Bug 272533
| Summary: | UBSAN: runtime error: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate this value to itself | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | David Kilzer (:ddkilzer) <ddkilzer> |
| Component: | Layout and Rendering | Assignee: | David Kilzer (:ddkilzer) <ddkilzer> |
| Status: | RESOLVED FIXED | ||
| Severity: | Normal | CC: | ap, bfulgham, simon.fraser, webkit-bug-importer, zalan |
| Priority: | P2 | Keywords: | InRadar |
| Version: | WebKit Nightly Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
David Kilzer (:ddkilzer)
UBSAN: runtime error: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate this value to itself
This occurs in the following layout tests:
fast/forms/datalist/datalist-dropdown-transformed-element-crash.html
fast/css/border-image-scale-crash.html
2 OpenSource/Source/WebCore/platform/LayoutUnit.h:786:32: runtime error: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate this value to itself
fast/selectors/nth-child-bounds.html
1 WebKitBuild/Release/usr/local/include/wtf/text/IntegerToStringConversion.h:96:154: runtime error: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate this value to itself
fast/selectors/nth-child-bounds.html
1 WebKitBuild/Release/usr/local/include/wtf/text/IntegerToStringConversion.h:128:142: runtime error: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate this value to itself
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Radar WebKit Bug Importer
<rdar://problem/126277702>
David Kilzer (:ddkilzer)
Pull request: https://github.com/WebKit/WebKit/pull/27172
EWS
Committed 277431@main (715c3124843b): <https://commits.webkit.org/277431@main>
Reviewed commits have been landed. Closing PR #27172 and removing active labels.