[Webkit-unassigned] [Bug 267993] ASSERTION FAILED: containingBlock.isInFlowPositioned() while running `the-anchor-attribute-003-crash.tentative.html` WPT Test

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=267993

--- Comment #2 from Ahmad Saleem <ahmad.saleem792 at gmail.com> ---
(In reply to Ahmad Saleem from comment #1)
> Might be similar to this Blink fix:
> 
> Blink Commit -
> https://chromium.googlesource.com/chromium/src.git/+/
> b907c9c34c99ed5445d2f94a8ef4a2fbc85808f6
> 
> https://searchfox.org/wubkat/rev/11893003d47a7c29b0ce84a7479980ebf220c589/
> Source/WebCore/rendering/RenderBox.cpp#3892
> 
> Here changing:
> 
> return (boxInfo) ? std::max<LayoutUnit>(0, cb->clientLogicalWidth() -
> (cb->logicalWidth() - boxInfo->logicalWidth())) : cb->clientLogicalWidth();
> 
> to:
> 
> return (boxInfo) ? std::max<LayoutUnit>(0, cb->clientLogicalWidth() -
> (cb->logicalWidth() - boxInfo->logicalWidth())) : std::max<LayoutUnit>(0,
> cb->clientLogicalWidth());
> 
> ___
> 
> @Alan - any input?

This does not fix it. Test already locally.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240124/0d9efdff/attachment.htm>