NEW262280
ASSERTION FAILED: !view().frameView().layoutContext().isPaintOffsetCacheEnabled() || style().styleType() == PseudoId::FirstLetter || insideSelfPaintingInlineBox() /app/webkit/Source/WebCore/rendering/RenderInline.cpp(624) 
https://bugs.webkit.org/show_bug.cgi?id=262280
Summary ASSERTION FAILED: !view().frameView().layoutContext().isPaintOffsetCacheEnabl...
djinn
Reported 2023-09-27 23:17:11 PDT
Created attachment 467953 [details] testcase to trigger the crash ASSERTION FAILED: !view().frameView().layoutContext().isPaintOffsetCacheEnabled() || style().styleType() == PseudoId::FirstLetter || insideSelfPaintingInlineBox() /app/webkit/Source/WebCore/rendering/RenderInline.cpp(624) : virtual WebCore::LayoutRect WebCore::RenderInline::clippedOverflowRect(const WebCore::RenderLayerModelObject*, WebCore::RenderObject::VisibleRectContext) const The minimized testcase will be uploaded as soon as possible.
Attachments
testcase to trigger the crash (9.90 MB, text/html)
2023-09-27 23:17 PDT, djinn 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2023-10-04 23:18:15 PDT
<rdar://problem/116505939>
djinn
Comment 2 2023-11-03 23:05:18 PDT
Hello, I would like to ask if a previously submitted bug is still not processed or unconfirmed, was it submitted in the wrong way? Or is it something else? Should I offer more info?
Note You need to log in before you can comment on or make changes to this bug.