RESOLVED FIXED258419
REGRESSION(265249@main): Infinite recursion in LegacyRenderSVGContainer::layout and SVGRenderSupport::layoutChildren 
https://bugs.webkit.org/show_bug.cgi?id=258419
Summary REGRESSION(265249@main): Infinite recursion in LegacyRenderSVGContainer::layo...
Ryosuke Niwa
Reported 2023-06-22 15:01:44 PDT
e.g. frame #4: WebCore`WebCore::LegacyRenderSVGContainer::layout()+0x158 (WebCore:x86_64+0x830c328 frame #5: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f frame #6: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf frame #7: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f frame #8: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf frame #9: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x18e1 (WebCore:x86_64+0x83b7e41 frame #10: WebCore`WebCore::LegacyRenderSVGContainer::layout()+0x1d8 (WebCore:x86_64+0x830c3a8 frame #11: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f frame #12: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf frame #13: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f frame #14: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf frame #15: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x18e1 (WebCore:x86_64+0x83b7e41 frame #16: WebCore`WebCore::LegacyRenderSVGContainer::layout()+0x1d8 (WebCore:x86_64+0x830c3a8 frame #17: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f frame #18: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf frame #19: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f frame #20: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf frame #21: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x18e1 (WebCore:x86_64+0x83b7e41 frame #22: WebCore`WebCore::LegacyRenderSVGContainer::layout()+0x1d8 (WebCore:x86_64+0x830c3a8 frame #23: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f frame #24: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf frame #25: WebCore`WebCore::SVGRenderSupport::layoutChildren(WebCore::RenderElement&, bool)+0x7cf (WebCore:x86_64+0x83b6d2f frame #26: WebCore`WebCore::LegacyRenderSVGHiddenContainer::layout()+0x2f (WebCore:x86_64+0x8311aaf ... <rdar://111107905>
Attachments
Add attachment proposed patch, testcase, etc.
Ryosuke Niwa
Comment 1 2023-06-22 15:08:33 PDT
Pull request: https://github.com/WebKit/WebKit/pull/15213
EWS
Comment 2 2023-06-23 10:50:44 PDT
Committed 265468@main (76bf4e5df476): <https://commits.webkit.org/265468@main> Reviewed commits have been landed. Closing PR #15213 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.