843329 - ###!!! ASSERTION: Doing nscoord addition with values > nscoord_MAX

Status: NEW

(Core :: MathML, defect)

Description

[Frédéric Wang (:fredw)]

Attachment: testcase

Although it is explicitly said in nsMathMLElement that negative scriptlevel are allowed, using a negative value may trigger several assertions and warnings regarding metrics. I attach a minimal testcase for the assertion

###!!! ASSERTION: Doing nscoord addition with values > nscoord_MAX: 'a < nscoord_MAX && b < nscoord_MAX', file ../../dist/include/nsCoord.h, line 173

A slightly less reduced testcase is

   <math xmlns="http://www.w3.org/1998/Math/MathML">
      <mstyle scriptlevel="-68">
	<mtable>
	  <mtr>
            <mtd>
              <mfenced open="&#x2196;" close="&#x2AD7;"/>
            </mtd>
            <mstyle/>
	  </mtr>
	</mtable>
      </mstyle>
    </math>

which triggers additional assertions:

###!!! ASSERTION: intrinsic widths out of order: 'aMinCoord <= aPrefCoord', file /src-obj/mozilla/src/layout/tables/nsTableColFrame.h, line 157
###!!! ASSERTION: min larger than pref: 'mMinCoord <= mPrefCoord', file /src-obj/mozilla/src/layout/tables/nsTableColFrame.h, line 172
###!!! ASSERTION: Doing nscoord subtraction with values > nscoord_MAX: 'a < nscoord_MAX && b < nscoord_MAX', file ../../dist/include/nsCoord.h, line 232
WARNING: nscoord subtraction capped to nscoord_MAX: '(int64_t)a - (int64_t)b < (int64_t)nscoord_MAX', file ../../dist/include/nsCoord.h, line 238
###!!! ASSERTION: assigned width smaller than min: 'col_width >= colFrame->GetMinCoord()', file /src-obj/mozilla/src/layout/tables/BasicTableLayoutStrategy.cpp, line 1019