Bug 244594

Summary: ASSERTION FAILED: rangesIntersect(m_renderer->logicalTopForFloat(floatingObject), m_renderer->logicalBottomForFloat(floatingObject), m_belowLogicalHeight, LayoutUnit::max())
Product: WebKit Reporter: zzzsss <zzzssspro0202>
Component: Layout and RenderingAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal CC: bfulgham, Hironori.Fujii, simon.fraser, webkit-bug-importer, zalan
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: PC   
OS: Linux   
See Also: https://bugs.webkit.org/show_bug.cgi?id=249571
Bug Depends on:    
Bug Blocks: 244898    
Attachments:
Description Flags
html none

Description zzzsss 2022-08-31 05:15:21 PDT
Created attachment 462042 [details]
html

ASSERTION FAILED: rangesIntersect(m_renderer->logicalTopForFloat(floatingObject), m_renderer->logicalBottomForFloat(floatingObject), m_belowLogicalHeight, LayoutUnit::max())
/home/fuzzer/temp/webkit/webkitgtk-2.36.0/Source/WebCore/rendering/FloatingObjects.cpp(243) : void WebCore::FindNextFloatLogicalBottomAdapter::collectIfNeeded(const WebCore::FindNextFloatLogicalBottomAdapter::IntervalType &)

** (MiniBrowser:128710): WARNING **: 15:33:08.509: WebProcess CRASHED
Comment 1 Radar WebKit Bug Importer 2022-09-07 05:16:17 PDT
<rdar://problem/99645382>
Comment 2 Fujii Hironori 2022-12-22 13:30:04 PST

*** This bug has been marked as a duplicate of bug 249571 ***