Bug 237250

Summary: ASSERTION FAILED: contentSize >= 0 in WebCore::RenderFlexibleBox::computeFlexItemMinMaxSizes
Product: WebKit Reporter: zzzsss <zzzssspro0202>
Component: Layout and RenderingAssignee: Nobody <webkit-unassigned>
Status: NEW    
Severity: Normal CC: ahmad.saleem792, bfulgham, simon.fraser, webkit-bug-importer, webkit-layout-noreply, zalan
Priority: P2 Keywords: InRadar
Version: WebKit Local Build   
Hardware: Unspecified   
OS: Unspecified   
See Also: https://bugs.webkit.org/show_bug.cgi?id=262277
Bug Depends on:    
Bug Blocks: 244898    
Attachments:
Description Flags
the html to open none

zzzsss
Reported 2022-02-27 06:12:39 PST
Created attachment 453337 [details] the html to open build a debug webkit and open the html ASSERTION FAILED: contentSize >= 0 ../../Source/WebCore/rendering/RenderFlexibleBox.cpp(1298) : std::pair<WebCore::LayoutUnit, WebCore::LayoutUnit> WebCore::RenderFlexibleBox::computeFlexItemMinMaxSizes(WebCore::RenderBox&) 1 0x7fcd77467964 WTFReportBacktrace 2 0x7fcd77467c01 WTFCrash 3 0x7fcd90f5eba1 WTF::CrashOnOverflow::overflowed() 4 0x7fcd9a8d0fc2 WebCore::RenderFlexibleBox::computeFlexItemMinMaxSizes(WebCore::RenderBox&) 5 0x7fcd9a8d2aac WebCore::RenderFlexibleBox::constructFlexItem(WebCore::RenderBox&, bool) 6 0x7fcd9a8cdb04 WebCore::RenderFlexibleBox::layoutFlexItems(bool) 7 0x7fcd9a8c53e3 WebCore::RenderFlexibleBox::layoutBlock(bool, WebCore::LayoutUnit) 8 0x7fcd9a6988ab WebCore::RenderBlock::layout() 9 0x7fcd9a5dbe9e WebCore::RenderElement::layoutIfNeeded() 10 0x7fcd9a8d8966 WebCore::RenderFlexibleBox::layoutAndPlaceChildren(WebCore::LayoutUnit&, WTF::Vector<WebCore::FlexItem, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit, bool, WTF::Vector<WebCore::RenderFlexibleBox::LineContext, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit) 11 0x7fcd9a8ce60a WebCore::RenderFlexibleBox::layoutFlexItems(bool) 12 0x7fcd9a8c53e3 WebCore::RenderFlexibleBox::layoutBlock(bool, WebCore::LayoutUnit) 13 0x7fcd9a6988ab WebCore::RenderBlock::layout() 14 0x7fcd9a5dbe9e WebCore::RenderElement::layoutIfNeeded() 15 0x7fcd9a8d8966 WebCore::RenderFlexibleBox::layoutAndPlaceChildren(WebCore::LayoutUnit&, WTF::Vector<WebCore::FlexItem, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit, bool, WTF::Vector<WebCore::RenderFlexibleBox::LineContext, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit) 16 0x7fcd9a8ce60a WebCore::RenderFlexibleBox::layoutFlexItems(bool) 17 0x7fcd9a8c53e3 WebCore::RenderFlexibleBox::layoutBlock(bool, WebCore::LayoutUnit) 18 0x7fcd9a6988ab WebCore::RenderBlock::layout() 19 0x7fcd9a5dbe9e WebCore::RenderElement::layoutIfNeeded() 20 0x7fcd9a8d8966 WebCore::RenderFlexibleBox::layoutAndPlaceChildren(WebCore::LayoutUnit&, WTF::Vector<WebCore::FlexItem, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit, bool, WTF::Vector<WebCore::RenderFlexibleBox::LineContext, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit) 21 0x7fcd9a8ce60a WebCore::RenderFlexibleBox::layoutFlexItems(bool) 22 0x7fcd9a8c53e3 WebCore::RenderFlexibleBox::layoutBlock(bool, WebCore::LayoutUnit) 23 0x7fcd9a6988ab WebCore::RenderBlock::layout() 24 0x7fcd9a771a40 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 25 0x7fcd9a770c96 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) 26 0x7fcd9a76efa4 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) 27 0x7fcd9a6988ab WebCore::RenderBlock::layout() 28 0x7fcd9a5dbe9e WebCore::RenderElement::layoutIfNeeded() 29 0x7fcd9a8d8966 WebCore::RenderFlexibleBox::layoutAndPlaceChildren(WebCore::LayoutUnit&, WTF::Vector<WebCore::FlexItem, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit, bool, WTF::Vector<WebCore::RenderFlexibleBox::LineContext, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit) 30 0x7fcd9a8ce60a WebCore::RenderFlexibleBox::layoutFlexItems(bool) 31 0x7fcd9a8c53e3 WebCore::RenderFlexibleBox::layoutBlock(bool, WebCore::LayoutUnit) ** (MiniBrowser:638731): WARNING **: 14:54:25.106: WebProcess CRASHED Terminated
Attachments
the html to open (193.12 KB, text/html)
2022-02-27 06:12 PST, zzzsss 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2022-03-06 06:13:16 PST
<rdar://problem/89873406>
Ahmad Saleem
Comment 2 2022-12-14 06:55:23 PST
Similar got fixed in following Blink commit: https://src.chromium.org/viewvc/blink?view=revision&revision=196014
Ahmad Saleem
Comment 3 2023-01-13 04:08:54 PST
(In reply to Ahmad Saleem from comment #2) > Similar got fixed in following Blink commit: > https://src.chromium.org/viewvc/blink?view=revision&revision=196014 To add here - https://searchfox.org/wubkat/source/Source/WebCore/rendering/RenderFlexibleBox.cpp#142
Note You need to log in before you can comment on or make changes to this bug.