[Webkit-unassigned] [Bug 217446] REGRESSION: ASSERTION FAILED: verticalGap >= 0 in WebCore::Layout::InlineFormattingState::setClearGapAfterLastLine

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=217446

--- Comment #1 from Ryan Haddad <ryanhaddad at apple.com> ---
Saw the assertion above on Catalina Debug WK2 with the following tests:

accessibility/content-changed-notification-causes-crash.html
fast/block/float/float-append-child-crash.html
fast/css/simple-layout-overflow.html
fast/shapes/shape-outside-floats/shape-outside-negative-line-height-crash.html
imported/blink/fast/borders/border-box-overflow-crash.html

https://build.webkit.org/results/Apple-Catalina-Debug-WK2-Tests/r268135%20(7082)/results.html

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20201007/d5d28a63/attachment-0001.htm>