RESOLVED WORKSFORME 108199
ASSERT(!currContainer->hasTransform()) in RenderObject::offsetFromAncestorContainer when transforming a table row 
https://bugs.webkit.org/show_bug.cgi?id=108199
Summary ASSERT(!currContainer->hasTransform()) in RenderObject::offsetFromAncestorCon...
Renata Hodovan
Reported 2013-01-29 08:32:24 PST
During CSS fuzzing I've got an assertion fauilre: Program received signal SIGSEGV, Segmentation fault. 0x00007ffff56d1f9b in WebCore::RenderObject::offsetFromAncestorContainer (this=0x85c548, container=0x6f43a8) at /home/reni/repos/webkit2/Source/WebCore/rendering/RenderObject.cpp:2219 2219 ASSERT(!currContainer->hasTransform()); The following test caused the problem: <html> <body> <table> <tr style="-webkit-perspective: 10;"> <td style="position: absolute;" ></td> </tr> </table> </body> </html>
Attachments
Test case (245 bytes, text/html)
2014-03-21 12:15 PDT, Renata Hodovan 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Simon Fraser (smfr)
Comment 1 2013-01-30 12:57:31 PST
tables :(
Renata Hodovan
Comment 2 2014-03-21 12:15:55 PDT
Created attachment 227469 [details] Test case The missing test case is attached (and the bug is still valid).
Renata Hodovan
Comment 3 2015-06-26 09:31:57 PDT
Cannot repro it anymore.
Note You need to log in before you can comment on or make changes to this bug.