[Webkit-unassigned] [Bug 244580] ASSERTION FAILED: isPlaced() : WebCore::LayoutUnit WebCore::FloatingObject::maxY() const

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=244580

--- Comment #19 from Frédéric Wang (:fredw) <fred.wang at free.fr> ---
The backtrace with the minimized testcase seems slightly different than the one of the original report:

ASSERTION FAILED: isPlaced()
rendering/FloatingObjects.h(60) : WebCore::LayoutUnit WebCore::FloatingObject::maxY() const
1   0x1372ee330 WTFCrash
2   0x2806ecb00 WebCore::JSBeforeUnloadEvent::createPrototype(JSC::VM&, WebCore::JSDOMGlobalObject&)
3   0x2853913d8 WebCore::FloatingObject::maxY() const
4   0x285390ff0 WebCore::RenderBlockFlow::logicalBottomForFloat(WebCore::FloatingObject const&) const
5   0x285473360 WebCore::RenderBlockFlow::addOverhangingFloats(WebCore::RenderBlockFlow&, bool)
6   0x2854748f0 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
7   0x285472f0c WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&)
8   0x285472064 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
9   0x2854571d8 WebCore::RenderBlock::layout()
10  0x2854745c0 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
11  0x285472f0c WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&)
12  0x285472064 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
13  0x2854571d8 WebCore::RenderBlock::layout()
14  0x2854745c0 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
15  0x285472f0c WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&)
16  0x285472064 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
17  0x2854571d8 WebCore::RenderBlock::layout()
18  0x2854745c0 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&)
19  0x285472f0c WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&)
20  0x285472064 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit)
21  0x2854571d8 WebCore::RenderBlock::layout()
22  0x285707ae0 WebCore::RenderView::layout()
23  0x2848c8744 WebCore::FrameViewLayoutContext::performLayout()
24  0x2848c8064 WebCore::FrameViewLayoutContext::layout()
25  0x28386125c WebCore::Document::implicitClose()
26  0x2845ef508 WebCore::FrameLoader::checkCallImplicitClose()
27  0x2845eeeac WebCore::FrameLoader::checkCompleted()
28  0x2845ed318 WebCore::FrameLoader::finishedParsing()
29  0x283875c18 WebCore::Document::finishedParsing()
30  0x2840b1934 WebCore::HTMLConstructionSite::finishedParsing()
31  0x2840febc8 WebCore::HTMLTreeBuilder::finished()
com.apple.WebKit.WebContent.Development terminated (pid 64292) for reason: crash
#CRASHED - com.apple.WebKit.WebContent.Development (pid 64292)
LEAK: 1 WebProcessPool
LEAK: 1 WebPageProxy

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20221025/57cd101c/attachment-0001.htm>