[Webkit-unassigned] [Bug 244580] ASSERTION FAILED: isPlaced() : WebCore::LayoutUnit WebCore::FloatingObject::maxY() const

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=244580

Frédéric Wang (:fredw) <fred.wang at free.fr> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|ASSERTION FAILED:           |ASSERTION FAILED:
                   |isPlaced()                  |isPlaced() :
                   |/home/fuzzer/temp/webkit/we |WebCore::LayoutUnit
                   |bkitgtk-2.36.0/Source/WebCo |WebCore::FloatingObject::ma
                   |re/rendering/FloatingObject |xY() const
                   |s.h(71) : const             |
                   |WebCore::LayoutRect         |
                   |&WebCore::FloatingObject::f |
                   |rameRect() const            |

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20221025/a3318c4d/attachment.htm>