Bug 294047
| Summary: | Crash when floating, before pseudo content inside input changes | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Sammy Gill <sgill26> |
| Component: | Layout and Rendering | Assignee: | Sammy Gill <sgill26> |
| Status: | RESOLVED FIXED | ||
| Severity: | Normal | CC: | bfulgham, simon.fraser, webkit-bug-importer, zalan |
| Priority: | P2 | Keywords: | InRadar |
| Version: | WebKit Nightly Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Sammy Gill
If you have floating before/after pseudo content inside an input element and change that content, you can have a crash from a RELEASE_ASSERT in WeakRef. This stems from the fact that this content is being stored in a RenderFlexibleBox that is not being cleaned up properly
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Sammy Gill
rdar://144403747
Sammy Gill
Pull request: https://github.com/WebKit/WebKit/pull/46285
EWS
Committed 295904@main (3360d015ac9a): <https://commits.webkit.org/295904@main>
Reviewed commits have been landed. Closing PR #46285 and removing active labels.