Bug 291886

# Steps to reproduce the problem: 1. Prepare Webkit build with version 2.49.1 instrumented with asan. 2. Launch the browser and open the 1632.html 3. Wait a few seconds 4. Tab Crashed # Some Additional Informarion ## Settings OS Version: Ubuntu 22.04.4 LTS Webkit Version: webkitgtk-2.49.1 (Instrumented With Asan) ## ASan Report ``` libEGL warning: DRI2: failed to authenticate WARNING: ASAN interferes with JSC signal handlers; useWasmFastMemory and useWasmFaultSignalHandler will be disabled. libEGL warning: DRI2: failed to authenticate WARNING: ASAN interferes with JSC signal handlers; useWasmFastMemory and useWasmFaultSignalHandler will be disabled. libEGL warning: DRI2: failed to authenticate ERROR: Failed to make thread real time: GDBus.Error:org.freedesktop.DBus.Error.Failed: No such file or directory /home/mojo/webkit-git/WebKit/Source/WTF/wtf/linux/RealTimeThreads.cpp(224) : void WTF::RealTimeThreads::realTimeKitMakeThreadRealTime(uint64_t, uint64_t, uint32_t) WARNING: ASAN interferes with JSC signal handlers; useWasmFastMemory and useWasmFaultSignalHandler will be disabled. libEGL warning: pci id for fd 15: 1234:1111, driver (null) ERROR: Failed to make thread real time: GDBus.Error:org.freedesktop.DBus.Error.Failed: GDBus.Error:org.freedesktop.DBus.Error.Failed: No such file or directory /home/mojo/webkit-git/WebKit/Source/WTF/wtf/linux/RealTimeThreads.cpp(224) : void WTF::RealTimeThreads::realTimeKitMakeThreadRealTime(uint64_t, uint64_t, uint32_t) libEGL warning: DRI2: failed to authenticate WARNING: ASAN interferes with JSC signal handlers; useWasmFastMemory and useWasmFaultSignalHandler will be disabled. libEGL warning: pci id for fd 17: 1234:1111, driver (null) ERROR: Failed to make thread real time: GDBus.Error:org.freedesktop.DBus.Error.Failed: GDBus.Error:org.freedesktop.DBus.Error.Failed: No such file or directory /home/mojo/webkit-git/WebKit/Source/WTF/wtf/linux/RealTimeThreads.cpp(224) : void WTF::RealTimeThreads::realTimeKitMakeThreadRealTime(uint64_t, uint64_t, uint32_t) ASSERTION FAILED: !backgroundClip.affectedByRadius() /home/mojo/webkit-git/WebKit/Source/WebCore/rendering/RenderLayerCompositor.cpp(3603) : auto WebCore::RenderLayerCompositor::computeAncestorClippingStack(const RenderLayer &, const RenderLayer *)::(anonymous class)::operator()(const RenderLayer &, const RenderLayer &, ShouldRespectOverflowClip) const libEGL warning: DRI2: failed to authenticate WARNING: ASAN interferes with JSC signal handlers; useWasmFastMemory and useWasmFaultSignalHandler will be disabled. 1 0x7657b8470272 WTFReportBacktrace 2 0x7657d5c52110 WebCore::RenderLayerCompositor::computeAncestorClippingStack(WebCore::RenderLayer const&, WebCore::RenderLayer const*) const::$_1::operator()(WebCore::RenderLayer const&, WebCore::RenderLayer const&, WebCore::ShouldRespectOverflowClip) const 3 0x7657d5c51261 WebCore::RenderLayerCompositor::computeAncestorClippingStack(WebCore::RenderLayer const&, WebCore::RenderLayer const*) const::$_0::operator()(WebCore::RenderLayer const&, bool, bool) const 4 0x7657d5bd9ab4 WebCore::AncestorTraversal WebCore::traverseAncestorLayers<WebCore::RenderLayerCompositor::computeAncestorClippingStack(WebCore::RenderLayer const&, WebCore::RenderLayer const*) const::$_0>(WebCore::RenderLayer const&, WebCore::RenderLayerCompositor::computeAncestorClippingStack(WebCore::RenderLayer const&, WebCore::RenderLayer const*) const::$_0&&) 5 0x7657d5bd98e7 WebCore::RenderLayerCompositor::computeAncestorClippingStack(WebCore::RenderLayer const&, WebCore::RenderLayer const*) const 6 0x7657d5b9667f WebCore::RenderLayerCompositor::updateAncestorClippingStack(WebCore::RenderLayer const&, WebCore::RenderLayer const*) const 7 0x7657d5b711e8 WebCore::RenderLayerBacking::updateAncestorClipping(bool, WebCore::RenderLayer const*) 8 0x7657d5b7f040 WebCore::RenderLayerBacking::updateConfiguration(WebCore::RenderLayer const*) 9 0x7657d5bba456 WebCore::RenderLayerCompositor::updateBackingAndHierarchy(WebCore::RenderLayer&, WTF::Vector<WTF::Ref<WebCore::GraphicsLayer, WTF::RawPtrTraits<WebCore::GraphicsLayer>, WTF::DefaultRefDerefTraits<WebCore::GraphicsLayer> >, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::RenderLayerCompositor::UpdateBackingTraversalState&, WebCore::ScrollingTreeState&, WTF::OptionSet<WebCore::RenderLayerCompositor::UpdateLevel>) 10 0x7657d5bbaf4a WebCore::RenderLayerCompositor::updateBackingAndHierarchy(WebCore::RenderLayer&, WTF::Vector<WTF::Ref<WebCore::GraphicsLayer, WTF::RawPtrTraits<WebCore::GraphicsLayer>, WTF::DefaultRefDerefTraits<WebCore::GraphicsLayer> >, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::RenderLayerCompositor::UpdateBackingTraversalState&, WebCore::ScrollingTreeState&, WTF::OptionSet<WebCore::RenderLayerCompositor::UpdateLevel>) 11 0x7657d5bbaf4a WebCore::RenderLayerCompositor::updateBackingAndHierarchy(WebCore::RenderLayer&, WTF::Vector<WTF::Ref<WebCore::GraphicsLayer, WTF::RawPtrTraits<WebCore::GraphicsLayer>, WTF::DefaultRefDerefTraits<WebCore::GraphicsLayer> >, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::RenderLayerCompositor::UpdateBackingTraversalState&, WebCore::ScrollingTreeState&, WTF::OptionSet<WebCore::RenderLayerCompositor::UpdateLevel>) 12 0x7657d5bbaf4a WebCore::RenderLayerCompositor::updateBackingAndHierarchy(WebCore::RenderLayer&, WTF::Vector<WTF::Ref<WebCore::GraphicsLayer, WTF::RawPtrTraits<WebCore::GraphicsLayer>, WTF::DefaultRefDerefTraits<WebCore::GraphicsLayer> >, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::RenderLayerCompositor::UpdateBackingTraversalState&, WebCore::ScrollingTreeState&, WTF::OptionSet<WebCore::RenderLayerCompositor::UpdateLevel>) 13 0x7657d5bb2ffc WebCore::RenderLayerCompositor::updateCompositingLayers(WebCore::CompositingUpdateType, WebCore::RenderLayer*) 14 0x7657d426d4de WebCore::LocalFrameViewLayoutContext::updateCompositingLayersAfterLayout() 15 0x7657d426d5a5 WebCore::LocalFrameViewLayoutContext::updateCompositingLayersAfterLayoutIfNeeded() 16 0x7657d248afb7 WebCore::Document::updateLayout(WTF::OptionSet<WebCore::LayoutOptions>, WebCore::Element const*) 17 0x7657d425bf9e WebCore::LocalFrameView::updateLayoutAndStyleIfNeededRecursive(WTF::OptionSet<WebCore::LayoutOptions>) 18 0x7657d4324ca1 WebCore::Page::layoutIfNeeded(WTF::OptionSet<WebCore::LayoutOptions>) 19 0x7657d46c78af WebCore::ThreadedScrollingCoordinator::willStartRenderingUpdate() 20 0x7657d4326d75 WebCore::Page::updateRendering() 21 0x7657cb7a405f WebKit::WebPage::updateRendering() 22 0x7657cb8c9545 WebKit::LayerTreeHost::flushLayers() 23 0x7657cb8c7d3b WebKit::LayerTreeHost::layerFlushTimerFired() 24 0x7657cb8eb945 _ZZN3WTF7RunLoop5TimerC1IN6WebKit13LayerTreeHostEQaasr3WTF28HasCheckedPtrMemberFunctionsIT_EE5valuentsr3WTF24HasRefPtrMemberFunctionsIS5_EE5valueEEONS_3RefIS0_NS_12RawPtrTraitsIS0_EENS_21DefaultRefDerefTraitsIS0_EEEEPS5_MS5_FvvEENKUlvE_clEv 25 0x7657cb8eb789 _ZN3WTF6Detail15CallableWrapperIZNS_7RunLoop5TimerC1IN6WebKit13LayerTreeHostEQaasr3WTF28HasCheckedPtrMemberFunctionsIT_EE5valuentsr3WTF24HasRefPtrMemberFunctionsIS7_EE5valueEEONS_3RefIS2_NS_12RawPtrTraitsIS2_EENS_21DefaultRefDerefTraitsIS2_EEEEPS7_MS7_FvvEEUlvE_vJEE4callEv 26 0x7657c8050154 WTF::Function<void ()>::operator()() const 27 0x7657c9140319 WTF::RunLoop::Timer::fired() 28 0x7657b8bc3a31 WTF::RunLoop::TimerBase::TimerBase(WTF::Ref<WTF::RunLoop, WTF::RawPtrTraits<WTF::RunLoop>, WTF::DefaultRefDerefTraits<WTF::RunLoop> >&&)::$_0::operator()(void*) const 29 0x7657b8bc38ff WTF::RunLoop::TimerBase::TimerBase(WTF::Ref<WTF::RunLoop, WTF::RawPtrTraits<WTF::RunLoop>, WTF::DefaultRefDerefTraits<WTF::RunLoop> >&&)::$_0::__invoke(void*) 30 0x7657b8bc236e WTF::RunLoop::$_0::operator()(_GSource*, int (*)(void*), void*) const 31 0x7657b8bbf2bf WTF::RunLoop::$_0::__invoke(_GSource*, int (*)(void*), void*) ** (MiniBrowser:2806634): WARNING **: 03:02:47.298: WebProcess CRASHED ```