ASSERTION FAILED: !backgroundClip.affectedByRadius() in RenderLayerCompositor::computeAncestorClippingStack WinCairo Debug (257705@main) hits an assertion failure by loading https://mainichi.jp/ today. ASSERTION FAILED: !backgroundClip.affectedByRadius() C:\home\webkit\gb\Source\WebCore\rendering/RenderLayerCompositor.cpp(2965) : WebCore::RenderLayerCompositor::computeAncestorClippingStack::<lambda_1>::operator () 1 00007FF94D51248B WTFCrash 2 00007FF8EA74DA5E WTFCrashWithInfo 3 00007FF8EE74D127 `WebCore::RenderLayerCompositor::computeAncestorClippingStack'::`2'::<lambda_1>::operator() 4 00007FF8EE74D649 `WebCore::RenderLayerCompositor::computeAncestorClippingStack'::`2'::<lambda_2>::operator() 5 00007FF8EE74DC47 WebCore::traverseAncestorLayers<`WebCore::RenderLayerCompositor::computeAncestorClippingStack'::`2'::<lambda_2> > 6 00007FF8EE722738 WebCore::RenderLayerCompositor::computeAncestorClippingStack 7 00007FF8EE7106F6 WebCore::RenderLayerCompositor::updateAncestorClippingStack 8 00007FF8EE730382 WebCore::RenderLayerBacking::updateAncestorClipping 9 00007FF8EE724CFC WebCore::RenderLayerBacking::updateConfiguration 10 00007FF8EE719CA1 WebCore::RenderLayerCompositor::updateBackingAndHierarchy 11 00007FF8EE71A35D WebCore::RenderLayerCompositor::updateBackingAndHierarchy 12 00007FF8EE71A35D WebCore::RenderLayerCompositor::updateBackingAndHierarchy 13 00007FF8EE71A35D WebCore::RenderLayerCompositor::updateBackingAndHierarchy 14 00007FF8EE70FFBA WebCore::RenderLayerCompositor::updateCompositingLayers 15 00007FF8EDE9FC54 WebCore::FrameView::updateCompositingLayersAfterLayout 16 00007FF8EDEBB62A WebCore::FrameView::didLayout 17 00007FF8EDF36897 WebCore::FrameViewLayoutContext::performLayout 18 00007FF8EDF34D7F WebCore::FrameViewLayoutContext::layout 19 00007FF8ED1109F6 WebCore::Document::updateLayout 20 00007FF8ED110A9F WebCore::Document::updateLayoutIgnorePendingStylesheets 21 00007FF8ED13C5B5 WebCore::Element::scrollLeft 22 00007FF8EB09014F WebCore::jsElement_scrollLeftGetter 23 00007FF8EB0E1F24 WebCore::IDLAttribute<WebCore::JSElement>::get<&WebCore::jsElement_scrollLeftGetter,3> 24 00007FF8EB07D4D8 WebCore::jsElement_scrollLeft 25 00007FF93402CE94 WTF::FunctionPtr<57072,__int64 __cdecl(JSC::JSGlobalObject *,__int64,JSC::PropertyName),1>::operator() 26 00007FF9342BEA97 JSC::PropertySlot::customGetter 27 00007FF9329DC4DA JSC::PropertySlot::getValue 28 00007FF9329D9315 JSC::JSValue::get 29 00007FF933BAB917 JSC::LLInt::performLLIntGetByID 30 00007FF933B9587D llint_slow_path_get_by_id 31 00007FF93289CED9 llint_entry
I've confirmed this is reproducible with Mac Debug MiniBrowser.
Created attachment 463997 [details] test case
Created attachment 463999 [details] reduced content
<rdar://problem/103502507>
*** Bug 262240 has been marked as a duplicate of this bug. ***
Created attachment 471741 [details] test case