Bug 88288

Summary: Crash when modifying fixed-position elements in a detached frame
Product: WebKit Reporter: dstockwell
Component: Layout and RenderingAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: anilsson, cmarcelo, jamesr, macpherson, menard, tonikitoo, webkit.review.bot
Priority: P2 Keywords: InRadar
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
repro
none
Patch none

Description dstockwell 2012-06-04 21:13:06 PDT 
Created attachment 145689 [details]
repro

As reported at http://code.google.com/p/chromium/issues/detail?id=130460
Comment 1 dstockwell 2012-06-04 21:57:04 PDT 
Created attachment 145694 [details]
Patch
Comment 2 James Robinson 2012-06-05 10:46:30 PDT 
Comment on attachment 145694 [details]
Patch

Nice!  R=me
Comment 3 WebKit Review Bot 2012-06-05 11:05:45 PDT 
Comment on attachment 145694 [details]
Patch

Clearing flags on attachment: 145694

Committed r119502: <http://trac.webkit.org/changeset/119502>
Comment 4 WebKit Review Bot 2012-06-05 11:06:00 PDT 
All reviewed patches have been landed.  Closing bug.
Comment 5 Andy Estes 2012-06-12 17:19:19 PDT 
<rdar://problem/11652470>