Bug 129948

Summary:

Crash in RenderBlock::addChildIgnoringAnonymousColumnBlocks when region-based multicol enabled

Product:

WebKit

Reporter:

Vicki Pfau <jeffrey+webkit>

Component:

Layout and Rendering

Assignee:

Dave Hyatt <hyatt>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

commit-queue, esprehn+autocc, glenn, hyatt, kondapallykalyan, mstensho

Priority:

Keywords:

InRadar

Version:

528+ (Nightly build)

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Repro	none
Patch	simon.fraser: review+

Vicki Pfau

Reported 2014-03-07 17:45:43 PST

Created attachment 226192 [details] Repro The attached repro will cause WebKit to crash in WebCore::RenderBlock::addChildIgnoringAnonymousColumnBlocks(WebCore::RenderObject*, WebCore::RenderObject*) when run in DumpRenderTree, and only when it enables the region-based multicol code path. <rdar://problem/16074072>

Attachments
Repro (145 bytes, text/html) 2014-03-07 17:45 PST, Vicki Pfau	no flags	Details
Patch (3.73 KB, patch) 2014-03-21 11:10 PDT, Dave Hyatt	simon.fraser: review+	Details Formatted Diff Diff
View All Add attachment proposed patch, testcase, etc.

Dave Hyatt

Comment 1 2014-03-21 11:10:11 PDT

Created attachment 227460 [details] Patch

Dave Hyatt

Comment 2 2014-03-21 11:13:55 PDT

Fix landed in r166078.

Note You need to log in before you can comment on or make changes to this bug.