Bug 21851

Summary:

REGRESSION (r36513): Crash when removing a widget with percent height

Product:

WebKit

Reporter:

mitz

Component:

Layout and Rendering

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

Keywords:

InRadar

Priority:

Version:

528+ (Nightly build)

Hardware:

Mac

OS:

OS X 10.5

Attachments:

Description	Flags
Keep RenderWidget::destroy() in sync with RenderBox::destroy() after r36513	sam: review+

Description mitz 2008-10-23 22:48:04 PDT

The attached test case crashes TOT. Patch forthcoming.

Comment 1 mitz 2008-10-23 22:48:21 PDT

<rdar://problem/6304151>

Comment 2 mitz 2008-10-23 22:54:20 PDT

Created attachment 24635 [details]
Keep RenderWidget::destroy() in sync with RenderBox::destroy() after r36513

Comment 3 mitz 2008-10-24 12:12:05 PDT

Fixed in <http://trac.webkit.org/changeset/37849>.