Bug 110441
| Summary: | ASSERTION FAILED: !m_normalFlowListDirty in RenderLayer::normalFlowList | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Renata Hodovan <rhodovan.u-szeged> |
| Component: | Tables | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | Normal | CC: | dino, eric, esprehn, inferno, jchaffraix, loislo, simon.fraser |
| Priority: | P2 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Bug Depends on: | |||
| Bug Blocks: | 116980 | ||
Renata Hodovan
Running the following test we get an assertion faulire:
Program received signal SIGSEGV, Segmentation fault.
0x00007ffff3bf7a54 in WebCore::RenderLayer::normalFlowList (this=0x84bc38)
at /home/reni/Data/REPOS/webkit/Source/WebCore/rendering/RenderLayer.h:474
474 Vector<RenderLayer*>* normalFlowList() const { ASSERT(!m_normalFlowListDirty); return m_normalFlowList.get(); }
The test:
<html>
<body>
<table style="-webkit-transform: translate3d(-100px, 0, 0)">
<tr>
<td>
<form>
<input placeholder="Search videos" value="#"><input>
</form>
</td>
</tr>
</table>
</body>
</html>
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Eric Seidel (no email)
Is this a regression?
Renata Hodovan
(In reply to comment #1)
> Is this a regression?
I don't know from when we have this bug. But my fuzzer crashed on it now and since you were the last one who reviewed the line of assertion check I've added you to the CC list.
Simon Fraser (smfr)
What does the rest of the stack look like?
Renata Hodovan
*** This bug has been marked as a duplicate of bug 117977 ***