| Summary: | Crash using webkit-box-reflect and position:absolute | ||||||
|---|---|---|---|---|---|---|---|
| Product: | WebKit | Reporter: | Thomas Steinacher <tom> | ||||
| Component: | CSS | Assignee: | Nobody <webkit-unassigned> | ||||
| Status: | RESOLVED INVALID | ||||||
| Severity: | Normal | CC: | bfulgham, hyatt, mitz | ||||
| Priority: | P1 | ||||||
| Version: | 528+ (Nightly build) | ||||||
| Hardware: | Mac | ||||||
| OS: | OS X 10.5 | ||||||
| Attachments: |
|
||||||
This doesn't crash for me - can you attach a crash log? Created attachment 20949 [details]
crash log
With guard malloc, I get a crash in RenderLayer::removeChild() when closing the page (even without the refresh). |
Create the following page: <meta http-equiv=refresh content=0.1> <style type="text/css"> .outer { -webkit-box-reflect:below 1px; } .inner { position:absolute; } </style> <div class="outer"><div class="inner"></div></div> Leave it running for a few seconds. Latest WebKit will crash. Tested on both PPC and Intel.