Bug 244462

Summary: ASSERTION FAILED: m_accumulatedOffsetMightBeSaturated || areEssentiallyEqual(rendererMappedResult, result)
Product: WebKit Reporter: zzzsss <zzzssspro0202>
Component: Layout and RenderingAssignee: Nobody <webkit-unassigned>
Status: NEW ---    
Severity: Normal CC: bfulgham, simon.fraser, webkit-bug-importer, zalan
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: PC   
OS: Linux   
Bug Depends on:    
Bug Blocks: 244898    
Attachments:
Description Flags
the html to open none

Description zzzsss 2022-08-28 23:37:12 PDT
Created attachment 461963 [details]
the html to open

ASSERTION FAILED: m_accumulatedOffsetMightBeSaturated || areEssentiallyEqual(rendererMappedResult, result)
/home/fuzzer/temp/webkit/webkitgtk-2.36.0/Source/WebCore/rendering/RenderGeometryMap.cpp(108) : WebCore::FloatPoint WebCore::RenderGeometryMap::mapToContainer(const WebCore::FloatPoint &, const WebCore::RenderLayerModelObject *) const

** (MiniBrowser:2866): WARNING **: 12:43:10.212: WebProcess CRASHED
Comment 1 Radar WebKit Bug Importer 2022-09-04 23:38:15 PDT
<rdar://problem/99559222>