Bug 122073 - shape-outside assertion when 2nd argument of polygon coordinate is calc
Summary: shape-outside assertion when 2nd argument of polygon coordinate is calc
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: CSS (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-09-28 23:50 PDT by Dirk Schulze
Modified: 2013-09-28 23:50 PDT (History)
2 users (show)

See Also:

Attachments
Assertion (472 bytes, text/html)
2013-09-28 23:50 PDT, Dirk Schulze 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Dirk Schulze 2013-09-28 23:50:59 PDT 
Created attachment 212916 [details]
Assertion

If the second argument of a polygon coordinate is calc() then we get an assertion in the CSSParser code:
    -webkit-shape-outside: polygon(0% 0%, 0% calc(100% - 20px), 100% 100%);

The following cod does not assert:
    -webkit-shape-outside: polygon(0% 0%, calc(100% - 20px) 0%, 100% 100%);

ASSERTION FAILED: isCalculation(value)
webkit/Source/WebCore/css/CSSParser.cpp(1762) : PassRefPtr<WebCore::CSSPrimitiveValue> WebCore::CSSParser::createPrimitiveNumericValue(WebCore::CSSParserValue *)
1   0x10d93abc0 WTFCrash
2   0x10eafaa2a WebCore::CSSParser::createPrimitiveNumericValue(WebCore::CSSParserValue*)
3   0x10eae45e9 WebCore::CSSParser::parseBasicShapePolygon(WebCore::CSSParserValueList*)
4   0x10eade6e1 WebCore::CSSParser::parseBasicShape(WebCore::CSSPropertyID, bool)
5   0x10eacd17e WebCore::CSSParser::parseValue(WebCore::CSSPropertyID, bool)
6   0x10eaac340 cssyyparse(WebCore::CSSParser*)