[flex] Clamp available sizes to zero.
Scrollbars may be present on a box. When subtracting
BorderScrollbarPadding we almost always need to clamp to zero, as the
border-box size - bsp may be negative.
Bug: 1274476
Change-Id: I55322f5c5bc5a5bbe9fefc1eb1403677044b9443
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3307128
Reviewed-by: Alison Maher <almaher@microsoft.com>
Commit-Queue: Ian Kilpatrick <ikilpatrick@chromium.org>
Cr-Commit-Position: refs/heads/main@{#946104}
diff --git a/css/css-flexbox/negative-available-size-crash.html b/css/css-flexbox/negative-available-size-crash.html
new file mode 100644
index 0000000..837fdae
--- /dev/null
+++ b/css/css-flexbox/negative-available-size-crash.html
@@ -0,0 +1,4 @@
+<!DOCTYPE html>
+<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1274476">
+<div style="display: flex;">
+ <div style="display: flex; height: 0; overflow-x: scroll;">a
