fast/forms/fieldset/fieldset-elements.html is a flaky crash on iPad OS, Big Sur and later Debug. HISTORY: https://results.webkit.org/?suite=layout-tests&test=fast%2Fforms%2Ffieldset%2Ffieldset-grid.html Crash Log is attached. CRASH LOG TEXT: stderr: ASSERTION FAILED: !m_disabledFieldsetElementsCount dom/Document.cpp(682) : virtual WebCore::Document::~Document()
<rdar://problem/104762152>
Created attachment 464693 [details] Crash Log
I wonder if https://commits.webkit.org/259372@main is somehow related, it landed shortly before the first crash.
Thanks folks, that's definitely https://commits.webkit.org/259372@main, yet I don't immediately see the underlying cause: hasDisabledAttribute() in fieldset destructor is safe, addDisabledFieldsetElement() / removeDisabledFieldsetElement() call sites are unchanged... Trying to reproduce locally now...
Pull request: https://github.com/WebKit/WebKit/pull/9335
Committed 259580@main (f4d8caebb352): <https://commits.webkit.org/259580@main> Reviewed commits have been landed. Closing PR #9335 and removing active labels.