Created attachment 462039 [details] html ASSERTION FAILED: rangesIntersect(m_renderer->logicalTopForFloat(floatingObject), m_renderer->logicalBottomForFloat(floatingObject), m_lineTop, m_lineBottom) /home/fuzzer/temp/webkit/webkitgtk-2.36.0/Source/WebCore/rendering/FloatingObjects.cpp(485) : void WebCore::ComputeFloatOffsetAdapter<WebCore::FloatingObject::FloatLeft>::collectIfNeeded(const WebCore::ComputeFloatOffsetAdapter::IntervalType &) [FloatTypeValue = WebCore::FloatingObject::FloatLeft] ** (MiniBrowser:125356): WARNING **: 13:59:42.008: WebProcess CRASHED
<rdar://problem/99645234>
*** This bug has been marked as a duplicate of bug 249571 ***