-09-08 10:25:03 PDT 
Hi zzzsss, we really need a longer stack trace than just one frame to diagnose this issue, especially if it doesn't reproduce easily on Apple OSes.

There are so many places where WebCore::Length::value() is called that this single stack frame doesn't really help to tell us where the bug is:

> /home/fuzzer/temp/webkit/webkitgtk-2.36.0/build2/WebCore/PrivateHeaders/WebCore/Length.h(341) : float WebCore::Length::value() const

Thanks!