Bug 262268

Summary: ASSERTION FAILED: newFloatItem.layoutBox() => m_floats.findIf([&] (auto& entry) { return entry.layoutBox() == newFloatItem.layoutBox(); }) == notFound
Product: WebKit Reporter: djinn <1319794503>
Component: Layout and RenderingAssignee: zalan <zalan>
Status: NEW ---    
Severity: Normal CC: bfulgham, simon.fraser, webkit-bug-importer, zalan
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: PC   
OS: Linux   
Attachments:
Description Flags
testcase to trigger the crash none

Description djinn 2023-09-27 22:25:11 PDT
Created attachment 467941 [details]
testcase to trigger the crash

ASSERTION FAILED: newFloatItem.layoutBox() => m_floats.findIf([&] (auto& entry) { return entry.layoutBox() == newFloatItem.layoutBox(); }) == notFound
/app/webkit/Source/WebCore/layout/floats/FloatingState.cpp(82) : void WebCore::Layout::FloatingState::append(FloatItem)

The minimized testcase will be uploaded as soon as possilble.
Comment 1 Radar WebKit Bug Importer 2023-10-04 22:26:13 PDT
<rdar://problem/116504229>
Comment 2 djinn 2023-11-03 23:03:28 PDT
Hello, I would like to ask if a previously submitted bug is still not processed or unconfirmed, was it submitted in the wrong way? Or is it something else? Should I offer more info?