Bug 258419

Summary:	REGRESSION(265249@main): Infinite recursion in LegacyRenderSVGContainer::layout and SVGRenderSupport::layoutChildren
Product:	WebKit	Reporter:	Ryosuke Niwa <rniwa>
Component:	SVG	Assignee:	Ryosuke Niwa <rniwa>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	sabouhallawa, zimmermann
Priority:	P2	Keywords:	InRadar, Regression
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Ryosuke Niwa

Reported 2023-06-22 15:01:44 PDT

e.g. frame #4: WebCore`WebCore::LegacyRenderSVGContainer::layout()+0x158 (WebCore:x86_64+0x830c328 frame #5: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f frame #6: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf frame #7: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f frame #8: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf frame #9: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x18e1 (WebCore:x86_64+0x83b7e41 frame #10: WebCore`WebCore::LegacyRenderSVGContainer::layout()+0x1d8 (WebCore:x86_64+0x830c3a8 frame #11: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f frame #12: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf frame #13: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f frame #14: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf frame #15: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x18e1 (WebCore:x86_64+0x83b7e41 frame #16: WebCore`WebCore::LegacyRenderSVGContainer::layout()+0x1d8 (WebCore:x86_64+0x830c3a8 frame #17: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f frame #18: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf frame #19: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f frame #20: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf frame #21: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x18e1 (WebCore:x86_64+0x83b7e41 frame #22: WebCore`WebCore::LegacyRenderSVGContainer::layout()+0x1d8 (WebCore:x86_64+0x830c3a8 frame #23: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f frame #24: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf frame #25: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f frame #26: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf ... <rdar://111107905>

Attachments
Add attachment proposed patch, testcase, etc.

Ryosuke Niwa

Comment 1 2023-06-22 15:08:33 PDT

Pull request: https://github.com/WebKit/WebKit/pull/15213

EWS

Comment 2 2023-06-23 10:50:44 PDT

Committed 265468@main (76bf4e5df476): <https://commits.webkit.org/265468@main> Reviewed commits have been landed. Closing PR #15213 and removing active labels.

Note You need to log in before you can comment on or make changes to this bug.