Bug 259250

Summary: (REGRESSION 264248@main) [IFC] ASSERT_NOT_REACHED in InlineFormattingGeometry::logicalTopForNextLine
Product: WebKit Reporter: zalan <zalan>
Component: Layout and RenderingAssignee: zalan <zalan>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, koivisto, simon.fraser, webkit-bug-importer, zalan
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Test reduction
none
Patch
none
Patch none

zalan
Reported 2023-07-15 16:26:50 PDT
Attachments
Test reduction (448 bytes, text/html)
2023-07-15 19:32 PDT, zalan
no flags
Patch (11.78 KB, patch)
2023-07-17 21:32 PDT, zalan
no flags
Patch (13.09 KB, patch)
2023-07-18 07:50 PDT, zalan
no flags
Tim Nguyen (:ntim)
Comment 1 2023-07-15 18:02:14 PDT
*** Bug 259251 has been marked as a duplicate of this bug. ***
zalan
Comment 2 2023-07-15 19:32:22 PDT
Created attachment 467054 [details] Test reduction
Radar WebKit Bug Importer
Comment 3 2023-07-15 19:36:22 PDT
zalan
Comment 5 2023-07-15 19:46:42 PDT
..and while the crash was addressed by a speculative fix at 264579@main now that there's a test case we could check if it needs some more work (assert indicates it does).
zalan
Comment 6 2023-07-17 12:53:24 PDT
This looks to be an issue with intrusive float propagation to sibling (descendant) formatting contexts.
zalan
Comment 7 2023-07-17 19:42:30 PDT
(In reply to zalan from comment #6) > This looks to be an issue with intrusive float propagation to sibling > (descendant) formatting contexts. scratch that. patch is coming up.
zalan
Comment 8 2023-07-17 21:32:20 PDT
zalan
Comment 9 2023-07-18 07:50:54 PDT
EWS
Comment 10 2023-07-19 05:48:37 PDT
Committed 266159@main (7cac269045d9): <https://commits.webkit.org/266159@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 467068 [details].
Note You need to log in before you can comment on or make changes to this bug.