Bug 108199

Summary: ASSERT(!currContainer->hasTransform()) in RenderObject::offsetFromAncestorContainer when transforming a table row
Product: WebKit Reporter: Renata Hodovan <rhodovan.u-szeged>
Component: TablesAssignee: Nobody <webkit-unassigned>
Status: RESOLVED WORKSFORME    
Severity: Normal CC: jchaffraix, simon.fraser, zherczeg
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 116980    
Attachments:
Description Flags
Test case none

Renata Hodovan
Reported 2013-01-29 08:32:24 PST
During CSS fuzzing I've got an assertion fauilre: Program received signal SIGSEGV, Segmentation fault. 0x00007ffff56d1f9b in WebCore::RenderObject::offsetFromAncestorContainer (this=0x85c548, container=0x6f43a8) at /home/reni/repos/webkit2/Source/WebCore/rendering/RenderObject.cpp:2219 2219 ASSERT(!currContainer->hasTransform()); The following test caused the problem: <html> <body> <table> <tr style="-webkit-perspective: 10;"> <td style="position: absolute;" ></td> </tr> </table> </body> </html>
Attachments
Test case (245 bytes, text/html)
2014-03-21 12:15 PDT, Renata Hodovan 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Simon Fraser (smfr)
Comment 1 2013-01-30 12:57:31 PST
tables :(
Renata Hodovan
Comment 2 2014-03-21 12:15:55 PDT
Created attachment 227469 [details] Test case The missing test case is attached (and the bug is still valid).
Renata Hodovan
Comment 3 2015-06-26 09:31:57 PDT
Cannot repro it anymore.
Note You need to log in before you can comment on or make changes to this bug.