Summary: | Crash setting -webkit-transform on a table row | ||||||||
---|---|---|---|---|---|---|---|---|---|
Product: | WebKit | Reporter: | David Smith <catfish.man> | ||||||
Component: | Layout and Rendering | Assignee: | Nobody <webkit-unassigned> | ||||||
Status: | RESOLVED FIXED | ||||||||
Severity: | Normal | CC: | bdakin, mitz | ||||||
Priority: | P1 | Keywords: | HasReduction, InRadar | ||||||
Version: | 528+ (Nightly build) | ||||||||
Hardware: | Mac | ||||||||
OS: | OS X 10.5 | ||||||||
URL: | http://arstechnica.com | ||||||||
Attachments: |
|
Description
David Smith
2008-03-26 23:07:50 PDT
Created attachment 20115 [details]
Backtrace
First few frames:
Thread 0 Crashed:
0 com.apple.WebCore 0x00e273ef WebCore::RenderBlock::insertPositionedObject(WebCore::RenderObject*) + 15
1 com.apple.WebCore 0x00ffa524 WebCore::RenderBlock::layoutInlineChildren(bool, int&, int&) + 2884
2 com.apple.WebCore 0x00e305ea WebCore::RenderBlock::layoutBlock(bool) + 714
3 com.apple.WebCore 0x00e8d8c2 WebCore::RenderTableCell::layout() + 34
4 com.apple.WebCore 0x00e91676 WebCore::RenderTableRow::layout() + 214
Created attachment 20226 [details]
Reduction (will crash)
Having a transform turns the table row into a containing block, but only RenderBlocks can be containing blocks.
No longer crashes on TOT. I think this was fixed in r32861. Fixed in r32861, <rdar://problem/5840475> |