Bug 259250

Summary: (REGRESSION 264248@main) [IFC] ASSERT_NOT_REACHED in InlineFormattingGeometry::logicalTopForNextLine
Product: WebKit Reporter: zalan <zalan>
Component: Layout and RenderingAssignee: zalan <zalan>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, koivisto, simon.fraser, webkit-bug-importer, zalan
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Test reduction
none
Patch
none
Patch none

Description zalan 2023-07-15 16:26:50 PDT 
when visiting https://next.dk/beregn/nybil/1/indtast-nummerplade
Comment 1 Tim Nguyen (:ntim) 2023-07-15 18:02:14 PDT 
*** Bug 259251 has been marked as a duplicate of this bug. ***
Comment 2 zalan 2023-07-15 19:32:22 PDT 
Created attachment 467054 [details]
Test reduction
Comment 3 Radar WebKit Bug Importer 2023-07-15 19:36:22 PDT 
<rdar://problem/112338580>
Comment 5 zalan 2023-07-15 19:46:42 PDT 
..and while the crash was addressed by a speculative fix at 264579@main now that there's a test case we could check if it needs some more work (assert indicates it does).
Comment 6 zalan 2023-07-17 12:53:24 PDT 
This looks to be an issue with intrusive float propagation to sibling (descendant) formatting contexts.
Comment 7 zalan 2023-07-17 19:42:30 PDT 
(In reply to zalan from comment #6)
> This looks to be an issue with intrusive float propagation to sibling
> (descendant) formatting contexts.
scratch that. patch is coming up.
Comment 8 zalan 2023-07-17 21:32:20 PDT 
Created attachment 467065 [details]
Patch
Comment 9 zalan 2023-07-18 07:50:54 PDT 
Created attachment 467068 [details]
Patch
Comment 10 EWS 2023-07-19 05:48:37 PDT 
Committed 266159@main (7cac269045d9): <https://commits.webkit.org/266159@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 467068 [details].