Bug 83782

Summary: [CSS Regions] Flowing content that has position:fixed crashes WebKit
Product: WebKit Reporter: Mihai Balan <mibalan>
Component: CSSAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal CC: mihnea, shanestephens
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
File that's crashing WebKit
none
Crash dump on Windows 7 Enterprise x64, SP1 Reproduced on Nightly r112531
none
Crash log on Mac OS X Lion with WebKit nightly r113941 none

Mihai Balan
Reported 2012-04-12 07:29:37 PDT
Created attachment 136907 [details] File that's crashing WebKit Attempting to flow an element that has the CSS position set to "fixed" crashes WebKit. This only happens when actually trying to flow the content (creating a region that consumes the named flow), not when extracting the element into a named flow.
Attachments
File that's crashing WebKit (1.07 KB, text/html)
2012-04-12 07:29 PDT, Mihai Balan 		no flags
Details
Crash dump on Windows 7 Enterprise x64, SP1 Reproduced on Nightly r112531 (3.68 MB, application/octet-stream)
2012-04-12 07:37 PDT, Mihai Balan 		no flags
Details
Crash log on Mac OS X Lion with WebKit nightly r113941 (47.59 KB, text/plain)
2012-04-12 07:44 PDT, Mihai Balan 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Mihai Balan
Comment 1 2012-04-12 07:37:21 PDT
Created attachment 136908 [details] Crash dump on Windows 7 Enterprise x64, SP1 Reproduced on Nightly r112531
Mihai Balan
Comment 2 2012-04-12 07:44:22 PDT
Created attachment 136910 [details] Crash log on Mac OS X Lion with WebKit nightly r113941
Mihnea Ovidenie
Comment 3 2012-06-29 09:23:50 PDT
Duplicate of https://bugs.webkit.org/show_bug.cgi?id=88133.
Mihnea Ovidenie
Comment 4 2012-06-29 09:24:18 PDT
*** This bug has been marked as a duplicate of bug 88133 ***
Note You need to log in before you can comment on or make changes to this bug.