1855628 - Assertion failure: !(mTotalOuterHypotheticalMainSize >= 0 && mTotalItemMBP >= 0 && totalItemMBPAndGaps >= 0) || (isUsingFlexGrow && availableFreeSpace >= 0) || (!isUsingFlexGrow && availableFreeSpace <= 0)

Status: RESOLVED DUPLICATE of bug 1741500

(Firefox :: Untriaged, defect)

Description

[djinn]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36

Steps to reproduce:

open the html teastcase attached below with firefox 119.0a1 debug asan verison.
And I will upload the minimized testcase as soon as possible.

Actual results:

browser cashed.
crash log:
Assertion failure: !(mTotalOuterHypotheticalMainSize >= 0 && mTotalItemMBP >= 0 && totalItemMBPAndGaps >= 0) || (isUsingFlexGrow && availableFreeSpace >= 0) || (!isUsingFlexGrow && availableFreeSpace <= 0) (availableFreeSpace's sign should match isUsingFlexGrow), at /home/wuyue/browser/mozilla-unified/layout/generic/nsFlexContainerFrame.cpp:3129

Expected results:

not crash

Comment 1

[Daniel Holbert [:dholbert]]

Thanks. It looks like this is a duplicate of bug 1741500 which is filed for the same assertion-failure.