Bug 126086

Summary: SHOULD NEVER BE REACHED in valueForLength(WebCore::Length const&, WebCore::LayoutUnit, WebCore::RenderView*, bool) under RenderElement::valueForLength(WebCore::Length const&, WebCore::LayoutUnit, bool) const
Product: WebKit Reporter: Vicki Pfau <jeffrey+webkit>
Component: Layout and RenderingAssignee: Nobody <webkit-unassigned>
Status: NEW ---    
Severity: Normal Keywords: InRadar
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Repro none

Description Vicki Pfau 2013-12-20 14:49:27 PST
Created attachment 219797 [details]
Repro

In some cases, an assertion can be triggered in valueForLength(WebCore::Length const&, WebCore::LayoutUnit, WebCore::RenderView*, bool). Attached is a repro case that will trigger this assertion under RenderElement::valueForLength(WebCore::Length const&, WebCore::LayoutUnit, bool) const.

<rdar://problem/15705575>