[Webkit-unassigned] [Bug 262262] ASSERTION FAILED: lineEndingEllipsisPolicy != LineEndingEllipsisPolicy::WhenContentOverflowsInInlineDirection || truncateRight.has_value() || right(boxes.last()) == visualRightForContentEnd /app/webkit/Source/WebCore/layout/formattingContexts/inline/displ

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=262262

--- Comment #8 from djinn <1319794503 at qq.com> ---
(In reply to djinn from comment #0)
> Created attachment 467936 [details]
> testcase to trigger the crash
> 
> ASSERTION FAILED: displayLine.lineBoxLogicalRect().x() +
> displayLine.contentLogicalLeft() + displayLine.contentLogicalWidth() +
> ellipsisWidth > displayLine.lineBoxLogicalRect().maxX()
> /app/webkit/Source/WebCore/layout/formattingContexts/inline/display/
> InlineDisplayLineBuilder.cpp(230) : float
> WebCore::Layout::truncateOverflowingDisplayBoxes(const
> WebCore::InlineDisplay::Line&, WebCore::InlineDisplay::Boxes&, float, const
> WebCore::RenderStyle&, LineEndingEllipsisPolicy)

So sorry for uploading wrong crashed message before. I've reproduce several times. And the crashed message should be:
ASSERTION FAILED: lineEndingEllipsisPolicy != LineEndingEllipsisPolicy::WhenContentOverflowsInInlineDirection || truncateRight.has_value() || right(boxes.last()) == visualRightForContentEnd
/app/webkit/Source/WebCore/layout/formattingContexts/inline/display/InlineDisplayLineBuilder.cpp(260) : float WebCore::Layout::truncateOverflowingDisplayBoxes(const WebCore::InlineDisplay::Line&, WebCore::InlineDisplay::Boxes&, float, const WebCore::RenderStyle&, LineEndingEllipsisPolicy)

And the minimized testcase could trigger the crash within minutes.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240312/e30698a7/attachment.htm>