[Webkit-unassigned] [Bug 249571] New: ASSERTION FAILED: rangesIntersect(m_renderer->logicalTopForFloat(floatingObject), m_renderer->logicalBottomForFloat(floatingObject), m_lineTop, m_lineBottom)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=249571

            Bug ID: 249571
           Summary: ASSERTION FAILED:
                    rangesIntersect(m_renderer->logicalTopForFloat(floatin
                    gObject),
                    m_renderer->logicalBottomForFloat(floatingObject),
                    m_lineTop, m_lineBottom)
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: Hironori.Fujii at sony.com
                CC: bfulgham at webkit.org, simon.fraser at apple.com,
                    zalan at apple.com

ASSERTION FAILED: rangesIntersect(m_renderer->logicalTopForFloat(floatingObject), m_renderer->logicalBottomForFloat(floatingObject), m_lineTop, m_lineBottom)

WinCairo WK2 Debug reports an assertion failure for fast/css/intruding-floats-crash.html.

> python.exe ./Tools/Scripts/run-webkit-tests --wincairo --debug --no-retry-failures fast/css/intruding-floats-crash.html --iterations=100 -f

C:\home\webkit\gc\Source\WebKit\NetworkProcess/Classifier/ResourceLoadStatisticsDatabaseStore.cpp(318) : WebKit::ResourceLoadStatisticsDatabaseStore::ResourceLoadStatisticsDatabaseStore
ASSERTION FAILED: rangesIntersect(m_renderer->logicalTopForFloat(floatingObject), m_renderer->logicalBottomForFloat(floatingObject), m_lineTop, m_lineBottom)
C:\home\webkit\gc\Source\WebCore\rendering/FloatingObjects.cpp(484) : WebCore::ComputeFloatOffsetAdapter<2>::collectIfNeeded
1   00007FFB56DA248B WTFCrash
2   00007FFAFADDDA5E WTFCrashWithInfo
3   00007FFAFEBAD9DA WebCore::ComputeFloatOffsetAdapter<2>::collectIfNeeded
4   00007FFAFEBA6D44 WebCore::PODIntervalTree<WebCore::LayoutUnit,WebCore::FloatingObject *>::searchForOverlapsFrom<WebCore::ComputeFloatOffsetForLineLayoutAdapter<2> >
5   00007FFAFEB9FE4B WebCore::PODIntervalTree<WebCore::LayoutUnit,WebCore::FloatingObject *>::allOverlapsWithAdapter<WebCore::ComputeFloatOffsetForLineLayoutAdapter<2> >
6   00007FFAFEB7EAAC WebCore::FloatingObjects::logicalRightOffset
7   00007FFAFEC6188E WebCore::RenderBlockFlow::logicalRightFloatOffsetForLine
8   00007FFAFECCFEED WebCore::RenderBlock::logicalRightOffsetForLine
9   00007FFAFECCFF80 WebCore::RenderBlock::logicalRightOffsetForLine
10  00007FFAFEC430B6 WebCore::RenderBlock::logicalRightSelectionOffset
11  00007FFAFEC4031B WebCore::RenderBlock::logicalLeftSelectionGap
12  00007FFAFEC751CA `WebCore::RenderBlockFlow::inlineSelectionGaps'::`2'::<lambda_2>::operator()
13  00007FFAFEC646CB WebCore::RenderBlockFlow::inlineSelectionGaps
14  00007FFAFEC4F2CD WebCore::RenderBlock::selectionGaps
15  00007FFAFEC4016E WebCore::RenderBlock::selectionGapRectsForRepaint
16  00007FFAFEEAB12A WebCore::RenderBlockSelectionInfo::RenderBlockSelectionInfo
17  00007FFAFEF2CA84 std::make_unique<WebCore::RenderBlockSelectionInfo,WebCore::RenderBlock &,0>
18  00007FFAFEF2C2E6 WTF::makeUnique<WebCore::RenderBlockSelectionInfo,WebCore::RenderBlock &>
19  00007FFAFEEF58A6 WebCore::SelectionRangeData::apply
20  00007FFAFEEF437F WebCore::SelectionRangeData::set
21  00007FFAFDAE8BF7 WebCore::FrameSelection::updateAppearance
22  00007FFAFDAEA9D4 WebCore::FrameSelection::updateAndRevealSelection
23  00007FFAFDAF0748 WebCore::FrameSelection::updateAppearanceAfterLayoutOrStyleChange
24  00007FFAFDAE4107 WebCore::FrameSelection::updateAppearanceAfterLayout
25  00007FFAFE56DBC7 WebCore::FrameView::performPostLayoutTasks
26  00007FFAFE5F15F1 WebCore::FrameViewLayoutContext::runAsynchronousTasks
27  00007FFAFE5F16E4 WebCore::FrameViewLayoutContext::runOrScheduleAsynchronousTasks
28  00007FFAFE5F11E4 WebCore::FrameViewLayoutContext::performLayout
29  00007FFAFE5EF6BF WebCore::FrameViewLayoutContext::layout
30  00007FFAFE559E66 WebCore::FrameView::updateContentsSize
31  00007FFAFE7D5D8A WebCore::ScrollView::updateScrollbars

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20221219/7a734d87/attachment.htm>