Bug 1715098 - Skip overflow containers in nsSplittableFrame::CalcAndCacheConsumedBSize. r=TYLin,dholbert

As per comments on the bug.

Differential Revision: https://phabricator.services.mozilla.com/D120010

layout/generic/nsSplittableFrame.cpp

@@ -194,6 +194,12 @@ nscoord nsSplittableFrame::CalcAndCacheConsumedBSize() {
   const auto wm = GetWritingMode();
   nscoord bSize = 0;
   for (; prev; prev = prev->GetPrevContinuation()) {
+    if (prev->IsTrueOverflowContainer()) {
+      // Overflow containers might not get reflowed, and they have no bSize
+      // anyways.
+      continue;
+    }
+
     bSize += prev->ContentSize(wm).BSize(wm);
     bool found = false;
     nscoord consumed = prev->GetProperty(ConsumedBSizeProperty(), &found);

testing/web-platform/tests/css/css-multicol/crashtests/multicol-cached-consumed-bsize-crash.html

@@ -0,0 +1,15 @@
+<link rel="help" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1715098">
+<style>
+:not(table) {
+  column-width: 0;
+  margin-right: 91%;
+}
+#a {
+  column-span: all;
+  display: -webkit-box;
+}
+</style>
+<textarea>a</textarea>
+<del>a</del>
+<q style="float: left">a</q>
+<br id="a"></br>