[Webkit-unassigned] [Bug 244580] ASSERTION FAILED: isPlaced() : WebCore::LayoutUnit WebCore::FloatingObject::maxY() const

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=244580

--- Comment #22 from Rob Buis <rbuis at igalia.com> ---
(In reply to Michael Saboff from comment #21)
> Let's try reproducing with Release builds, both non-ASAN and ASAN.

The 6MB test does not crash with non-ASAN and ASAN Release builds.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20221129/658bc2cf/attachment.htm>