Bug 237250

Summary:

ASSERTION FAILED: contentSize >= 0 in WebCore::RenderFlexibleBox::computeFlexItemMinMaxSizes

Product:

WebKit

Reporter:

zzzsss <zzzssspro0202>

Component:

Layout and Rendering

Assignee:

Nobody <webkit-unassigned>

Status:

NEW ---

Severity:

Normal

CC:

ahmad.saleem792, bfulgham, simon.fraser, webkit-bug-importer, webkit-layout-noreply, zalan

Priority:

Keywords:

InRadar

Version:

WebKit Local Build

Hardware:

Unspecified

OS:

Unspecified

See Also:

https://bugs.webkit.org/show_bug.cgi?id=262277

Bug Depends on:

Bug Blocks:

244898

Attachments:

Description	Flags
the html to open	none

Description zzzsss 2022-02-27 06:12:39 PST

Created attachment 453337 [details]
the html to open

build a debug webkit and open the html

ASSERTION FAILED: contentSize >= 0
../../Source/WebCore/rendering/RenderFlexibleBox.cpp(1298) : std::pair<WebCore::LayoutUnit, WebCore::LayoutUnit> WebCore::RenderFlexibleBox::computeFlexItemMinMaxSizes(WebCore::RenderBox&)
1   0x7fcd77467964 WTFReportBacktrace
2   0x7fcd77467c01 WTFCrash
3   0x7fcd90f5eba1 WTF::CrashOnOverflow::overflowed()
4   0x7fcd9a8d0fc2 WebCore::RenderFlexibleBox::computeFlexItemMinMaxSizes(WebCore::RenderBox&)
5   0x7fcd9a8d2aac WebCore::RenderFlexibleBox::constructFlexItem(WebCore::RenderBox&, bool)
6   0x7fcd9a8cdb04 WebCore::RenderFlexibleBox::layoutFlexItems(bool)
7   0x7fcd9a8c53e3 WebCore::RenderFlexibleBox::layoutBlock(bool, WebCore::LayoutUnit)
8   0x7fcd9a6988ab WebCore::RenderBlock::layout()
9   0x7fcd9a5dbe9e WebCore::RenderElement::layoutIfNeeded()
10  0x7fcd9a8d8966 WebCore::RenderFlexibleBox::layoutAndPlaceChildren(WebCore::LayoutUnit&, WTF::Vector<WebCore::FlexItem, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit, bool, WTF::Vector<WebCore::RenderFlexibleBox::LineContext, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit)
11  0x7fcd9a8ce60a WebCore::RenderFlexibleBox::layoutFlexItems(bool)
12  0x7fcd9a8c53e3 WebCore::RenderFlexibleBox::layoutBlock(bool, WebCore::LayoutUnit)
13  0x7fcd9a6988ab WebCore::RenderBlock::layout()
14  0x7fcd9a5dbe9e WebCore::RenderElement::layoutIfNeeded()
15  0x7fcd9a8d8966 WebCore::RenderFlexibleBox::layoutAndPlaceChildren(WebCore::LayoutUnit&, WTF::Vector<WebCore::FlexItem, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit, bool, WTF::Vector<WebCore::RenderFlexibleBox::LineContext, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit)
16  0x7fcd9a8ce60a WebCore::RenderFlexibleBox::layoutFlexItems(bool)
17  0x7fcd9a8c53e3 WebCore::RenderFlexibleBox::layoutBlock(bool, WebCore::LayoutUnit)
18  0x7fcd9a6988ab WebCore::RenderBlock::layout()
19  0x7fcd9a5dbe9e WebCore::RenderElement::layoutIfNeeded()
20  0x7fcd9a8d8966 WebCore::RenderFlexibleBox::layoutAndPlaceChildren(WebCore::LayoutUnit&, WTF::Vector<WebCore::FlexItem, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit, bool, WTF::Vector<WebCore::RenderFlexibleBox::LineContext, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit)
21  0x7fcd9a8ce60a WebCore::RenderFlexibleBox::layoutFlexItems(bool)
22  0x7fcd9a8c53e3 WebCore::RenderFlexibleBox::layoutBlock(bool, WebCore::LayoutUnit)
23  0x7fcd9a6988ab WebCore::RenderBlock::layout()
24  0x7fcd9a771a40 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
25  0x7fcd9a770c96 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&)
26  0x7fcd9a76efa4 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
27  0x7fcd9a6988ab WebCore::RenderBlock::layout()
28  0x7fcd9a5dbe9e WebCore::RenderElement::layoutIfNeeded()
29  0x7fcd9a8d8966 WebCore::RenderFlexibleBox::layoutAndPlaceChildren(WebCore::LayoutUnit&, WTF::Vector<WebCore::FlexItem, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit, bool, WTF::Vector<WebCore::RenderFlexibleBox::LineContext, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit)
30  0x7fcd9a8ce60a WebCore::RenderFlexibleBox::layoutFlexItems(bool)
31  0x7fcd9a8c53e3 WebCore::RenderFlexibleBox::layoutBlock(bool, WebCore::LayoutUnit)

** (MiniBrowser:638731): WARNING **: 14:54:25.106: WebProcess CRASHED
Terminated

Comment 1 Radar WebKit Bug Importer 2022-03-06 06:13:16 PST

<rdar://problem/89873406>

Comment 2 Ahmad Saleem 2022-12-14 06:55:23 PST

Similar got fixed in following Blink commit: https://src.chromium.org/viewvc/blink?view=revision&revision=196014

Comment 3 Ahmad Saleem 2023-01-13 04:08:54 PST

(In reply to Ahmad Saleem from comment #2)
> Similar got fixed in following Blink commit:
> https://src.chromium.org/viewvc/blink?view=revision&revision=196014

To add here - https://searchfox.org/wubkat/source/Source/WebCore/rendering/RenderFlexibleBox.cpp#142