Bug 244594

Summary: ASSERTION FAILED: rangesIntersect(m_renderer->logicalTopForFloat(floatingObject), m_renderer->logicalBottomForFloat(floatingObject), m_belowLogicalHeight, LayoutUnit::max())
Product: WebKit Reporter: zzzsss <zzzssspro0202>
Component: Layout and RenderingAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal CC: bfulgham, fujii.hironori, simon.fraser, webkit-bug-importer, zalan
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: PC   
OS: Linux   
See Also: https://bugs.webkit.org/show_bug.cgi?id=249571
Bug Depends on:    
Bug Blocks: 244898    
Attachments:
Description Flags
html none

zzzsss
Reported 2022-08-31 05:15:21 PDT
Created attachment 462042 [details] html ASSERTION FAILED: rangesIntersect(m_renderer->logicalTopForFloat(floatingObject), m_renderer->logicalBottomForFloat(floatingObject), m_belowLogicalHeight, LayoutUnit::max()) /home/fuzzer/temp/webkit/webkitgtk-2.36.0/Source/WebCore/rendering/FloatingObjects.cpp(243) : void WebCore::FindNextFloatLogicalBottomAdapter::collectIfNeeded(const WebCore::FindNextFloatLogicalBottomAdapter::IntervalType &) ** (MiniBrowser:128710): WARNING **: 15:33:08.509: WebProcess CRASHED
Attachments
html (4.75 MB, text/html)
2022-08-31 05:15 PDT, zzzsss 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2022-09-07 05:16:17 PDT
<rdar://problem/99645382>
Fujii Hironori
Comment 2 2022-12-22 13:30:04 PST
*** This bug has been marked as a duplicate of bug 249571 ***
Note You need to log in before you can comment on or make changes to this bug.