Bug 244591

Summary: ASSERTION FAILED: rangesIntersect(m_renderer->logicalTopForFloat(floatingObject), m_renderer->logicalBottomForFloat(floatingObject), m_lineTop, m_lineBottom)
Product: WebKit Reporter: zzzsss <zzzssspro0202>
Component: Layout and RenderingAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal CC: bfulgham, Hironori.Fujii, simon.fraser, webkit-bug-importer, zalan
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: PC   
OS: Linux   
See Also: https://bugs.webkit.org/show_bug.cgi?id=249571
Bug Depends on:    
Bug Blocks: 244898    
Attachments:
Description Flags
html none

Description zzzsss 2022-08-31 05:11:16 PDT 
Created attachment 462039 [details]
html

ASSERTION FAILED: rangesIntersect(m_renderer->logicalTopForFloat(floatingObject), m_renderer->logicalBottomForFloat(floatingObject), m_lineTop, m_lineBottom)
/home/fuzzer/temp/webkit/webkitgtk-2.36.0/Source/WebCore/rendering/FloatingObjects.cpp(485) : void WebCore::ComputeFloatOffsetAdapter<WebCore::FloatingObject::FloatLeft>::collectIfNeeded(const WebCore::ComputeFloatOffsetAdapter::IntervalType &) [FloatTypeValue = WebCore::FloatingObject::FloatLeft]

** (MiniBrowser:125356): WARNING **: 13:59:42.008: WebProcess CRASHED
Comment 1 Radar WebKit Bug Importer 2022-09-07 05:12:17 PDT 
<rdar://problem/99645234>
Comment 2 Fujii Hironori 2022-12-22 13:29:48 PST 

*** This bug has been marked as a duplicate of bug 249571 ***