Bug 258419

Summary:	REGRESSION(265249@main): Infinite recursion in LegacyRenderSVGContainer::layout and SVGRenderSupport::layoutChildren
Product:	WebKit	Reporter:	Ryosuke Niwa <rniwa>
Component:	SVG	Assignee:	Ryosuke Niwa <rniwa>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	sabouhallawa, zimmermann
Priority:	P2	Keywords:	InRadar, Regression
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Description Ryosuke Niwa 2023-06-22 15:01:44 PDT

e.g.

frame #4: WebCore`WebCore::LegacyRenderSVGContainer::layout()+0x158 (WebCore:x86_64+0x830c328
frame #5: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f
frame #6: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf
frame #7: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f
frame #8: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf
frame #9: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x18e1 (WebCore:x86_64+0x83b7e41
frame #10: WebCore`WebCore::LegacyRenderSVGContainer::layout()+0x1d8 (WebCore:x86_64+0x830c3a8
frame #11: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f
frame #12: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf
frame #13: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f
frame #14: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf
frame #15: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x18e1 (WebCore:x86_64+0x83b7e41
frame #16: WebCore`WebCore::LegacyRenderSVGContainer::layout()+0x1d8 (WebCore:x86_64+0x830c3a8
frame #17: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f
frame #18: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf
frame #19: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f
frame #20: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf
frame #21: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x18e1 (WebCore:x86_64+0x83b7e41
frame #22: WebCore`WebCore::LegacyRenderSVGContainer::layout()+0x1d8 (WebCore:x86_64+0x830c3a8
frame #23: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f
frame #24: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf
frame #25: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f
frame #26: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf
...

<rdar://111107905>

Comment 1 Ryosuke Niwa 2023-06-22 15:08:33 PDT

Pull request: https://github.com/WebKit/WebKit/pull/15213

Comment 2 EWS 2023-06-23 10:50:44 PDT

Committed 265468@main (76bf4e5df476): <https://commits.webkit.org/265468@main>

Reviewed commits have been landed. Closing PR #15213 and removing active labels.