Bug 237250 - ASSERTION FAILED: contentSize >= 0 in WebCore::RenderFlexibleBox::computeFlexItemMinMaxSizes
Summary: ASSERTION FAILED: contentSize >= 0 in WebCore::RenderFlexibleBox::computeFlex...
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: Layout and Rendering (show other bugs)
Version: WebKit Local Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks: 244898
  Show dependency tree / graph
 
Reported: 2022-02-27 06:12 PST by zzzsss
Modified: 2023-11-03 13:19 PDT (History)
6 users (show)

See Also:

Attachments
the html to open (193.12 KB, text/html)
2022-02-27 06:12 PST, zzzsss 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description zzzsss 2022-02-27 06:12:39 PST 
Created attachment 453337 [details]
the html to open

build a debug webkit and open the html

ASSERTION FAILED: contentSize >= 0
../../Source/WebCore/rendering/RenderFlexibleBox.cpp(1298) : std::pair<WebCore::LayoutUnit, WebCore::LayoutUnit> WebCore::RenderFlexibleBox::computeFlexItemMinMaxSizes(WebCore::RenderBox&)
1   0x7fcd77467964 WTFReportBacktrace
2   0x7fcd77467c01 WTFCrash
3   0x7fcd90f5eba1 WTF::CrashOnOverflow::overflowed()
4   0x7fcd9a8d0fc2 WebCore::RenderFlexibleBox::computeFlexItemMinMaxSizes(WebCore::RenderBox&)
5   0x7fcd9a8d2aac WebCore::RenderFlexibleBox::constructFlexItem(WebCore::RenderBox&, bool)
6   0x7fcd9a8cdb04 WebCore::RenderFlexibleBox::layoutFlexItems(bool)
7   0x7fcd9a8c53e3 WebCore::RenderFlexibleBox::layoutBlock(bool, WebCore::LayoutUnit)
8   0x7fcd9a6988ab WebCore::RenderBlock::layout()
9   0x7fcd9a5dbe9e WebCore::RenderElement::layoutIfNeeded()
10  0x7fcd9a8d8966 WebCore::RenderFlexibleBox::layoutAndPlaceChildren(WebCore::LayoutUnit&, WTF::Vector<WebCore::FlexItem, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit, bool, WTF::Vector<WebCore::RenderFlexibleBox::LineContext, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit)
11  0x7fcd9a8ce60a WebCore::RenderFlexibleBox::layoutFlexItems(bool)
12  0x7fcd9a8c53e3 WebCore::RenderFlexibleBox::layoutBlock(bool, WebCore::LayoutUnit)
13  0x7fcd9a6988ab WebCore::RenderBlock::layout()
14  0x7fcd9a5dbe9e WebCore::RenderElement::layoutIfNeeded()
15  0x7fcd9a8d8966 WebCore::RenderFlexibleBox::layoutAndPlaceChildren(WebCore::LayoutUnit&, WTF::Vector<WebCore::FlexItem, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit, bool, WTF::Vector<WebCore::RenderFlexibleBox::LineContext, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit)
16  0x7fcd9a8ce60a WebCore::RenderFlexibleBox::layoutFlexItems(bool)
17  0x7fcd9a8c53e3 WebCore::RenderFlexibleBox::layoutBlock(bool, WebCore::LayoutUnit)
18  0x7fcd9a6988ab WebCore::RenderBlock::layout()
19  0x7fcd9a5dbe9e WebCore::RenderElement::layoutIfNeeded()
20  0x7fcd9a8d8966 WebCore::RenderFlexibleBox::layoutAndPlaceChildren(WebCore::LayoutUnit&, WTF::Vector<WebCore::FlexItem, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit, bool, WTF::Vector<WebCore::RenderFlexibleBox::LineContext, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit)
21  0x7fcd9a8ce60a WebCore::RenderFlexibleBox::layoutFlexItems(bool)
22  0x7fcd9a8c53e3 WebCore::RenderFlexibleBox::layoutBlock(bool, WebCore::LayoutUnit)
23  0x7fcd9a6988ab WebCore::RenderBlock::layout()
24  0x7fcd9a771a40 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
25  0x7fcd9a770c96 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&)
26  0x7fcd9a76efa4 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
27  0x7fcd9a6988ab WebCore::RenderBlock::layout()
28  0x7fcd9a5dbe9e WebCore::RenderElement::layoutIfNeeded()
29  0x7fcd9a8d8966 WebCore::RenderFlexibleBox::layoutAndPlaceChildren(WebCore::LayoutUnit&, WTF::Vector<WebCore::FlexItem, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit, bool, WTF::Vector<WebCore::RenderFlexibleBox::LineContext, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&, WebCore::LayoutUnit)
30  0x7fcd9a8ce60a WebCore::RenderFlexibleBox::layoutFlexItems(bool)
31  0x7fcd9a8c53e3 WebCore::RenderFlexibleBox::layoutBlock(bool, WebCore::LayoutUnit)

** (MiniBrowser:638731): WARNING **: 14:54:25.106: WebProcess CRASHED
Terminated
Comment 1 Radar WebKit Bug Importer 2022-03-06 06:13:16 PST 
<rdar://problem/89873406>
Comment 2 Ahmad Saleem 2022-12-14 06:55:23 PST 
Similar got fixed in following Blink commit: https://src.chromium.org/viewvc/blink?view=revision&revision=196014
Comment 3 Ahmad Saleem 2023-01-13 04:08:54 PST 
(In reply to Ahmad Saleem from comment #2)
> Similar got fixed in following Blink commit:
> https://src.chromium.org/viewvc/blink?view=revision&revision=196014

To add here - https://searchfox.org/wubkat/source/Source/WebCore/rendering/RenderFlexibleBox.cpp#142