New issue
Advanced search Search tips

Issue 866797 link

Starred by 3 users

Issue metadata

Status: Available
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 3
Type: Bug



Sign in to add a comment

[css-flex] Crash in LayoutFlexibleBox::ComputeMinAndMaxSizesForChild()

Project Member Reported by r...@igalia.com, Jul 24

Issue description


Visit https://anilist.co/ and you'll get the following backtrace:

[1:1:0724/093902.657099:FATAL:layout_flexible_box.cc(1106)] Check failed: content_size >= LayoutUnit() ("-1" vs. "0")
#0 0x7f9697d1231d base::debug::StackTrace::StackTrace()
#1 0x7f96979f5dec base::debug::StackTrace::StackTrace()
#2 0x7f9697a24e6a logging::LogMessage::~LogMessage()
#3 0x7f9687861ca9 blink::LayoutFlexibleBox::ComputeMinAndMaxSizesForChild()
#4 0x7f9687860639 blink::LayoutFlexibleBox::ConstructFlexItem()
#5 0x7f968785c163 blink::LayoutFlexibleBox::LayoutFlexItems()
#6 0x7f968785bc46 blink::LayoutFlexibleBox::UpdateBlockLayout()
#7 0x7f96877fbb30 blink::LayoutBlock::UpdateLayout()
#8 0x7f9687885206 blink::LayoutObject::LayoutIfNeeded()
#9 0x7f96877e859c blink::GridTrackSizingAlgorithmStrategy::LogicalHeightForChild()
#10 0x7f96877e8883 blink::GridTrackSizingAlgorithmStrategy::MinContentForChild()
#11 0x7f96877ebeaf blink::IndefiniteSizeStrategy::MinContentForChild()
#12 0x7f96877e8ba8 blink::GridTrackSizingAlgorithmStrategy::MinSizeForChild()
#13 0x7f96877ed245 blink::GridTrackSizingAlgorithm::SizeTrackToFitNonSpanningItem()
#14 0x7f96877edd8e blink::GridTrackSizingAlgorithm::ResolveIntrinsicTrackSizes()
#15 0x7f96877f09a0 blink::GridTrackSizingAlgorithm::Run()
#16 0x7f968786c4c5 blink::LayoutGrid::ComputeTrackSizesForIndefiniteSize()
#17 0x7f968786aa18 blink::LayoutGrid::UpdateBlockLayout()
#18 0x7f96877fbb30 blink::LayoutBlock::UpdateLayout()
#19 0x7f9687813bc0 blink::LayoutBlockFlow::PositionAndLayoutOnceIfNeeded()
#20 0x7f9687814130 blink::LayoutBlockFlow::LayoutBlockChild()
#21 0x7f9687812199 blink::LayoutBlockFlow::LayoutBlockChildren()
#22 0x7f968780e944 blink::LayoutBlockFlow::LayoutChildren()
#23 0x7f96877d4da7 blink::LayoutBlockFlow::UpdateBlockLayout()
#24 0x7f96877fbb30 blink::LayoutBlock::UpdateLayout()
#25 0x7f9687813bc0 blink::LayoutBlockFlow::PositionAndLayoutOnceIfNeeded()
#26 0x7f9687814130 blink::LayoutBlockFlow::LayoutBlockChild()
#27 0x7f9687812199 blink::LayoutBlockFlow::LayoutBlockChildren()
#28 0x7f968780e944 blink::LayoutBlockFlow::LayoutChildren()
#29 0x7f96877d4da7 blink::LayoutBlockFlow::UpdateBlockLayout()
#30 0x7f96877fbb30 blink::LayoutBlock::UpdateLayout()
#31 0x7f9687813bc0 blink::LayoutBlockFlow::PositionAndLayoutOnceIfNeeded()
#32 0x7f9687814130 blink::LayoutBlockFlow::LayoutBlockChild()
#33 0x7f9687812199 blink::LayoutBlockFlow::LayoutBlockChildren()
#34 0x7f968780e944 blink::LayoutBlockFlow::LayoutChildren()
#35 0x7f96877d4da7 blink::LayoutBlockFlow::UpdateBlockLayout()
#36 0x7f96877fbb30 blink::LayoutBlock::UpdateLayout()
#37 0x7f9687813bc0 blink::LayoutBlockFlow::PositionAndLayoutOnceIfNeeded()
#38 0x7f9687814130 blink::LayoutBlockFlow::LayoutBlockChild()
#39 0x7f9687812199 blink::LayoutBlockFlow::LayoutBlockChildren()
#40 0x7f968780e944 blink::LayoutBlockFlow::LayoutChildren()
#41 0x7f96877d4da7 blink::LayoutBlockFlow::UpdateBlockLayout()
#42 0x7f96877fbb30 blink::LayoutBlock::UpdateLayout()
#43 0x7f9687813bc0 blink::LayoutBlockFlow::PositionAndLayoutOnceIfNeeded()
#44 0x7f9687814130 blink::LayoutBlockFlow::LayoutBlockChild()
#45 0x7f9687812199 blink::LayoutBlockFlow::LayoutBlockChildren()
#46 0x7f968780e944 blink::LayoutBlockFlow::LayoutChildren()
#47 0x7f96877d4da7 blink::LayoutBlockFlow::UpdateBlockLayout()
#48 0x7f96877fbb30 blink::LayoutBlock::UpdateLayout()
#49 0x7f9687813bc0 blink::LayoutBlockFlow::PositionAndLayoutOnceIfNeeded()
#50 0x7f9687814130 blink::LayoutBlockFlow::LayoutBlockChild()
#51 0x7f9687812199 blink::LayoutBlockFlow::LayoutBlockChildren()
#52 0x7f968780e944 blink::LayoutBlockFlow::LayoutChildren()
#53 0x7f96877d4da7 blink::LayoutBlockFlow::UpdateBlockLayout()
#54 0x7f96877fbb30 blink::LayoutBlock::UpdateLayout()
#55 0x7f9687813bc0 blink::LayoutBlockFlow::PositionAndLayoutOnceIfNeeded()
#56 0x7f9687814130 blink::LayoutBlockFlow::LayoutBlockChild()
#57 0x7f9687812199 blink::LayoutBlockFlow::LayoutBlockChildren()
#58 0x7f968780e944 blink::LayoutBlockFlow::LayoutChildren()
#59 0x7f96877d4da7 blink::LayoutBlockFlow::UpdateBlockLayout()
#60 0x7f96877fbb30 blink::LayoutBlock::UpdateLayout()
#61 0x7f9687813bc0 blink::LayoutBlockFlow::PositionAndLayoutOnceIfNeeded()

 
Similar trace opening https://www.healthadvantage-hmo.com/

And another similar trace in https://jino.ru/ (in this case when I go from 800x600 window size to something bigger).

This time it changes the values:
[1:1:0724/162855.054269:FATAL:layout_flexible_box.cc(1106)] Check failed: content_size >= LayoutUnit() ("-22.1719" vs. "0")

Status: Available (was: Untriaged)
Same with www.hubspot.com
Note this is a regression since Chrome 65, I first noticed it in 67, no idea if it was in 66 or not.

Sign in to add a comment